Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/11179CD617E4CD6CC49CB2158A41A8B642E45C44.mft
File:                     11179CD617E4CD6CC49CB2158A41A8B642E45C44.mft (raw, json)
Hash identifier:          g+5RH1E/3UYvU+PIqSDx1mZbPAxFI9NI7dtwkP/sawI=
Subject key identifier:   B4:0F:B5:50:21:6C:C9:0C:EA:8A:20:9E:5C:E1:B0:FC:D9:AB:09:25
Authority key identifier: 11:17:9C:D6:17:E4:CD:6C:C4:9C:B2:15:8A:41:A8:B6:42:E4:5C:44
Certificate issuer:       /CN=11179CD617E4CD6CC49CB2158A41A8B642E45C44
Certificate serial:       78E719D42D9DCDCD1FD47034B79FE5A9F9376009
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11179CD617E4CD6CC49CB2158A41A8B642E45C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/11179CD617E4CD6CC49CB2158A41A8B642E45C44.mft
Manifest number:          2F
Signing time:             Tue 09 Jan 2024 02:22:02 +0000
Manifest this update:     Tue 09 Jan 2024 02:17:02 +0000
Manifest next update:     Wed 10 Jan 2024 05:35:02 +0000
Files and hashes:         1: 3230302e3231392e36302e302f32322d3234203d3e20323730383034.roa (hash: wezG3XBLVzWbLT9+uCivruXfBen2Xnj5YOLNTeZA2BI=)
                          2: 11179CD617E4CD6CC49CB2158A41A8B642E45C44.crl (hash: SB1upipbDWXHLC6TMG9krLQcIblcU40mdZfNDvSOLqc=)
                          3: 323830343a373161633a3a2f33322d3430203d3e20323730383034.roa (hash: FpDbzEtcE9G6Tvj+VxbDTWfG/7myy6d5FP88nPO98n4=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/11179CD617E4CD6CC49CB2158A41A8B642E45C44.crl
                          rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/11179CD617E4CD6CC49CB2158A41A8B642E45C44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11179CD617E4CD6CC49CB2158A41A8B642E45C44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 05:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e7:19:d4:2d:9d:cd:cd:1f:d4:70:34:b7:9f:e5:a9:f9:37:60:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11179CD617E4CD6CC49CB2158A41A8B642E45C44
        Validity
            Not Before: Jan  9 02:17:02 2024 GMT
            Not After : Jan 10 05:35:02 2024 GMT
        Subject: CN=B40FB550216CC90CEA8A209E5CE1B0FCD9AB0925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:23:e8:98:5c:21:e8:c3:f6:dd:ff:09:cc:ad:
                    98:71:0b:ab:e0:91:83:06:fe:39:a2:ff:9e:cc:c3:
                    7e:b5:6c:fa:69:cd:3f:e1:38:e7:8e:b2:ee:76:ee:
                    9a:00:70:78:0c:83:fe:af:b1:a2:d5:6a:85:2d:53:
                    14:82:8d:77:2f:f1:43:06:78:16:f7:80:67:26:b1:
                    40:57:97:eb:20:52:31:3f:a9:4e:5c:c5:55:c2:f5:
                    7d:b5:c2:8d:3e:59:86:67:e2:24:3b:8f:20:e6:be:
                    4e:08:29:47:9d:64:79:c4:34:57:8f:99:14:62:7c:
                    aa:a5:22:44:eb:8d:66:99:0d:7e:db:69:ba:5d:7f:
                    b1:12:5d:41:12:51:47:ac:f5:0b:60:c7:4e:63:12:
                    58:df:73:a6:4c:cf:f3:d3:b0:8b:23:63:a5:f0:dc:
                    ae:15:52:21:77:da:e5:95:97:69:70:9c:d7:33:25:
                    11:86:eb:68:40:c7:1a:6b:19:c5:df:c2:ee:e8:13:
                    b7:e8:49:52:32:52:dd:dd:32:60:27:13:a2:fe:5c:
                    52:e1:b4:94:56:14:1a:43:53:6c:2d:7d:99:5c:aa:
                    83:57:97:1e:49:27:22:fb:f5:36:3d:84:aa:f1:21:
                    99:cd:60:fa:cf:3e:a2:d2:5d:db:2a:4e:69:f2:25:
