Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/0/D33C962FB2B67025DEA2D9E8E01FC160EC73B49A.mft
File:                     D33C962FB2B67025DEA2D9E8E01FC160EC73B49A.mft (raw, json)
Hash identifier:          rfBzbF/Dkl3h1qxTPSLQakYcuv1h2Ym38QhDFCXvRfs=
Subject key identifier:   65:14:59:78:1A:B4:59:ED:71:38:F4:9D:2F:9E:7A:FB:31:AE:4F:3F
Authority key identifier: D3:3C:96:2F:B2:B6:70:25:DE:A2:D9:E8:E0:1F:C1:60:EC:73:B4:9A
Certificate issuer:       /CN=D33C962FB2B67025DEA2D9E8E01FC160EC73B49A
Certificate serial:       51AB66DE6A51813C09953F3BBD5494B6F9715D0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D33C962FB2B67025DEA2D9E8E01FC160EC73B49A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/0/D33C962FB2B67025DEA2D9E8E01FC160EC73B49A.mft
Manifest number:          1C
Signing time:             Tue 09 Jan 2024 06:29:09 +0000
Manifest this update:     Tue 09 Jan 2024 06:24:09 +0000
Manifest next update:     Wed 10 Jan 2024 08:30:09 +0000
Files and hashes:         1: 323830343a3764303a3a2f33322d3332203d3e20323632333234.roa (hash: 89A6ePUMoaTjlc2slw47fcG6QxY4Wz+iSd7cddPF4Gk=)
                          2: D33C962FB2B67025DEA2D9E8E01FC160EC73B49A.crl (hash: +nGz0pKhVx4sDonnKO40M/pO4TUbIIBNeiKWXTBXN2k=)
                          3: 3137372e36372e32382e302f32322d3232203d3e20323632333234.roa (hash: OF43oH3Qh1fzxm4XmUZ1dEbTK3rvXcMhzXmLxZo20O4=)
                          4: 3137372e3132342e3133362e302f32322d3232203d3e20323632333234.roa (hash: 26ROsh8ySgAA5jx24rN6VtLcLd90DwK4tzRxCM+dqt8=)
                          5: 3134332e3230322e3132382e302f32322d3232203d3e20323632333234.roa (hash: Cx2YOCWzFoXOq2w7dpn+QcC3r0asSEiWbM/3mQHLkWA=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/0/D33C962FB2B67025DEA2D9E8E01FC160EC73B49A.crl
                          rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/0/D33C962FB2B67025DEA2D9E8E01FC160EC73B49A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D33C962FB2B67025DEA2D9E8E01FC160EC73B49A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 06:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ab:66:de:6a:51:81:3c:09:95:3f:3b:bd:54:94:b6:f9:71:5d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D33C962FB2B67025DEA2D9E8E01FC160EC73B49A
        Validity
            Not Before: Jan  9 06:24:09 2024 GMT
            Not After : Jan 10 08:30:09 2024 GMT
        Subject: CN=651459781AB459ED7138F49D2F9E7AFB31AE4F3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4c:ec:29:7b:d8:d4:33:49:d8:4e:c6:04:74:
                    83:a5:58:79:b1:55:8a:ca:09:1e:b7:5e:e3:fd:78:
                    de:d2:d5:06:e0:3f:73:8b:6f:33:66:9b:82:5a:b5:
                    9f:ce:84:57:b7:f9:bb:54:9e:37:53:86:6e:bc:5a:
                    04:ed:7a:c5:5c:f3:00:53:b1:cb:b2:ab:47:0c:ea:
                    c4:a5:94:20:40:6e:4c:25:db:14:95:29:ff:9d:ac:
                    70:8a:f3:31:23:82:67:55:19:78:fa:f4:ca:ee:e5:
                    40:85:8e:a4:58:cd:70:72:1c:e6:ea:39:c0:22:da:
                    96:33:9a:f5:c4:3c:2f:2e:45:54:d0:d0:99:01:8b:
                    a1:d1:03:8b:17:eb:d6:81:ed:c1:4d:8d:72:80:b0:
                    9c:be:1b:db:9e:8a:12:0a:db:99:a0:ab:eb:79:be:
                    de:ff:6c:1e:b5:db:fd:1e:48:ba:61:fa:8e:43:65:
                    8c:e1:99:fa:58:87:5c:3e:26:9b:53:c0:ac:fe:e0:
                    93:61:1d:04:20:a0:a9:27:69:99:fc:40:c0:fa:d7:
                    7f:4f:03:09:de:14:38:76:1a:19:98:7a:c8:fe:6f:
