Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/310672B50EA040A5BA0DD2CCF119E1D0E71D1075.mft
File:                     310672B50EA040A5BA0DD2CCF119E1D0E71D1075.mft (raw, json)
Hash identifier:          0flpWCG7TMaq5DRJqBuVL75bzAXAGrgBy6fCt2seMpI=
Subject key identifier:   37:92:B8:26:BD:49:2D:4D:85:8A:38:E9:16:9D:5C:B0:ED:12:92:C6
Authority key identifier: 31:06:72:B5:0E:A0:40:A5:BA:0D:D2:CC:F1:19:E1:D0:E7:1D:10:75
Certificate issuer:       /CN=310672B50EA040A5BA0DD2CCF119E1D0E71D1075
Certificate serial:       19D3EC50E9AA615F87DE211D7421F97AB321FDBB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/310672B50EA040A5BA0DD2CCF119E1D0E71D1075.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/310672B50EA040A5BA0DD2CCF119E1D0E71D1075.mft
Manifest number:          0228
Signing time:             Mon 08 Jan 2024 21:41:41 +0000
Manifest this update:     Mon 08 Jan 2024 21:36:41 +0000
Manifest next update:     Wed 10 Jan 2024 01:14:41 +0000
Files and hashes:         1: 323830343a366262303a3a2f33322d3335203d3e20323730343137.roa (hash: GoAY2yEIdQAdpR1/j/MFzPG8bM8PmA+z0MDGrOskSp8=)
                          2: 3139302e3131312e3130392e302f32342d3234203d3e20323730343137.roa (hash: 3lxmxUyIS6qWIcoXgOz4wsiq4D1N4a23q7W0jF6aIaM=)
                          3: 310672B50EA040A5BA0DD2CCF119E1D0E71D1075.crl (hash: 6HGM113+6SyoB6zQQzQEWXE1nK5RuYzlHuegNXBeNA4=)
                          4: 3139302e3131312e3130382e302f32332d3233203d3e20323730343137.roa (hash: 8QeTONQKhuOO5aZ2aj8WJjnYEL6hMDAt3PLtZ05HTZU=)
                          5: 34352e3232352e3234362e302f32332d3233203d3e20323636393734.roa (hash: XcoE/rtyMzIX+Ublna6kuP3jUX7Ws+3TcX4aprXATj4=)
                          6: 3139302e3131312e3131312e302f32342d3234203d3e20323730343137.roa (hash: lItxg5paqHSqbl3qUt61T1MEY9Zu2Qt6CRNAzL5LCAY=)
                          7: 3139302e3131312e3130382e302f32322d3232203d3e20323730343137.roa (hash: v8mgTMqzI/wNIQiA/I+/tIm2eeCuM+h4cYtvCn+iJyU=)
                          8: 34352e3232352e3234342e302f32322d3232203d3e20323636393734.roa (hash: kWWQYuZmIefCpSYPr/fvqNLHTuPLsGWymXUuhjiuIkE=)
                          9: 34352e3232352e3234342e302f32332d3234203d3e20323636393734.roa (hash: RL+bFDlHE4Q3uygnyt4ZMc9anR96ZQfMrW28W/U8KRw=)
                          10: 34352e3232352e3234362e302f32342d3234203d3e20323636393734.roa (hash: t6aGNnvSM/4J+AnUT5N/HhOh1pqbcjpLEsZQmOrsOGY=)
                          11: 34352e3232352e3234372e302f32342d3234203d3e20323636393734.roa (hash: CnVASs0nbOIvmpvbMs7AuFBW1GA+GdrA9anQDKJtYB0=)
                          12: 3139302e3131312e3131302e302f32332d3233203d3e20323730343137.roa (hash: 4CupRfQoS08Y1sqIAWFUwFTiTc1hTQaIfqKkDIbgnK0=)
                          13: 3139302e3131312e3131302e302f32342d3234203d3e20323730343137.roa (hash: JBslCY7TCwNQBotYhwvASLKppxZ9JtENAOQumoFcwmU=)
                          14: 3139302e3131312e3130382e302f32342d3234203d3e20323730343137.roa (hash: dvvbQTIBeOZdpYvo9D5CDMsk1rJf/1CEKv08KuxK3oQ=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/310672B50EA040A5BA0DD2CCF119E1D0E71D1075.crl
