Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/93FBDFB8EAF3EC100AE0F10908DA1485AFF4306C.mft
File:                     93FBDFB8EAF3EC100AE0F10908DA1485AFF4306C.mft (raw, json)
Hash identifier:          bppsxy20EWDOt4IUMxrDxvCdO0rxN82XZfwRkI+ObkQ=
Subject key identifier:   96:A5:B6:C4:DB:48:CC:5C:11:81:CB:84:26:64:23:53:F6:E4:F6:1D
Authority key identifier: 93:FB:DF:B8:EA:F3:EC:10:0A:E0:F1:09:08:DA:14:85:AF:F4:30:6C
Certificate issuer:       /CN=93FBDFB8EAF3EC100AE0F10908DA1485AFF4306C
Certificate serial:       762DFCA4B33A2D643D09D352C43E664098E621A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93FBDFB8EAF3EC100AE0F10908DA1485AFF4306C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/93FBDFB8EAF3EC100AE0F10908DA1485AFF4306C.mft
Manifest number:          8F
Signing time:             Mon 08 Jan 2024 21:01:57 +0000
Manifest this update:     Mon 08 Jan 2024 20:56:57 +0000
Manifest next update:     Tue 09 Jan 2024 23:51:57 +0000
Files and hashes:         1: 3138372e38352e36302e302f32322d3234203d3e20323632343033.roa (hash: BdTUZg+3QQephltyZV/bJ9ZPViQYTitCq+wnnteAmEc=)
                          2: 3138372e36312e38382e302f32322d3234203d3e20323632343033.roa (hash: kwSV7+pqXZa0MiToLWq2ZSm6BstjEb1Hu+awthLSAtw=)
                          3: 3137372e33382e39362e302f32312d3234203d3e20323632343033.roa (hash: 7ygKvtvJnOBnX6bt/juuwfvIZSuajqiFFrdCsSkpMLg=)
                          4: 323830343a3365303a3a2f33322d3438203d3e20323632343033.roa (hash: 8/6z9rvla378FEm769+1rlIdBE0A8Nf5eJq9wjbewYY=)
                          5: 93FBDFB8EAF3EC100AE0F10908DA1485AFF4306C.crl (hash: s/bh3SX3zJ69I1YMPRa8tuA76LCpxNDJ4S4kYgrA3Zc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/93FBDFB8EAF3EC100AE0F10908DA1485AFF4306C.crl
                          rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/93FBDFB8EAF3EC100AE0F10908DA1485AFF4306C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93FBDFB8EAF3EC100AE0F10908DA1485AFF4306C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Jan 2024 23:51:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:2d:fc:a4:b3:3a:2d:64:3d:09:d3:52:c4:3e:66:40:98:e6:21:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93FBDFB8EAF3EC100AE0F10908DA1485AFF4306C
        Validity
            Not Before: Jan  8 20:56:57 2024 GMT
            Not After : Jan  9 23:51:57 2024 GMT
        Subject: CN=96A5B6C4DB48CC5C1181CB8426642353F6E4F61D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:26:02:5b:2f:89:63:f4:c2:3f:4a:36:af:62:
                    f8:94:b4:08:63:42:27:d6:dc:d4:a9:5f:4f:b1:93:
                    fc:d4:20:1d:85:ad:ae:fd:d1:49:d4:07:33:03:88:
                    14:4a:d8:cd:f2:3d:de:07:f2:d4:29:4b:b9:18:4f:
                    d0:6c:04:20:07:a8:77:4a:b1:88:aa:f4:f9:4f:33:
                    03:58:82:4b:ad:4c:96:b3:54:d8:62:36:cf:67:53:
                    c2:55:cc:a6:38:dd:77:31:27:9c:0a:d5:d8:8f:9b:
                    74:19:91:4a:30:d3:33:b1:1b:f6:64:3b:ee:b2:a8:
                    4c:97:d9:18:c2:d0:45:e4:20:5b:a1:c1:ab:2d:5d:
                    db:65:04:a7:b6:b0:5d:ca:65:61:34:7d:c9:92:0f:
                    41:1e:8c:a4:c0:08:d0:7b:c1:84:78:b6:8f:e9:bf:
                    5e:d1:dd:a5:71:8c:5a:ef:9d:bd:78:f9:fa:af:52:
                    31:d0:b4:3f:0f:e6:8f:3b:d1:b2:20:2b:7b:44:94:
                    63:c7:cb:ca:6b:28:34:b8:4c:68:14:85:5b:78:e2:
                    de:51:00:f9:25:69:d5:1d:4d:03:5d:3a:3e:4d:99:
                    76:cb:43:13:bc:09:b4:c8:21:8b:4a:52:35:78:88:
                    48:9c:99:05:e6:3a:27:7f:23:a9:61:16:bd:7d:27:
                    3f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A5:B6:C4:DB:48:CC:5C:11:81:CB:84:26:64:23:53:F6:E4:F6:1D
            X509v3 Authority Key Identifier:
                keyid:93:FB:DF:B8:EA:F3:EC:10:0A:E0:F1:09:08:DA:14:85:AF:F4:30:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/93FBDFB8EAF3EC100AE0F10908DA1485AFF4306C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93FBDFB8EAF3EC100AE0F10908DA1485AFF4306C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/93FBDFB8EAF3EC100AE0F10908DA1485AFF4306C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:2a:ff:33:10:89:f5:b3:db:9c:fc:e3:ad:48:4f:e0:9e:b2:
         72:12:f9:b4:1a:85:22:bd:f1:76:f6:c9:ee:18:12:40:24:f3:
         d4:4d:bf:1a:0e:dd:6f:ec:35:74:aa:28:d2:e0:dd:2c:6e:29:
         2b:14:17:aa:2d:de:aa:84:e8:40:a1:99:76:93:e3:b0:b0:1d:
         3a:f5:07:de:b7:9e:fb:d8:99:e1:90:0e:42:9b:c3:50:01:8f:
         a7:0e:c7:f4:0e:a8:a3:62:fd:5e:78:ae:a1:fe:f6:6c:a7:3f:
         ad:dd:89:b4:46:8d:4e:31:ed:31:b9:a3:59:72:9c:9b:49:0d:
         0f:94:bb:a3:cb:2e:3d:61:aa:c1:97:7f:7f:44:b0:d7:1a:8e:
         78:60:a8:ed:ee:02:46:5f:bf:f4:68:ed:ed:62:d9:da:85:70:
         da:be:44:48:b5:3e:ae:29:46:c6:b7:ee:a5:4f:7c:1d:34:af:
         b1:93:d1:66:6b:6f:96:ba:52:79:7f:9c:ca:23:a5:10:9a:3c:
         c6:07:14:03:36:bd:14:09:ca:2c:ce:ee:8a:2a:5d:38:54:e3:
         02:52:ff:34:34:19:b7:5c:6b:07:9b:41:de:70:43:cd:ee:84:
         a8:0e:a8:8f:af:3e:f9:ac:ab:cc:e4:22:f2:13:1e:68:11:0a:
         ae:87:fb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 8 22:53:47 2024 by rpki-client on console.sobornost.net