Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/19CACECF1715A1C974AF169D14ABF46962EEF36F.mft
File:                     19CACECF1715A1C974AF169D14ABF46962EEF36F.mft (raw, json)
Hash identifier:          krNiyALDj379vZDWvc4EXbKhyE9q+b4jAzTMxDv4ozI=
Subject key identifier:   EE:5F:22:1E:6A:02:C6:0F:75:E2:6B:E9:53:0F:DA:35:88:92:C9:89
Authority key identifier: 19:CA:CE:CF:17:15:A1:C9:74:AF:16:9D:14:AB:F4:69:62:EE:F3:6F
Certificate issuer:       /CN=19CACECF1715A1C974AF169D14ABF46962EEF36F
Certificate serial:       51389D105E170BE0CF2B9FCB7AECA096394076AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19CACECF1715A1C974AF169D14ABF46962EEF36F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/19CACECF1715A1C974AF169D14ABF46962EEF36F.mft
Manifest number:          1F
Signing time:             Tue 09 Jan 2024 12:27:55 +0000
Manifest this update:     Tue 09 Jan 2024 12:22:55 +0000
Manifest next update:     Wed 10 Jan 2024 12:39:55 +0000
Files and hashes:         1: 323830343a316265383a3a2f33322d313238203d3e203631373536.roa (hash: xq4CzG9Q4dcHtisu11S4JM81Z6WTftiRSd39BjXnNBE=)
                          2: 19CACECF1715A1C974AF169D14ABF46962EEF36F.crl (hash: KxuLTyc8QbkvQaJfhyH1ChyUhRXyiA+lmMJj/Nlovi8=)
                          3: 3133312e3130302e37322e302f32322d3332203d3e203631373536.roa (hash: RjVgM7mQnWB7UOVZzN5KiMf/kNXnWXT5W1leJXf2x9U=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/19CACECF1715A1C974AF169D14ABF46962EEF36F.crl
                          rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/19CACECF1715A1C974AF169D14ABF46962EEF36F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19CACECF1715A1C974AF169D14ABF46962EEF36F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 12:39:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:38:9d:10:5e:17:0b:e0:cf:2b:9f:cb:7a:ec:a0:96:39:40:76:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19CACECF1715A1C974AF169D14ABF46962EEF36F
        Validity
            Not Before: Jan  9 12:22:55 2024 GMT
            Not After : Jan 10 12:39:55 2024 GMT
        Subject: CN=EE5F221E6A02C60F75E26BE9530FDA358892C989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f7:69:f0:96:8b:fd:e2:c8:74:20:8c:11:33:
                    d9:b2:66:52:13:10:f5:bc:44:6e:c1:f2:75:18:35:
                    82:48:0f:38:f2:f1:42:a6:0f:4a:a3:c6:4b:ac:bb:
                    e3:b3:b6:83:36:b6:d8:12:c7:15:57:56:67:7b:35:
                    5c:9f:6d:7a:65:13:5a:c0:48:8d:44:52:1b:f2:6e:
                    64:a7:78:64:5a:6c:8b:c8:07:ce:2d:57:cd:a5:f3:
                    cc:13:10:f8:8a:2a:3c:0c:44:6d:b6:5f:f3:cd:16:
                    bd:45:05:c8:d1:dd:16:7f:96:bf:db:63:55:21:23:
                    72:e2:71:d1:9b:f1:1c:29:8d:ab:17:5c:66:6b:40:
                    26:32:ab:52:61:7a:82:00:d9:1f:30:10:18:7d:bf:
                    2f:08:d4:4e:51:c0:09:f0:13:66:03:58:f8:c1:7d:
                    ab:6f:a3:e9:a0:ad:45:9d:f7:f4:d5:61:94:13:0c:
                    21:52:b3:63:8b:3c:bd:b3:56:23:43:63:3b:1e:e2:
                    f7:0e:7c:11:a2:a0:df:b5:98:cd:53:c8:32:2b:16:
                    de:d4:31:5c:0f:09:ba:74:0d:87:b0:70:ac:67:26:
                    7d:9a:87:7b:36:70:a7:63:e7:ac:bb:11:af:3f:07:
                    09:28:a5:8a:35:8d:69:65:3a:cd:4e:b9:67:6b:43:
