Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/1/E2E37F67D2EE63A12224C15B9AD15A60A6BF0B43.mft
File:                     E2E37F67D2EE63A12224C15B9AD15A60A6BF0B43.mft (raw, json)
Hash identifier:          px45c4eoxpFayrUk3KhCAJSgCaIrURGHzp5/R61TQIA=
Subject key identifier:   F3:61:F5:EC:F1:C1:91:7D:26:7A:42:59:88:A0:7A:33:26:6C:F3:34
Authority key identifier: E2:E3:7F:67:D2:EE:63:A1:22:24:C1:5B:9A:D1:5A:60:A6:BF:0B:43
Certificate issuer:       /CN=E2E37F67D2EE63A12224C15B9AD15A60A6BF0B43
Certificate serial:       1D032146D45658D3D7D7E271D2FD1C5124D2CD34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2E37F67D2EE63A12224C15B9AD15A60A6BF0B43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/1/E2E37F67D2EE63A12224C15B9AD15A60A6BF0B43.mft
Manifest number:          07
Signing time:             Tue 09 Jan 2024 14:43:22 +0000
Manifest this update:     Tue 09 Jan 2024 14:38:22 +0000
Manifest next update:     Wed 10 Jan 2024 16:02:22 +0000
Files and hashes:         1: 3230302e3130372e3131362e302f32322d3332203d3e20323730323438.roa (hash: BXek+COpcbfTDrU+Y4goM90Nsh0jZwKYViuiRUq54NI=)
                          2: E2E37F67D2EE63A12224C15B9AD15A60A6BF0B43.crl (hash: BYweN7CYvmbA65cnM+P776hPWdg9DZWCJAHaeAYAgTQ=)
                          3: 323830343a363931383a3a2f33322d313238203d3e20323730323438.roa (hash: 7oWUQh93zNmh1UbCHIDOgzn+/c9d+5hY14Ck//FVDSE=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/1/E2E37F67D2EE63A12224C15B9AD15A60A6BF0B43.crl
                          rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/1/E2E37F67D2EE63A12224C15B9AD15A60A6BF0B43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2E37F67D2EE63A12224C15B9AD15A60A6BF0B43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:03:21:46:d4:56:58:d3:d7:d7:e2:71:d2:fd:1c:51:24:d2:cd:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2E37F67D2EE63A12224C15B9AD15A60A6BF0B43
        Validity
            Not Before: Jan  9 14:38:22 2024 GMT
            Not After : Jan 10 16:02:22 2024 GMT
        Subject: CN=F361F5ECF1C1917D267A425988A07A33266CF334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:e6:2a:83:a7:ce:56:78:f3:08:af:e1:78:9f:
                    c7:a9:1b:c6:6a:97:e7:a2:5d:2a:e7:f7:18:ee:24:
                    2c:e1:3c:17:96:b1:a0:ac:4d:40:bc:9d:52:0c:7e:
                    16:c1:c1:4d:a2:30:df:5e:36:88:f8:47:a1:03:85:
                    39:ee:e2:5b:4d:a0:90:ce:2a:ea:4a:33:de:64:e4:
                    e0:7a:35:80:97:ca:da:6f:b0:37:c9:21:35:79:12:
                    b5:9e:99:06:24:d4:63:02:71:88:b3:88:92:74:a4:
                    af:a6:00:43:2d:33:fa:5e:db:d8:a5:16:e1:b5:50:
                    5b:ea:23:3b:a3:5b:8f:03:9d:5b:2b:86:9e:5f:aa:
                    54:ef:9f:a1:14:19:c4:47:34:17:bb:e4:ff:d4:fb:
                    ab:44:91:ca:e7:c3:4b:1d:1f:15:f5:1e:ff:d4:f2:
                    a5:08:42:2c:a8:31:d4:f4:f4:dc:8e:cd:0d:2d:43:
                    2f:68:14:a7:77:0e:f9:f1:c6:22:6d:7e:69:1a:02:
                    d0:63:29:7a:97:50:4b:18:e0:4c:c9:0c:35:08:8a:
                    5f:c0:f6:1b:be:4d:45:f6:3f:fc:d3:e2:97:cb:e7:
                    2f:67:3d:6b:bc:5a:d1:a5:47:b4:00:7a:75:0e:f8:
                    dc:8f:e7:87:a4:e5:c9:ba:39:31:0b:21:bd:03:3a:
                    b8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:61:F5:EC:F1:C1:91:7D:26:7A:42:59:88:A0:7A:33:26:6C:F3:34
            X509v3 Authority Key Identifier:
                keyid:E2:E3:7F:67:D2:EE:63:A1:22:24:C1:5B:9A:D1:5A:60:A6:BF:0B:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/1/E2E37F67D2EE63A12224C15B9AD15A60A6BF0B43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2E37F67D2EE63A12224C15B9AD15A60A6BF0B43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/1/E2E37F67D2EE63A12224C15B9AD15A60A6BF0B43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ce:01:40:25:91:78:21:11:18:36:4d:a6:b6:7a:03:fb:fa:
         46:8c:38:03:99:b7:18:aa:58:35:af:60:0e:8e:05:79:1d:23:
         47:61:3d:24:f9:4d:fa:52:60:eb:32:f2:e8:ee:75:79:2d:30:
         60:58:86:4a:0f:5c:89:eb:67:a7:22:a9:c4:b1:35:bb:1a:10:
         fe:4b:0d:47:4b:f9:fc:02:f7:d4:69:2c:9c:92:e3:bb:70:a5:
         2d:83:19:f3:9c:b1:e8:0e:ea:a7:01:55:b1:ef:72:96:1b:71:
         78:44:0b:4e:38:47:d6:f0:cf:ac:79:4a:a3:13:0c:7a:37:42:
         63:7e:71:65:cc:98:8a:11:85:d0:9b:a0:ee:62:56:dd:96:3b:
         e0:17:95:bd:45:91:9e:9c:b0:c7:8b:ca:a3:b7:47:49:d3:dd:
         a2:5b:2d:e9:69:7d:b5:db:2e:3a:f9:6c:42:da:eb:e7:40:00:
         be:1a:80:97:65:64:f2:a5:2e:4b:27:b6:d1:81:8f:fa:10:79:
         94:d4:10:3b:4d:a9:a4:f7:5e:a4:ab:52:1c:48:4b:cc:95:91:
         b1:06:09:31:19:88:a4:dd:bb:79:7d:a0:8b:34:94:9b:8d:5d:
         a7:f2:dc:c4:2f:da:9c:b3:93:1f:11:33:eb:f9:cf:8b:92:38:
         21:35:33:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:24 2024 by rpki-client on console.sobornost.net