Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/9EE0AC7E38B41D5C04DCA9BFB36339C2729C650C.mft
File:                     9EE0AC7E38B41D5C04DCA9BFB36339C2729C650C.mft (raw, json)
Hash identifier:          anzx8Axp6lpHn123EXJoIHzpT55UC0hfGkPITk2TdxI=
Subject key identifier:   E2:1A:1F:FE:3B:D4:17:B2:7D:0D:36:0B:2D:AD:65:4A:EF:3D:2A:BD
Authority key identifier: 9E:E0:AC:7E:38:B4:1D:5C:04:DC:A9:BF:B3:63:39:C2:72:9C:65:0C
Certificate issuer:       /CN=9EE0AC7E38B41D5C04DCA9BFB36339C2729C650C
Certificate serial:       2DC142D4E5AAF3367A6E04463B8C666F8B078D6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EE0AC7E38B41D5C04DCA9BFB36339C2729C650C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/9EE0AC7E38B41D5C04DCA9BFB36339C2729C650C.mft
Manifest number:          AC
Signing time:             Mon 08 Jan 2024 23:09:42 +0000
Manifest this update:     Mon 08 Jan 2024 23:04:42 +0000
Manifest next update:     Wed 10 Jan 2024 00:54:42 +0000
Files and hashes:         1: 9EE0AC7E38B41D5C04DCA9BFB36339C2729C650C.crl (hash: f8ymQy0HHr2896YRjo/9V7tzZDNlTpEqSDOJ0jwMr00=)
                          2: 323830343a383537383a3a2f33322d313238203d3e20323732353831.roa (hash: N+sMj+uQT1yEiibV2vlPkJY3dnp49tL5Hf3N0D4LGrI=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/9EE0AC7E38B41D5C04DCA9BFB36339C2729C650C.crl
                          rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/9EE0AC7E38B41D5C04DCA9BFB36339C2729C650C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EE0AC7E38B41D5C04DCA9BFB36339C2729C650C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Jan 2024 23:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:c1:42:d4:e5:aa:f3:36:7a:6e:04:46:3b:8c:66:6f:8b:07:8d:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EE0AC7E38B41D5C04DCA9BFB36339C2729C650C
        Validity
            Not Before: Jan  8 23:04:42 2024 GMT
            Not After : Jan 10 00:54:42 2024 GMT
        Subject: CN=E21A1FFE3BD417B27D0D360B2DAD654AEF3D2ABD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:20:81:38:c7:08:f8:f8:5f:85:91:cf:24:e9:
                    40:28:43:6b:db:27:ab:b9:96:80:bf:6a:7d:fd:f1:
                    ec:ed:35:49:3c:86:6f:9a:50:b7:ad:d1:aa:33:14:
                    48:c1:08:63:c6:06:59:d1:11:6a:c4:c4:fb:af:da:
                    8c:8b:57:4c:db:ff:10:99:b2:9b:25:4a:3e:91:16:
                    81:c7:f2:4f:89:ba:d4:d2:a6:ff:66:42:76:ca:45:
                    59:8f:e8:50:3c:a1:36:13:f3:e8:3b:24:30:8f:3d:
                    0c:5a:81:13:a3:a1:63:ca:bc:ae:d3:0f:5f:4f:b3:
                    4e:6a:1c:01:07:8c:a2:a6:e8:d0:cd:1e:64:14:59:
                    bd:f6:29:31:35:88:21:a3:e7:f0:13:46:dd:9c:33:
                    f4:06:2f:f8:66:d3:e7:b6:b0:8b:fb:b9:d9:d7:c9:
                    b4:56:71:01:f4:57:da:13:14:d3:2d:60:a2:b1:ca:
                    14:84:5e:ec:1c:fe:23:23:64:80:ed:11:09:3c:05:
                    01:f2:29:70:ea:28:7c:30:b5:5a:11:55:49:47:5f:
                    1b:c4:30:03:36:da:cf:80:4c:04:d0:20:8d:40:27:
                    65:2f:cd:60:11:c8:1a:6e:cf:43:83:32:0b:dd:75:
                    ba:e1:71:9c:f6:19:a8:3d:d6:ea:9a:43:ee:15:fb:
                    fe:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1A:1F:FE:3B:D4:17:B2:7D:0D:36:0B:2D:AD:65:4A:EF:3D:2A:BD
