Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/4B32F7C9FF0F3B6E67EC9488DB285992D0B829E9.mft
File:                     4B32F7C9FF0F3B6E67EC9488DB285992D0B829E9.mft (raw, json)
Hash identifier:          0cuOBWioulCl6nOYCiM8fLPly0Oyh9glWyT3qYIqQQo=
Subject key identifier:   5C:C1:3D:E7:70:6F:AB:80:CC:DC:E1:15:91:6E:E0:F7:65:FE:E8:1B
Authority key identifier: 4B:32:F7:C9:FF:0F:3B:6E:67:EC:94:88:DB:28:59:92:D0:B8:29:E9
Certificate issuer:       /CN=4B32F7C9FF0F3B6E67EC9488DB285992D0B829E9
Certificate serial:       7E593FE3AD7EC219A1078E5C5BB4842F848C148D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B32F7C9FF0F3B6E67EC9488DB285992D0B829E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/4B32F7C9FF0F3B6E67EC9488DB285992D0B829E9.mft
Manifest number:          06D0
Signing time:             Tue 09 Jan 2024 08:08:00 +0000
Manifest this update:     Tue 09 Jan 2024 08:03:00 +0000
Manifest next update:     Wed 10 Jan 2024 08:08:00 +0000
Files and hashes:         1: 34352e3232362e39322e302f32322d3234203d3e20323636393932.roa (hash: /Un4/W144DBDso35e5+CpLPLwTezLcU3su6IYucWOvo=)
                          2: 323830343a343637633a3a2f33322d3438203d3e20323636393932.roa (hash: di/batJG1g0XyJpn3k4JpBG7rQTelgrq4I1Sd4EjEXk=)
                          3: 4B32F7C9FF0F3B6E67EC9488DB285992D0B829E9.crl (hash: v43Zb8Y84lncBrCoRqP1a3xdeHciM/vQv0RydMWRhPI=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/4B32F7C9FF0F3B6E67EC9488DB285992D0B829E9.crl
                          rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/4B32F7C9FF0F3B6E67EC9488DB285992D0B829E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B32F7C9FF0F3B6E67EC9488DB285992D0B829E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 08:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:59:3f:e3:ad:7e:c2:19:a1:07:8e:5c:5b:b4:84:2f:84:8c:14:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B32F7C9FF0F3B6E67EC9488DB285992D0B829E9
        Validity
            Not Before: Jan  9 08:03:00 2024 GMT
            Not After : Jan 16 08:08:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f2:5b:0e:73:e9:4f:39:60:5b:9a:77:23:e4:
                    9b:1d:71:01:c8:56:ce:e2:9d:36:c9:98:4d:44:91:
                    94:56:5d:54:96:2d:27:30:96:fc:fd:9c:63:0a:c2:
                    3e:d6:02:16:80:43:0f:12:42:99:90:c1:72:ed:75:
                    28:e2:a3:b0:81:e7:fc:49:db:0f:29:8d:61:d3:7d:
                    a0:6c:fd:fc:cf:79:92:e3:7b:7a:f9:d1:a6:aa:5a:
                    2c:ec:12:bb:d9:cc:18:d6:a9:e5:a7:04:f1:d0:6a:
                    0a:fb:72:9d:77:71:6e:67:c4:22:7d:7c:f6:e6:2a:
                    22:31:62:9a:81:ae:f7:66:b2:6f:71:7a:81:33:2f:
                    26:89:6c:e8:c8:ef:8e:2d:10:20:b0:e6:f7:0f:bb:
                    fd:13:57:36:a2:d0:1d:37:24:0b:de:af:a9:1c:4d:
                    5a:ff:ed:7f:f0:b3:fa:43:65:b1:26:24:23:f3:a2:
                    cc:ce:c7:61:ff:db:ba:0a:1c:fd:c2:19:c1:8f:54:
                    f8:2c:b6:a8:8b:de:d4:64:4e:fe:76:5d:49:49:18:
                    a1:a4:e8:9a:e9:bc:a3:2f:13:22:da:82:46:fb:70:
                    d2:c4:bf:03:5a:45:6c:27:15:43:2a:19:7d:df:2c:
                    09:2d:76:22:e7:3f:23:d4:9c:02:57:4f:99:bf:a1:
                    67:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C1:3D:E7:70:6F:AB:80:CC:DC:E1:15:91:6E:E0:F7:65:FE:E8:1B
            X509v3 Authority Key Identifier:
                keyid:4B:32:F7:C9:FF:0F:3B:6E:67:EC:94:88:DB:28:59:92:D0:B8:29:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/4B32F7C9FF0F3B6E67EC9488DB285992D0B829E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B32F7C9FF0F3B6E67EC9488DB285992D0B829E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/4B32F7C9FF0F3B6E67EC9488DB285992D0B829E9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:d9:f7:50:91:85:0c:f3:f1:99:83:ef:2f:8b:19:ab:12:5f:
         3f:b2:d8:af:e3:59:cf:d0:61:14:41:99:9a:8d:99:7e:20:f1:
         46:5a:df:67:51:14:38:1a:44:84:50:29:18:42:fe:8f:ce:a5:
         88:e1:37:3c:2b:cd:0f:39:39:66:a1:ab:61:3b:f6:f2:fb:9c:
         c3:4f:e1:15:2d:6a:1c:e0:42:0c:3a:2a:2a:12:c1:fc:e6:85:
         28:cc:e4:6b:be:02:63:d6:09:ee:06:32:dd:72:de:9a:4b:d9:
         d0:89:45:00:15:23:ff:2f:d7:8e:0e:52:58:ca:b7:4b:ab:56:
         c4:25:9a:67:e5:a6:d1:1a:88:90:93:3c:46:96:9b:5e:ea:f0:
         79:4a:e8:7b:d1:9b:a2:30:ef:3f:d5:ab:6e:31:2d:b2:28:a3:
         2c:f9:34:69:65:12:e6:46:3d:01:2f:87:8e:d7:ea:80:34:1b:
         26:11:cc:7d:f5:7b:48:2d:ec:89:b8:8b:75:9b:cf:d4:90:97:
         4d:b5:23:71:12:5e:32:8a:16:5d:f9:8e:44:a7:73:ef:0b:10:
         29:59:86:27:b1:8a:d8:74:4e:64:a2:27:8d:26:e3:92:2a:19:
         7b:c6:e9:7c:52:0e:b4:93:0c:54:c9:bd:d0:48:14:dc:df:f5:
         19:2c:19:10
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:26 2024 by rpki-client on console.sobornost.net