Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/633AE2F2CE28E6F012FF684248D5EB782655014B.mft
File:                     633AE2F2CE28E6F012FF684248D5EB782655014B.mft (raw, json)
Hash identifier:          2Qe4fSw+IK+/tSBDiQl9dS1F21XnSbQBel3Dyh5PyMc=
Subject key identifier:   FA:F0:BD:A7:C9:0E:82:36:1B:8C:9B:C0:49:01:6A:BA:33:2C:B8:80
Authority key identifier: 63:3A:E2:F2:CE:28:E6:F0:12:FF:68:42:48:D5:EB:78:26:55:01:4B
Certificate issuer:       /CN=633AE2F2CE28E6F012FF684248D5EB782655014B
Certificate serial:       6B1B9347719761DAB8FCF2B2C647A2CF3EC1D685
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/633AE2F2CE28E6F012FF684248D5EB782655014B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/633AE2F2CE28E6F012FF684248D5EB782655014B.mft
Manifest number:          01B1
Signing time:             Tue 09 Jan 2024 05:59:14 +0000
Manifest this update:     Tue 09 Jan 2024 05:54:14 +0000
Manifest next update:     Wed 10 Jan 2024 08:26:14 +0000
Files and hashes:         1: 34352e3136372e35322e302f32322d3332203d3e20323637393931.roa (hash: jdtom8ws4bBshJE7anC0lWMXqto+gy9G7ycpPRlBF0g=)
                          2: 323830343a353635343a3a2f33322d313238203d3e20323637393931.roa (hash: 9ivIRb3VCge8ObTI4y+fA3Wo/BWmtTjR6pGA9p630TU=)
                          3: 633AE2F2CE28E6F012FF684248D5EB782655014B.crl (hash: T3V0+rKF0zXgegxzHwaRERFUyt7KLt0/mazmg9UyDjk=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/633AE2F2CE28E6F012FF684248D5EB782655014B.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/633AE2F2CE28E6F012FF684248D5EB782655014B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/633AE2F2CE28E6F012FF684248D5EB782655014B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 06:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:1b:93:47:71:97:61:da:b8:fc:f2:b2:c6:47:a2:cf:3e:c1:d6:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633AE2F2CE28E6F012FF684248D5EB782655014B
        Validity
            Not Before: Jan  9 05:54:14 2024 GMT
            Not After : Jan 10 08:26:14 2024 GMT
        Subject: CN=FAF0BDA7C90E82361B8C9BC049016ABA332CB880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a3:ef:1c:74:c5:49:ef:87:7d:c5:31:22:9b:
                    5b:7e:f1:e9:ad:6c:c5:8f:c1:a3:eb:68:61:ec:3b:
                    87:06:22:10:b8:1c:de:a1:46:09:a8:29:57:0b:bc:
                    b6:37:44:ad:58:f0:e1:04:e7:ea:94:5f:4e:ef:21:
                    2a:d7:41:8e:6b:49:77:74:78:36:56:25:8b:7b:33:
                    e8:b7:ac:dd:e1:04:e6:8f:32:69:ea:02:27:05:b5:
                    cd:94:46:4b:9f:4f:5b:10:72:e6:cd:90:3d:12:50:
                    6f:b6:19:2d:29:7f:c4:31:95:7d:27:98:af:13:91:
                    ea:fe:bd:4b:e7:26:8d:7f:e1:ba:36:85:77:f9:7d:
                    f7:83:f7:08:b4:e3:b2:81:49:ab:33:b2:14:45:8c:
                    9a:c0:e7:87:50:aa:8c:0a:ff:73:3a:14:72:99:32:
                    bb:b8:9d:3d:98:eb:15:5c:b6:75:ad:c1:9c:df:b1:
                    e9:e4:30:6f:29:60:57:b0:61:55:ae:e9:38:61:94:
                    5a:2b:96:fd:c7:e5:5b:a1:0b:60:f9:cc:ff:42:91:
                    1e:c9:90:74:d8:c8:0d:b9:a2:27:2b:f8:eb:25:29:
                    3b:32:62:56:e7:c0:f7:34:dc:e9:cf:3a:3d:60:eb:
                    cd:5a:34:0c:32:7f:9d:00:6f:81:e2:02:a6:8b:c9:
                    6c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F0:BD:A7:C9:0E:82:36:1B:8C:9B:C0:49:01:6A:BA:33:2C:B8:80
            X509v3 Authority Key Identifier:
                keyid:63:3A:E2:F2:CE:28:E6:F0:12:FF:68:42:48:D5:EB:78:26:55:01:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/633AE2F2CE28E6F012FF684248D5EB782655014B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/633AE2F2CE28E6F012FF684248D5EB782655014B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/633AE2F2CE28E6F012FF684248D5EB782655014B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:e3:e7:5f:28:3f:f7:c9:22:1c:3c:19:e2:97:7f:81:71:10:
         2c:cd:24:87:66:3b:cb:63:58:89:86:e0:cd:83:b8:49:9c:11:
         65:66:9e:96:f9:31:d8:49:eb:ed:5a:42:e3:8f:cf:c8:08:8b:
         20:53:c0:e9:d3:34:9b:a0:f5:48:8a:99:3e:96:9a:b5:fc:65:
         19:7b:13:f0:a0:4d:dc:fb:9a:63:5e:15:1a:9d:71:e1:5b:66:
         89:33:dc:f2:5e:5b:87:77:84:b2:47:c1:08:be:91:ba:38:d3:
         57:ba:d8:8d:ee:70:3a:14:d2:03:4e:00:89:98:94:a8:8d:a2:
         69:b2:5e:dc:2a:da:6c:b7:38:2d:ea:35:fc:ef:ba:e5:38:03:
         12:2f:6b:13:47:bb:21:74:d1:c2:0b:fe:00:09:80:ad:91:3c:
         96:88:21:ef:65:9f:b7:76:3f:2e:97:3d:31:6c:84:cd:04:7d:
         8f:49:07:cb:a2:8a:23:de:30:87:13:8c:c5:89:af:25:76:01:
         db:80:49:c5:21:76:50:ec:18:07:7b:72:77:d7:c0:cb:59:72:
         30:b2:39:1e:2b:37:25:a2:25:b0:0f:01:9c:d9:e9:44:6f:75:
         65:bf:a9:bc:60:2b:5f:0e:da:bb:56:c4:11:f8:3f:14:e5:14:
         ec:b2:93:16
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUaxuTR3GXYdq4/PKyxkeizz7B1oUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMzQUUyRjJDRTI4RTZGMDEyRkY2ODQyNDhENUVCNzgy
NjU1MDE0QjAeFw0yNDAxMDkwNTU0MTRaFw0yNDAxMTAwODI2MTRaMDMxMTAvBgNV
BAMTKEZBRjBCREE3QzkwRTgyMzYxQjhDOUJDMDQ5MDE2QUJBMzMyQ0I4ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5o+8cdMVJ74d9xTEim1t+8emt
bMWPwaPraGHsO4cGIhC4HN6hRgmoKVcLvLY3RK1Y8OEE5+qUX07vISrXQY5rSXd0
eDZWJYt7M+i3rN3hBOaPMmnqAicFtc2URkufT1sQcubNkD0SUG+2GS0pf8QxlX0n
mK8Tker+vUvnJo1/4bo2hXf5ffeD9wi047KBSaszshRFjJrA54dQqowK/3M6FHKZ
Mru4nT2Y6xVctnWtwZzfsenkMG8pYFewYVWu6ThhlForlv3H5VuhC2D5zP9CkR7J
kHTYyA25oicr+OslKTsyYlbnwPc03OnPOj1g681aNAwyf50Ab4HiAqaLyWwhAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU+vC9p8kOgjYbjJvASQFqujMsuIAwHwYDVR0j
BBgwFoAUYzri8s4o5vAS/2hCSNXreCZVAUswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDhUVVNjMkxUcEhnTHRhQmFvMTlZVFFSN0tFM2ZrSDRhRFlUQzJpMTF5
Mk4vMC82MzNBRTJGMkNFMjhFNkYwMTJGRjY4NDI0OEQ1RUI3ODI2NTUwMTRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYzM0FFMkYyQ0UyOEU2RjAx
MkZGNjg0MjQ4RDVFQjc4MjY1NTAxNEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RDhUVVNjMkxUcEhnTHRhQmFvMTlZVFFSN0tFM2ZrSDRhRFlUQzJpMTF5Mk4vMC82
MzNBRTJGMkNFMjhFNkYwMTJGRjY4NDI0OEQ1RUI3ODI2NTUwMTRCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALePnXyg/98kiHDwZ4pd/gXEQLM0kh2Y7y2NYiYbgzYO4SZwRZWaelvkx2Enr
7VpC44/PyAiLIFPA6dM0m6D1SIqZPpaatfxlGXsT8KBN3PuaY14VGp1x4VtmiTPc
8l5bh3eEskfBCL6RujjTV7rYje5wOhTSA04AiZiUqI2iabJe3CrabLc4Leo1/O+6
5TgDEi9rE0e7IXTRwgv+AAmArZE8logh72Wft3Y/Lpc9MWyEzQR9j0kHy6KKI94w
hxOMxYmvJXYB24BJxSF2UOwYB3tyd9fAy1lyMLI5His3JaIlsA8BnNnpRG91Zb+p
vGArXw7au1bEEfg/FOUU7LKTFg==
-----END CERTIFICATE-----
Generated at Tue Jan 9 07:51:45 2024 by rpki-client on console.sobornost.net