Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6.mft
File:                     9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6.mft (raw, json)
Hash identifier:          FTh8XgI3lOf1ju0D268GU+RtFisCufSBqgwVMTOmzd4=
Subject key identifier:   82:CE:B7:91:4C:F3:00:55:C9:A1:76:E3:CA:FD:EF:28:9D:32:F6:24
Authority key identifier: 9E:7F:85:E6:64:5B:79:3C:FE:0D:1D:98:7C:09:FB:13:7B:FB:F7:E6
Certificate issuer:       /CN=9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6
Certificate serial:       654B4D590F47D05B85DA86A1CB8823430A321783
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6.mft
Manifest number:          74
Signing time:             Tue 09 Jan 2024 06:24:55 +0000
Manifest this update:     Tue 09 Jan 2024 06:19:55 +0000
Manifest next update:     Wed 10 Jan 2024 09:23:55 +0000
Files and hashes:         1: 9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6.crl (hash: qPVMrzVSSrcz+eV1k3uMy6jzo5BbiAuGw1GWfSQfIUg=)
                          2: 323830343a316466383a3a2f33322d313238203d3e20323634343034.roa (hash: JqDtKr928465xU1OZ2b88GJKrQc8EOey/7nZ6Tid3vs=)
                          3: 3137302e38322e3134302e302f32322d3332203d3e20323634343034.roa (hash: ZFcg+4GD/RDpUcBfYW2cu4tjcmdt5pw3s4qVXSjuBvs=)
                          4: 3133312e3136312e3232382e302f32322d3332203d3e20323634343034.roa (hash: gwNv5HIMEEwTmwD+f5U2UhOpLnsMfFCWwkt4GjGv06U=)
                          5: 3133382e3235352e31362e302f32322d3332203d3e20323634343034.roa (hash: vTP3LyJqQikfvnCxLYUUrbxo4QlXOpV6u3nUTN+q6QQ=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6.crl
                          rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 06:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:4b:4d:59:0f:47:d0:5b:85:da:86:a1:cb:88:23:43:0a:32:17:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6
        Validity
            Not Before: Jan  9 06:19:55 2024 GMT
            Not After : Jan 10 09:23:55 2024 GMT
        Subject: CN=82CEB7914CF30055C9A176E3CAFDEF289D32F624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:38:29:a2:92:44:27:26:8d:9b:1a:70:b8:b1:
                    97:32:55:ff:60:56:8e:81:af:4a:52:57:13:37:15:
                    79:ef:f4:79:49:e5:3c:da:37:b1:5a:78:e3:eb:ef:
                    09:54:bd:e5:3b:25:07:4f:57:d1:38:f1:a5:30:c1:
                    42:87:ae:bd:8b:55:e4:8d:9d:37:dd:3e:7e:e2:ea:
                    17:fd:0e:bb:04:05:6a:df:55:ab:45:9e:1c:aa:f7:
                    ef:2f:b7:23:e2:0c:ac:cf:0f:8f:75:c7:27:7d:eb:
                    af:ed:91:74:24:78:94:6f:72:c3:07:58:6e:f7:b4:
                    69:dc:f2:89:2e:a9:fd:91:fc:d1:71:64:0b:3c:03:
                    67:6a:68:7a:69:b2:50:b7:77:e6:08:99:01:5f:f6:
                    c3:f0:14:8d:d3:b2:f5:a3:eb:d7:3e:3e:e3:7b:95:
                    8c:7b:bc:7c:e9:23:7a:5a:85:b7:ea:36:ca:54:58:
                    06:16:88:13:10:0c:07:e3:07:9d:ea:8b:75:c8:f5:
                    0c:08:fd:f1:65:8a:a8:f5:6a:17:ba:c2:4d:3f:cc:
                    5c:a7:b5:43:cd:d5:23:c3:77:58:0f:d7:83:ce:20:
                    b2:80:20:1c:e8:9f:03:ef:3a:81:bd:27:2a:fc:21:
                    d4:ae:c3:47:7d:09:c5:f1:81:b9:fe:9d:5e:7c:2a:
                    de:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CE:B7:91:4C:F3:00:55:C9:A1:76:E3:CA:FD:EF:28:9D:32:F6:24
            X509v3 Authority Key Identifier:
                keyid:9E:7F:85:E6:64:5B:79:3C:FE:0D:1D:98:7C:09:FB:13:7B:FB:F7:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:49:51:4f:bf:0b:07:78:56:0e:51:20:63:c6:e2:32:e4:27:
         c3:23:bf:37:5f:37:cd:1f:98:21:14:a3:51:72:44:7b:71:6f:
         66:1f:a7:7f:e5:0e:d1:2c:3c:1b:15:b2:52:05:1b:6b:54:53:
         04:02:5d:d3:f4:30:5c:bb:88:a3:5e:60:04:08:dd:4d:47:4d:
         5f:22:52:0b:64:8e:79:69:0f:93:1f:c3:17:f8:ff:25:7c:6c:
         85:e5:92:ca:40:0e:5d:9a:26:d0:90:3b:97:55:75:c3:c4:7f:
         18:60:cc:13:df:70:6b:97:ce:2d:13:ff:11:2e:e5:fb:b9:cd:
         1a:21:d8:b1:f8:8d:55:ff:54:8d:89:d5:2a:68:26:d4:0f:45:
         9a:bf:ff:f3:38:a6:91:f0:dd:ae:08:37:ae:53:4a:0c:c4:26:
         f3:eb:46:a2:d2:36:b8:8e:a6:6c:3a:42:6f:7e:67:93:7c:fb:
         da:2c:39:e6:44:c4:a7:3d:b1:40:d1:6a:b5:97:c3:6e:4d:79:
         25:03:bc:bc:40:70:8e:b3:18:70:af:27:f2:40:de:7a:49:3c:
         23:c4:07:06:f4:fc:1e:93:a2:06:e0:b5:50:9b:32:7d:5f:8d:
         69:3a:2d:ca:10:55:fb:d9:86:75:e4:dd:79:7f:69:f8:3b:2f:
         9d:da:56:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 07:51:38 2024 by rpki-client on console.sobornost.net