Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/0/32F4DDB42CCD623E53424C7EF82134F3B302D4E2.mft
File:                     32F4DDB42CCD623E53424C7EF82134F3B302D4E2.mft (raw, json)
Hash identifier:          wOffSXxrtLHh0QDWzTD4P5gqMhzppBPwV7HL994HdPk=
Subject key identifier:   9F:D6:FB:CB:F4:D1:44:52:F0:77:1D:E4:01:38:34:A7:40:1B:78:2C
Authority key identifier: 32:F4:DD:B4:2C:CD:62:3E:53:42:4C:7E:F8:21:34:F3:B3:02:D4:E2
Certificate issuer:       /CN=32F4DDB42CCD623E53424C7EF82134F3B302D4E2
Certificate serial:       1AB8D95D3BE2C3F4EA982EF7FDC2D7F1E76E202A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32F4DDB42CCD623E53424C7EF82134F3B302D4E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/0/32F4DDB42CCD623E53424C7EF82134F3B302D4E2.mft
Manifest number:          23
Signing time:             Tue 09 Jan 2024 12:49:04 +0000
Manifest this update:     Tue 09 Jan 2024 12:44:04 +0000
Manifest next update:     Wed 10 Jan 2024 15:22:04 +0000
Files and hashes:         1: 323830343a323631343a3a2f33322d3336203d3e203532363539.roa (hash: SUi6ODWH11slieR7T3pVXrsqs30qK2xoxkPhf/Ph6tQ=)
                          2: 3137372e36362e3137322e302f32322d3234203d3e203532363539.roa (hash: N8qbPehDU/LQ9B9TKhDJ/dG0+CMf5eSSOcl12QxrHRg=)
                          3: 32F4DDB42CCD623E53424C7EF82134F3B302D4E2.crl (hash: I52gB6ls676H9/vJz+Afd9WA0cgA+F/rMMkEO65dZ8c=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/0/32F4DDB42CCD623E53424C7EF82134F3B302D4E2.crl
                          rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/0/32F4DDB42CCD623E53424C7EF82134F3B302D4E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32F4DDB42CCD623E53424C7EF82134F3B302D4E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 12:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b8:d9:5d:3b:e2:c3:f4:ea:98:2e:f7:fd:c2:d7:f1:e7:6e:20:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32F4DDB42CCD623E53424C7EF82134F3B302D4E2
        Validity
            Not Before: Jan  9 12:44:04 2024 GMT
            Not After : Jan 10 15:22:04 2024 GMT
        Subject: CN=9FD6FBCBF4D14452F0771DE4013834A7401B782C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f2:e4:e8:00:7c:8d:11:4d:65:ed:d8:83:3d:
                    80:1e:e6:14:e0:a1:1e:56:c9:4b:6f:a3:45:f9:0d:
                    c8:e8:52:1b:fd:65:3c:4f:70:87:6a:23:43:5b:f4:
                    c6:66:0e:a2:68:1b:84:83:c8:ad:64:ec:74:2f:4d:
                    3c:f8:be:dd:d9:81:1a:ec:f4:f6:3e:98:f1:f1:ae:
                    23:c8:e1:6e:d9:ac:62:cf:8a:9a:0b:4b:87:8e:72:
                    af:6a:4a:5f:50:4d:66:83:bc:9d:93:e2:67:22:40:
                    6f:34:77:f2:d9:81:a2:e6:01:87:bf:86:b5:82:50:
                    b3:00:27:5e:5f:6f:e8:df:fb:c4:16:2f:8e:3d:86:
                    d3:a0:38:39:93:a7:48:69:85:09:ac:f1:cd:85:f2:
                    14:dd:f4:99:90:67:9c:f4:f4:1b:da:6e:ee:50:b4:
                    60:1d:94:34:e1:f3:d5:fc:53:3d:46:09:2d:eb:be:
                    38:c1:6a:20:2d:5a:30:c8:82:40:71:ea:f5:42:33:
                    a0:11:4f:3a:af:90:07:f1:e9:4d:40:a8:0d:8c:6f:
                    23:d1:ff:05:ad:93:76:e1:cc:b5:43:f9:d8:10:c0:
                    35:77:48:48:2a:99:98:fd:51:59:51:76:1e:fc:f0:
                    f8:50:82:1d:eb:b9:e2:2c:ec:a4:95:7a:36:e5:65:
