Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/984CCA94B2F153E0AAB2AF71CF0EDB2658BE1340.mft
File:                     984CCA94B2F153E0AAB2AF71CF0EDB2658BE1340.mft (raw, json)
Hash identifier:          f6XfYN6LGbLowJzDdnph2fG0aakU73L+ifFPIKnDfxY=
Subject key identifier:   C4:95:83:24:3F:01:84:CD:9C:12:40:86:5F:C5:0E:C7:E1:95:74:B6
Authority key identifier: 98:4C:CA:94:B2:F1:53:E0:AA:B2:AF:71:CF:0E:DB:26:58:BE:13:40
Certificate issuer:       /CN=984CCA94B2F153E0AAB2AF71CF0EDB2658BE1340
Certificate serial:       6575E09DCAB758471A019245CE38197533E83027
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/984CCA94B2F153E0AAB2AF71CF0EDB2658BE1340.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/984CCA94B2F153E0AAB2AF71CF0EDB2658BE1340.mft
Manifest number:          82
Signing time:             Tue 09 Jan 2024 05:32:17 +0000
Manifest this update:     Tue 09 Jan 2024 05:27:17 +0000
Manifest next update:     Wed 10 Jan 2024 06:56:17 +0000
Files and hashes:         1: 984CCA94B2F153E0AAB2AF71CF0EDB2658BE1340.crl (hash: yNAkRys+zyEqwz5JBUZfgQxODEtHb2JKh+nP75KodUs=)
                          2: 3137392e36332e39362e302f32322d3332203d3e20323731353534.roa (hash: 018M7Mk3n8uWuxlUMzHV3jvlFB/UwdCI6UcOokWxuls=)
                          3: 323830343a376435343a3a2f33322d313238203d3e20323731353534.roa (hash: +HKU7zabED/DbEODTRkSdhjnmDjiNY+6kZ9jzU/zt2w=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/984CCA94B2F153E0AAB2AF71CF0EDB2658BE1340.crl
                          rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/984CCA94B2F153E0AAB2AF71CF0EDB2658BE1340.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/984CCA94B2F153E0AAB2AF71CF0EDB2658BE1340.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 06:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:75:e0:9d:ca:b7:58:47:1a:01:92:45:ce:38:19:75:33:e8:30:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984CCA94B2F153E0AAB2AF71CF0EDB2658BE1340
        Validity
            Not Before: Jan  9 05:27:17 2024 GMT
            Not After : Jan 10 06:56:17 2024 GMT
        Subject: CN=C49583243F0184CD9C1240865FC50EC7E19574B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8a:f3:2c:a6:8a:3f:8b:86:c5:e5:81:d2:02:
                    69:d5:15:9b:fd:30:21:20:56:1c:43:84:d2:45:c1:
                    76:f9:53:2d:fa:0e:06:d2:91:b4:09:ae:8a:3b:7b:
                    cf:03:ee:03:1b:44:51:ff:42:cd:f9:ae:fd:83:7a:
                    03:a5:af:8d:33:5b:57:61:7e:0b:88:f5:6f:31:49:
                    8a:16:2a:be:22:f0:37:2d:48:38:c7:cf:a4:cc:d2:
                    91:33:23:ff:53:4f:4d:56:da:23:e4:df:52:29:0a:
                    eb:38:91:ed:14:e3:e6:b8:ef:ab:13:23:d9:75:de:
                    27:68:08:81:1b:06:82:a7:7c:2e:c4:10:87:78:4d:
                    5d:12:0d:02:2b:99:12:8a:71:96:ec:fd:4d:16:12:
                    8e:69:c2:9f:56:84:58:f8:da:62:fe:13:28:c7:f7:
                    ef:99:9c:45:05:68:74:44:48:f8:cb:1d:80:b9:67:
                    ec:4e:04:ce:e3:fc:cb:e5:fa:a0:71:dd:6c:c2:94:
                    38:bc:85:cf:44:c0:62:bb:e0:de:e1:87:62:34:93:
                    f3:b7:05:98:49:5a:9a:fc:66:21:82:24:4b:ff:36:
                    c7:af:95:a6:27:d5:1e:41:f6:d0:52:9c:1e:3e:de:
                    41:3f:39:3e:9d:b0:be:65:a4:cd:69:34:08:04:5d:
                    aa:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:95:83:24:3F:01:84:CD:9C:12:40:86:5F:C5:0E:C7:E1:95:74:B6
            X509v3 Authority Key Identifier:
                keyid:98:4C:CA:94:B2:F1:53:E0:AA:B2:AF:71:CF:0E:DB:26:58:BE:13:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/984CCA94B2F153E0AAB2AF71CF0EDB2658BE1340.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/984CCA94B2F153E0AAB2AF71CF0EDB2658BE1340.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/984CCA94B2F153E0AAB2AF71CF0EDB2658BE1340.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f5:17:5b:b0:5f:e2:f4:14:e5:e3:a3:80:f4:fa:b7:e1:6a:
         6a:0c:84:47:a3:14:4d:07:ac:bd:d8:2b:67:f2:5d:0a:24:ef:
         41:1a:54:95:d1:83:39:ce:80:8a:9d:f8:51:6c:c5:58:ca:99:
         8b:2a:08:ea:21:c2:0d:cf:fe:e8:55:03:a2:7c:72:2c:53:5c:
         6e:ce:f9:39:20:4c:91:2a:c8:fb:1d:79:ff:b0:06:1b:65:b2:
         2d:9e:c5:3a:2a:ff:c5:ae:46:a6:8a:72:59:db:e7:5b:2d:1d:
         06:69:87:42:52:dc:5c:ae:bc:e3:40:c9:69:9e:29:89:94:79:
         17:de:8f:e1:9e:64:08:82:b2:dc:ef:73:f2:77:9c:bb:b9:87:
         dc:0d:ff:b1:57:f4:8c:7f:a8:5b:78:8f:43:ed:f2:0b:d2:66:
         33:ba:76:d2:90:0a:db:6e:d5:3f:d6:68:ff:e0:3c:be:b8:8b:
         30:6a:1e:11:0b:41:7d:14:34:44:30:25:95:f9:d6:04:8b:88:
         20:a4:e9:b5:bd:d8:ba:cb:24:d2:78:c1:03:52:75:d3:f9:cd:
         dc:4c:d1:f2:90:89:4e:b1:87:99:ff:ca:23:d4:10:2f:6b:bd:
         91:87:8c:65:4a:5a:77:e5:d7:3d:64:84:30:61:6a:42:b4:aa:
         95:09:c0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 07:51:39 2024 by rpki-client on console.sobornost.net