Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/834FD73E60D786FC8CCB3F96DB2FA9765CEC8335.mft
File:                     834FD73E60D786FC8CCB3F96DB2FA9765CEC8335.mft (raw, json)
Hash identifier:          wJZpx84XYc7djdqy6JwwNlYTNSExIU4S7jdJx0yQmvU=
Subject key identifier:   F9:6C:CF:1B:64:91:9F:6B:92:CF:2F:F9:0D:F2:C6:D4:6B:D9:C4:42
Authority key identifier: 83:4F:D7:3E:60:D7:86:FC:8C:CB:3F:96:DB:2F:A9:76:5C:EC:83:35
Certificate issuer:       /CN=834FD73E60D786FC8CCB3F96DB2FA9765CEC8335
Certificate serial:       3AD4F2C159DB2799D657000959010543B5C85D27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/834FD73E60D786FC8CCB3F96DB2FA9765CEC8335.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/834FD73E60D786FC8CCB3F96DB2FA9765CEC8335.mft
Manifest number:          0220
Signing time:             Tue 09 Jan 2024 13:05:29 +0000
Manifest this update:     Tue 09 Jan 2024 13:00:29 +0000
Manifest next update:     Wed 10 Jan 2024 16:30:29 +0000
Files and hashes:         1: 323830343a313337303a313430303a3a2f34302d3430203d3e203631393031.roa (hash: n0rL2NyuXwFUMO7cr9cUtPh2SWMl4AWtPRXl6G68rrs=)
                          2: 3137302e3235342e35342e302f32332d3234203d3e203631393031.roa (hash: 7iRlw9bjipy8hNUYdW/27/ahHwbogxf+McbpmQ+DaRQ=)
                          3: 323830343a313337303a3a2f33322d3335203d3e203631393031.roa (hash: JbxJYl8qLb5LmoeHAgBH5s9GGZY1mvmyVk5tLzgQdRY=)
                          4: 3139312e352e36342e302f32312d3234203d3e203631393031.roa (hash: NQj/ZHSlm3adc5zDdxHYBkbguKFyU5gfSN2oaD8lYIc=)
                          5: 323830343a313337303a313330303a3a2f34302d3430203d3e203631393031.roa (hash: +PZRa1QjFHFoBFlWXCZQselRYgHW1ujFG0qAiOk9YaQ=)
                          6: 834FD73E60D786FC8CCB3F96DB2FA9765CEC8335.crl (hash: adEsQnARg3vUHUZ+mTuPfTMM7/L5NbnjS5CqR85PzX8=)
                          7: 3137302e3235342e35322e302f32332d3234203d3e203631393031.roa (hash: +ZJJ8t97zL1oqyeY0Wb2XBt5DqlsCbYDCKa51uPtrcg=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/834FD73E60D786FC8CCB3F96DB2FA9765CEC8335.crl
                          rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/834FD73E60D786FC8CCB3F96DB2FA9765CEC8335.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/834FD73E60D786FC8CCB3F96DB2FA9765CEC8335.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d4:f2:c1:59:db:27:99:d6:57:00:09:59:01:05:43:b5:c8:5d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=834FD73E60D786FC8CCB3F96DB2FA9765CEC8335
        Validity
            Not Before: Jan  9 13:00:29 2024 GMT
            Not After : Jan 10 16:30:29 2024 GMT
        Subject: CN=F96CCF1B64919F6B92CF2FF90DF2C6D46BD9C442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a5:ba:e2:c9:85:7b:87:e4:cb:a8:c9:53:0c:
                    fb:92:68:b4:bb:cf:39:67:67:b3:c9:fb:b0:35:86:
                    45:de:c6:1f:51:80:fc:0a:41:08:47:fc:66:c7:c4:
                    7d:7d:d4:49:a8:35:e6:33:cc:af:3a:2b:f6:19:24:
                    94:26:24:22:8b:a2:cc:7e:51:de:1a:9a:0f:97:df:
                    7d:f1:a4:80:d9:13:16:0a:71:cc:46:59:0b:d2:f6:
                    fd:cc:39:ca:95:de:60:db:1a:18:12:27:12:ea:ce:
                    bc:4d:90:25:a9:d6:3b:6b:c1:d1:21:6e:10:3e:e9:
                    dc:d3:90:d5:73:ed:64:e7:22:5d:3d:2e:72:be:9f:
                    28:7b:b8:bc:5b:28:a9:9e:b7:99:14:f6:05:b0:5b:
                    c7:4e:30:21:48:cd:c1:81:dd:14:a8:b8:9f:8e:15:
                    99:3b:44:0a:54:73:4b:d2:89:e0:bc:f2:f1:8e:eb:
                    a8:06:bc:db:d5:b3:66:4d:ed:6e:cc:55:99:a7:8b:
                    5e:96:a7:3c:5a:21:13:38:7c:e4:00:fe:9d:d6:49:
                    38:1e:b2:61:e8:d2:c9:33:57:fd:28:eb:85:bc:71:
                    b7:6f:13:ad:d8:f5:c2:56:7c:50:d8:32:b5:a2:3e:
                    32:8c:31:cc:ef:60:ee:68:17:03:2a:0f:71:37:82:
                    7a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:6C:CF:1B:64:91:9F:6B:92:CF:2F:F9:0D:F2:C6:D4:6B:D9:C4:42
            X509v3 Authority Key Identifier:
                keyid:83:4F:D7:3E:60:D7:86:FC:8C:CB:3F:96:DB:2F:A9:76:5C:EC:83:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/834FD73E60D786FC8CCB3F96DB2FA9765CEC8335.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/834FD73E60D786FC8CCB3F96DB2FA9765CEC8335.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/834FD73E60D786FC8CCB3F96DB2FA9765CEC8335.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:fd:e6:ee:32:60:47:0e:47:cb:9c:4f:0f:4c:3e:a4:d8:f1:
         17:9a:86:63:7d:f5:89:d3:d9:40:bb:94:cc:e5:01:6a:e8:9f:
         4e:2d:96:b7:51:eb:23:5e:4f:ba:65:91:f1:0a:4c:4d:3a:eb:
         b2:f2:81:84:73:45:47:42:ab:29:ae:67:c2:74:8f:14:88:32:
         1e:59:62:9e:3d:f9:bd:60:bc:e7:c1:f7:43:38:16:a7:fd:02:
         5a:3a:05:e2:79:f1:3b:fb:ea:51:0a:26:29:5f:dd:61:89:6c:
         24:1f:c1:99:43:28:cc:51:1e:77:4d:fa:79:81:8f:22:6d:5e:
         94:59:e5:6c:45:e6:3b:06:f0:4a:3d:b8:b3:b4:2e:e9:52:f5:
         fc:07:1c:fb:cf:92:bf:ef:8b:1d:91:cb:39:72:49:f1:45:9a:
         90:3c:f5:31:8c:44:58:89:0e:36:49:f5:d3:41:d8:e8:70:2e:
         bc:55:c3:0a:8a:2e:34:e8:68:3c:29:ed:3a:cb:fe:34:20:ce:
         b8:23:94:f6:89:bb:b3:ee:09:26:99:89:2e:d7:08:03:a8:9c:
         5a:b7:a4:38:2c:c0:92:05:d0:29:ad:bc:2f:27:7b:e2:ef:b0:
         dc:cd:f6:2f:6c:7e:ff:84:4c:82:2d:e7:b5:26:08:21:34:94:
         fb:d4:30:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:23 2024 by rpki-client on console.sobornost.net