Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.mft
File:                     8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.mft (raw, json)
Hash identifier:          XoQwxzQifTbS+UWiSZzkMiJquVEXnnURUF1dbSAguQs=
Subject key identifier:   F9:26:E7:2D:C0:82:55:CA:76:8D:C1:EE:16:E9:00:B7:CC:25:F2:14
Authority key identifier: 8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28
Certificate issuer:       /CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
Certificate serial:       7524F6BDA2250D98E1BDE7E7499AC40440AE34A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.mft
Manifest number:          020A
Signing time:             Tue 09 Jan 2024 12:00:15 +0000
Manifest this update:     Tue 09 Jan 2024 11:55:15 +0000
Manifest next update:     Wed 10 Jan 2024 15:13:15 +0000
Files and hashes:         1: 323830343a313039343a663030303a3a2f33362d3336203d3e20323633363431.roa (hash: ThLvnm/IuqvUFWKpwDSrKQWdvkLxztpRQ+Yz1Hq2QS0=)
                          2: 3136382e3230352e36332e302f32342d3234203d3e20323633363431.roa (hash: NzQchm7VpsndahW99RaRm6n11Ns6kFDy15+s54fqBO0=)
                          3: 3137392e3132372e3135392e302f32342d3234203d3e20323633363431.roa (hash: y7bepV9AD+kYhUhafsyXPwL3PK2PuXxrw8BoymtA5+w=)
                          4: 3136382e3230352e36322e302f32342d3234203d3e20323633363431.roa (hash: xXyC75Pozgl8D4P7YwOw8/SDpWeZ/NYRPpP9iDsQbQU=)
                          5: 3137392e3132372e3135322e302f32312d3231203d3e20323633363431.roa (hash: gXfCpjqDAfvwya7/G+QUwWyw0ab0plO9oufmi5D3BJk=)
                          6: 3136382e3230352e36302e302f32342d3234203d3e20323633363431.roa (hash: /7lX6klr+MLSzaBMg5GcZk1KKg1IP8c/q/wWjyqN0Yg=)
                          7: 3137392e3132372e3135362e302f32332d3233203d3e20323633363431.roa (hash: +UyHWzYHrpNMEmmY8zWjkDVHmh+gUXbT2aFA69C8klc=)
                          8: 3136382e3230352e36302e302f32332d3233203d3e20323633363431.roa (hash: /b/d3ptvtn4xrPseuSDDSC7Hs1rF4me5Ctz4/Jus+/I=)
                          9: 3136382e3230352e36302e302f32322d3232203d3e20323633363431.roa (hash: L8htJ/TPZ3fiUewZC6gHYPSbbih9VDssI6iQwzM66YA=)
                          10: 3137392e3132372e3135352e302f32342d3234203d3e20323633363431.roa (hash: 5crwsQbyBbPu1O7ikAb7+I2pbxaJeW2j6/V1OFZq0o4=)
                          11: 323830343a313039343a3a2f33362d3336203d3e20323633363431.roa (hash: sD59t8ea1YvgPA1KZ8MF2kqnKBqHnOWOn4LFMLQwLb4=)
                          12: 3137392e3132372e3135382e302f32332d3233203d3e20323633363431.roa (hash: 0C0udoZqubXD54QBZBhbKppMh7Fc2hsQfyCJ0oPG4ys=)
                          13: 3137392e3132372e3135332e302f32342d3234203d3e20323633363431.roa (hash: CFSMSsjnQYfQX8njM/EcqioNDQm/yOpDclSNHcjq/js=)
                          14: 3137392e3132372e3135342e302f32342d3234203d3e20323633363431.roa (hash: JXswDZEIu46wDHWrlSLYQB4jgAGuJ6tEAEjITe+HSEM=)
                          15: 323830343a313039343a3a2f33322d3332203d3e20323633363431.roa (hash: ke7wrP7Ghwbsm8TBY0nEUnVi9O2jrfCmGE+Zb93Nsc4=)
                          16: 3137392e3132372e3135372e302f32342d3234203d3e20323633363431.roa (hash: GHlArM8UgK0cxLTi2yOF3oz4/NGn24qhRXX5E3B+Jts=)
                          17: 3137392e3132372e3135382e302f32342d3234203d3e20323633363431.roa (hash: LSWNGJxFyhwYpKeurS8zx1eVJ8JACt6kxAigsybh510=)
                          18: 323830343a313039343a313030303a3a2f34302d3430203d3e20323633363431.roa (hash: MNiOUroCk5fSHRSz0dpyCKAmopPaEXCjzxjlWRSxX0c=)
                          19: 3137392e3132372e3135322e302f32342d3234203d3e20323633363431.roa (hash: V0f8GzMGbm7Rv0estECy93SRyjI0s+kBYg8Lwsrg/Gg=)
                          20: 3137392e3132372e3135322e302f32332d3233203d3e20323633363431.roa (hash: X8ZYApHUR05da1LEduMNwRwLsWoKvWexEOz1Od2u2OY=)