                          rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/310672B50EA040A5BA0DD2CCF119E1D0E71D1075.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/310672B50EA040A5BA0DD2CCF119E1D0E71D1075.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 00:18:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d3:ec:50:e9:aa:61:5f:87:de:21:1d:74:21:f9:7a:b3:21:fd:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310672B50EA040A5BA0DD2CCF119E1D0E71D1075
        Validity
            Not Before: Jan  8 21:36:41 2024 GMT
            Not After : Jan 10 01:14:41 2024 GMT
        Subject: CN=3792B826BD492D4D858A38E9169D5CB0ED1292C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0d:3f:b7:ed:c3:e2:0b:50:0d:61:90:ee:e4:
                    10:dd:29:11:8c:16:ff:54:81:4c:a4:1d:99:28:e8:
                    39:eb:e4:3e:73:8b:5b:3d:bc:6b:ae:4e:d5:cc:2a:
                    47:db:84:18:60:52:1b:24:05:d4:13:03:f9:c4:15:
                    d4:b2:ab:a2:59:3b:09:8a:3b:9e:e8:3a:27:6b:49:
                    18:7b:0a:7b:f9:a7:73:6d:1c:13:af:00:d9:46:ed:
                    00:96:c7:98:6f:8a:0c:f0:18:d9:da:b4:b5:10:40:
                    8a:06:6a:6c:83:c9:b2:f4:6b:5f:05:26:29:b1:08:
                    58:da:6d:e0:c5:91:88:3a:2d:7e:23:40:f1:80:12:
                    fa:b9:26:f5:58:3b:06:9c:dd:75:90:b3:da:bc:bc:
                    df:33:7a:13:7d:55:5c:5f:ff:3f:de:19:66:df:da:
                    a3:52:de:e9:cb:e0:09:96:9e:23:39:86:4a:83:3e:
                    f5:c0:c3:08:f1:d2:20:ff:37:2c:e2:14:7d:3a:9f:
                    40:4b:10:9b:ce:4a:79:df:9d:45:e7:eb:e8:fa:5a:
                    83:f5:05:6b:c2:b3:0f:93:cc:4a:b4:a7:73:9e:f9:
                    cb:9c:67:1b:bb:ce:dd:b0:9d:5a:3e:27:63:5c:19:
                    57:21:37:9e:48:25:a3:14:27:4d:3e:90:88:53:16:
                    e8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:92:B8:26:BD:49:2D:4D:85:8A:38:E9:16:9D:5C:B0:ED:12:92:C6
            X509v3 Authority Key Identifier:
                keyid:31:06:72:B5:0E:A0:40:A5:BA:0D:D2:CC:F1:19:E1:D0:E7:1D:10:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/310672B50EA040A5BA0DD2CCF119E1D0E71D1075.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/310672B50EA040A5BA0DD2CCF119E1D0E71D1075.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/310672B50EA040A5BA0DD2CCF119E1D0E71D1075.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:5b:ed:fd:fd:1f:cc:1f:7d:81:44:b0:0e:dd:d4:f0:c2:df:
         00:da:1c:8d:9e:94:f8:b5:a0:28:ff:db:17:bf:3b:5f:e5:9a:
         75:f7:93:04:0b:8e:46:42:fe:2c:a3:0a:00:bb:3f:f7:30:80:
         4a:db:83:99:de:3c:b9:29:4c:d6:92:22:ad:83:76:fb:f9:04:
         4e:f0:59:b5:52:c7:d8:e9:cd:4e:d2:a3:ef:97:e5:1c:9e:0f:
         5b:2c:73:b1:7a:ab:08:5c:5b:cc:88:ba:af:52:f5:cf:19:15:
         ae:ab:16:c6:7a:61:df:35:2f:f1:bb:bc:e3:39:64:bc:f3:4b:
         dd:6a:ec:23:2f:06:39:ed:4b:8c:9c:d6:6e:d8:18:5c:3f:17:
         a2:a1:a6:78:93:e5:e1:bf:b0:6b:c6:53:82:11:8a:11:9f:91:
         1a:35:a1:48:62:69:e9:a5:25:8c:ef:4d:ab:fb:cf:b2:99:76:
         d2:c4:7f:ac:ce:3f:ba:18:4a:83:92:dc:a6:15:e9:78:2e:43:
         d1:de:1b:13:41:ec:4f:96:7c:e3:d5:7a:77:38:87:bd:28:d9:
         4e:a5:3c:29:11:67:94:f7:55:f1:75:cf:dc:14:42:1f:bb:73:
         81:a8:2f:b8:08:6f:24:65:4b:5e:f7:e1:0c:ba:2b:a9:18:3a:
         c8:50:5e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 8 22:53:49 2024 by rpki-client on console.sobornost.net