Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/AFE9B7AAD42F019C0F2CD5A5714DCAAF7C339A04.mft
File:                     AFE9B7AAD42F019C0F2CD5A5714DCAAF7C339A04.mft (raw, json)
Hash identifier:          CSM8IWxUocRIa56Sp8d4lNvPf6xVV2U9Nn5hop7w0TA=
Subject key identifier:   A7:57:E3:78:80:49:EE:1A:2A:2D:06:9F:36:B7:33:94:3B:B2:BA:3B
Authority key identifier: AF:E9:B7:AA:D4:2F:01:9C:0F:2C:D5:A5:71:4D:CA:AF:7C:33:9A:04
Certificate issuer:       /CN=AFE9B7AAD42F019C0F2CD5A5714DCAAF7C339A04
Certificate serial:       68EEAB781AC96335ED0AB3BEE3C554BDD7285C97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFE9B7AAD42F019C0F2CD5A5714DCAAF7C339A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/AFE9B7AAD42F019C0F2CD5A5714DCAAF7C339A04.mft
Manifest number:          30
Signing time:             Tue 09 Jan 2024 05:41:25 +0000
Manifest this update:     Tue 09 Jan 2024 05:36:25 +0000
Manifest next update:     Wed 10 Jan 2024 06:50:25 +0000
Files and hashes:         1: AFE9B7AAD42F019C0F2CD5A5714DCAAF7C339A04.crl (hash: cADOyVU/tUMwRGa/fzPPLTQsJ/OZg/PDRZahaASWiCg=)
                          2: 3137372e36362e38302e302f32312d3234203d3e20323632343930.roa (hash: fMrZh9DPROSESoS7Bl+w8k/pHydUL2jCVCvMSMeBisU=)
                          3: 323830343a3531343a3a2f33322d3438203d3e20323632343930.roa (hash: Islo/fuOJhVp5yEo0rEQbBJ+c8mLuCidjGY86cgwIlQ=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/AFE9B7AAD42F019C0F2CD5A5714DCAAF7C339A04.crl
                          rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/AFE9B7AAD42F019C0F2CD5A5714DCAAF7C339A04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFE9B7AAD42F019C0F2CD5A5714DCAAF7C339A04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 06:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ee:ab:78:1a:c9:63:35:ed:0a:b3:be:e3:c5:54:bd:d7:28:5c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFE9B7AAD42F019C0F2CD5A5714DCAAF7C339A04
        Validity
            Not Before: Jan  9 05:36:25 2024 GMT
            Not After : Jan 10 06:50:25 2024 GMT
        Subject: CN=A757E3788049EE1A2A2D069F36B733943BB2BA3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6c:e1:aa:f6:ec:9c:96:df:2a:5c:13:6a:68:
                    bf:19:b5:35:69:93:cf:08:04:d3:97:09:a7:3d:39:
                    2c:cb:a7:19:41:61:85:ed:f7:84:ea:8a:3b:e8:24:
                    13:4e:ea:d0:e1:3b:14:51:cf:c1:e8:fc:8e:41:8e:
                    e0:aa:03:c5:40:a4:8f:de:9e:78:9f:de:f4:78:7f:
                    8a:b5:e8:61:e7:da:7b:56:33:17:ea:4c:6b:5a:c2:
                    ad:7a:09:fc:8a:59:bc:18:c2:23:64:08:1a:95:66:
                    1a:93:c3:21:f3:e5:a5:f5:11:d2:b0:f7:0f:55:5d:
                    43:62:80:8a:56:90:0a:c9:1d:95:00:6b:e1:7e:6f:
                    bc:df:d3:2f:24:4e:62:1d:ad:8a:68:5b:86:dd:f9:
                    bc:48:07:7e:0e:3a:80:2d:d8:e9:c3:f3:5e:8d:5d:
                    2a:a9:70:6f:b4:2a:e0:82:0f:b8:3a:43:ba:42:8a:
                    2d:b5:8f:f0:46:09:eb:bf:1e:6e:3b:64:b5:46:9a:
                    e3:1d:b4:84:d4:c0:cb:2a:ac:c3:45:5b:1d:df:8d:
                    c9:f9:1c:e1:a8:10:c9:ff:fc:69:7e:62:14:71:03:
                    9b:7e:be:72:18:3d:3e:9e:05:0c:fe:5d:22:0d:55:
                    8e:d8:76:d0:5a:20:2c:1e:34:c8:91:f4:95:4d:23:
                    ff:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:57:E3:78:80:49:EE:1A:2A:2D:06:9F:36:B7:33:94:3B:B2:BA:3B
            X509v3 Authority Key Identifier:
                keyid:AF:E9:B7:AA:D4:2F:01:9C:0F:2C:D5:A5:71:4D:CA:AF:7C:33:9A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/AFE9B7AAD42F019C0F2CD5A5714DCAAF7C339A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFE9B7AAD42F019C0F2CD5A5714DCAAF7C339A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/AFE9B7AAD42F019C0F2CD5A5714DCAAF7C339A04.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:d9:6d:97:af:df:1b:7a:0e:a7:a7:96:6b:6c:2b:c9:cd:94:
         ce:8d:82:29:3f:5a:a0:c2:d2:7d:67:f3:8b:f2:e5:03:ba:6c:
         74:d8:7f:ff:32:36:3e:d6:d5:ad:e9:4f:45:54:19:0f:7c:1b:
         64:23:b7:a6:aa:55:a1:29:26:9a:b0:c4:cb:3b:bb:12:eb:89:
         1d:85:82:16:7f:40:a4:12:d5:9f:91:0c:98:88:2b:e5:c2:f7:
         9b:30:8b:a0:45:25:96:9e:53:15:a4:0e:3c:97:68:33:36:52:
         5e:ce:77:df:8e:9f:bb:b8:d7:fc:23:62:fd:ef:bf:40:7a:03:
         53:a9:5d:c5:0f:39:cc:14:2d:6a:62:34:27:f9:30:3c:bb:9d:
         5c:8e:d2:36:48:b7:95:c8:f9:c0:4a:25:52:c5:6e:ff:82:b4:
         7c:d3:97:6e:b2:47:20:ca:23:25:87:a1:cc:40:79:0e:1e:a7:
         52:36:6c:66:28:9e:c9:24:50:cf:27:0a:21:21:74:62:99:09:
         58:b6:e9:45:75:cd:d4:dc:43:40:13:d1:18:57:13:a8:9e:a4:
         00:15:6a:e9:74:88:aa:04:39:4b:64:5f:7b:86:95:39:8a:04:
         f1:db:a1:a5:81:f0:c9:10:d8:af:ca:58:54:7c:73:06:af:12:
         eb:19:f3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 07:51:44 2024 by rpki-client on console.sobornost.net