Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/72F9EE077798B975CBED66FE7AE71FA3A2465390.mft
File:                     72F9EE077798B975CBED66FE7AE71FA3A2465390.mft (raw, json)
Hash identifier:          XN1VYxyj9pCzPCVzRpAFG2vt1MaDuXdf55XO+TFKsEk=
Subject key identifier:   F5:1A:F5:E8:1B:51:13:51:04:AE:15:A7:CB:83:2E:9B:19:53:70:33
Authority key identifier: 72:F9:EE:07:77:98:B9:75:CB:ED:66:FE:7A:E7:1F:A3:A2:46:53:90
Certificate issuer:       /CN=72F9EE077798B975CBED66FE7AE71FA3A2465390
Certificate serial:       5E53282C04B0282D5BC0C2AE9ABA5FD824A63FBB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72F9EE077798B975CBED66FE7AE71FA3A2465390.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/72F9EE077798B975CBED66FE7AE71FA3A2465390.mft
Manifest number:          1C
Signing time:             Tue 09 Jan 2024 05:59:33 +0000
Manifest this update:     Tue 09 Jan 2024 05:54:33 +0000
Manifest next update:     Wed 10 Jan 2024 08:41:33 +0000
Files and hashes:         1: 323830343a333163633a3a2f33332d3333203d3e20323635303338.roa (hash: hksdGXrWTPHSnpYvTYtBRXVu5yeVJ8O72zHiO44Fb2s=)
                          2: 3137302e3135302e3230322e302f32332d3233203d3e20323635303338.roa (hash: KwvXouZnlKll0UTn+zL9moH+7UjGh9jqkXOhSyFN95E=)
                          3: 3137302e3135302e3230302e302f32332d3233203d3e20323635303338.roa (hash: A4KEBn+2w6Axhue+EViTqFRNCuT1Sv1Tbism2NFDazM=)
                          4: 323830343a333163633a3a2f33322d3332203d3e20323635303338.roa (hash: RE7WeclscZ23JcaweJ8cBLXwq0Na6ZPUbO64Ih28fEA=)
                          5: 323830343a333163633a383030303a3a2f33332d3333203d3e20323635303338.roa (hash: 6JH+G2S+P8zIuK0NgnSRDzrU2gjYlBZfJFGfrYtexm0=)
                          6: 3137302e3135302e3230302e302f32322d3232203d3e20323635303338.roa (hash: LrEMEILLRoHYwbuBBrXIDvNAfduN5Fu1jqBJqa3i2d0=)
                          7: 72F9EE077798B975CBED66FE7AE71FA3A2465390.crl (hash: 9MsuhWeaNMdCVelELOOI7j7EDf03E73F0w4U/htsQRI=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/72F9EE077798B975CBED66FE7AE71FA3A2465390.crl
                          rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/72F9EE077798B975CBED66FE7AE71FA3A2465390.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72F9EE077798B975CBED66FE7AE71FA3A2465390.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 06:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:53:28:2c:04:b0:28:2d:5b:c0:c2:ae:9a:ba:5f:d8:24:a6:3f:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F9EE077798B975CBED66FE7AE71FA3A2465390
        Validity
            Not Before: Jan  9 05:54:33 2024 GMT
            Not After : Jan 10 08:41:33 2024 GMT
        Subject: CN=F51AF5E81B51135104AE15A7CB832E9B19537033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a1:03:7d:e7:b9:74:6e:ee:14:37:58:ea:3a:
                    e3:60:9f:89:44:5b:31:74:89:04:8d:b6:01:dc:e6:
                    f1:b0:ef:7a:e4:06:e5:1a:be:18:ce:08:72:94:10:
                    fe:8d:98:ea:43:d0:29:34:ef:58:fa:1e:1e:a4:0c:
                    fe:62:5a:11:a3:be:88:cd:ab:e8:67:66:3a:23:c2:
                    5b:1d:cb:5e:90:f8:67:2f:e5:82:b4:f2:35:5f:fc:
                    06:86:e9:57:66:d1:d1:e6:00:3d:96:b0:02:fd:1c:
                    b6:18:10:95:47:fa:b7:33:96:15:c5:70:e2:54:b0:
                    f0:fc:4a:ed:03:8c:c3:53:e2:f0:72:57:ed:01:c9:
                    5e:df:c5:87:00:a3:ad:dd:b2:0c:d6:b2:c7:be:5e:
                    05:e3:ed:24:1f:e8:bd:cf:e2:46:5c:10:73:7a:62:
                    48:c1:54:d2:8b:e3:95:99:69:1f:66:ef:2d:24:e9:
                    bf:a1:c4:6f:b8:63:f5:dc:9c:5d:4c:0c:e7:8a:7e:
                    46:c8:55:ba:e3:df:a4:bd:08:7b:db:07:72:3f:64:
                    d0:a1:da:16:3c:e6:49:7b:83:24:24:7d:0e:e6:61:
                    c1:a7:60:1f:be:89:02:e0:f3:bc:d8:6d:7b:0d:e9:
                    31:28:83:a2:28:ac:5f:7d:bc:ec:2f:7d:8f:1a:e5:
                    fa:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1A:F5:E8:1B:51:13:51:04:AE:15:A7:CB:83:2E:9B:19:53:70:33
            X509v3 Authority Key Identifier:
                keyid:72:F9:EE:07:77:98:B9:75:CB:ED:66:FE:7A:E7:1F:A3:A2:46:53:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/72F9EE077798B975CBED66FE7AE71FA3A2465390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72F9EE077798B975CBED66FE7AE71FA3A2465390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/72F9EE077798B975CBED66FE7AE71FA3A2465390.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:51:78:66:a1:5e:d2:6b:d6:02:43:96:d2:12:ed:93:f3:52:
         21:a8:b7:5d:f9:4e:40:62:17:02:87:26:21:96:b4:cf:37:3a:
         e7:5c:6a:53:41:74:97:5c:6f:7a:f5:0d:86:62:30:09:c0:c2:
         3e:34:eb:b1:95:13:95:12:44:59:42:ac:95:5f:4d:21:86:92:
         55:f8:7c:03:f8:69:12:d6:f0:0d:f3:68:cb:2d:a0:eb:56:d3:
         3c:e3:4f:56:61:61:6c:33:d8:71:08:5c:27:8b:27:27:96:fa:
         fd:5f:02:66:0c:2d:ee:a6:35:6c:0e:69:7f:89:4e:18:23:09:
         3e:29:d0:b8:4e:d0:83:24:90:01:3b:0b:92:aa:96:78:8a:6a:
         f6:81:ab:7f:43:8e:0e:62:a4:3e:f5:81:71:e1:23:22:b2:ee:
         0f:aa:e1:99:02:7c:65:19:4e:7a:2c:8b:d1:9b:35:70:8e:30:
         af:63:59:09:24:5a:6d:07:b4:51:ea:03:da:95:c1:5d:d5:82:
         b5:e8:66:70:7c:84:84:9a:c6:29:7b:b3:5a:4c:8b:e3:e8:c6:
         48:9e:f1:f4:df:4d:f9:ac:8c:57:0c:a6:c1:87:0e:7d:ae:6c:
         5e:d2:43:eb:ab:12:1f:ed:3b:12:a9:8b:86:86:f5:7e:51:bd:
         0c:49:5a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 07:51:40 2024 by rpki-client on console.sobornost.net