Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/C13DFF312673AB2309FB2F384BDA7DB79057D3AD.mft
File:                     C13DFF312673AB2309FB2F384BDA7DB79057D3AD.mft (raw, json)
Hash identifier:          wVyBeJ6ab4yjcMlHQUdEBVcnUlA+wsDd7BJoBRxvPoY=
Subject key identifier:   29:4E:58:07:ED:94:F0:65:E8:AC:1C:83:FE:E3:86:8F:03:CD:03:D9
Authority key identifier: C1:3D:FF:31:26:73:AB:23:09:FB:2F:38:4B:DA:7D:B7:90:57:D3:AD
Certificate issuer:       /CN=C13DFF312673AB2309FB2F384BDA7DB79057D3AD
Certificate serial:       33571D67A1DCA38D5524EA8F65F3D0A03B2E71C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C13DFF312673AB2309FB2F384BDA7DB79057D3AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/C13DFF312673AB2309FB2F384BDA7DB79057D3AD.mft
Manifest number:          01F6
Signing time:             Tue 09 Jan 2024 07:14:18 +0000
Manifest this update:     Tue 09 Jan 2024 07:09:18 +0000
Manifest next update:     Wed 10 Jan 2024 10:49:18 +0000
Files and hashes:         1: 3136382e3139372e31362e302f32322d3234203d3e203532393437.roa (hash: xFRTdQQ2/1VFxY01wkI2MMFP7IdjBhxmW2EynaVYs6g=)
                          2: C13DFF312673AB2309FB2F384BDA7DB79057D3AD.crl (hash: /AwsDvAZJR7gMEIHPuZuNwisXrw5RCFyghlzcR1u6r4=)
                          3: 3137372e33382e3133362e302f32312d3236203d3e203532393437.roa (hash: /ydsHc1BhqxKFkHDhpFps4lmkQUESApjkyF7ABSi/KY=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/C13DFF312673AB2309FB2F384BDA7DB79057D3AD.crl
                          rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/C13DFF312673AB2309FB2F384BDA7DB79057D3AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C13DFF312673AB2309FB2F384BDA7DB79057D3AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 10:49:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:57:1d:67:a1:dc:a3:8d:55:24:ea:8f:65:f3:d0:a0:3b:2e:71:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13DFF312673AB2309FB2F384BDA7DB79057D3AD
        Validity
            Not Before: Jan  9 07:09:18 2024 GMT
            Not After : Jan 10 10:49:18 2024 GMT
        Subject: CN=294E5807ED94F065E8AC1C83FEE3868F03CD03D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ab:ed:26:44:46:e0:dc:47:88:23:35:5d:a4:
                    5d:82:c9:eb:90:16:01:ee:af:d9:5e:e4:e4:65:a8:
                    50:5e:2f:a8:2c:49:35:85:6c:6b:78:61:1c:61:b9:
                    94:6f:02:f2:70:96:8d:ce:51:eb:42:ab:bd:42:f6:
                    b3:22:f7:4a:e5:a9:d5:20:8f:c3:f7:dc:ec:2c:2e:
                    fe:1b:59:5f:15:ec:90:de:7e:e3:73:89:7e:e7:63:
                    7b:ea:15:a4:52:4a:c9:68:26:d4:04:29:52:7a:27:
                    06:4c:76:1f:fc:8c:f7:b4:b0:fd:d4:a8:33:8f:d4:
                    10:5c:bf:a0:6b:60:98:d6:9c:3a:c6:2b:39:dd:0f:
                    11:c0:a6:f6:0d:d8:65:f5:d9:c5:cd:85:9d:05:f3:
                    88:b3:cd:70:72:5a:00:b6:36:ce:bd:d5:f4:ee:9f:
                    b3:df:00:11:be:16:ab:ee:30:33:3f:ac:62:06:23:
                    d0:45:13:f9:f1:87:01:58:09:b9:68:60:31:e2:d7:
                    6c:cf:66:0e:d2:c8:66:16:2c:52:ec:f3:ec:fe:79:
                    82:ee:bb:5d:24:7b:cd:fe:1e:5a:87:7c:06:2c:24:
                    df:7a:47:22:9f:ea:f0:20:61:72:77:2c:54:a0:68:
                    1a:ee:30:51:e2:33:5f:23:b8:2e:20:26:b1:d8:78:
                    c2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4E:58:07:ED:94:F0:65:E8:AC:1C:83:FE:E3:86:8F:03:CD:03:D9
            X509v3 Authority Key Identifier:
                keyid:C1:3D:FF:31:26:73:AB:23:09:FB:2F:38:4B:DA:7D:B7:90:57:D3:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/C13DFF312673AB2309FB2F384BDA7DB79057D3AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C13DFF312673AB2309FB2F384BDA7DB79057D3AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/C13DFF312673AB2309FB2F384BDA7DB79057D3AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:dc:cf:4b:45:e1:7a:5a:99:7e:81:e8:aa:b7:78:16:3f:71:
         9c:d9:c9:d4:2d:a0:11:7a:2e:e2:26:60:9f:49:3b:72:80:c0:
         6b:c2:d4:eb:3f:b7:40:27:e6:d0:74:cd:46:40:de:84:43:89:
         a0:e2:03:a9:20:e1:ac:4b:11:df:03:f1:e7:6d:ef:c2:ba:bc:
         48:8f:0f:c0:04:0c:e7:49:cf:0b:54:c6:a7:c1:fd:ae:08:c4:
         98:4b:02:57:3d:48:8f:49:e7:2b:c9:b1:57:89:3e:59:ff:bf:
         2d:6f:95:66:d8:86:b9:ab:c1:0c:63:f9:2d:52:fd:0e:06:a9:
         13:49:fc:d9:5a:88:67:e9:b4:c9:99:5b:1b:b0:d7:b2:94:a8:
         98:e6:73:81:5e:95:42:17:85:41:bf:4b:20:36:20:66:33:7c:
         e2:e6:00:7f:fe:ac:01:85:84:a9:ec:77:ea:a8:f8:83:34:4c:
         f5:f1:47:14:c9:a1:09:83:e4:1b:53:ae:97:cb:28:ef:4c:3b:
         0c:13:db:53:58:33:41:d4:2f:fb:87:d4:64:a5:32:8b:19:1b:
         19:43:05:83:0b:b8:86:bc:d0:96:48:9e:b1:8f:3f:0f:ba:2f:
         08:16:e1:9b:a9:dd:db:b4:33:9d:cb:5b:b7:68:96:42:36:2f:
         f0:ff:96:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:53 2024 by rpki-client on console.sobornost.net