Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/1/4CC5E9D9BE24E3B0EFA417C53E7123E56B6F0BD9.mft
File:                     4CC5E9D9BE24E3B0EFA417C53E7123E56B6F0BD9.mft (raw, json)
Hash identifier:          mTVLdcXmkWwUPD2noM2XNBmo5rv6c/6eQvE0T0hQer4=
Subject key identifier:   80:1E:C2:E2:26:C6:A0:3E:65:7E:1F:22:D5:2C:B3:DB:89:C6:EC:B9
Authority key identifier: 4C:C5:E9:D9:BE:24:E3:B0:EF:A4:17:C5:3E:71:23:E5:6B:6F:0B:D9
Certificate issuer:       /CN=4CC5E9D9BE24E3B0EFA417C53E7123E56B6F0BD9
Certificate serial:       579D7FC3EF074E554E4FA0B4FAEE0C5D927F539A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CC5E9D9BE24E3B0EFA417C53E7123E56B6F0BD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/1/4CC5E9D9BE24E3B0EFA417C53E7123E56B6F0BD9.mft
Manifest number:          BD
Signing time:             Tue 09 Jan 2024 14:13:22 +0000
Manifest this update:     Tue 09 Jan 2024 14:08:22 +0000
Manifest next update:     Wed 10 Jan 2024 14:35:22 +0000
Files and hashes:         1: 3136342e3136332e3230342e302f32322d3234203d3e20323635393733.roa (hash: 2PvTVQjKgG0tomg/fBqABeKY3rVY7nhACrhTYF+0fq4=)
                          2: 4CC5E9D9BE24E3B0EFA417C53E7123E56B6F0BD9.crl (hash: OEnkr5qwg5a6IGpL0Y/kMLMXErSwEdEKT5hmukeVdGo=)
                          3: 323830343a343061383a3a2f33322d3438203d3e20323635393733.roa (hash: O0N/HfMjANJSGUZ7Io2Iqx/LAUUBWAd+C1y+ewx0wh8=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/1/4CC5E9D9BE24E3B0EFA417C53E7123E56B6F0BD9.crl
                          rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/1/4CC5E9D9BE24E3B0EFA417C53E7123E56B6F0BD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CC5E9D9BE24E3B0EFA417C53E7123E56B6F0BD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 14:35:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:9d:7f:c3:ef:07:4e:55:4e:4f:a0:b4:fa:ee:0c:5d:92:7f:53:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC5E9D9BE24E3B0EFA417C53E7123E56B6F0BD9
        Validity
            Not Before: Jan  9 14:08:22 2024 GMT
            Not After : Jan 10 14:35:22 2024 GMT
        Subject: CN=801EC2E226C6A03E657E1F22D52CB3DB89C6ECB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:13:8a:df:49:d5:83:9c:53:3d:86:dd:b8:22:
                    48:38:67:55:e8:d4:67:f4:04:97:9f:e2:6d:1b:51:
                    90:ae:f7:87:32:0f:bd:75:ef:c6:69:b8:36:de:fd:
                    9c:43:a1:89:6a:31:57:13:75:bd:43:0a:b4:52:24:
                    3a:2c:ad:c1:1f:5b:e3:a3:7d:9a:32:ae:2c:2b:fd:
                    59:84:36:2b:70:9f:e6:c5:30:b7:30:07:10:88:53:
                    17:30:f3:32:81:70:2b:08:85:fc:30:10:b4:81:74:
                    6e:fe:b7:4b:b4:ef:95:d5:cc:a8:7e:7b:1c:86:b7:
                    ea:68:34:cd:03:9a:89:66:76:bb:16:91:73:bb:3e:
                    b2:8e:a9:f6:cd:cf:9a:60:15:a4:9b:34:a1:71:50:
                    d1:c8:fd:14:b3:9a:52:f5:e1:ec:4b:44:77:b4:ef:
                    49:16:1c:5e:20:bf:01:0c:43:80:e1:78:2c:38:c4:
                    63:51:4a:70:2b:17:37:2b:a6:72:a8:80:6d:1f:d4:
                    eb:c5:3a:8a:7e:a4:c6:16:4e:6a:da:12:58:41:c7:
                    c6:86:42:c1:ef:cc:7b:e2:e9:85:8d:4d:87:27:1f:
                    52:26:0b:58:68:4f:34:f4:8c:d6:78:fb:53:e7:e2:
                    67:7a:67:95:d6:a5:71:d7:19:0d:03:87:aa:04:14:
                    e2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1E:C2:E2:26:C6:A0:3E:65:7E:1F:22:D5:2C:B3:DB:89:C6:EC:B9
            X509v3 Authority Key Identifier:
                keyid:4C:C5:E9:D9:BE:24:E3:B0:EF:A4:17:C5:3E:71:23:E5:6B:6F:0B:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/1/4CC5E9D9BE24E3B0EFA417C53E7123E56B6F0BD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CC5E9D9BE24E3B0EFA417C53E7123E56B6F0BD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/1/4CC5E9D9BE24E3B0EFA417C53E7123E56B6F0BD9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:68:9c:c2:2c:60:93:10:10:05:dc:ed:22:74:85:2d:33:0d:
         36:8a:c9:5e:9a:64:2c:1b:3d:9c:43:2f:6a:7e:8d:20:67:21:
         2a:53:f5:e0:1b:c2:77:7c:84:21:05:63:9b:20:8d:bd:0e:31:
         d5:18:31:83:dc:50:42:34:27:ec:6b:74:69:97:6d:97:d4:23:
         74:0b:eb:31:62:ba:e7:c4:11:86:6a:af:30:4e:95:b4:23:69:
         84:2e:e8:4d:d4:42:d0:c4:94:1e:11:18:e2:a1:78:9f:97:79:
         4c:e9:8c:d5:64:70:d9:6f:72:a6:01:c7:85:97:1c:a7:73:b8:
         d8:c5:4a:f7:7b:f9:ac:8a:8a:bb:59:45:df:9b:59:ed:1e:a6:
         e5:42:6f:bf:70:48:b3:62:c4:71:c9:27:93:87:82:91:66:34:
         46:48:85:ab:45:f0:66:3a:47:9e:e2:d2:8d:20:bb:09:2f:3a:
         03:c7:58:dc:a6:48:2e:66:75:3a:be:c3:54:b0:3c:41:8a:fc:
         4b:28:94:9a:c1:d5:19:f2:f3:bd:92:6f:d6:bd:b6:06:c9:c8:
         70:b7:fe:36:a2:e4:19:db:a9:14:fd:7d:b9:ca:53:af:0d:43:
         58:2a:ab:74:e8:b4:91:c7:5e:f5:b7:05:24:d3:75:f7:87:46:
         a1:84:10:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:25 2024 by rpki-client on console.sobornost.net