Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/ED89FD6E865685931657B0892F478053FF0ED7D2.mft
File:                     ED89FD6E865685931657B0892F478053FF0ED7D2.mft (raw, json)
Hash identifier:          Wy/PgD+zSUfdd9PmaX3No4CeD+J10c+BAhtyCBnxFUI=
Subject key identifier:   C2:77:19:1F:B5:79:3C:98:55:3E:2B:F3:BB:3B:9F:D6:7E:57:76:E0
Authority key identifier: ED:89:FD:6E:86:56:85:93:16:57:B0:89:2F:47:80:53:FF:0E:D7:D2
Certificate issuer:       /CN=ED89FD6E865685931657B0892F478053FF0ED7D2
Certificate serial:       10DE3D8DD67E9F54548EB050B3E9B6F8A30D3FD1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ED89FD6E865685931657B0892F478053FF0ED7D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/ED89FD6E865685931657B0892F478053FF0ED7D2.mft
Manifest number:          0F
Signing time:             Tue 09 Jan 2024 13:33:36 +0000
Manifest this update:     Tue 09 Jan 2024 13:28:36 +0000
Manifest next update:     Wed 10 Jan 2024 14:51:36 +0000
Files and hashes:         1: 3138312e3139312e3234322e302f32342d3234203d3e20323637343536.roa (hash: /LSPb/b4+tMZfgLsVjDx4F0BtmJhgZKT4YDD7tFZpOo=)
                          2: 3138312e3139312e3234302e302f32342d3234203d3e20323637343536.roa (hash: lnaZ9NYpxjd/ODvnQQCBd88wk1KnJPVM59lOKS8QgU8=)
                          3: 323830343a343163383a3a2f33332d3333203d3e20323637343536.roa (hash: 0/n1EcEbvXa+MoMQuoD2hOUSqUDXdLjgdKE5oPgBpGw=)
                          4: 323830343a343163383a383030303a3a2f33332d3333203d3e20323637343536.roa (hash: slxQ1DT41YpORrVMxl5QHjq1vM263aW1sthwEcjo4cs=)
                          5: 3138312e3139312e3234302e302f32322d3232203d3e20323637343536.roa (hash: oeQL4xwMu1MjBaTnp7iQnZ1/0pVp7PyhFsqy6R0flQI=)
                          6: 3138312e3139312e3234312e302f32342d3234203d3e20323637343536.roa (hash: o7TGZ73SaSokjv//4YRajYCz/KMtmFtUO/DOJP1Lchg=)
                          7: 3138312e3139312e3234332e302f32342d3234203d3e20323637343536.roa (hash: +2kxqIw8hibxvwwQ0Ga8va460+F6Pl6FoBCVYzOuAsQ=)
                          8: 3138312e3139312e3234322e302f32332d3233203d3e20323637343536.roa (hash: dbFBXi9Wfmk+EekzoLS8N18ehrw4dwn4mPURApi6aWQ=)
                          9: ED89FD6E865685931657B0892F478053FF0ED7D2.crl (hash: rXGMHsL+U4lVAp8Z7sFqUZ7TW+VvyMu7C+HZ50SuU/s=)
                          10: 3138312e3139312e3234302e302f32332d3233203d3e20323637343536.roa (hash: v4TSJvDc5hEMHtPd3HZndrR6nLfMipEwYaP7IY3ZzFA=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/ED89FD6E865685931657B0892F478053FF0ED7D2.crl
                          rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/ED89FD6E865685931657B0892F478053FF0ED7D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ED89FD6E865685931657B0892F478053FF0ED7D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 14:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:de:3d:8d:d6:7e:9f:54:54:8e:b0:50:b3:e9:b6:f8:a3:0d:3f:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED89FD6E865685931657B0892F478053FF0ED7D2
        Validity
            Not Before: Jan  9 13:28:36 2024 GMT
            Not After : Jan 10 14:51:36 2024 GMT
        Subject: CN=C277191FB5793C98553E2BF3BB3B9FD67E5776E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:47:93:18:1e:46:35:3b:fb:a8:b6:90:0d:4e:
                    c8:ea:d2:ce:3a:25:e3:ca:3b:bc:11:fe:3b:85:83:
                    81:d8:89:42:c7:07:c5:6d:a9:c6:0f:6b:a8:1d:13:
                    fd:e1:4c:b6:df:4b:ec:9f:e1:76:d5:85:0e:1f:56:
                    c1:2a:bb:9a:60:32:79:40:eb:73:da:19:05:b0:a8:
                    d8:cb:61:bb:a7:f5:9f:ab:e2:e7:87:a8:d6:bd:a1:
                    0f:d6:a9:a0:a9:6d:44:4b:e6:e6:15:50:4d:ad:31:
                    92:46:89:a9:a4:ef:4b:5c:e3:c1:c8:e3:4d:b1:b0:
                    37:ab:cb:09:6f:b2:37:4c:e6:85:00:9a:b5:14:9c:
                    90:85:44:b0:b2:51:d2:21:3c:31:17:bd:f0:f5:04:
                    94:06:d7:57:08:bd:22:2c:a1:99:fb:49:47:98:ec:
                    bd:37:79:b3:63:0f:28:cd:eb:1c:08:fb:90:7b:2f:
                    14:1c:10:11:d0:57:be:30:49:7c:4f:78:f1:f7:a0:
                    3d:1a:a3:30:3d:ca:cc:08:b3:09:30:17:77:2b:8a:
                    6e:48:06:74:d7:c2:b9:b5:78:1e:67:6f:08:b2:95:
                    a0:47:27:17:b1:32:a4:dd:5b:2c:1a:9c:b3:f7:e0:
                    86:e0:0d:a8:9c:c2:4f:d5:b6:40:69:b9:2a:e6:37:
                    39:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:77:19:1F:B5:79:3C:98:55:3E:2B:F3:BB:3B:9F:D6:7E:57:76:E0
            X509v3 Authority Key Identifier:
                keyid:ED:89:FD:6E:86:56:85:93:16:57:B0:89:2F:47:80:53:FF:0E:D7:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/ED89FD6E865685931657B0892F478053FF0ED7D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ED89FD6E865685931657B0892F478053FF0ED7D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/ED89FD6E865685931657B0892F478053FF0ED7D2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ef:45:f6:a7:92:af:60:7a:2d:48:c4:32:1a:37:0a:cc:55:
         72:02:a3:21:c5:25:9e:6c:74:7a:13:9d:60:31:03:76:39:ae:
         1a:85:52:e4:4f:96:9f:6a:7b:1c:dd:a6:bc:83:b8:c1:38:9d:
         25:2f:ca:3f:ab:72:b3:b8:4c:e2:cb:48:b0:6d:49:70:36:52:
         4f:dd:2a:6f:bc:59:06:4b:8b:bc:03:3c:16:12:f8:7a:19:49:
         06:4e:45:e4:5e:e0:97:5d:aa:ca:8c:74:7c:a7:29:3b:f6:9a:
         fe:5c:55:9f:57:60:f1:61:07:89:a6:f1:ca:54:1a:0a:f8:25:
         de:0d:6f:6e:23:79:40:9e:a0:cf:92:91:89:3b:b1:74:b1:58:
         0e:1f:75:74:ec:0a:ff:31:c1:6f:4e:43:93:84:87:a8:6d:23:
         c5:f2:aa:e2:a8:88:2c:57:69:60:be:17:8f:73:35:c5:20:a6:
         f1:70:89:87:fe:5a:14:3a:bf:db:29:7c:7d:c0:6f:1b:c2:7b:
         9e:80:9e:ec:e2:fa:b9:53:8e:90:12:4a:be:c0:73:d3:75:18:
         19:b9:f1:b3:38:a1:b1:57:a0:f0:4f:9f:02:95:47:3e:10:34:
         23:d8:d1:57:cc:49:e7:9e:e0:d2:47:83:fd:81:bd:0b:a9:74:
         08:2f:59:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEN49jdZ+n1RUjrBQs+m2+KMNP9EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQ4OUZENkU4NjU2ODU5MzE2NTdCMDg5MkY0NzgwNTNG
RjBFRDdEMjAeFw0yNDAxMDkxMzI4MzZaFw0yNDAxMTAxNDUxMzZaMDMxMTAvBgNV
BAMTKEMyNzcxOTFGQjU3OTNDOTg1NTNFMkJGM0JCM0I5RkQ2N0U1Nzc2RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxR5MYHkY1O/uotpANTsjq0s46
JePKO7wR/juFg4HYiULHB8VtqcYPa6gdE/3hTLbfS+yf4XbVhQ4fVsEqu5pgMnlA
63PaGQWwqNjLYbun9Z+r4ueHqNa9oQ/WqaCpbURL5uYVUE2tMZJGiamk70tc48HI
402xsDerywlvsjdM5oUAmrUUnJCFRLCyUdIhPDEXvfD1BJQG11cIvSIsoZn7SUeY
7L03ebNjDyjN6xwI+5B7LxQcEBHQV74wSXxPePH3oD0aozA9yswIswkwF3crim5I
BnTXwrm1eB5nbwiylaBHJxexMqTdWywanLP34IbgDaicwk/VtkBpuSrmNznVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUwncZH7V5PJhVPivzuzuf1n5XduAwHwYDVR0j
BBgwFoAU7Yn9boZWhZMWV7CJL0eAU/8O19IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXVCZGI1eDhFYWpRVDlMTmExeUd4MUpmNWszbjZ2emI1blBZOW93cDFz
ZUIvMC9FRDg5RkQ2RTg2NTY4NTkzMTY1N0IwODkyRjQ3ODA1M0ZGMEVEN0QyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VEODlGRDZFODY1Njg1OTMx
NjU3QjA4OTJGNDc4MDUzRkYwRUQ3RDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OXVCZGI1eDhFYWpRVDlMTmExeUd4MUpmNWszbjZ2emI1blBZOW93cDFzZUIvMC9F
RDg5RkQ2RTg2NTY4NTkzMTY1N0IwODkyRjQ3ODA1M0ZGMEVEN0QyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABe9F9qeSr2B6LUjEMho3CsxVcgKjIcUlnmx0ehOdYDEDdjmuGoVS5E+Wn2p7
HN2mvIO4wTidJS/KP6tys7hM4stIsG1JcDZST90qb7xZBkuLvAM8FhL4ehlJBk5F
5F7gl12qyox0fKcpO/aa/lxVn1dg8WEHiabxylQaCvgl3g1vbiN5QJ6gz5KRiTux
dLFYDh91dOwK/zHBb05Dk4SHqG0jxfKq4qiILFdpYL4Xj3M1xSCm8XCJh/5aFDq/
2yl8fcBvG8J7noCe7OL6uVOOkBJKvsBz03UYGbnxszihsVeg8E+fApVHPhA0I9jR
V8xJ557g0keD/YG9C6l0CC9ZdQ==
-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:23 2024 by rpki-client on console.sobornost.net