                    75:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5F:22:1E:6A:02:C6:0F:75:E2:6B:E9:53:0F:DA:35:88:92:C9:89
            X509v3 Authority Key Identifier:
                keyid:19:CA:CE:CF:17:15:A1:C9:74:AF:16:9D:14:AB:F4:69:62:EE:F3:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/19CACECF1715A1C974AF169D14ABF46962EEF36F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19CACECF1715A1C974AF169D14ABF46962EEF36F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/19CACECF1715A1C974AF169D14ABF46962EEF36F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ad:00:bb:db:4e:1d:28:80:34:e6:d2:bb:ef:7f:54:2a:fb:
         ec:5b:39:45:20:b1:f7:da:b6:d6:44:01:43:ad:7d:a7:01:37:
         af:9b:8c:1f:c2:93:73:ac:df:34:52:c5:cd:97:d6:6d:0b:62:
         02:89:70:8d:25:1c:b7:22:7c:f8:9f:50:05:9d:95:7a:0d:b9:
         4c:44:ba:39:5b:dd:69:4e:cb:0a:69:c0:27:ff:27:21:a0:49:
         b2:15:73:3f:a8:20:98:97:3a:c7:c0:51:22:c3:f9:ef:29:c3:
         3e:72:50:68:d0:9c:86:f3:bd:f4:2b:8e:7f:8c:f4:97:0b:28:
         1d:2d:11:85:34:c9:11:ec:ea:5c:7a:3b:85:10:52:45:9d:97:
         27:26:4d:45:3b:a3:c6:94:b9:1a:e7:eb:7e:2c:9d:48:f7:ec:
         46:31:80:b1:4c:f1:72:7a:d8:fa:81:5d:96:84:3d:a0:87:ce:
         71:6b:82:c7:8b:e3:4b:38:c2:df:46:dc:a2:74:1f:5e:af:2b:
         54:04:03:05:f6:af:88:0d:99:d6:3f:a8:d7:8d:61:45:a4:d7:
         9d:3e:4f:68:51:6c:2b:b3:52:83:20:57:eb:44:09:e6:66:6d:
         f2:3c:6c:4a:a6:f7:87:bb:57:26:da:31:78:54:44:55:05:42:
         52:43:46:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUUTidEF4XC+DPK5/LeuygljlAdqswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlDQUNFQ0YxNzE1QTFDOTc0QUYxNjlEMTRBQkY0Njk2
MkVFRjM2RjAeFw0yNDAxMDkxMjIyNTVaFw0yNDAxMTAxMjM5NTVaMDMxMTAvBgNV
BAMTKEVFNUYyMjFFNkEwMkM2MEY3NUUyNkJFOTUzMEZEQTM1ODg5MkM5ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe92nwlov94sh0IIwRM9myZlIT
EPW8RG7B8nUYNYJIDzjy8UKmD0qjxkusu+OztoM2ttgSxxVXVmd7NVyfbXplE1rA
SI1EUhvybmSneGRabIvIB84tV82l88wTEPiKKjwMRG22X/PNFr1FBcjR3RZ/lr/b
Y1UhI3LicdGb8RwpjasXXGZrQCYyq1JheoIA2R8wEBh9vy8I1E5RwAnwE2YDWPjB
fatvo+mgrUWd9/TVYZQTDCFSs2OLPL2zViNDYzse4vcOfBGioN+1mM1TyDIrFt7U
MVwPCbp0DYewcKxnJn2ah3s2cKdj56y7Ea8/BwkopYo1jWllOs1OuWdrQ3UhAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU7l8iHmoCxg914mvpUw/aNYiSyYkwHwYDVR0j
BBgwFoAUGcrOzxcVocl0rxadFKv0aWLu828wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FYdjdXM2NTSlM0eXRkNmhxbTFDRkhURmFqaktZVUh0WDVZcWh5eFVv
QTkvMC8xOUNBQ0VDRjE3MTVBMUM5NzRBRjE2OUQxNEFCRjQ2OTYyRUVGMzZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE5Q0FDRUNGMTcxNUExQzk3
NEFGMTY5RDE0QUJGNDY5NjJFRUYzNkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q1FYdjdXM2NTSlM0eXRkNmhxbTFDRkhURmFqaktZVUh0WDVZcWh5eFVvQTkvMC8x
OUNBQ0VDRjE3MTVBMUM5NzRBRjE2OUQxNEFCRjQ2OTYyRUVGMzZGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANa0Au9tOHSiANObSu+9/VCr77Fs5RSCx99q21kQBQ619pwE3r5uMH8KTc6zf
NFLFzZfWbQtiAolwjSUctyJ8+J9QBZ2Veg25TES6OVvdaU7LCmnAJ/8nIaBJshVz
P6ggmJc6x8BRIsP57ynDPnJQaNCchvO99CuOf4z0lwsoHS0RhTTJEezqXHo7hRBS
RZ2XJyZNRTujxpS5GufrfiydSPfsRjGAsUzxcnrY+oFdloQ9oIfOcWuCx4vjSzjC
30bconQfXq8rVAQDBfaviA2Z1j+o141hRaTXnT5PaFFsK7NSgyBX60QJ5mZt8jxs
Sqb3h7tXJtoxeFREVQVCUkNGfw==
-----END CERTIFICATE-----
Generated at Tue Jan 9 13:44:02 2024 by rpki-client on console.sobornost.net