Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/DA7463B06FBF786EF5A3F04E9AD6D93FBF285DC7.mft
File:                     DA7463B06FBF786EF5A3F04E9AD6D93FBF285DC7.mft (raw, json)
Hash identifier:          m3xQ4ZtqNuq19xmdPd89bu+n2qlepqGkzrZwCvFrENg=
Subject key identifier:   20:20:68:8E:94:41:3D:E3:ED:62:1E:70:6F:CA:0D:2E:B7:DF:C1:6C
Authority key identifier: DA:74:63:B0:6F:BF:78:6E:F5:A3:F0:4E:9A:D6:D9:3F:BF:28:5D:C7
Certificate issuer:       /CN=DA7463B06FBF786EF5A3F04E9AD6D93FBF285DC7
Certificate serial:       36782DBDCA78A1E91A4CEA47914B336177A507AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA7463B06FBF786EF5A3F04E9AD6D93FBF285DC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/DA7463B06FBF786EF5A3F04E9AD6D93FBF285DC7.mft
Manifest number:          2A
Signing time:             Mon 08 Jan 2024 23:04:17 +0000
Manifest this update:     Mon 08 Jan 2024 22:59:17 +0000
Manifest next update:     Wed 10 Jan 2024 01:19:17 +0000
Files and hashes:         1: 34352e3138332e3231332e302f32342d3234203d3e20323639323932.roa (hash: SoWBKYbWPmQFp668scMq7YeyRI5quRkRVRLHYKZiRJs=)
                          2: 34352e3138332e3231352e302f32342d3234203d3e20323639323932.roa (hash: MpQcJqpECQXyBqiw37TbUpxC+cQLu8CCN1DCjtx/UBU=)
                          3: 34352e3138332e3231322e302f32342d3234203d3e20323639323932.roa (hash: 4vcK6GOxhkGFIgz9/r7mmu9EcwZTuTqhk25ffmY7HVg=)
                          4: 34352e3138332e3231342e302f32332d3233203d3e20323639323932.roa (hash: y1F16sFIZwQR8waiZvc33+Kjl1JMKwrPyu8iYvSopJQ=)
                          5: 323830343a363235633a3a2f33332d3333203d3e20323639323932.roa (hash: L5+rFxex4869xaRCb+LtE5P8TNDg/0gftElL3I+65DM=)
                          6: 34352e3138332e3231342e302f32342d3234203d3e20323639323932.roa (hash: Kpu98ow6UyJ1i61zc8DAn1e2Hb3tOcmgB76/DdRnDfg=)
                          7: 34352e3138332e3231322e302f32332d3233203d3e20323639323932.roa (hash: rZQT9hlMLOKBhGJV7SQRykYqm/bgzFpN4dsQin+hNgQ=)
                          8: 34352e3138332e3231322e302f32322d3232203d3e20323639323932.roa (hash: SEF6++iIKDSXMEhTtt1zPDgUf7K4gn8VOm/o2p1gp+g=)
                          9: DA7463B06FBF786EF5A3F04E9AD6D93FBF285DC7.crl (hash: uYFIiKDgBb5R7sKgpg7xVcQ9vje86l8KsCzKVyG0xLs=)
                          10: 323830343a363235633a3a2f33322d3332203d3e20323639323932.roa (hash: 84S+jgIHMobMmnJn782qkx92hT2zUVoTKjacUBekUQ4=)
                          11: 323830343a363235633a383030303a3a2f33332d3333203d3e20323639323932.roa (hash: DlYdzAxrkDxIjFWGy9JpcMvzvwEIAgbaPDbQZp868gI=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/DA7463B06FBF786EF5A3F04E9AD6D93FBF285DC7.crl
                          rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/DA7463B06FBF786EF5A3F04E9AD6D93FBF285DC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA7463B06FBF786EF5A3F04E9AD6D93FBF285DC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Jan 2024 23:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:78:2d:bd:ca:78:a1:e9:1a:4c:ea:47:91:4b:33:61:77:a5:07:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA7463B06FBF786EF5A3F04E9AD6D93FBF285DC7
