Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/16AE7B778C8FC31DD68B15A2C5FD512376BFCFC2.mft
File:                     16AE7B778C8FC31DD68B15A2C5FD512376BFCFC2.mft (raw, json)
Hash identifier:          Ho3wIS9IUU+KDnIi0i1SgqiseIwaYHBzOhyn0Z0G6T4=
Subject key identifier:   84:B2:DF:35:9F:46:52:79:9E:BE:B7:2F:CE:2D:9B:D8:95:9F:C1:E7
Authority key identifier: 16:AE:7B:77:8C:8F:C3:1D:D6:8B:15:A2:C5:FD:51:23:76:BF:CF:C2
Certificate issuer:       /CN=16AE7B778C8FC31DD68B15A2C5FD512376BFCFC2
Certificate serial:       5336AD2EFCA2684B4608A4B36E111173C7F00522
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16AE7B778C8FC31DD68B15A2C5FD512376BFCFC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/16AE7B778C8FC31DD68B15A2C5FD512376BFCFC2.mft
Manifest number:          5A
Signing time:             Tue 09 Jan 2024 10:39:01 +0000
Manifest this update:     Tue 09 Jan 2024 10:34:01 +0000
Manifest next update:     Wed 10 Jan 2024 10:51:01 +0000
Files and hashes:         1: 16AE7B778C8FC31DD68B15A2C5FD512376BFCFC2.crl (hash: tWKRK/edCNL9ZcWUNU75iOvb0qvOcQjd5G3+tpW5zhk=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/16AE7B778C8FC31DD68B15A2C5FD512376BFCFC2.crl
                          rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/16AE7B778C8FC31DD68B15A2C5FD512376BFCFC2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16AE7B778C8FC31DD68B15A2C5FD512376BFCFC2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 10:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:36:ad:2e:fc:a2:68:4b:46:08:a4:b3:6e:11:11:73:c7:f0:05:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16AE7B778C8FC31DD68B15A2C5FD512376BFCFC2
        Validity
            Not Before: Jan  9 10:34:01 2024 GMT
            Not After : Jan 10 10:51:01 2024 GMT
        Subject: CN=84B2DF359F4652799EBEB72FCE2D9BD8959FC1E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3f:ae:d5:28:bb:2d:8f:ef:05:47:50:7e:88:
                    7e:65:31:e3:80:3e:ee:3f:c9:e2:9e:5c:eb:48:ce:
                    d8:db:c8:c9:88:6c:32:43:ee:28:5c:2d:62:f5:4a:
                    42:02:09:02:7f:08:bd:8d:81:cf:ac:e1:e6:71:42:
                    54:5e:8c:c2:c5:83:28:07:0a:ab:8e:f4:bc:c7:78:
                    04:9d:88:34:7b:e0:97:75:8f:cd:1a:9b:2a:03:fa:
                    54:2c:fb:25:ab:a3:13:b7:c1:ba:f9:cd:7f:f0:66:
                    f2:ac:c7:94:64:ad:a3:86:a6:66:c4:d5:69:59:74:
                    c6:a9:1d:5f:83:e5:6d:1b:08:a7:ee:46:a5:8a:3b:
                    5f:e1:fd:aa:d2:db:f9:35:60:b6:dd:dc:d1:07:d3:
                    0f:28:19:f1:e5:0f:8f:e5:d3:ae:4b:a4:b0:15:fe:
                    05:ba:88:c0:9b:d7:b1:8c:fc:1c:5f:32:f4:ac:61:
                    06:f9:14:28:63:2a:d7:79:b3:6d:7a:34:28:04:a4:
                    c9:fa:19:a7:3c:e6:19:b3:f7:5b:ac:ce:24:c4:7d:
                    61:da:55:ee:c5:b9:dd:e6:b3:59:fd:5d:f8:2b:e1:
                    70:44:ae:fc:e2:a6:27:ac:1a:b4:dd:a7:3e:79:e6:
                    64:45:cb:9b:03:16:41:eb:10:5b:6e:4e:d3:f2:47:
                    69:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B2:DF:35:9F:46:52:79:9E:BE:B7:2F:CE:2D:9B:D8:95:9F:C1:E7
            X509v3 Authority Key Identifier:
                keyid:16:AE:7B:77:8C:8F:C3:1D:D6:8B:15:A2:C5:FD:51:23:76:BF:CF:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/16AE7B778C8FC31DD68B15A2C5FD512376BFCFC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16AE7B778C8FC31DD68B15A2C5FD512376BFCFC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/16AE7B778C8FC31DD68B15A2C5FD512376BFCFC2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:13:c5:5f:02:1a:1e:53:e3:d8:ac:4d:b3:7f:e8:e6:02:4d:
         a2:bb:9c:87:94:bf:3c:96:31:ea:f3:a6:82:08:8a:47:d1:ea:
         a5:ce:6a:14:ec:dd:67:64:05:3b:2d:b6:59:5c:ec:dd:49:96:
         14:32:f5:67:7f:99:07:73:fd:14:dc:13:93:67:31:74:85:7d:
         5a:33:85:34:fe:a7:5d:d8:d6:66:60:7c:6f:3c:81:75:58:eb:
         e5:6d:dd:3b:ce:87:aa:11:86:8f:09:55:6e:0e:2e:25:12:0e:
         18:b3:3d:54:3f:f4:48:40:91:ad:ac:c6:c2:4c:b4:b9:1f:d7:
         b1:09:ef:8f:b8:7b:98:63:ea:7a:cf:ab:89:b1:73:ff:49:4a:
         ef:e5:5e:4c:fb:56:cc:27:f2:5c:f9:cd:1a:ed:96:e9:4f:80:
         cf:27:3e:b7:21:f1:6d:93:d7:c4:f7:3c:76:d2:fb:d0:2d:8d:
         82:c3:eb:1f:b6:65:56:97:3b:0c:96:74:6c:bb:08:86:01:28:
         a8:12:26:87:ca:47:eb:dd:2b:37:43:fa:6f:ad:bb:10:a6:28:
         5e:df:ad:03:92:cb:1e:7f:03:68:e8:e1:4f:4e:18:50:bf:3c:
         cc:d9:00:69:75:2a:33:c0:01:d8:b5:d6:c8:ad:b4:1e:e6:3d:
         a9:5e:90:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:26 2024 by rpki-client on console.sobornost.net