Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/0/59FE9EF06E1BAD3D4FDC4BED3098A60932B15779.mft
File:                     59FE9EF06E1BAD3D4FDC4BED3098A60932B15779.mft (raw, json)
Hash identifier:          VZ+LYJa8vhMP6SCeLLay6+a4U++6DH8B31H9ihldmLw=
Subject key identifier:   EF:2E:CC:BA:C1:BD:E2:81:88:45:C3:3E:FB:F9:F0:56:5D:64:67:4E
Authority key identifier: 59:FE:9E:F0:6E:1B:AD:3D:4F:DC:4B:ED:30:98:A6:09:32:B1:57:79
Certificate issuer:       /CN=59FE9EF06E1BAD3D4FDC4BED3098A60932B15779
Certificate serial:       4877D6B2C3E94C5E728E382F0D837B3B1A3644AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59FE9EF06E1BAD3D4FDC4BED3098A60932B15779.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/0/59FE9EF06E1BAD3D4FDC4BED3098A60932B15779.mft
Manifest number:          0180
Signing time:             Tue 09 Jan 2024 07:39:23 +0000
Manifest this update:     Tue 09 Jan 2024 07:34:23 +0000
Manifest next update:     Wed 10 Jan 2024 11:31:23 +0000
Files and hashes:         1: 59FE9EF06E1BAD3D4FDC4BED3098A60932B15779.crl (hash: Hr1149SpHpYOhvfLM5NdzGDvgZkVKN03I+nJ7IjN9hk=)
                          2: 323830343a376638383a3a2f33322d3332203d3e20323731363934.roa (hash: WSJRi4IQDifx+TiIhDajTaEnidKsErmMS50q2B8vnj4=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/0/59FE9EF06E1BAD3D4FDC4BED3098A60932B15779.crl
                          rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/0/59FE9EF06E1BAD3D4FDC4BED3098A60932B15779.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59FE9EF06E1BAD3D4FDC4BED3098A60932B15779.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 11:31:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:77:d6:b2:c3:e9:4c:5e:72:8e:38:2f:0d:83:7b:3b:1a:36:44:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59FE9EF06E1BAD3D4FDC4BED3098A60932B15779
        Validity
            Not Before: Jan  9 07:34:23 2024 GMT
            Not After : Jan 10 11:31:23 2024 GMT
        Subject: CN=EF2ECCBAC1BDE2818845C33EFBF9F0565D64674E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:58:b7:b0:77:0c:47:4d:bf:5d:13:9c:66:0d:
                    ca:43:5c:ba:19:ca:e2:39:55:ad:d9:4c:50:cf:e0:
                    52:62:1f:5d:6f:dc:fb:ed:78:5a:4c:b8:38:64:a9:
                    df:30:e3:04:ab:ac:03:4b:bb:c0:e6:8d:5d:f6:22:
                    88:0e:37:5b:7b:f9:3d:df:aa:67:65:2f:01:03:cf:
                    e7:61:71:72:5a:b0:0e:56:e0:55:19:73:30:e4:1b:
                    78:5d:45:a5:d2:93:d3:7e:c0:e7:68:83:4d:98:c3:
                    24:ae:5f:e8:f3:58:db:c3:db:2a:33:80:8e:d4:a0:
                    70:85:72:8a:fe:ab:86:ae:f6:e1:0c:a5:cf:16:17:
                    2f:e6:6e:c6:63:89:56:02:fe:0e:f0:a2:1d:44:95:
                    b1:b4:ed:f3:13:f2:c6:71:b1:38:cb:23:a1:f9:9b:
                    a3:54:7d:9d:4d:3b:ef:0a:57:70:42:44:c4:88:3c:
                    63:2e:f9:54:bb:85:62:f1:b2:b5:fa:6f:42:b0:da:
                    7c:12:50:01:c6:1d:c1:30:a3:ff:e2:4d:11:81:50:
                    60:ca:0f:47:ea:6f:5d:87:72:b7:c5:4a:8f:98:9e:
                    15:fc:91:e8:a1:21:9d:e9:58:b0:51:25:96:3b:b2:
                    00:9f:3a:7e:de:b9:33:54:fc:d8:0d:b0:7d:b0:bd:
                    b0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:2E:CC:BA:C1:BD:E2:81:88:45:C3:3E:FB:F9:F0:56:5D:64:67:4E
