Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/2B687CD69162C4C9D67B54D1B612864A7C4AF30C.mft
File:                     2B687CD69162C4C9D67B54D1B612864A7C4AF30C.mft (raw, json)
Hash identifier:          jME/Ut/yoJaYBxV8AUZ+sC70STVyYtmIrs7S8BDl9kw=
Subject key identifier:   F1:58:59:6F:F4:F6:99:CA:F2:90:83:99:59:C4:64:B0:65:84:C0:98
Authority key identifier: 2B:68:7C:D6:91:62:C4:C9:D6:7B:54:D1:B6:12:86:4A:7C:4A:F3:0C
Certificate issuer:       /CN=2B687CD69162C4C9D67B54D1B612864A7C4AF30C
Certificate serial:       1F346D625E44B4F667B1B2FCCF252864126479FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B687CD69162C4C9D67B54D1B612864A7C4AF30C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/2B687CD69162C4C9D67B54D1B612864A7C4AF30C.mft
Manifest number:          80
Signing time:             Tue 09 Jan 2024 04:46:28 +0000
Manifest this update:     Tue 09 Jan 2024 04:41:28 +0000
Manifest next update:     Wed 10 Jan 2024 08:00:28 +0000
Files and hashes:         1: 2B687CD69162C4C9D67B54D1B612864A7C4AF30C.crl (hash: 8rqey8dBH00Ypep3VInL7LXwzGNS76DgjlOVN8Tremg=)
                          2: 3137372e35322e3136342e302f32322d3234203d3e20323632343336.roa (hash: DqbvhKL3JgR80k89hkFhaXZLCoXMW2B6HTigYiOtbZQ=)
                          3: 3137372e35322e33322e302f32322d3234203d3e20323632343336.roa (hash: nk8Mfjf9chO4b0cJmZZ6FSHt6FsFmiGQh02ydCjlNXQ=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/2B687CD69162C4C9D67B54D1B612864A7C4AF30C.crl
                          rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/2B687CD69162C4C9D67B54D1B612864A7C4AF30C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B687CD69162C4C9D67B54D1B612864A7C4AF30C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 06:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:34:6d:62:5e:44:b4:f6:67:b1:b2:fc:cf:25:28:64:12:64:79:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B687CD69162C4C9D67B54D1B612864A7C4AF30C
        Validity
            Not Before: Jan  9 04:41:28 2024 GMT
            Not After : Jan 10 08:00:28 2024 GMT
        Subject: CN=F158596FF4F699CAF290839959C464B06584C098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4e:28:a3:09:3b:74:c9:e4:b8:c7:d0:1e:78:
                    5a:f7:f6:76:83:d8:02:e8:27:97:22:ce:08:4e:fb:
                    c3:7b:90:d0:ec:2a:7f:82:74:25:a4:da:96:d8:19:
                    5e:a3:a7:d4:e5:a6:50:d0:9a:3e:5f:5c:27:51:4f:
                    36:3b:75:3b:64:59:1d:f4:44:ad:7b:e1:97:ae:16:
                    f1:f3:4f:07:81:9e:19:e0:de:92:e7:05:e8:5c:4f:
                    1e:f9:44:cf:45:c4:d2:5f:bd:af:02:e2:49:40:32:
                    82:13:54:85:58:05:e4:fd:d3:ac:17:c2:69:de:30:
                    ab:e3:1a:53:3b:dc:94:23:ae:3d:3e:a9:89:21:59:
                    87:5a:79:c2:e7:e3:e1:9d:3b:5c:d9:cf:a3:c9:86:
                    af:52:cf:a9:88:e7:08:2c:32:62:39:a4:ac:3b:28:
                    77:b7:eb:aa:01:1b:9d:c3:81:69:f8:73:58:be:b3:
                    f6:dc:85:89:52:0d:da:d7:0f:ed:c8:2d:e0:c5:fa:
                    e4:75:f7:7b:0b:d5:9f:f1:45:bc:98:ee:84:07:f3:
                    41:d4:31:85:81:f3:18:93:ca:2d:1a:ef:b0:41:60:
                    26:1c:a6:3d:ae:8c:3a:1b:79:68:2a:e4:98:0a:86:
                    ea:7e:81:14:8e:03:ac:b7:d7:04:c2:de:3b:e3:7b:
                    03:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:58:59:6F:F4:F6:99:CA:F2:90:83:99:59:C4:64:B0:65:84:C0:98
            X509v3 Authority Key Identifier:
                keyid:2B:68:7C:D6:91:62:C4:C9:D6:7B:54:D1:B6:12:86:4A:7C:4A:F3:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/2B687CD69162C4C9D67B54D1B612864A7C4AF30C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B687CD69162C4C9D67B54D1B612864A7C4AF30C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/2B687CD69162C4C9D67B54D1B612864A7C4AF30C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:9e:fd:56:c1:29:8d:e2:5c:ad:cb:ec:c4:3f:b9:28:f1:a0:
         7a:f4:27:41:ef:8e:ef:11:4a:c7:e4:eb:55:5e:be:98:41:ee:
         74:79:8e:aa:39:b3:7d:dc:ec:27:0e:19:ab:fc:6e:da:e9:f8:
         62:b3:fd:79:fa:7e:99:06:0e:6f:f5:de:74:ca:bc:75:35:85:
         23:05:4f:47:fb:10:a9:45:79:1e:33:0f:f1:ad:a9:a6:89:67:
         53:e9:b1:43:85:f6:79:48:8b:7d:48:b6:b5:83:3b:c6:0d:54:
         d9:09:29:82:a7:77:58:a2:df:cb:f5:9b:1f:04:6c:1f:a5:c3:
         23:64:d8:fe:0f:72:74:eb:0b:58:8f:a6:4c:2e:9f:43:29:24:
         c6:cf:2a:76:df:48:68:56:c9:c6:1e:eb:13:f3:3b:af:4f:99:
         fe:7a:00:dd:d8:f4:fc:63:2e:a5:be:ef:91:e8:01:80:f5:97:
         a2:a8:73:3b:38:0f:80:aa:6b:6a:3b:d9:3d:30:db:81:dd:bf:
         bf:78:ce:ae:72:37:2f:c4:b5:f9:dd:96:85:f2:fc:29:43:42:
         d8:fc:27:de:d2:51:d0:ef:a5:ca:20:64:0e:6a:3d:bd:5a:65:
         ce:d1:b9:bb:68:48:1c:91:35:85:3b:08:a7:da:7a:a8:15:f9:
         92:ff:33:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 05:55:37 2024 by rpki-client on console.sobornost.net