Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/5961C7C00D091D6979A51B101662F690AEA54F39.mft
File:                     5961C7C00D091D6979A51B101662F690AEA54F39.mft (raw, json)
Hash identifier:          u+4BxpVa56JzPX8ER3/cieILoFsB1PRsflKkDpOT9rg=
Subject key identifier:   59:FD:A9:54:97:D2:90:26:67:57:CE:79:10:50:E8:73:C1:DF:EA:55
Authority key identifier: 59:61:C7:C0:0D:09:1D:69:79:A5:1B:10:16:62:F6:90:AE:A5:4F:39
Certificate issuer:       /CN=5961C7C00D091D6979A51B101662F690AEA54F39
Certificate serial:       0B3C98EFB79D8AAD2E646FFDCDC399084BFDC854
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5961C7C00D091D6979A51B101662F690AEA54F39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/5961C7C00D091D6979A51B101662F690AEA54F39.mft
Manifest number:          01EF
Signing time:             Mon 08 Jan 2024 19:26:13 +0000
Manifest this update:     Mon 08 Jan 2024 19:21:13 +0000
Manifest next update:     Tue 09 Jan 2024 23:17:13 +0000
Files and hashes:         1: 323830343a373032633a3a2f33322d3332203d3e20323632393039.roa (hash: ZKewQXyD9wzM1f+aQh1m5Ln8eo3e6nQOuX1kwKhiBq8=)
                          2: 3137372e33362e34382e302f32302d3234203d3e20323632393039.roa (hash: w+3C3VSzDcznGRkRoZxI8Prdzc8rXvQIbbGE80u4GcY=)
                          3: 5961C7C00D091D6979A51B101662F690AEA54F39.crl (hash: kNZkpUHdkzWg+bocwitgMmRGJr6seYDDbUxIQIXQmUc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/5961C7C00D091D6979A51B101662F690AEA54F39.crl
                          rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/5961C7C00D091D6979A51B101662F690AEA54F39.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5961C7C00D091D6979A51B101662F690AEA54F39.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Jan 2024 22:28:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:3c:98:ef:b7:9d:8a:ad:2e:64:6f:fd:cd:c3:99:08:4b:fd:c8:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5961C7C00D091D6979A51B101662F690AEA54F39
        Validity
            Not Before: Jan  8 19:21:13 2024 GMT
            Not After : Jan  9 23:17:13 2024 GMT
        Subject: CN=59FDA95497D290266757CE791050E873C1DFEA55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:eb:53:d5:59:ad:0b:54:53:99:40:da:3d:d3:
                    dc:ae:ae:7e:9f:72:80:d2:ff:01:45:70:a2:30:68:
                    40:64:5b:3f:8f:75:c2:c6:68:fb:18:4d:08:7d:73:
                    e2:25:0a:66:4e:df:96:e8:2c:d8:fc:01:73:2b:7e:
                    ad:74:26:cb:88:14:13:6f:9d:51:35:da:b5:6d:45:
                    cf:8f:ba:a7:2c:ce:4d:62:7f:bf:69:40:d4:2b:15:
                    45:04:15:8a:60:54:29:5d:7b:f6:21:0d:e3:6c:d6:
                    d0:da:59:30:4a:73:6e:d4:be:11:5c:a1:6c:8b:d1:
                    c8:8e:6b:79:f1:45:93:50:a0:e7:c6:66:ee:6c:f5:
                    4d:65:32:16:a3:fa:3d:47:93:e8:9f:f4:2e:fe:bd:
                    86:62:cc:62:3f:08:78:e8:68:ce:84:8d:18:94:96:
                    a7:bf:5f:48:cf:cd:a6:77:28:8f:18:84:81:25:a6:
                    ec:e6:45:bf:aa:0a:63:c3:7f:d8:57:ec:5c:a1:f9:
                    b7:4e:ae:41:bb:f3:0e:f8:de:7f:7e:15:34:d4:59:
                    23:f6:a4:2e:ef:74:f5:56:65:89:2a:90:d6:73:0a:
                    37:ea:15:9b:39:63:97:d6:f2:98:e7:b9:06:28:0b:
                    ba:21:03:9f:1a:1e:ef:6d:b5:e9:53:af:2d:d8:ac:
                    8a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FD:A9:54:97:D2:90:26:67:57:CE:79:10:50:E8:73:C1:DF:EA:55
            X509v3 Authority Key Identifier:
                keyid:59:61:C7:C0:0D:09:1D:69:79:A5:1B:10:16:62:F6:90:AE:A5:4F:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/5961C7C00D091D6979A51B101662F690AEA54F39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5961C7C00D091D6979A51B101662F690AEA54F39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/5961C7C00D091D6979A51B101662F690AEA54F39.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:51:7c:de:df:16:13:20:48:56:2e:74:79:f1:98:ab:67:b5:
         92:e4:70:77:d2:b3:67:6b:64:bd:85:93:3a:34:eb:5c:44:8f:
         e4:2f:7f:7f:f2:8c:cf:0b:f1:c9:a3:49:99:b6:48:4a:46:5d:
         c7:6a:f5:05:45:c4:86:df:51:a9:fd:3e:6f:61:8c:eb:fe:80:
         1e:f6:10:90:76:3e:e3:e4:80:c4:70:97:3d:23:a9:cf:f2:eb:
         8a:bc:53:95:95:24:b2:e7:00:20:b0:dc:d2:f3:4d:6f:11:f4:
         20:fa:d9:77:3d:cf:3e:fa:77:11:2c:10:29:aa:58:6d:5b:16:
         4c:4b:52:38:e5:ce:7e:9a:b9:01:b3:89:a0:4f:a5:74:f0:ac:
         b5:46:d2:e9:73:ff:5c:66:c2:d2:3b:ae:40:19:96:3b:df:8b:
         6d:1a:0a:c1:79:c2:3b:76:8f:d8:f3:84:b4:83:28:ee:e6:bc:
         de:3b:1b:b0:b7:54:03:d1:44:c7:77:33:02:7f:82:a9:77:22:
         6f:8a:78:0f:81:4e:b7:63:b4:68:be:f2:e7:3d:bd:aa:e5:55:
         18:39:62:58:da:f0:68:33:c1:88:7c:e5:52:3f:9a:4d:2b:25:
         cf:26:6f:33:9d:16:8b:2f:d2:aa:e8:9a:fb:34:2d:9d:fb:6d:
         e4:4a:f3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 8 21:29:09 2024 by rpki-client on console.sobornost.net