Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/7F3E001172A228AE324CBF37284992D179397314.mft
File:                     7F3E001172A228AE324CBF37284992D179397314.mft (raw, json)
Hash identifier:          2PAt+V6zS8hJCEhd2l8BMGrsriI7GACS9Ddy43AfTkU=
Subject key identifier:   78:27:16:FC:AC:9A:61:78:BD:39:23:B1:81:8A:55:6A:AB:C1:E7:93
Authority key identifier: 7F:3E:00:11:72:A2:28:AE:32:4C:BF:37:28:49:92:D1:79:39:73:14
Certificate issuer:       /CN=7F3E001172A228AE324CBF37284992D179397314
Certificate serial:       43A2B6087D5E490AB5A1385A6F2B4937F9885320
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F3E001172A228AE324CBF37284992D179397314.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/7F3E001172A228AE324CBF37284992D179397314.mft
Manifest number:          66
Signing time:             Tue 09 Jan 2024 09:21:08 +0000
Manifest this update:     Tue 09 Jan 2024 09:16:08 +0000
Manifest next update:     Wed 10 Jan 2024 11:53:08 +0000
Files and hashes:         1: 323830343a356332303a3a2f33322d3336203d3e20323638383930.roa (hash: cCo9+et9p/qn24OIh0FhGQSt47e0dWcofKtzJ480Qg8=)
                          2: 34352e3137352e37362e302f32322d3234203d3e20323638383930.roa (hash: 8qXB8Kttwg5DpF7PZbi98IQBEj+XkKhxdoK6bB9gLfo=)
                          3: 7F3E001172A228AE324CBF37284992D179397314.crl (hash: I++YxwnCSdZXhS41BfnPyrdQJZLVa6ODYSgkkMvAeV0=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/7F3E001172A228AE324CBF37284992D179397314.crl
                          rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/7F3E001172A228AE324CBF37284992D179397314.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F3E001172A228AE324CBF37284992D179397314.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 11:53:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a2:b6:08:7d:5e:49:0a:b5:a1:38:5a:6f:2b:49:37:f9:88:53:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F3E001172A228AE324CBF37284992D179397314
        Validity
            Not Before: Jan  9 09:16:08 2024 GMT
            Not After : Jan 10 11:53:08 2024 GMT
        Subject: CN=782716FCAC9A6178BD3923B1818A556AABC1E793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f3:77:f3:0b:77:80:4d:6a:ef:5a:bf:df:2e:
                    3f:8c:cb:b7:04:2e:9b:c1:68:7b:ff:cf:40:84:be:
                    e2:cd:c7:54:c4:81:1a:ff:7a:95:b0:e0:ee:f0:1d:
                    bf:c8:c4:4c:aa:e2:21:d5:42:13:d9:7d:58:c2:25:
                    19:ac:49:b4:e3:ce:62:a9:5c:8a:60:70:30:4f:da:
                    9d:79:8c:95:61:23:35:f9:01:d9:26:c0:06:4b:f1:
                    6b:c9:ab:83:a6:b4:11:43:69:f3:d6:1b:5a:73:9a:
                    95:92:cb:ef:b3:b9:c5:6c:07:5d:fb:71:cd:40:d7:
                    40:45:c6:37:0f:a3:8d:62:1a:86:22:7d:41:d1:96:
                    b0:c1:a9:9a:b4:be:9d:e9:d5:b9:90:5e:af:09:56:
                    39:2a:61:2a:e7:c0:05:1f:50:c6:c7:aa:f2:b7:56:
                    fe:26:8a:e3:72:d5:2e:77:4e:d6:c9:ef:de:77:73:
                    51:18:af:96:6e:54:6d:bd:1d:e9:5b:3e:c5:9b:eb:
                    8a:cd:d3:1f:b1:e8:a6:1d:13:0e:a7:1f:36:b8:a8:
                    2d:56:4e:6b:db:79:0f:20:40:bc:a9:cd:08:81:7b:
                    5e:00:b5:47:ac:a5:62:fb:e6:e2:52:c9:6a:d0:0d:
                    e7:b0:d0:ea:1f:d0:55:aa:6b:43:00:56:2e:65:a8:
