Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/77AFF1CE4893AC787B68CB24A4DB4164337CA8E0.mft
File:                     77AFF1CE4893AC787B68CB24A4DB4164337CA8E0.mft (raw, json)
Hash identifier:          B4qaf3cIs574GU4nsF3S2KCbUAg/C4xqVIS2bwKZYMY=
Subject key identifier:   85:42:63:03:B6:68:AD:77:EA:AC:EA:DC:D8:85:C3:2D:62:51:CD:C2
Authority key identifier: 77:AF:F1:CE:48:93:AC:78:7B:68:CB:24:A4:DB:41:64:33:7C:A8:E0
Certificate issuer:       /CN=77AFF1CE4893AC787B68CB24A4DB4164337CA8E0
Certificate serial:       7B929F216D02E1781061879C48CEF497A1B82E0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77AFF1CE4893AC787B68CB24A4DB4164337CA8E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/77AFF1CE4893AC787B68CB24A4DB4164337CA8E0.mft
Manifest number:          3F
Signing time:             Tue 09 Jan 2024 02:08:13 +0000
Manifest this update:     Tue 09 Jan 2024 02:03:13 +0000
Manifest next update:     Wed 10 Jan 2024 02:15:13 +0000
Files and hashes:         1: 323830343a366537633a3a2f33322d3438203d3e20323730363030.roa (hash: UhzuydHcRoSE+tibDfeoOc0iJkP9rhlZQALCNNPSFGs=)
                          2: 3138392e33362e3132382e302f32322d3234203d3e20323730363030.roa (hash: U2/igWvdbXsGxE3bQBboDwuQksreRyPz7cqPof3M5js=)
                          3: 77AFF1CE4893AC787B68CB24A4DB4164337CA8E0.crl (hash: lkbhNs3SKFnmsfuzDnP8VMyte5iEw12Tv0Kyo90w51E=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/77AFF1CE4893AC787B68CB24A4DB4164337CA8E0.crl
                          rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/77AFF1CE4893AC787B68CB24A4DB4164337CA8E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77AFF1CE4893AC787B68CB24A4DB4164337CA8E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 02:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:92:9f:21:6d:02:e1:78:10:61:87:9c:48:ce:f4:97:a1:b8:2e:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77AFF1CE4893AC787B68CB24A4DB4164337CA8E0
        Validity
            Not Before: Jan  9 02:03:13 2024 GMT
            Not After : Jan 10 02:15:13 2024 GMT
        Subject: CN=85426303B668AD77EAACEADCD885C32D6251CDC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8d:de:9e:d5:d0:2a:04:65:03:b7:0e:21:b9:
                    45:ba:da:2d:dc:ff:62:21:8b:40:25:c1:4d:65:bb:
                    73:48:46:10:f3:b1:1a:70:4d:83:e3:17:b1:7c:7f:
                    bb:c9:92:25:95:9a:1e:f7:e2:f0:25:b3:88:a9:b7:
                    92:9f:3b:c6:fa:bd:4d:bb:1e:8f:39:9d:ef:39:88:
                    74:a9:b7:4e:b4:1c:c3:af:ae:75:9a:7d:58:61:00:
                    e7:0e:79:21:25:04:c5:4f:44:b7:c9:c3:ac:74:b7:
                    1f:dc:0d:1d:ba:b6:68:e6:a1:94:6c:27:f1:5c:13:
                    c3:b1:c9:eb:58:00:a2:cf:79:b1:23:da:63:66:a6:
                    e0:3b:90:fd:6e:8f:38:45:1f:3a:27:0f:c6:27:af:
                    b6:28:eb:e7:33:27:37:be:09:eb:9b:3d:d1:73:60:
                    79:39:7a:b7:cb:67:13:9f:fb:c3:59:55:45:39:6b:
                    19:7e:f0:8f:7a:fe:b1:cd:f2:4f:24:fe:cb:d8:d5:
                    3c:0f:44:fa:e4:7c:af:ba:de:cc:2f:45:de:00:ac:
                    4c:6f:56:36:0c:c7:55:48:31:ed:8f:38:e9:4e:ec:
                    59:88:2f:f8:28:0e:95:7c:8b:be:6b:23:3a:f2:1b:
                    03:c0:82:ec:a5:05:ff:ff:65:32:9d:a1:a6:61:c7:
                    88:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:42:63:03:B6:68:AD:77:EA:AC:EA:DC:D8:85:C3:2D:62:51:CD:C2
            X509v3 Authority Key Identifier:
                keyid:77:AF:F1:CE:48:93:AC:78:7B:68:CB:24:A4:DB:41:64:33:7C:A8:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/77AFF1CE4893AC787B68CB24A4DB4164337CA8E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77AFF1CE4893AC787B68CB24A4DB4164337CA8E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/77AFF1CE4893AC787B68CB24A4DB4164337CA8E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:a8:78:86:37:22:39:6a:53:cd:ee:1b:25:3f:98:9e:0a:9b:
         9c:23:a1:0c:9f:3f:10:cf:61:40:a7:df:b9:09:e4:d4:eb:ea:
         94:36:43:4b:ce:33:68:fa:74:2b:c4:a5:10:eb:5c:29:73:63:
         c6:8b:bc:12:05:29:a5:43:2b:b1:be:75:9a:46:ba:a1:08:56:
         96:f8:e2:04:6f:3c:5f:ba:f9:5d:49:2a:de:95:66:b1:42:16:
         e5:d0:35:68:a5:a3:80:e6:e8:7c:ce:13:62:dc:e3:3a:24:99:
         69:81:0d:69:1b:95:9d:88:b8:06:e2:ce:61:25:e3:27:b4:a9:
         25:22:b1:3b:50:7b:61:16:93:e9:fb:17:78:c5:49:4a:d8:39:
         d8:f6:67:52:fc:44:09:1f:ec:f0:cd:d8:be:61:0d:36:f0:ac:
         14:fc:5d:41:2e:12:da:da:80:ec:1c:54:70:d1:dd:18:9b:0f:
         d9:43:8e:5a:98:71:2a:e3:80:e9:79:ec:22:54:87:a9:bd:e2:
         6c:ee:10:07:34:d4:b0:5d:62:6c:a5:05:70:72:33:98:0b:cc:
         9b:01:b6:31:1e:0c:99:da:9d:bd:bc:e5:f9:f0:66:a9:13:0c:
         a6:34:73:91:53:c9:c8:56:d1:2a:a2:fc:4d:46:0b:8e:73:15:
         8b:5e:35:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUe5KfIW0C4XgQYYecSM70l6G4Lg8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzdBRkYxQ0U0ODkzQUM3ODdCNjhDQjI0QTREQjQxNjQz
MzdDQThFMDAeFw0yNDAxMDkwMjAzMTNaFw0yNDAxMTAwMjE1MTNaMDMxMTAvBgNV
BAMTKDg1NDI2MzAzQjY2OEFENzdFQUFDRUFEQ0Q4ODVDMzJENjI1MUNEQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIjd6e1dAqBGUDtw4huUW62i3c
/2Ihi0AlwU1lu3NIRhDzsRpwTYPjF7F8f7vJkiWVmh734vAls4ipt5KfO8b6vU27
Ho85ne85iHSpt060HMOvrnWafVhhAOcOeSElBMVPRLfJw6x0tx/cDR26tmjmoZRs
J/FcE8OxyetYAKLPebEj2mNmpuA7kP1ujzhFHzonD8Ynr7Yo6+czJze+CeubPdFz
YHk5erfLZxOf+8NZVUU5axl+8I96/rHN8k8k/svY1TwPRPrkfK+63swvRd4ArExv
VjYMx1VIMe2POOlO7FmIL/goDpV8i75rIzryGwPAguylBf//ZTKdoaZhx4j/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUhUJjA7ZorXfqrOrc2IXDLWJRzcIwHwYDVR0j
BBgwFoAUd6/xzkiTrHh7aMskpNtBZDN8qOAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1Y0cEVvdUQ4cVRIREZwQW9kSE04QVZFbjU0UTFuWUFCWGZyazNzVUdF
czgvMC83N0FGRjFDRTQ4OTNBQzc4N0I2OENCMjRBNERCNDE2NDMzN0NBOEUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc3QUZGMUNFNDg5M0FDNzg3
QjY4Q0IyNEE0REI0MTY0MzM3Q0E4RTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q1Y0cEVvdUQ4cVRIREZwQW9kSE04QVZFbjU0UTFuWUFCWGZyazNzVUdFczgvMC83
N0FGRjFDRTQ4OTNBQzc4N0I2OENCMjRBNERCNDE2NDMzN0NBOEUwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJqh4hjciOWpTze4bJT+YngqbnCOhDJ8/EM9hQKffuQnk1OvqlDZDS84zaPp0
K8SlEOtcKXNjxou8EgUppUMrsb51mka6oQhWlvjiBG88X7r5XUkq3pVmsUIW5dA1
aKWjgObofM4TYtzjOiSZaYENaRuVnYi4BuLOYSXjJ7SpJSKxO1B7YRaT6fsXeMVJ
Stg52PZnUvxECR/s8M3YvmENNvCsFPxdQS4S2tqA7BxUcNHdGJsP2UOOWphxKuOA
6XnsIlSHqb3ibO4QBzTUsF1ibKUFcHIzmAvMmwG2MR4Mmdqdvbzl+fBmqRMMpjRz
kVPJyFbRKqL8TUYLjnMVi141sQ==
-----END CERTIFICATE-----
Generated at Tue Jan 9 03:49:07 2024 by rpki-client on console.sobornost.net