                    e1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D6:FB:CB:F4:D1:44:52:F0:77:1D:E4:01:38:34:A7:40:1B:78:2C
            X509v3 Authority Key Identifier:
                keyid:32:F4:DD:B4:2C:CD:62:3E:53:42:4C:7E:F8:21:34:F3:B3:02:D4:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/0/32F4DDB42CCD623E53424C7EF82134F3B302D4E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32F4DDB42CCD623E53424C7EF82134F3B302D4E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/0/32F4DDB42CCD623E53424C7EF82134F3B302D4E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:12:09:70:d5:8d:e5:da:29:67:18:44:da:a7:66:83:4b:83:
         bb:8a:71:d4:3a:7a:97:5d:53:11:ab:74:25:13:8f:90:ce:41:
         f6:07:9b:2e:ee:40:50:8b:57:86:ae:78:2c:c6:3b:3c:7b:40:
         89:05:85:d1:1d:24:75:44:e9:00:96:90:1c:54:42:2d:5e:a1:
         dd:7c:b8:9e:ae:9b:a7:33:a2:73:49:8c:28:74:18:e6:77:bb:
         bd:2d:dc:d9:74:00:96:ba:b3:43:11:25:27:55:82:00:79:77:
         00:4c:3c:f6:30:29:d2:a7:40:81:d5:f8:06:ea:35:56:85:ac:
         46:af:7c:61:5b:fd:e1:28:c5:4f:18:ed:0b:c6:48:df:29:60:
         16:f9:00:13:bb:b3:a4:12:a7:42:00:86:b4:5a:78:5a:6c:8a:
         f1:0c:1f:72:15:02:af:1a:0c:ac:3d:0b:5e:03:72:48:50:9d:
         01:5a:ef:35:6f:d9:20:11:5d:78:8a:89:91:b0:48:71:a4:7f:
         64:8f:aa:03:02:35:53:9b:36:24:0d:c4:da:4f:ac:bc:6d:5f:
         51:02:48:84:10:f3:e1:31:22:25:2a:cc:38:68:3c:bb:83:3d:
         09:96:c6:2c:cd:59:e9:71:66:d8:1b:02:e9:b9:13:87:69:dd:
         65:81:17:da
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGrjZXTviw/TqmC73/cLX8eduICowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJGNEREQjQyQ0NENjIzRTUzNDI0QzdFRjgyMTM0RjNC
MzAyRDRFMjAeFw0yNDAxMDkxMjQ0MDRaFw0yNDAxMTAxNTIyMDRaMDMxMTAvBgNV
BAMTKDlGRDZGQkNCRjREMTQ0NTJGMDc3MURFNDAxMzgzNEE3NDAxQjc4MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn8uToAHyNEU1l7diDPYAe5hTg
oR5WyUtvo0X5DcjoUhv9ZTxPcIdqI0Nb9MZmDqJoG4SDyK1k7HQvTTz4vt3ZgRrs
9PY+mPHxriPI4W7ZrGLPipoLS4eOcq9qSl9QTWaDvJ2T4mciQG80d/LZgaLmAYe/
hrWCULMAJ15fb+jf+8QWL449htOgODmTp0hphQms8c2F8hTd9JmQZ5z09Bvabu5Q
tGAdlDTh89X8Uz1GCS3rvjjBaiAtWjDIgkBx6vVCM6ARTzqvkAfx6U1AqA2MbyPR
/wWtk3bhzLVD+dgQwDV3SEgqmZj9UVlRdh788PhQgh3rueIs7KSVejblZeHjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUn9b7y/TRRFLwdx3kATg0p0AbeCwwHwYDVR0j
BBgwFoAUMvTdtCzNYj5TQkx++CE087MC1OIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVZxU3k5aDduQ3pqTXZLZnJDbkw2Z3E3UHpES3VvRkdRQW0zd2tnTURO
Z2UvMC8zMkY0RERCNDJDQ0Q2MjNFNTM0MjRDN0VGODIxMzRGM0IzMDJENEUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMyRjREREI0MkNDRDYyM0U1
MzQyNEM3RUY4MjEzNEYzQjMwMkQ0RTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QVZxU3k5aDduQ3pqTXZLZnJDbkw2Z3E3UHpES3VvRkdRQW0zd2tnTUROZ2UvMC8z
MkY0RERCNDJDQ0Q2MjNFNTM0MjRDN0VGODIxMzRGM0IzMDJENEUyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlhIJcNWN5dopZxhE2qdmg0uDu4px1Dp6l11TEat0JROPkM5B9gebLu5AUItX
hq54LMY7PHtAiQWF0R0kdUTpAJaQHFRCLV6h3Xy4nq6bpzOic0mMKHQY5ne7vS3c
2XQAlrqzQxElJ1WCAHl3AEw89jAp0qdAgdX4Buo1VoWsRq98YVv94SjFTxjtC8ZI
3ylgFvkAE7uzpBKnQgCGtFp4WmyK8QwfchUCrxoMrD0LXgNySFCdAVrvNW/ZIBFd
eIqJkbBIcaR/ZI+qAwI1U5s2JA3E2k+svG1fUQJIhBDz4TEiJSrMOGg8u4M9CZbG
LM1Z6XFm2BsC6bkTh2ndZYEX2g==
-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:44 2024 by rpki-client on console.sobornost.net