Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/620A71C431D2B5B3DF64C60E7119DF06F484D0A8.mft
File:                     620A71C431D2B5B3DF64C60E7119DF06F484D0A8.mft (raw, json)
Hash identifier:          3bL+kqlz7RraFQxX3joAEynSFlH62LU3LemSXGH8fLM=
Subject key identifier:   08:61:12:61:D8:52:2F:47:66:70:0B:99:5D:94:7F:51:80:BA:78:46
Authority key identifier: 62:0A:71:C4:31:D2:B5:B3:DF:64:C6:0E:71:19:DF:06:F4:84:D0:A8
Certificate issuer:       /CN=620A71C431D2B5B3DF64C60E7119DF06F484D0A8
Certificate serial:       578C95A5DC071D25E9FA31BE489BE84BA60443F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/620A71C431D2B5B3DF64C60E7119DF06F484D0A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/620A71C431D2B5B3DF64C60E7119DF06F484D0A8.mft
Manifest number:          0108
Signing time:             Tue 09 Jan 2024 04:53:44 +0000
Manifest this update:     Tue 09 Jan 2024 04:48:44 +0000
Manifest next update:     Wed 10 Jan 2024 05:18:44 +0000
Files and hashes:         1: 323830343a313339383a3130303a3a2f34382d3438203d3e20323633353431.roa (hash: TKRFXuv4NCV9Ui7PCJKGnAr/mbGr78zCmO5Hypmn4z8=)
                          2: 323830343a313339383a3a2f34382d3438203d3e20323633353431.roa (hash: xIb2ERQSMKDFG+l1BHicdZxKCek4imftG86bed2A9Zk=)
                          3: 3139312e3234312e32332e302f32342d3234203d3e20323633353431.roa (hash: e780OfHiOYPo6sK1z+AlGmwkAXJdky2LYr1LovwiYos=)
                          4: 3139312e352e3136342e302f32342d3234203d3e20323633353431.roa (hash: z9iPtKRH8xZsrnQBKMN8Olay/YX7td7Yc5NVw4yIqN0=)
                          5: 3139312e352e3136362e302f32342d3234203d3e20323633353431.roa (hash: Pzr9etcACPClCE7di8adUw1JfHqSFtvzvGBPW+7V/0s=)
                          6: 3139312e3234312e32312e302f32342d3234203d3e20323633353431.roa (hash: y6ZJPdvNAEAPVz34KdgJKI3G/iHhIX8AoD/WEV9qpyA=)
                          7: 3139312e3234312e32302e302f32342d3234203d3e20323633353431.roa (hash: chweEEpdDVYdByOstHLnfn3Sm49gSuhAkx8SzGjdzTQ=)
                          8: 323830343a313339383a336630303a3a2f34302d3430203d3e20323633353431.roa (hash: VkD1BiqR2Fi+g9hHfqUBYSKAt/EWGbldujUnFyx+6Lk=)
                          9: 3139312e3234312e32322e302f32332d3233203d3e20323633353431.roa (hash: /JGUzsm/RhhRI0Hq7HjoVYVro+Z0FsA/DXP3AQ7gHbw=)
                          10: 323830343a313339383a336530303a3a2f34302d3430203d3e20323633353431.roa (hash: FTlDoLOeaWX5prQQDpBimeKvRSUZUoGMMj7T5UmOvoM=)
                          11: 323830343a313339383a3330303a3a2f34302d3430203d3e20323633353431.roa (hash: 77LH/CPrK0I+SAffGavmne4X59Ohi/nXc0iytNs5kgE=)
                          12: 323830343a313339383a633030303a3a2f33342d3334203d3e20323633353431.roa (hash: NgQP8OOZvyuNLEtNNgP5JOb7mdwnKM8B4TsHAupwFHs=)
                          13: 3139312e352e3136372e302f32342d3234203d3e20323633353431.roa (hash: ChVkqMaLrOqog4w14Hz+m+32Zwb2Fp7nNHzMTER7KdI=)
                          14: 323830343a313339383a3a2f33342d3334203d3e20323633353431.roa (hash: 3C00cfi5+ZW9xQBvKvy+sfFv85n1QntPR+5Wg4bBtRE=)
                          15: 3139312e3234312e32302e302f32332d3233203d3e20323633353431.roa (hash: QV2I25skw1yIgGYQI1HbvglT75FIX0ok6yw/sMei9cE=)
                          16: 323830343a313339383a3230303a3a2f34302d3430203d3e20323633353431.roa (hash: Fd6rXLK5kEhrSY6IldrTKCs5d0uArnCWkZ9/8ZYqda8=)
                          17: 3139312e352e3136362e302f32332d3233203d3e20323633353431.roa (hash: qg1YAlH//NNuJX3Y4kWhzXqmSxDCtqeJ/ASn+59+3kk=)
                          18: 323830343a313339383a313a3a2f34382d3438203d3e20323633353431.roa (hash: yiYGTBYw5QOJhoYLTz6JKb+VlpbExdg5SJvVsnJ71W8=)
                          19: 3139312e352e3136352e302f32342d3234203d3e20323633353431.roa (hash: 6PRt6mSU+QWLmEc9W3D4HQUDfNdW2lH1zGyf0JGNSMk=)
                          20: 3139312e352e3136342e302f32322d3232203d3e20323633353431.roa (hash: PDsS+PTsWLD39tpUMIeCAyiajdQ4143sReEGcRHB7rs=)
                          21: 323830343a313339383a383030303a3a2f33342d3334203d3e20323633353431.roa (hash: YDxqyZ6MG4CM2gFA6XNuIL2WzU6rd0XNJKKuGhWEp8Q=)
