Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/7DE5440D73B890D8BF20B510E2FDC7EA0152B97A.mft
File:                     7DE5440D73B890D8BF20B510E2FDC7EA0152B97A.mft (raw, json)
Hash identifier:          dtotHc/V09XBOf67GcHeofPfNkbKAPt/yqOVUFjBRQ4=
Subject key identifier:   2B:F9:A4:FB:7E:8B:12:CD:6C:55:56:5C:94:A1:11:B0:F2:A9:47:8B
Authority key identifier: 7D:E5:44:0D:73:B8:90:D8:BF:20:B5:10:E2:FD:C7:EA:01:52:B9:7A
Certificate issuer:       /CN=7DE5440D73B890D8BF20B510E2FDC7EA0152B97A
Certificate serial:       1FFA6EDA2E877A41481634C4DCFEA8E1A865694F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7DE5440D73B890D8BF20B510E2FDC7EA0152B97A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/7DE5440D73B890D8BF20B510E2FDC7EA0152B97A.mft
Manifest number:          82
Signing time:             Tue 09 Jan 2024 10:24:56 +0000
Manifest this update:     Tue 09 Jan 2024 10:19:56 +0000
Manifest next update:     Wed 10 Jan 2024 11:02:56 +0000
Files and hashes:         1: 3138372e3130392e3131322e302f32322d3234203d3e20323732373533.roa (hash: QEnlJFkLVg4PI03AjTvXI8iBDsPMivdcYmwPtYlhJPc=)
                          2: 323830343a383832343a3a2f33322d3438203d3e20323732373533.roa (hash: ajz1ADDk57ueUw3EgtOnn03V3HEHEQX4m8AXHI3+u9w=)
                          3: 7DE5440D73B890D8BF20B510E2FDC7EA0152B97A.crl (hash: qqN6JLSInYxkhWVVvEd5c2LeQq0vwBLLXFX+jBaAM4s=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/7DE5440D73B890D8BF20B510E2FDC7EA0152B97A.crl
                          rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/7DE5440D73B890D8BF20B510E2FDC7EA0152B97A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7DE5440D73B890D8BF20B510E2FDC7EA0152B97A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 11:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:fa:6e:da:2e:87:7a:41:48:16:34:c4:dc:fe:a8:e1:a8:65:69:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DE5440D73B890D8BF20B510E2FDC7EA0152B97A
        Validity
            Not Before: Jan  9 10:19:56 2024 GMT
            Not After : Jan 10 11:02:56 2024 GMT
        Subject: CN=2BF9A4FB7E8B12CD6C55565C94A111B0F2A9478B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:47:21:e8:b0:d0:29:df:2b:46:31:ec:de:43:
                    ee:21:e3:50:90:dd:9a:39:a6:ba:cc:2c:fb:cc:6a:
                    fc:53:d9:33:d0:80:f8:12:72:e3:f3:29:06:37:13:
                    d7:0a:d3:fb:cf:55:8a:0b:4e:3e:37:f5:ce:c4:62:
                    42:b8:ad:e8:d1:2b:72:64:56:b1:3c:99:2e:26:29:
                    bf:c4:bb:79:c3:03:66:a3:c4:5e:59:61:29:1c:10:
                    1a:eb:ea:6a:a8:8e:60:25:19:3f:fe:bd:30:4c:b2:
                    fa:f8:86:79:b1:1d:62:c5:32:ee:77:3f:32:4c:84:
                    31:78:50:a7:ae:69:50:3f:55:f1:8e:2d:c0:fb:1e:
                    37:ef:5f:df:de:7c:4f:78:d2:ac:bf:fe:6f:fa:1f:
                    18:b4:58:c6:9a:08:36:93:f6:a8:d4:a4:36:c2:c9:
                    52:71:10:f6:aa:0b:0d:e4:b4:98:0c:eb:a1:6e:41:
                    47:06:2c:34:12:8c:db:57:2e:96:b1:6c:c6:71:0c:
                    35:a7:f7:d9:5d:1a:f2:2f:96:1d:10:8d:5c:c8:c6:
                    b6:d3:2f:68:cc:e3:aa:30:38:42:5c:08:c4:e3:79:
                    e9:65:89:19:8b:96:e3:b5:98:bc:e2:ae:96:2d:2e:
                    3b:4c:92:b5:26:b1:11:b6:bc:27:ce:29:8c:6b:6d:
                    41:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F9:A4:FB:7E:8B:12:CD:6C:55:56:5C:94:A1:11:B0:F2:A9:47:8B
            X509v3 Authority Key Identifier:
                keyid:7D:E5:44:0D:73:B8:90:D8:BF:20:B5:10:E2:FD:C7:EA:01:52:B9:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/7DE5440D73B890D8BF20B510E2FDC7EA0152B97A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7DE5440D73B890D8BF20B510E2FDC7EA0152B97A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/7DE5440D73B890D8BF20B510E2FDC7EA0152B97A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:45:d2:d6:b9:9d:5e:5e:41:68:5d:ca:e4:93:41:5b:f5:0c:
         8e:95:0c:dc:5a:9a:f2:d8:50:c7:29:f9:db:a8:81:27:a6:c5:
         c8:a1:9f:95:74:5c:71:2f:28:db:f6:0a:01:28:aa:d3:8c:e0:
         b9:f3:a6:04:dd:e3:16:0f:a8:60:2e:47:94:8f:32:96:de:b4:
         3e:20:df:b5:28:80:49:a7:ce:5f:f8:02:f4:d2:b2:a4:e4:2b:
         e9:eb:63:d7:85:67:8d:9c:34:ab:03:b4:9e:e6:c1:5b:d4:8e:
         f4:5e:18:40:70:8c:9c:e6:c8:5c:86:03:da:0b:78:7f:d8:3f:
         35:c3:1c:61:b1:67:97:08:c7:44:5c:3c:8c:15:4f:bc:b5:77:
         5a:32:9d:65:da:43:12:aa:82:86:69:b8:5c:0b:ba:13:8d:db:
         04:e0:00:8e:30:b3:6a:75:da:df:88:22:06:bd:9c:5b:d2:69:
         dc:6a:7e:96:e6:1d:4a:aa:71:04:f2:bf:c9:74:b3:b7:08:7d:
         8e:e8:22:82:93:d9:6d:a1:82:87:b9:f9:43:e5:24:11:4a:d1:
         b6:4b:0f:d4:8e:1d:d7:af:37:8c:6a:54:d9:73:3d:cd:f0:57:
         ac:b9:5c:7b:af:cf:37:9d:1b:5a:ea:fc:7a:e6:63:2b:8c:13:
         0e:80:0a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:42 2024 by rpki-client on console.sobornost.net