                          21: 323830343a313039343a313130303a3a2f34302d3430203d3e20323633363431.roa (hash: 4jCeGSprHm2GgxsC34cgaS/jTE9uirEWvNBnjzmRaAc=)
                          22: 8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.crl (hash: HcuHb9xb0YtaX1qtlGHYJKSqln/Kp9KXWT3VV0utJKU=)
                          23: 3137392e3132372e3135342e302f32332d3233203d3e20323633363431.roa (hash: CkpkttavZQDwgN6P71zyLrHC15DbkXfgJlYnWfWqMJ0=)
                          24: 3136382e3230352e36322e302f32332d3233203d3e20323633363431.roa (hash: LtI4WnS2Xb5OyyqpI7AMAgnnCnaKQcEHQm4XRMwAcd0=)
                          25: 3137392e3132372e3135362e302f32342d3234203d3e20323633363431.roa (hash: SVuEYEJSEum1AJXfQ3x8s1fz20FzbhmrKWMZ+M+Tslo=)
                          26: 323830343a313039343a643030303a3a2f33362d3336203d3e20323633363431.roa (hash: 7/iccFGXGgIEBTFV7jAvVN/yOFOcgRrR8SfHkckaJRE=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.crl
                          rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 12:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:24:f6:bd:a2:25:0d:98:e1:bd:e7:e7:49:9a:c4:04:40:ae:34:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
        Validity
            Not Before: Jan  9 11:55:15 2024 GMT
            Not After : Jan 10 15:13:15 2024 GMT
        Subject: CN=F926E72DC08255CA768DC1EE16E900B7CC25F214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7c:f1:14:36:c2:3e:a3:a3:8d:0b:60:03:28:
                    2a:2a:87:d4:70:80:01:02:17:30:b4:98:2d:c8:c4:
                    bf:3c:42:68:22:69:fb:0f:c9:8a:06:fb:50:83:d8:
                    d9:32:b4:5f:8c:5b:01:28:93:43:06:85:49:ae:02:
                    b4:75:49:61:11:f4:4b:63:31:7b:bf:54:79:75:b9:
                    0e:6a:49:24:4a:22:8b:00:6e:57:83:3f:36:ad:4c:
                    3e:30:75:06:95:d4:f6:b3:84:e8:b7:6f:6b:d1:a3:
                    89:ce:d0:0c:f4:45:91:35:4d:e7:69:e4:15:59:e8:
                    fd:ad:44:11:4b:75:8d:47:5c:cd:8b:3c:f8:17:2c:
                    f4:0a:f5:f2:60:1a:d8:28:38:c2:5f:fb:d3:2a:3e:
                    bc:3b:9d:83:7b:38:1a:45:a6:47:b7:82:16:fe:62:
                    98:2c:9c:f7:3c:e7:5d:0b:fc:bb:a6:22:47:22:ef:
                    89:82:c4:cc:51:e1:58:92:df:f3:69:71:35:d2:74:
                    bb:69:94:ed:3a:45:af:76:43:6e:e0:c8:2f:73:a3:
                    3b:d2:0f:98:c7:44:84:b6:f2:87:71:4d:c4:93:df:
                    6a:d0:04:67:88:76:bf:9d:c2:30:54:16:6f:a0:d7:
                    b5:8a:2d:bd:d1:a7:18:58:d4:e4:79:c5:0a:e8:31:
                    06:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:26:E7:2D:C0:82:55:CA:76:8D:C1:EE:16:E9:00:B7:CC:25:F2:14
            X509v3 Authority Key Identifier:
                keyid:8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:29:53:50:cf:d1:00:2d:62:c3:62:d2:d8:75:59:81:77:2f:
         00:f3:3a:68:bd:5f:c1:38:8a:36:2a:12:a6:db:cd:1f:91:29:
         2f:f6:34:18:f3:5a:de:31:78:b4:e9:76:a0:71:37:a6:10:76:
         73:86:45:4d:6b:83:80:0b:45:b3:1a:69:43:08:14:48:23:3b:
         62:1e:1e:7c:a5:45:d6:10:8d:c4:73:5d:3a:a6:bf:c6:ea:9c:
         bf:1c:fd:73:bb:63:c6:95:6f:13:9b:ed:5b:09:96:58:40:d1:
         0e:29:31:88:84:1f:39:40:03:99:25:00:3a:a2:cf:53:a8:88:
         30:0f:43:f7:0d:e6:e5:68:2c:22:c0:75:ef:a9:44:bb:91:1d:
         f2:b5:63:55:46:1a:00:1f:b5:8e:2f:80:0c:04:06:8e:38:98:
         51:0b:c5:43:28:a3:db:cf:0b:0b:b4:c7:70:b8:52:84:b5:82:
         3b:b9:1a:48:06:c9:2c:68:9e:15:2c:4f:5f:c5:a9:65:7b:3c:
         61:29:1f:7e:e2:3d:d5:b8:98:18:f8:09:eb:84:98:83:80:d5:
         6a:a6:6d:96:1c:d6:c7:dc:4b:af:e4:06:c4:18:34:18:fe:d2:
         e7:55:02:d1:f6:24:ea:1c:b2:a2:75:da:7f:22:01:94:dd:39:
         37:35:98:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:44:01 2024 by rpki-client on console.sobornost.net