                          22: 3139312e3234312e32322e302f32342d3234203d3e20323633353431.roa (hash: peWltACBu8qvupZal05d++liajlaHdZgZxLC5XGAtwI=)
                          23: 323830343a313339383a3130313a3a2f34382d3438203d3e20323633353431.roa (hash: KpmfKXGUpgPIf8OtSvo8aRN32b8PEPICLoPUiE8ESCU=)
                          24: 3139312e352e3136342e302f32332d3233203d3e20323633353431.roa (hash: 3PgJx7NvQjNY5JwnmCTYjlqsNpfW/BDIIT5wRQJ4pUU=)
                          25: 620A71C431D2B5B3DF64C60E7119DF06F484D0A8.crl (hash: 1YKDshhfMcJaNbP8vXbOL0lmcIC2sa3b9x+csLrPdxA=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/620A71C431D2B5B3DF64C60E7119DF06F484D0A8.crl
                          rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/620A71C431D2B5B3DF64C60E7119DF06F484D0A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/620A71C431D2B5B3DF64C60E7119DF06F484D0A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 05:18:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:8c:95:a5:dc:07:1d:25:e9:fa:31:be:48:9b:e8:4b:a6:04:43:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620A71C431D2B5B3DF64C60E7119DF06F484D0A8
        Validity
            Not Before: Jan  9 04:48:44 2024 GMT
            Not After : Jan 10 05:18:44 2024 GMT
        Subject: CN=08611261D8522F4766700B995D947F5180BA7846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2f:bd:6c:47:a0:ef:ff:18:97:53:64:57:d5:
                    72:2d:66:cb:87:94:e1:f9:f5:db:b6:42:1f:7a:e7:
                    1d:e3:66:de:2e:e1:94:23:2e:b5:43:38:51:40:60:
                    bc:6b:19:ce:34:b0:a8:64:49:04:be:c6:f0:18:30:
                    5d:01:78:c8:52:b6:d9:f2:e2:07:fb:c2:2e:2f:f5:
                    b2:09:d1:02:b8:7c:23:00:28:37:b1:8e:a7:3e:da:
                    82:52:0b:26:71:0d:55:45:ad:49:41:8f:9e:67:50:
                    1d:34:c4:87:a2:df:53:43:16:44:91:bc:9d:7e:76:
                    74:0a:d2:8c:f4:38:2f:4f:4f:1a:dd:71:9c:cb:7b:
                    cd:9e:53:0e:17:3c:1b:ba:4a:2c:d7:0f:17:f7:2a:
                    24:7d:b7:25:12:74:ba:d3:ea:ce:88:30:72:b7:9c:
                    4b:2b:a8:2f:df:a5:ce:2d:71:87:5e:c9:41:48:08:
                    f5:57:ab:51:92:07:c4:cc:e3:84:1f:22:06:cd:51:
                    a3:4f:c5:1d:83:f5:72:ab:31:4d:81:2e:11:98:28:
                    6a:c3:38:3c:28:d0:68:3f:99:1d:92:4b:f3:4e:35:
                    20:33:9f:97:db:9d:a5:cc:e3:40:8a:92:b9:2a:fa:
                    15:f9:7d:40:da:d6:71:b0:35:01:1d:5f:b3:cb:6a:
                    27:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:61:12:61:D8:52:2F:47:66:70:0B:99:5D:94:7F:51:80:BA:78:46
            X509v3 Authority Key Identifier:
                keyid:62:0A:71:C4:31:D2:B5:B3:DF:64:C6:0E:71:19:DF:06:F4:84:D0:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/620A71C431D2B5B3DF64C60E7119DF06F484D0A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/620A71C431D2B5B3DF64C60E7119DF06F484D0A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/620A71C431D2B5B3DF64C60E7119DF06F484D0A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:2d:28:3b:c1:f8:77:25:d2:8b:34:2e:76:94:55:fc:5a:6e:
         b7:48:9a:de:f0:ea:90:8b:fe:d5:ac:bb:0e:c4:da:a8:85:32:
         de:a3:21:d1:55:1b:12:73:a6:42:ee:d9:24:1c:f6:06:14:ce:
         b0:82:41:43:11:d5:9d:ea:07:62:da:15:f6:1b:87:14:5e:c9:
         dc:b9:85:1b:7b:b4:10:64:bf:19:86:81:28:e9:f3:29:a9:fc:
         2c:88:af:b6:77:1b:c0:12:e8:e9:11:24:22:ac:b2:ce:ca:e8:
         a9:2f:77:a4:14:66:9e:d9:2e:b9:93:aa:f5:64:d1:ce:c2:a5:
         3e:10:d0:e9:68:1f:51:0b:90:db:eb:18:e4:e4:ec:e7:ab:70:
         92:36:c7:62:95:f2:64:8a:cd:49:e2:1f:86:97:10:bf:11:b6:
         7b:75:b6:92:45:1c:94:ed:c4:bb:04:6d:c8:ab:29:a6:68:3f:
         b5:a4:f1:b4:9f:a0:e7:07:10:8e:48:2c:ab:0d:42:bd:17:e9:
         b1:89:be:9f:64:4a:ac:f6:c6:60:1e:78:3f:11:59:62:a2:06:
         cb:51:f3:9a:9d:af:8d:fe:73:a6:57:32:9e:f8:c3:17:17:a7:
         58:49:94:85:38:83:27:fa:11:08:20:e6:c6:e1:5e:7d:e1:2e:
         e2:ff:f2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 05:55:41 2024 by rpki-client on console.sobornost.net