Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/1BC4B50D3DF383BD64D2A0792151CD35014457CA.mft
File:                     1BC4B50D3DF383BD64D2A0792151CD35014457CA.mft (raw, json)
Hash identifier:          kqUtP4sz7916c5A85/iahubmQR16HBHaM+1nckDZKHE=
Subject key identifier:   DE:DC:33:BF:C0:DB:D3:6E:C1:7E:25:FF:D3:6F:45:FB:0E:1C:7C:65
Authority key identifier: 1B:C4:B5:0D:3D:F3:83:BD:64:D2:A0:79:21:51:CD:35:01:44:57:CA
Certificate issuer:       /CN=1BC4B50D3DF383BD64D2A0792151CD35014457CA
Certificate serial:       4893064DEBF03ED31763110E93F4A09BD4B19E76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BC4B50D3DF383BD64D2A0792151CD35014457CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/1BC4B50D3DF383BD64D2A0792151CD35014457CA.mft
Manifest number:          84
Signing time:             Mon 08 Jan 2024 22:51:28 +0000
Manifest this update:     Mon 08 Jan 2024 22:46:28 +0000
Manifest next update:     Wed 10 Jan 2024 00:17:28 +0000
Files and hashes:         1: 323830343a336238633a3a2f33322d3634203d3e20323636313536.roa (hash: 1PX81RUtbh6B7Px9PoEdqTY29xJkVcIzMdBuolxrRfU=)
                          2: 3139322e3134342e36382e302f32322d3234203d3e20323636313536.roa (hash: Btc0jecmr7dXDf8jLZO6bjfPScPOatonZpwagpa+BM8=)
                          3: 1BC4B50D3DF383BD64D2A0792151CD35014457CA.crl (hash: Iv4Br5/PBINPI8DbiQ0VevHZJ4Jb4GZrbOUbMDN6yDk=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/1BC4B50D3DF383BD64D2A0792151CD35014457CA.crl
                          rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/1BC4B50D3DF383BD64D2A0792151CD35014457CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BC4B50D3DF383BD64D2A0792151CD35014457CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Jan 2024 23:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:93:06:4d:eb:f0:3e:d3:17:63:11:0e:93:f4:a0:9b:d4:b1:9e:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BC4B50D3DF383BD64D2A0792151CD35014457CA
        Validity
            Not Before: Jan  8 22:46:28 2024 GMT
            Not After : Jan 10 00:17:28 2024 GMT
        Subject: CN=DEDC33BFC0DBD36EC17E25FFD36F45FB0E1C7C65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6c:18:d4:69:c0:6b:11:31:95:29:20:80:be:
                    d3:15:b3:2e:e9:45:bb:0f:8d:0b:85:1a:1c:b2:11:
                    f0:55:30:8e:48:06:4d:6b:b3:a5:f1:1e:ae:74:19:
                    87:a5:42:bf:db:b3:74:02:de:34:f8:12:5c:15:aa:
                    5a:2c:19:d2:86:5c:3e:df:ae:4c:6d:43:f4:42:c1:
                    6e:d4:22:86:ea:52:af:70:54:5b:9f:5c:64:40:8c:
                    39:de:8a:ec:cd:11:6e:fd:90:0b:c9:3a:03:01:92:
                    b7:03:df:a9:c3:45:19:03:62:a7:20:8d:2a:d0:d9:
                    7c:4c:29:e3:03:1a:70:f8:06:f5:73:a5:4e:12:5a:
                    91:20:36:8f:0f:81:b0:12:2f:4f:c8:9e:ce:dc:06:
                    7e:02:ed:f3:e8:25:29:65:1e:11:63:52:6a:63:61:
                    62:fd:b9:c4:ab:c9:12:07:dd:af:01:59:e0:44:eb:
                    ee:a9:f4:47:c1:ca:59:fb:90:30:74:f0:7f:15:8b:
                    e4:9e:80:e5:cc:84:3f:4a:f9:e4:bf:f9:49:08:e2:
                    62:02:57:d2:73:30:95:76:7d:20:e9:32:dd:57:66:
                    83:2c:ff:a7:5c:a7:cf:2a:73:91:83:6c:fa:61:4e:
                    05:f7:7e:18:75:5a:a9:d7:c6:30:4b:3f:3c:d8:d0:
                    15:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:DC:33:BF:C0:DB:D3:6E:C1:7E:25:FF:D3:6F:45:FB:0E:1C:7C:65
            X509v3 Authority Key Identifier:
                keyid:1B:C4:B5:0D:3D:F3:83:BD:64:D2:A0:79:21:51:CD:35:01:44:57:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/1BC4B50D3DF383BD64D2A0792151CD35014457CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BC4B50D3DF383BD64D2A0792151CD35014457CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/1BC4B50D3DF383BD64D2A0792151CD35014457CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:dc:1f:7b:4b:44:36:9c:c0:d8:58:cb:f4:1b:2d:7e:80:c7:
         66:71:e6:47:98:5a:b7:03:50:6e:3e:91:e5:1b:ff:be:f8:8e:
         5c:bc:b2:83:8a:31:eb:a3:bd:ab:3b:a1:60:5d:de:32:6d:b0:
         ea:10:de:2b:c9:0e:73:2c:d9:9a:43:b5:0b:f5:c7:e8:7a:94:
         38:8e:f1:2c:b8:58:04:ef:7f:c3:4b:a9:cb:03:58:d8:9b:9e:
         c3:e2:a8:74:5a:a4:66:27:91:00:b3:80:85:6f:13:82:0e:4a:
         2e:d9:67:a2:36:1e:e7:9a:4c:e7:27:3a:51:33:6e:e9:f6:97:
         07:33:f5:b4:eb:8a:ba:30:4b:80:7b:db:99:20:e0:0b:0b:19:
         8d:33:6a:10:02:3c:49:9e:45:e0:08:97:da:8a:0c:03:85:1e:
         80:4d:9d:c8:2a:8a:22:26:7f:15:79:15:98:46:74:36:5f:f2:
         ec:00:d6:93:21:27:18:e9:5c:23:9e:80:f0:41:32:34:a4:01:
         86:05:2b:f1:39:83:65:62:c1:af:79:35:61:7e:0b:2d:19:97:
         ce:ae:7b:82:53:d2:e7:33:43:45:63:fb:38:ba:8f:4b:54:3c:
         9f:72:c5:0f:94:5e:48:a5:05:e8:2f:35:2c:df:1a:19:7a:ca:
         0a:72:b3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 00:20:58 2024 by rpki-client on console.sobornost.net