                    ba:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:27:16:FC:AC:9A:61:78:BD:39:23:B1:81:8A:55:6A:AB:C1:E7:93
            X509v3 Authority Key Identifier:
                keyid:7F:3E:00:11:72:A2:28:AE:32:4C:BF:37:28:49:92:D1:79:39:73:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/7F3E001172A228AE324CBF37284992D179397314.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F3E001172A228AE324CBF37284992D179397314.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/7F3E001172A228AE324CBF37284992D179397314.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:3e:81:fc:05:23:24:86:b5:e2:cb:bf:77:4d:f9:6b:91:c3:
         c9:06:f9:4f:4f:bc:3a:e2:9a:c3:8f:d7:1a:65:d8:ef:73:4d:
         07:b8:d2:7d:8a:b3:63:c8:d0:5e:50:96:ff:d3:9d:92:c2:7a:
         65:67:29:4f:00:e2:d4:d9:9e:01:53:f8:38:d6:09:1d:1f:fb:
         2e:31:41:15:23:d6:7c:83:7b:c6:07:18:fa:a0:b9:06:f9:f6:
         88:3b:73:a9:15:8f:5e:d5:8c:4d:b0:9d:d4:15:f2:20:6b:06:
         e7:6b:4d:06:62:06:90:c6:7a:95:46:d6:f5:bb:9f:6c:77:d6:
         b1:32:5b:66:36:68:af:29:7c:d4:51:6a:5f:e5:e3:3b:4d:c9:
         dd:28:84:21:a4:28:71:15:9d:22:8c:a5:3a:c9:06:d7:28:8e:
         8d:ba:61:39:6f:e2:ec:d0:79:d4:da:9f:68:57:92:be:95:07:
         c9:45:b6:ea:fd:64:4c:f6:2a:f6:9b:5a:df:a6:b7:0b:a1:93:
         e5:fd:b6:21:2d:d7:98:50:94:e6:33:99:9b:ee:8a:e0:14:7c:
         03:cb:ac:cb:7d:f2:1d:b4:fd:4f:65:74:8d:7f:f2:41:df:56:
         89:93:ed:f4:ce:2c:8a:3b:d7:b5:3d:0b:87:78:da:ca:23:98:
         e1:0f:e4:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQ6K2CH1eSQq1oThabytJN/mIUyAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YzRTAwMTE3MkEyMjhBRTMyNENCRjM3Mjg0OTkyRDE3
OTM5NzMxNDAeFw0yNDAxMDkwOTE2MDhaFw0yNDAxMTAxMTUzMDhaMDMxMTAvBgNV
BAMTKDc4MjcxNkZDQUM5QTYxNzhCRDM5MjNCMTgxOEE1NTZBQUJDMUU3OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU83fzC3eATWrvWr/fLj+My7cE
LpvBaHv/z0CEvuLNx1TEgRr/epWw4O7wHb/IxEyq4iHVQhPZfVjCJRmsSbTjzmKp
XIpgcDBP2p15jJVhIzX5AdkmwAZL8WvJq4OmtBFDafPWG1pzmpWSy++zucVsB137
cc1A10BFxjcPo41iGoYifUHRlrDBqZq0vp3p1bmQXq8JVjkqYSrnwAUfUMbHqvK3
Vv4miuNy1S53TtbJ7953c1EYr5ZuVG29HelbPsWb64rN0x+x6KYdEw6nHza4qC1W
TmvbeQ8gQLypzQiBe14AtUespWL75uJSyWrQDeew0Oof0FWqa0MAVi5lqLp9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUeCcW/KyaYXi9OSOxgYpVaqvB55MwHwYDVR0j
BBgwFoAUfz4AEXKiKK4yTL83KEmS0Xk5cxQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3JmVm9KNWg2TDJDc0FXcWFZdDUzOEVXOHN5SlFVN2RQb0tWZW9tcGI0
REcvMC83RjNFMDAxMTcyQTIyOEFFMzI0Q0JGMzcyODQ5OTJEMTc5Mzk3MzE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdGM0UwMDExNzJBMjI4QUUz
MjRDQkYzNzI4NDk5MkQxNzkzOTczMTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q3JmVm9KNWg2TDJDc0FXcWFZdDUzOEVXOHN5SlFVN2RQb0tWZW9tcGI0REcvMC83
RjNFMDAxMTcyQTIyOEFFMzI0Q0JGMzcyODQ5OTJEMTc5Mzk3MzE0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdj6B/AUjJIa14su/d035a5HDyQb5T0+8OuKaw4/XGmXY73NNB7jSfYqzY8jQ
XlCW/9OdksJ6ZWcpTwDi1NmeAVP4ONYJHR/7LjFBFSPWfIN7xgcY+qC5Bvn2iDtz
qRWPXtWMTbCd1BXyIGsG52tNBmIGkMZ6lUbW9bufbHfWsTJbZjZoryl81FFqX+Xj
O03J3SiEIaQocRWdIoylOskG1yiOjbphOW/i7NB51NqfaFeSvpUHyUW26v1kTPYq
9pta36a3C6GT5f22IS3XmFCU5jOZm+6K4BR8A8usy33yHbT9T2V0jX/yQd9WiZPt
9M4sijvXtT0Lh3jayiOY4Q/kVQ==
-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:27 2024 by rpki-client on console.sobornost.net