            X509v3 Authority Key Identifier:
                keyid:59:FE:9E:F0:6E:1B:AD:3D:4F:DC:4B:ED:30:98:A6:09:32:B1:57:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/0/59FE9EF06E1BAD3D4FDC4BED3098A60932B15779.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59FE9EF06E1BAD3D4FDC4BED3098A60932B15779.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/0/59FE9EF06E1BAD3D4FDC4BED3098A60932B15779.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:7f:cc:80:67:3d:53:f8:25:72:6e:bf:aa:1c:e0:05:99:00:
         87:2b:29:e8:e7:bd:92:fe:c1:0a:9c:b7:a1:e5:cb:aa:cf:c6:
         47:c4:0b:c4:9d:6f:d1:ba:30:b1:40:6d:f0:9f:b2:5a:81:46:
         16:8d:19:3e:08:b8:38:fa:2f:25:19:88:ed:8d:64:65:f5:04:
         38:4b:1a:b4:a1:53:10:7a:e0:e5:a5:7d:19:de:2c:d9:a0:1c:
         ae:f0:d2:fe:82:51:99:e8:da:8e:40:62:8b:21:2d:f3:20:68:
         32:fb:b5:86:f3:98:51:10:e9:69:75:35:f7:ed:f9:04:76:de:
         20:ed:54:ec:b3:96:86:9c:d8:58:3d:f8:ee:87:2c:20:ea:bf:
         c2:e2:13:51:b6:61:61:f6:14:4b:2e:bf:24:26:88:b1:75:42:
         6b:9e:37:31:ca:2d:4d:8b:25:8d:67:62:7a:74:88:bc:19:5d:
         53:33:66:0b:ef:8b:ee:40:35:92:69:02:f0:d9:ae:9f:a4:bc:
         71:38:5f:db:67:a2:ca:80:d4:86:bb:d5:e6:94:ce:e5:1d:82:
         fb:6d:2c:ad:d3:4c:6e:53:bc:ab:11:09:a5:5a:d9:51:26:e5:
         4f:fb:3c:49:7a:99:90:92:72:f8:5a:86:a4:3f:15:c0:d5:78:
         59:4d:9b:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSHfWssPpTF5yjjgvDYN7Oxo2RK4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlGRTlFRjA2RTFCQUQzRDRGREM0QkVEMzA5OEE2MDkz
MkIxNTc3OTAeFw0yNDAxMDkwNzM0MjNaFw0yNDAxMTAxMTMxMjNaMDMxMTAvBgNV
BAMTKEVGMkVDQ0JBQzFCREUyODE4ODQ1QzMzRUZCRjlGMDU2NUQ2NDY3NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyWLewdwxHTb9dE5xmDcpDXLoZ
yuI5Va3ZTFDP4FJiH11v3PvteFpMuDhkqd8w4wSrrANLu8DmjV32IogON1t7+T3f
qmdlLwEDz+dhcXJasA5W4FUZczDkG3hdRaXSk9N+wOdog02YwySuX+jzWNvD2yoz
gI7UoHCFcor+q4au9uEMpc8WFy/mbsZjiVYC/g7woh1ElbG07fMT8sZxsTjLI6H5
m6NUfZ1NO+8KV3BCRMSIPGMu+VS7hWLxsrX6b0Kw2nwSUAHGHcEwo//iTRGBUGDK
D0fqb12HcrfFSo+YnhX8keihIZ3pWLBRJZY7sgCfOn7euTNU/NgNsH2wvbCtAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU7y7MusG94oGIRcM++/nwVl1kZ04wHwYDVR0j
BBgwFoAUWf6e8G4brT1P3EvtMJimCTKxV3kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmtHTTFiTFpUalFGR1ZEMXFIaWFWUDdoeTJ5MXdMdG9wbUNOeGVDc1Jm
eTQvMC81OUZFOUVGMDZFMUJBRDNENEZEQzRCRUQzMDk4QTYwOTMyQjE1Nzc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU5RkU5RUYwNkUxQkFEM0Q0
RkRDNEJFRDMwOThBNjA5MzJCMTU3NzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QmtHTTFiTFpUalFGR1ZEMXFIaWFWUDdoeTJ5MXdMdG9wbUNOeGVDc1JmeTQvMC81
OUZFOUVGMDZFMUJBRDNENEZEQzRCRUQzMDk4QTYwOTMyQjE1Nzc5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvn/MgGc9U/glcm6/qhzgBZkAhysp6Oe9kv7BCpy3oeXLqs/GR8QLxJ1v0bow
sUBt8J+yWoFGFo0ZPgi4OPovJRmI7Y1kZfUEOEsatKFTEHrg5aV9Gd4s2aAcrvDS
/oJRmejajkBiiyEt8yBoMvu1hvOYURDpaXU19+35BHbeIO1U7LOWhpzYWD347ocs
IOq/wuITUbZhYfYUSy6/JCaIsXVCa543McotTYsljWdienSIvBldUzNmC++L7kA1
kmkC8Nmun6S8cThf22eiyoDUhrvV5pTO5R2C+20srdNMblO8qxEJpVrZUSblT/s8
SXqZkJJy+FqGpD8VwNV4WU2bCA==
-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:55 2024 by rpki-client on console.sobornost.net