        Validity
            Not Before: Jan  8 22:59:17 2024 GMT
            Not After : Jan 10 01:19:17 2024 GMT
        Subject: CN=2020688E94413DE3ED621E706FCA0D2EB7DFC16C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ca:d2:1a:52:b6:7e:fd:10:74:75:8b:9c:99:
                    d4:58:f4:52:d6:4b:3a:00:2a:a5:4b:82:08:07:5b:
                    ee:6f:2a:c9:01:1b:71:97:30:7a:ff:7a:71:67:02:
                    eb:37:5e:e5:a8:6c:9a:38:0d:35:ae:b5:3d:92:9e:
                    9a:7d:63:c3:03:11:b7:50:46:a4:3d:1e:db:45:2d:
                    1d:71:d8:b4:09:89:24:4a:c6:04:32:1c:f5:d0:e4:
                    26:aa:bd:23:91:3e:20:79:0e:d8:33:89:d1:26:31:
                    53:04:31:db:68:f7:2f:74:35:94:67:b8:3f:99:cc:
                    82:5c:67:cc:1c:1d:a2:2b:1f:e4:cd:7b:21:0c:c6:
                    67:fb:20:17:82:6d:24:18:47:59:27:6b:28:75:63:
                    98:52:92:c6:b2:57:64:e9:a2:08:fd:03:57:0e:b7:
                    db:41:fb:28:ef:47:f7:bf:8c:ca:20:e7:44:75:a9:
                    7b:9d:c6:ca:04:b1:6f:de:5d:4a:6d:44:87:9a:0a:
                    f3:23:3e:9a:65:84:5d:04:84:5b:0a:e4:64:28:ed:
                    99:8d:c6:68:b4:31:cf:cb:1e:34:e1:3f:4e:b7:32:
                    cb:61:c3:a5:ee:84:0c:b7:80:c3:aa:ec:40:24:03:
                    bc:af:8e:fe:08:f8:af:d1:0b:01:cf:72:13:0d:ca:
                    ae:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:20:68:8E:94:41:3D:E3:ED:62:1E:70:6F:CA:0D:2E:B7:DF:C1:6C
            X509v3 Authority Key Identifier:
                keyid:DA:74:63:B0:6F:BF:78:6E:F5:A3:F0:4E:9A:D6:D9:3F:BF:28:5D:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/DA7463B06FBF786EF5A3F04E9AD6D93FBF285DC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA7463B06FBF786EF5A3F04E9AD6D93FBF285DC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/DA7463B06FBF786EF5A3F04E9AD6D93FBF285DC7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:78:4e:7c:22:74:67:2d:c9:73:bf:14:c0:51:35:dd:f4:24:
         51:a9:d0:97:27:37:45:e6:40:05:aa:92:34:2a:4f:3c:96:fb:
         17:40:f7:fa:14:09:a9:5a:fa:18:4b:89:ed:e3:98:fc:47:28:
         3a:9b:ec:d1:9a:6c:ba:f8:24:b7:fd:a3:e2:5c:30:be:1d:31:
         04:d9:3a:83:db:fd:6b:ae:52:81:85:61:79:2d:41:e9:7e:3a:
         cf:b5:fe:8f:82:23:3d:b0:6b:a3:47:16:a7:cf:c2:8d:d6:28:
         50:82:31:1c:9b:58:c7:fb:74:0c:27:99:16:43:c5:78:ac:f3:
         04:24:1b:a9:61:79:06:da:2d:30:43:eb:5f:8d:df:41:ed:3f:
         f6:a1:70:c2:07:c2:d0:7e:9b:74:28:16:72:17:54:1f:99:c8:
         11:95:f2:31:b0:f9:8f:9e:e5:97:f9:f9:f9:57:00:2b:ff:ba:
         ad:d9:d8:36:5f:5f:f8:06:d2:74:f9:10:52:93:d4:94:8a:c4:
         d1:64:9d:45:71:43:36:bf:db:47:2d:a8:36:3f:56:a7:06:0b:
         8e:62:ab:cc:bb:66:2d:40:96:d9:3c:b6:f2:81:8d:f2:e3:3d:
         8e:00:fd:12:bb:ef:c2:27:87:63:64:42:10:c2:e4:24:a5:42:
         c1:da:3d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 00:20:33 2024 by rpki-client on console.sobornost.net