Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AG6C24GVPT12BK1Rn9b5jitUrxyCxLsqXPKgxVCTaiTZ/0/B3E217A2C3B7BEBBD174E9ADEF4DFA806765CF80.mft
File:                     B3E217A2C3B7BEBBD174E9ADEF4DFA806765CF80.mft (raw, json)
Hash identifier:          3rAkIVRROfiCqddZir0qRIWGOYAAJsY9YOnpEXszyp0=
Subject key identifier:   DA:94:CD:55:64:49:58:0A:44:88:6B:B4:52:7F:42:1F:9D:F8:33:DE
Authority key identifier: B3:E2:17:A2:C3:B7:BE:BB:D1:74:E9:AD:EF:4D:FA:80:67:65:CF:80
Certificate issuer:       /CN=B3E217A2C3B7BEBBD174E9ADEF4DFA806765CF80
Certificate serial:       20045DEEC159FC7CC40A13FDAB989894394953A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3E217A2C3B7BEBBD174E9ADEF4DFA806765CF80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AG6C24GVPT12BK1Rn9b5jitUrxyCxLsqXPKgxVCTaiTZ/0/B3E217A2C3B7BEBBD174E9ADEF4DFA806765CF80.mft
Manifest number:          F5
Signing time:             Tue 09 Jan 2024 08:58:44 +0000
Manifest this update:     Tue 09 Jan 2024 08:53:44 +0000
Manifest next update:     Wed 10 Jan 2024 11:22:44 +0000
Files and hashes:         1: 323830343a373138383a3a2f33322d3334203d3e20323730373935.roa (hash: pSmlb6rmR5VZG47slNaUe4WlURpkA+Wra/G/NpnX/Ic=)
                          2: 3138392e33362e3234342e302f32322d3234203d3e20323730373935.roa (hash: yyEupSiukF7K2yIYzrcMQAMPIdHk+RUfAaK3iumcgnE=)
                          3: B3E217A2C3B7BEBBD174E9ADEF4DFA806765CF80.crl (hash: jgJWs/vN4I41YypjvepUrIZibJHLs2ONKYitAJ6X8EM=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AG6C24GVPT12BK1Rn9b5jitUrxyCxLsqXPKgxVCTaiTZ/0/B3E217A2C3B7BEBBD174E9ADEF4DFA806765CF80.crl
                          rsync://rpki-repo.registro.br/repo/AG6C24GVPT12BK1Rn9b5jitUrxyCxLsqXPKgxVCTaiTZ/0/B3E217A2C3B7BEBBD174E9ADEF4DFA806765CF80.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3E217A2C3B7BEBBD174E9ADEF4DFA806765CF80.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 11:22:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:04:5d:ee:c1:59:fc:7c:c4:0a:13:fd:ab:98:98:94:39:49:53:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E217A2C3B7BEBBD174E9ADEF4DFA806765CF80
        Validity
            Not Before: Jan  9 08:53:44 2024 GMT
            Not After : Jan 10 11:22:44 2024 GMT
        Subject: CN=DA94CD556449580A44886BB4527F421F9DF833DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:43:b5:17:d9:7e:33:a9:b7:34:73:f5:96:f1:
                    25:b4:d9:ed:a7:32:af:11:9a:00:62:b9:1c:f4:12:
                    0a:8d:c8:47:49:af:3c:7d:fc:a9:33:37:60:da:ff:
                    24:9b:53:f4:6e:e5:1b:6a:9b:e5:03:64:ff:98:51:
                    23:fb:bd:e5:51:0e:b1:71:62:ae:17:ad:e1:64:47:
                    f5:e4:a0:f1:34:b6:b5:ed:c5:0b:8a:ba:8d:ec:fa:
                    46:c6:5d:13:ac:75:9b:79:21:43:bb:e3:d9:ed:7c:
                    a1:2a:7b:c8:78:c7:57:c2:c9:bc:0e:33:f9:ef:23:
                    15:db:53:95:d7:79:dd:7d:d0:c1:72:52:35:dd:ef:
                    1a:f1:f8:53:6f:d0:a9:9a:7b:ee:68:ed:80:62:0e:
                    cb:eb:36:b8:bd:6a:04:e0:7e:f8:6a:74:7e:85:bb:
                    43:f0:f2:34:3a:4e:cd:13:17:50:88:01:23:71:77:
                    e3:62:c5:3b:d2:74:2a:dc:96:3b:c0:a7:07:f5:a3:
                    13:f6:ff:3e:c3:d5:27:b2:b0:8c:be:23:df:6f:f7:
                    4d:d1:dd:90:7c:a4:8c:2f:84:26:eb:30:fa:35:0d:
                    5f:02:d6:da:17:a5:9e:48:74:de:c0:72:af:e0:23:
                    1a:90:fc:db:78:58:75:d9:9d:d2:15:00:c9:98:a5:
                    ce:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:94:CD:55:64:49:58:0A:44:88:6B:B4:52:7F:42:1F:9D:F8:33:DE
            X509v3 Authority Key Identifier:
                keyid:B3:E2:17:A2:C3:B7:BE:BB:D1:74:E9:AD:EF:4D:FA:80:67:65:CF:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AG6C24GVPT12BK1Rn9b5jitUrxyCxLsqXPKgxVCTaiTZ/0/B3E217A2C3B7BEBBD174E9ADEF4DFA806765CF80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3E217A2C3B7BEBBD174E9ADEF4DFA806765CF80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AG6C24GVPT12BK1Rn9b5jitUrxyCxLsqXPKgxVCTaiTZ/0/B3E217A2C3B7BEBBD174E9ADEF4DFA806765CF80.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:68:27:6e:7e:6f:00:d4:77:5e:98:5e:72:f3:bd:01:3e:54:
         e4:a1:55:63:f5:78:4a:bc:1a:7e:c5:31:07:cc:36:fd:fc:b0:
         dd:5b:a5:fb:f7:ce:12:95:19:b3:6e:98:43:70:f8:7d:e6:0a:
         58:e1:bd:66:c8:33:03:05:b2:58:98:80:51:62:5f:8c:b1:b3:
         cd:b6:2a:d5:b0:cc:79:e4:3e:e9:6c:f9:e6:22:a9:cf:f5:58:
         29:98:38:6a:f2:bb:61:0d:8f:bd:c2:03:7e:9b:76:b0:18:bb:
         18:fe:a3:2d:28:76:6b:60:a1:10:f9:04:e4:de:0a:4e:1d:19:
         ce:4d:2a:58:5a:0f:3d:a1:6e:46:82:91:7c:e2:63:40:dc:41:
         6b:83:3d:32:66:e8:45:96:30:b8:98:b4:a2:cb:70:04:96:3e:
         5d:a2:db:9c:96:22:bf:a7:fa:c3:97:60:ca:69:5b:a6:60:08:
         28:2b:52:c3:1d:3e:f0:19:e0:a3:a4:33:6c:6b:86:0f:d5:62:
         cb:5f:af:dc:c6:95:ed:c7:73:39:86:32:87:0f:09:55:2b:7e:
         00:5a:49:98:64:8d:35:6e:27:e0:cd:11:ec:fa:26:b7:b3:e3:
         11:a1:f7:50:4a:90:51:65:6c:17:2e:bb:d7:1c:6a:74:89:8c:
         0c:5d:8f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:43 2024 by rpki-client on console.sobornost.net