            X509v3 Authority Key Identifier:
                keyid:9E:E0:AC:7E:38:B4:1D:5C:04:DC:A9:BF:B3:63:39:C2:72:9C:65:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/9EE0AC7E38B41D5C04DCA9BFB36339C2729C650C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EE0AC7E38B41D5C04DCA9BFB36339C2729C650C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/9EE0AC7E38B41D5C04DCA9BFB36339C2729C650C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:87:71:b3:8f:27:94:79:f6:94:e7:37:68:98:df:2d:bb:bf:
         d1:6d:48:57:fc:57:c8:91:a4:2f:4d:d1:9a:53:bb:57:a3:17:
         a5:8b:51:a8:50:3e:57:f2:e9:d4:23:86:44:86:9a:b1:6f:58:
         0b:a2:ac:f4:b1:5f:89:02:e8:78:f1:89:11:45:86:78:f1:89:
         5c:19:b1:70:5f:40:39:f9:1d:2d:42:67:15:3d:5e:dc:c2:95:
         b5:d6:a6:fe:ff:6b:18:62:d0:1e:78:da:b0:89:fb:5f:88:af:
         51:52:a5:4e:41:f1:17:da:21:21:d8:79:8c:32:47:0e:93:7a:
         57:5c:cb:4a:2b:c8:40:b9:4f:1b:d7:40:e7:e2:b5:4a:ac:21:
         e4:da:6a:1d:f2:87:7a:cc:9d:43:1e:d6:96:70:28:fe:fd:00:
         dc:d3:69:f9:29:f3:9b:99:60:68:c5:ff:8a:29:7e:06:d5:3d:
         7d:73:61:7b:1d:ee:49:44:03:64:90:bd:23:e1:af:14:a7:ef:
         07:0f:59:23:d5:92:a2:11:2e:fb:1c:c8:a9:10:dd:5c:7d:8b:
         03:6f:09:8f:40:84:5f:b0:0e:4f:43:18:1d:cf:63:79:a8:02:
         f6:d2:16:bd:80:65:91:0d:ca:39:03:9c:e7:dc:a4:ff:69:ab:
         78:6c:1b:54
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULcFC1OWq8zZ6bgRGO4xmb4sHjW4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUVFMEFDN0UzOEI0MUQ1QzA0RENBOUJGQjM2MzM5QzI3
MjlDNjUwQzAeFw0yNDAxMDgyMzA0NDJaFw0yNDAxMTAwMDU0NDJaMDMxMTAvBgNV
BAMTKEUyMUExRkZFM0JENDE3QjI3RDBEMzYwQjJEQUQ2NTRBRUYzRDJBQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCIIE4xwj4+F+Fkc8k6UAoQ2vb
J6u5loC/an398eztNUk8hm+aULet0aozFEjBCGPGBlnREWrExPuv2oyLV0zb/xCZ
spslSj6RFoHH8k+JutTSpv9mQnbKRVmP6FA8oTYT8+g7JDCPPQxagROjoWPKvK7T
D19Ps05qHAEHjKKm6NDNHmQUWb32KTE1iCGj5/ATRt2cM/QGL/hm0+e2sIv7udnX
ybRWcQH0V9oTFNMtYKKxyhSEXuwc/iMjZIDtEQk8BQHyKXDqKHwwtVoRVUlHXxvE
MAM22s+ATATQII1AJ2UvzWARyBpuz0ODMgvddbrhcZz2Gag91uqaQ+4V+/5LAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU4hof/jvUF7J9DTYLLa1lSu89Kr0wHwYDVR0j
BBgwFoAUnuCsfji0HVwE3Km/s2M5wnKcZQwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUtjWHRWUTRmdEx6WnZjQk02N2I3TW1TYlM3aTRuVnBKQ0Q1VEY5d2ZB
OXovMC85RUUwQUM3RTM4QjQxRDVDMDREQ0E5QkZCMzYzMzlDMjcyOUM2NTBDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlFRTBBQzdFMzhCNDFENUMw
NERDQTlCRkIzNjMzOUMyNzI5QzY1MEMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QUtjWHRWUTRmdEx6WnZjQk02N2I3TW1TYlM3aTRuVnBKQ0Q1VEY5d2ZBOXovMC85
RUUwQUM3RTM4QjQxRDVDMDREQ0E5QkZCMzYzMzlDMjcyOUM2NTBDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOYdxs48nlHn2lOc3aJjfLbu/0W1IV/xXyJGkL03RmlO7V6MXpYtRqFA+V/Lp
1COGRIaasW9YC6Ks9LFfiQLoePGJEUWGePGJXBmxcF9AOfkdLUJnFT1e3MKVtdam
/v9rGGLQHnjasIn7X4ivUVKlTkHxF9ohIdh5jDJHDpN6V1zLSivIQLlPG9dA5+K1
Sqwh5NpqHfKHesydQx7WlnAo/v0A3NNp+Snzm5lgaMX/iil+BtU9fXNhex3uSUQD
ZJC9I+GvFKfvBw9ZI9WSohEu+xzIqRDdXH2LA28Jj0CEX7AOT0MYHc9jeagC9tIW
vYBlkQ3KOQOc59yk/2mreGwbVA==
-----END CERTIFICATE-----
Generated at Tue Jan 9 00:20:59 2024 by rpki-client on console.sobornost.net