                    ba:9b:e4:13:a1:38:2f:01:ff:e0:61:30:2d:8c:06:
                    8e:6f:9d:23:d5:29:54:06:62:a4:b6:c9:1f:12:d1:
                    12:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:14:59:78:1A:B4:59:ED:71:38:F4:9D:2F:9E:7A:FB:31:AE:4F:3F
            X509v3 Authority Key Identifier:
                keyid:D3:3C:96:2F:B2:B6:70:25:DE:A2:D9:E8:E0:1F:C1:60:EC:73:B4:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/0/D33C962FB2B67025DEA2D9E8E01FC160EC73B49A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D33C962FB2B67025DEA2D9E8E01FC160EC73B49A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/0/D33C962FB2B67025DEA2D9E8E01FC160EC73B49A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:05:ee:87:1c:4c:50:5b:63:55:78:88:33:2b:ae:a5:80:ae:
         94:60:d9:c5:a3:86:74:e3:ef:eb:f2:f9:ae:de:5e:f0:5b:f2:
         fd:61:b6:13:c9:c8:ac:a1:53:c1:f6:55:ca:8d:03:5b:44:cf:
         5e:65:ad:ef:cf:84:98:2e:52:ae:e9:aa:12:31:46:c7:2c:00:
         d6:25:e5:8e:a7:cd:18:8c:e3:4c:2d:e2:55:d7:62:44:3d:b2:
         f3:13:44:f0:c8:94:e4:00:b0:9e:a6:58:28:8c:bb:91:1e:54:
         02:f4:91:4d:35:67:b0:37:68:04:08:60:9e:28:12:9e:65:88:
         cb:30:b9:de:dd:be:b5:4c:99:6c:e3:d6:29:9f:20:8d:30:ab:
         43:c5:f9:86:00:9d:d4:83:bd:dc:6d:fd:44:17:ad:e0:32:0d:
         97:43:82:b5:45:24:22:c7:55:68:cc:1e:41:c4:5a:7e:66:0f:
         c5:ec:3e:8a:e5:1c:34:b7:ac:54:2f:fe:64:a2:a0:1b:92:af:
         a6:bb:b2:01:2b:0f:f8:66:7b:f1:25:89:f1:68:cc:0f:0c:59:
         c1:08:e0:af:a8:71:e1:ec:ae:e4:07:ef:51:95:94:6e:3f:05:
         60:f9:5d:3f:0c:2e:65:5f:37:0c:d3:66:62:6c:45:d8:20:26:
         19:63:2b:34
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUUatm3mpRgTwJlT87vVSUtvlxXQowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDMzQzk2MkZCMkI2NzAyNURFQTJEOUU4RTAxRkMxNjBF
QzczQjQ5QTAeFw0yNDAxMDkwNjI0MDlaFw0yNDAxMTAwODMwMDlaMDMxMTAvBgNV
BAMTKDY1MTQ1OTc4MUFCNDU5RUQ3MTM4RjQ5RDJGOUU3QUZCMzFBRTRGM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWTOwpe9jUM0nYTsYEdIOlWHmx
VYrKCR63XuP9eN7S1QbgP3OLbzNmm4JatZ/OhFe3+btUnjdThm68WgTtesVc8wBT
scuyq0cM6sSllCBAbkwl2xSVKf+drHCK8zEjgmdVGXj69Mru5UCFjqRYzXByHObq
OcAi2pYzmvXEPC8uRVTQ0JkBi6HRA4sX69aB7cFNjXKAsJy+G9ueihIK25mgq+t5
vt7/bB612/0eSLph+o5DZYzhmfpYh1w+JptTwKz+4JNhHQQgoKknaZn8QMD6139P
AwneFDh2GhmYesj+b7qb5BOhOC8B/+BhMC2MBo5vnSPVKVQGYqS2yR8S0RJZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUZRRZeBq0We1xOPSdL556+zGuTz8wHwYDVR0j
BBgwFoAU0zyWL7K2cCXeotno4B/BYOxztJowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREVOTDhLS0hVajNyeVVjdjN4QTlYcENBR2RxTEJZZGRHU280QWU3eFlU
dzUvMC9EMzNDOTYyRkIyQjY3MDI1REVBMkQ5RThFMDFGQzE2MEVDNzNCNDlBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QzM0M5NjJGQjJCNjcwMjVE
RUEyRDlFOEUwMUZDMTYwRUM3M0I0OUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
REVOTDhLS0hVajNyeVVjdjN4QTlYcENBR2RxTEJZZGRHU280QWU3eFlUdzUvMC9E
MzNDOTYyRkIyQjY3MDI1REVBMkQ5RThFMDFGQzE2MEVDNzNCNDlBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUAXuhxxMUFtjVXiIMyuupYCulGDZxaOGdOPv6/L5rt5e8Fvy/WG2E8nIrKFT
wfZVyo0DW0TPXmWt78+EmC5SrumqEjFGxywA1iXljqfNGIzjTC3iVddiRD2y8xNE
8MiU5ACwnqZYKIy7kR5UAvSRTTVnsDdoBAhgnigSnmWIyzC53t2+tUyZbOPWKZ8g
jTCrQ8X5hgCd1IO93G39RBet4DINl0OCtUUkIsdVaMweQcRafmYPxew+iuUcNLes
VC/+ZKKgG5KvpruyASsP+GZ78SWJ8WjMDwxZwQjgr6hx4eyu5AfvUZWUbj8FYPld
PwwuZV83DNNmYmxF2CAmGWMrNA==
-----END CERTIFICATE-----
Generated at Tue Jan 9 07:51:47 2024 by rpki-client on console.sobornost.net