Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/2C887917A862CB216A71D8FB008F91E21DFC82C2.mft
File:                     2C887917A862CB216A71D8FB008F91E21DFC82C2.mft (raw, json)
Hash identifier:          nNwWfPmos+f4vuUvd74Q8LdQBkWlaNam3e2co9YZ5YA=
Subject key identifier:   3D:40:64:86:4C:1E:42:18:90:8F:C6:6A:F6:C9:C4:28:EE:B5:79:9A
Authority key identifier: 2C:88:79:17:A8:62:CB:21:6A:71:D8:FB:00:8F:91:E2:1D:FC:82:C2
Certificate issuer:       /CN=2C887917A862CB216A71D8FB008F91E21DFC82C2
Certificate serial:       735CD032752AE3F5F8855472DEAD7F8C0D7A6666
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C887917A862CB216A71D8FB008F91E21DFC82C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/2C887917A862CB216A71D8FB008F91E21DFC82C2.mft
Manifest number:          6A
Signing time:             Mon 08 Jan 2024 22:56:52 +0000
Manifest this update:     Mon 08 Jan 2024 22:51:52 +0000
Manifest next update:     Tue 09 Jan 2024 23:13:52 +0000
Files and hashes:         1: 3136382e302e3136342e302f32342d3234203d3e20323633343833.roa (hash: QTKl4Xv6tL/JgTEcFNfw14VD7cBtxJzJb2PhvwZzE6A=)
                          2: 2C887917A862CB216A71D8FB008F91E21DFC82C2.crl (hash: rK/cjQlgN6wRlKnZidVndC0PkMZY5kfwx+G638VW0EM=)
                          3: 3136382e302e3136362e302f32342d3234203d3e20323633343833.roa (hash: GL9ZwUbpD5YAqlThzr1+eAPlRjkTziwPisXP81FUMys=)
                          4: 3136382e302e3136352e302f32342d3234203d3e20323633343833.roa (hash: nvc4C8qUBEpPvdgVcetbx2HwEx/1aYtybNxoQx0dkxk=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/2C887917A862CB216A71D8FB008F91E21DFC82C2.crl
                          rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/2C887917A862CB216A71D8FB008F91E21DFC82C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C887917A862CB216A71D8FB008F91E21DFC82C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Jan 2024 23:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:5c:d0:32:75:2a:e3:f5:f8:85:54:72:de:ad:7f:8c:0d:7a:66:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C887917A862CB216A71D8FB008F91E21DFC82C2
        Validity
            Not Before: Jan  8 22:51:52 2024 GMT
            Not After : Jan  9 23:13:52 2024 GMT
        Subject: CN=3D4064864C1E4218908FC66AF6C9C428EEB5799A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:88:da:6b:0c:96:da:d4:7c:da:4f:e8:4d:31:
                    a4:81:46:44:a2:62:01:11:cd:37:1f:5a:74:08:95:
                    bf:4a:ef:f7:1f:12:a8:e9:db:23:7b:40:c7:65:50:
                    6e:cf:a9:b3:ee:ee:4f:8e:9f:94:89:13:0e:a9:15:
                    93:a5:8d:ef:39:f3:9b:a6:e6:bd:e1:c6:7b:8a:f2:
                    70:e2:49:4a:c8:14:8b:51:be:dd:ae:ae:19:16:5a:
                    01:00:93:de:e9:f9:64:c3:db:1b:7b:a6:3a:9d:66:
                    f2:b6:f2:58:f1:55:95:ce:8f:f3:b7:54:06:53:17:
                    d9:ef:c3:e4:f6:45:4d:93:75:1b:34:91:ee:3a:45:
                    99:3a:1d:52:d7:cf:f4:af:42:dc:98:85:60:dc:25:
                    e4:6d:2d:7f:4b:44:10:e5:e0:41:8c:37:51:32:21:
                    04:9d:fc:71:60:d7:fe:d7:6e:b7:ea:52:f7:99:8e:
                    00:6e:b6:0e:83:16:30:0b:38:32:c9:90:e3:c8:47:
                    0c:79:ed:31:dd:e9:ed:85:ec:a5:d3:c3:40:77:f3:
                    88:d4:aa:73:8f:ba:51:de:b1:67:5a:15:60:8a:1f:
                    d3:86:d2:41:87:d1:e8:1f:87:e3:a6:b9:dd:39:3d:
                    ab:0f:65:2c:36:03:16:7d:cb:2a:01:9b:4c:e0:26:
                    9f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:40:64:86:4C:1E:42:18:90:8F:C6:6A:F6:C9:C4:28:EE:B5:79:9A
            X509v3 Authority Key Identifier:
                keyid:2C:88:79:17:A8:62:CB:21:6A:71:D8:FB:00:8F:91:E2:1D:FC:82:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/2C887917A862CB216A71D8FB008F91E21DFC82C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C887917A862CB216A71D8FB008F91E21DFC82C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/2C887917A862CB216A71D8FB008F91E21DFC82C2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:8b:ea:ea:98:ed:7d:54:b0:f9:c2:d2:0f:23:56:18:ce:43:
         64:99:ef:21:79:ef:cd:ed:6a:2b:22:af:3e:3a:5b:36:7c:42:
         9e:12:9f:91:3b:19:5a:63:6d:7e:c9:d9:df:12:84:79:63:70:
         ae:20:a7:13:02:4a:c0:fe:4e:cf:ba:12:72:4f:b3:1f:53:66:
         c0:e8:65:6b:9a:ab:ac:d4:cf:89:d7:43:a3:5a:a1:bd:77:77:
         81:e0:68:e9:9b:0d:4f:52:84:ad:0a:d3:fe:e3:87:f2:a9:02:
         fb:92:ed:0c:81:7b:ac:ba:f8:47:e7:98:0e:87:b0:d0:e6:51:
         81:f0:e9:d6:a3:e5:a7:81:34:51:2e:e5:ae:25:09:cd:fc:5a:
         d7:c0:88:76:d0:48:3a:d3:64:45:cf:24:83:4c:88:65:32:89:
         15:65:67:e6:92:42:43:12:37:25:06:fe:f6:eb:ad:12:17:8f:
         6f:db:d5:b0:c0:ee:03:3d:cb:bf:b7:9e:72:b7:f4:29:dc:2f:
         90:f1:5a:af:07:cf:23:4a:ed:2c:fc:15:df:38:af:d9:d6:f9:
         f4:3e:c9:89:55:18:fc:07:3c:96:49:5a:5e:e0:28:86:c7:69:
         8d:2d:a0:a2:57:67:a9:30:2b:90:5e:12:6b:d6:1c:8f:53:f7:
         6c:9a:f8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 00:20:34 2024 by rpki-client on console.sobornost.net