                    a0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0F:B5:50:21:6C:C9:0C:EA:8A:20:9E:5C:E1:B0:FC:D9:AB:09:25
            X509v3 Authority Key Identifier:
                keyid:11:17:9C:D6:17:E4:CD:6C:C4:9C:B2:15:8A:41:A8:B6:42:E4:5C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/11179CD617E4CD6CC49CB2158A41A8B642E45C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11179CD617E4CD6CC49CB2158A41A8B642E45C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/11179CD617E4CD6CC49CB2158A41A8B642E45C44.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:30:e7:b7:17:fd:d5:4a:f5:c4:2c:45:8c:de:89:e2:5a:4d:
         5c:0a:79:0a:cf:f0:1a:3c:48:e6:d0:f5:7f:4e:12:ce:70:95:
         d8:77:0b:01:ff:ec:d7:80:cd:93:d7:03:d3:c9:15:0e:ee:cd:
         b8:16:f5:99:e6:fd:de:b1:83:2b:06:2f:07:15:14:cc:56:de:
         39:47:b2:ba:54:3f:9b:8c:ea:75:84:3a:21:89:28:0d:2e:8f:
         10:69:2a:c0:6e:ec:6b:df:ea:18:62:f8:c3:f2:63:92:09:28:
         68:de:08:02:94:d0:b8:d4:95:f4:9d:3f:1a:1b:6b:d8:9e:d0:
         d8:e0:9c:b8:3e:d2:53:ba:49:a5:3f:b8:29:7b:cd:a9:60:95:
         ab:8b:3c:c4:d9:b1:b2:d8:96:b8:20:44:07:f3:25:7e:13:a7:
         db:c4:01:13:49:dc:0d:87:27:6e:83:2c:15:85:72:bb:54:a5:
         5b:3a:4d:42:7b:60:c0:56:74:17:5d:ed:b4:f4:0a:a1:14:34:
         dd:0b:57:ff:dc:d1:4b:a6:8b:95:af:9d:ec:8f:e3:6c:fb:33:
         31:18:44:d0:19:f4:af:59:1e:a7:3c:2a:f9:3e:b1:4c:3d:27:
         e3:2d:1a:ff:7f:6c:97:89:93:f1:2d:a3:5c:e3:d1:c3:51:99:
         44:12:70:3f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUeOcZ1C2dzc0f1HA0t5/lqfk3YAkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTExNzlDRDYxN0U0Q0Q2Q0M0OUNCMjE1OEE0MUE4QjY0
MkU0NUM0NDAeFw0yNDAxMDkwMjE3MDJaFw0yNDAxMTAwNTM1MDJaMDMxMTAvBgNV
BAMTKEI0MEZCNTUwMjE2Q0M5MENFQThBMjA5RTVDRTFCMEZDRDlBQjA5MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhI+iYXCHow/bd/wnMrZhxC6vg
kYMG/jmi/57Mw361bPppzT/hOOeOsu527poAcHgMg/6vsaLVaoUtUxSCjXcv8UMG
eBb3gGcmsUBXl+sgUjE/qU5cxVXC9X21wo0+WYZn4iQ7jyDmvk4IKUedZHnENFeP
mRRifKqlIkTrjWaZDX7babpdf7ESXUESUUes9Qtgx05jEljfc6ZMz/PTsIsjY6Xw
3K4VUiF32uWVl2lwnNczJRGG62hAxxprGcXfwu7oE7foSVIyUt3dMmAnE6L+XFLh
tJRWFBpDU2wtfZlcqoNXlx5JJyL79TY9hKrxIZnNYPrPPqLSXdsqTmnyJaCxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUtA+1UCFsyQzqiiCeXOGw/NmrCSUwHwYDVR0j
BBgwFoAUERec1hfkzWzEnLIVikGotkLkXEQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTEycXJFVXFoMTlHMVRudGVLdEFYYzdSdjNZZGpMeVhwamlxcW1LeWth
RVkvMC8xMTE3OUNENjE3RTRDRDZDQzQ5Q0IyMTU4QTQxQThCNjQyRTQ1QzQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzExMTc5Q0Q2MTdFNENENkND
NDlDQjIxNThBNDFBOEI2NDJFNDVDNDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QTEycXJFVXFoMTlHMVRudGVLdEFYYzdSdjNZZGpMeVhwamlxcW1LeWthRVkvMC8x
MTE3OUNENjE3RTRDRDZDQzQ5Q0IyMTU4QTQxQThCNjQyRTQ1QzQ0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhjDntxf91Ur1xCxFjN6J4lpNXAp5Cs/wGjxI5tD1f04SznCV2HcLAf/s14DN
k9cD08kVDu7NuBb1meb93rGDKwYvBxUUzFbeOUeyulQ/m4zqdYQ6IYkoDS6PEGkq
wG7sa9/qGGL4w/JjkgkoaN4IApTQuNSV9J0/Ghtr2J7Q2OCcuD7SU7pJpT+4KXvN
qWCVq4s8xNmxstiWuCBEB/MlfhOn28QBE0ncDYcnboMsFYVyu1SlWzpNQntgwFZ0
F13ttPQKoRQ03QtX/9zRS6aLla+d7I/jbPszMRhE0Bn0r1kepzwq+T6xTD0n4y0a
/39sl4mT8S2jXOPRw1GZRBJwPw==
-----END CERTIFICATE-----
Generated at Tue Jan 9 03:49:03 2024 by rpki-client on console.sobornost.net