Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/844507C306CCD7EF970C04192C0EB6177D5D9F92.mft
File:                     844507C306CCD7EF970C04192C0EB6177D5D9F92.mft (raw, json)
Hash identifier:          FpNDfZ1E16SJ7gNJfOl/E4nLTmNFKhVMKJgWGFrAAbE=
Subject key identifier:   7B:EE:91:19:F0:F8:9F:8E:02:16:01:05:89:B6:15:E3:03:48:4A:B5
Authority key identifier: 84:45:07:C3:06:CC:D7:EF:97:0C:04:19:2C:0E:B6:17:7D:5D:9F:92
Certificate issuer:       /CN=844507C306CCD7EF970C04192C0EB6177D5D9F92
Certificate serial:       2A77F7D50EB47B200E5547BBF11FB583A9837989
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/844507C306CCD7EF970C04192C0EB6177D5D9F92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/844507C306CCD7EF970C04192C0EB6177D5D9F92.mft
Manifest number:          0561
Signing time:             Tue 09 Jan 2024 03:35:08 +0000
Manifest this update:     Tue 09 Jan 2024 03:30:08 +0000
Manifest next update:     Wed 10 Jan 2024 04:27:08 +0000
Files and hashes:         1: 323830343a3363383a3a2f33322d3438203d3e20323632393038.roa (hash: WMPXYW8saJUwM28hhRGccQx2YvGh2pI4QNnaU1hTtHs=)
                          2: 3136382e3139362e35362e302f32322d3234203d3e20323632393038.roa (hash: VUKNOY97SucC+91Pm2VaXwZ8I4oCdnKBuocSEKUzB6Y=)
                          3: 3137372e39312e3133362e302f32322d3234203d3e20323632393038.roa (hash: 3Uvfui+x+I2j1JBw8MioLNoot8vpve0Pi4plXbRzBXA=)
                          4: 3137372e33382e32382e302f32322d3234203d3e20323632393038.roa (hash: uYLp42uXqt+owHo40R3J8jIG5SkNloZ6wtw+8S5PMl8=)
                          5: 844507C306CCD7EF970C04192C0EB6177D5D9F92.crl (hash: Z7jK6oynCxMAhnDF0QRNM+rczEalYOUTPL8rL29D9IQ=)
                          6: 3137372e35322e35362e302f32322d3234203d3e20323632393038.roa (hash: WVYtkqQUo9RRVJ2GxKQoZrlEuPoblWxY+3bFeb3ZGpE=)
                          7: 3137372e33382e32342e302f32322d3234203d3e20323632393038.roa (hash: 7ayAfN33yh/wYw5AQOJjr7kSOyycg3sOTDBaHnLHxdQ=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/844507C306CCD7EF970C04192C0EB6177D5D9F92.crl
                          rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/844507C306CCD7EF970C04192C0EB6177D5D9F92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/844507C306CCD7EF970C04192C0EB6177D5D9F92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 04:27:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:77:f7:d5:0e:b4:7b:20:0e:55:47:bb:f1:1f:b5:83:a9:83:79:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=844507C306CCD7EF970C04192C0EB6177D5D9F92
        Validity
            Not Before: Jan  9 03:30:08 2024 GMT
            Not After : Jan 10 04:27:08 2024 GMT
        Subject: CN=7BEE9119F0F89F8E0216010589B615E303484AB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:00:0d:3b:fe:e9:24:ba:8e:64:ec:98:70:fa:
                    a4:2b:a6:c3:c5:7d:11:ad:86:e7:a2:dd:a8:f5:20:
                    80:bf:f1:33:bf:29:0a:f3:33:69:b0:3e:9b:29:03:
                    33:42:06:84:c8:c6:09:d8:d7:87:8f:7b:c9:11:69:
                    5f:fa:02:20:55:4b:71:b1:5a:85:9e:a4:e6:86:d4:
                    a3:84:99:ba:3d:d4:45:c7:62:0e:1d:04:85:a2:38:
                    ce:03:60:fe:f1:a5:0a:06:72:17:3b:56:d2:d5:93:
                    df:ee:e6:55:59:08:de:47:bf:91:e0:8b:a4:4b:27:
                    07:59:fc:a5:60:f3:76:2e:31:28:5b:d0:8a:cd:8d:
                    c1:ba:7d:b4:5a:2f:89:7f:12:a1:73:85:56:54:e5:
                    8b:f6:4d:43:6b:fc:72:91:0d:8f:7b:7c:63:72:01:
                    24:75:3d:b2:e5:84:43:86:7a:5b:0c:d4:18:49:29:
                    5a:1e:83:ec:e7:7f:ae:85:66:71:a2:d4:7b:0b:0b:
                    bb:d2:71:9b:5b:fc:32:6e:7b:9c:a9:db:b1:bd:8f:
                    45:74:55:7b:9c:0e:1e:9d:f3:8b:37:5c:59:40:92:
                    1d:cd:7c:93:c3:96:fb:b2:90:70:e7:94:ef:03:48:
                    1f:9f:06:fc:77:1a:01:09:23:14:16:56:a6:b3:46:
                    aa:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EE:91:19:F0:F8:9F:8E:02:16:01:05:89:B6:15:E3:03:48:4A:B5
            X509v3 Authority Key Identifier:
                keyid:84:45:07:C3:06:CC:D7:EF:97:0C:04:19:2C:0E:B6:17:7D:5D:9F:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/844507C306CCD7EF970C04192C0EB6177D5D9F92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/844507C306CCD7EF970C04192C0EB6177D5D9F92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/844507C306CCD7EF970C04192C0EB6177D5D9F92.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:6f:c6:16:10:da:0a:b8:b7:58:28:88:af:87:1d:84:80:7d:
         bf:9b:28:8d:41:31:fe:39:86:e9:b4:1b:47:e4:61:e4:16:16:
         79:04:db:0f:df:34:4b:49:0b:b6:ab:5e:81:e3:a7:42:0f:0b:
         45:eb:b5:13:13:3f:21:66:4d:ff:5b:8c:57:9e:96:a6:56:ec:
         9b:2f:c9:f7:ae:40:8f:69:c1:d7:08:ae:3c:4e:28:4f:18:c8:
         46:f9:47:18:4c:0e:58:85:41:1f:49:13:20:34:08:8e:0d:20:
         59:79:7c:4d:ff:21:8c:b1:49:0d:51:4d:4a:fa:86:4f:60:63:
         b1:32:a8:89:5e:a1:e4:b2:99:71:29:79:1b:ee:ae:e5:1d:73:
         a2:6c:2e:b1:17:5c:75:fc:58:78:3e:5a:aa:2b:5c:a2:8d:35:
         5c:12:19:86:0e:5e:fa:7d:8f:ee:d9:bb:77:7d:11:48:a8:49:
         bf:67:4c:88:aa:77:27:f7:ce:88:87:00:f9:cc:75:30:44:a6:
         1f:b0:b5:dc:fb:0c:15:4a:0c:cd:69:8a:7d:65:db:4a:16:a4:
         7d:bb:47:9f:c2:7a:dc:af:5b:45:bc:a9:03:fa:d3:a3:53:d9:
         9b:3a:7f:9d:0a:31:9d:86:9e:59:02:6f:fe:14:b2:04:50:11:
         1c:7e:12:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 05:55:34 2024 by rpki-client on console.sobornost.net