Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/90487C5691390B1D7F5E129EBFEA377AA41D94C0.mft
File:                     90487C5691390B1D7F5E129EBFEA377AA41D94C0.mft (raw, json)
Hash identifier:          RADVjLPhguy9VAvBwzLts85pPw/mv9Jbdb21z5bNDgU=
Subject key identifier:   C7:52:60:A8:C2:5A:EF:B3:C7:53:30:0A:7A:52:DE:BE:14:72:25:41
Authority key identifier: 90:48:7C:56:91:39:0B:1D:7F:5E:12:9E:BF:EA:37:7A:A4:1D:94:C0
Certificate issuer:       /CN=90487C5691390B1D7F5E129EBFEA377AA41D94C0
Certificate serial:       4AD3B98FAB775E87E4AB2286FBE107750D7DD8A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90487C5691390B1D7F5E129EBFEA377AA41D94C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/90487C5691390B1D7F5E129EBFEA377AA41D94C0.mft
Manifest number:          01F5
Signing time:             Mon 08 Jan 2024 23:27:02 +0000
Manifest this update:     Mon 08 Jan 2024 23:22:02 +0000
Manifest next update:     Wed 10 Jan 2024 02:39:02 +0000
Files and hashes:         1: 34352e3233372e3234382e302f32322d3234203d3e20323638323937.roa (hash: 1vDE6lGPVTkaVJSzw8FviJkqFZRpSBVwojG1duXuCnE=)
                          2: 323830343a346630303a3a2f33322d3438203d3e20323638323937.roa (hash: I+qf4wMJ7bNPULD3C6XppvGhwLt0YioLpelH5Z6ZF8E=)
                          3: 90487C5691390B1D7F5E129EBFEA377AA41D94C0.crl (hash: 03g/ngDMDsTcgj6et0/KAoaQJN01x6XuXsRe35pTcwI=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/90487C5691390B1D7F5E129EBFEA377AA41D94C0.crl
                          rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/90487C5691390B1D7F5E129EBFEA377AA41D94C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90487C5691390B1D7F5E129EBFEA377AA41D94C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 01:32:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:d3:b9:8f:ab:77:5e:87:e4:ab:22:86:fb:e1:07:75:0d:7d:d8:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90487C5691390B1D7F5E129EBFEA377AA41D94C0
        Validity
            Not Before: Jan  8 23:22:02 2024 GMT
            Not After : Jan 10 02:39:02 2024 GMT
        Subject: CN=C75260A8C25AEFB3C753300A7A52DEBE14722541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0b:45:a3:38:fb:34:af:41:01:54:db:13:23:
                    26:1b:a2:78:c3:21:fb:cf:51:aa:27:35:9f:f1:ba:
                    e8:fe:ca:0a:2a:1f:1c:ac:7b:b7:49:58:1c:af:8a:
                    06:c5:8c:eb:b0:d6:39:37:2b:d8:48:25:df:08:71:
                    d5:65:66:79:17:90:6a:a4:06:79:89:e1:e1:f1:6e:
                    ff:ee:e6:3b:4b:55:3e:bd:ca:8f:b1:cc:b5:8f:65:
                    99:4d:54:1d:29:a0:43:9b:16:f0:fa:54:48:39:01:
                    f8:ab:c9:98:47:a0:0c:49:5f:bc:24:1c:cc:96:e1:
                    90:05:74:fd:e6:67:4a:49:e9:14:30:b6:31:90:77:
                    79:f7:4f:2a:fb:0f:ba:e5:c5:78:a2:12:4c:ed:8d:
                    43:8b:6b:37:8a:82:08:e6:5d:45:08:be:80:34:0d:
                    62:fd:f4:de:0d:40:a7:84:9f:3d:a9:2e:68:16:31:
                    b8:39:fd:67:f1:ea:83:06:70:67:36:1f:d2:bc:d6:
                    a6:35:e2:43:6d:cf:c2:52:90:bd:7f:95:79:58:a3:
                    20:b1:03:41:6f:e0:d0:40:38:34:2d:f1:1e:e2:fc:
                    99:d6:21:65:56:f7:84:8e:cb:c6:b5:be:58:6e:74:
                    51:9c:f2:9c:4e:7e:09:36:0b:50:40:b0:b5:71:e2:
                    a2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:52:60:A8:C2:5A:EF:B3:C7:53:30:0A:7A:52:DE:BE:14:72:25:41
            X509v3 Authority Key Identifier:
                keyid:90:48:7C:56:91:39:0B:1D:7F:5E:12:9E:BF:EA:37:7A:A4:1D:94:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/90487C5691390B1D7F5E129EBFEA377AA41D94C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90487C5691390B1D7F5E129EBFEA377AA41D94C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/90487C5691390B1D7F5E129EBFEA377AA41D94C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:9b:77:cb:f8:83:21:ea:cd:92:11:cc:0a:06:e6:6e:3b:bd:
         33:d7:4d:a8:a0:d4:83:dc:76:1b:ad:46:de:67:80:de:2b:a8:
         2f:e8:56:b8:68:72:64:1d:0e:97:8b:f2:16:28:e7:a5:c6:3a:
         3b:ae:97:ba:81:7c:8d:cb:f0:ab:82:da:73:53:ce:9e:4f:88:
         70:91:ac:42:11:13:71:18:68:e2:40:30:88:66:ef:d4:90:b6:
         64:2b:ec:19:0f:1a:2c:79:2b:87:37:a6:f2:e5:51:83:41:ce:
         b0:60:64:93:9e:54:90:91:09:6a:7f:57:b4:e1:61:67:fb:d2:
         c2:47:4e:36:87:fa:7b:f5:91:49:e6:81:61:8e:ff:f8:48:78:
         68:a0:45:0a:d6:32:06:c0:bf:84:92:dc:16:f8:ec:3a:de:06:
         9c:a2:9c:cb:76:55:9d:84:18:52:ba:03:e1:91:5b:21:84:f9:
         66:7f:3e:66:63:e8:0f:0c:03:0c:c7:cc:8a:fd:c2:32:ae:6a:
         ef:8b:16:b8:21:cd:b5:b0:07:26:29:1e:4e:14:de:f9:91:12:
         aa:c0:97:99:fd:6d:93:14:65:ca:51:22:c4:b6:36:cd:24:72:
         8b:43:40:e9:d3:ad:b4:43:1e:93:ce:ee:d2:62:1b:7d:8c:52:
         2a:49:41:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 02:15:19 2024 by rpki-client on console.sobornost.net