Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DRD4Xfa5Upoxjfu97t7BvhtnQfAekWaC5mGn1kG4tbJt/0/025C56B4E36C057AED48A87FF1BDDF6518C63C27.mft
File:                     025C56B4E36C057AED48A87FF1BDDF6518C63C27.mft (raw, json)
Hash identifier:          1f2aF0dsYGLhRCUGQJSZoPgqu3qWBQvN9GJ0Z4Yo+6k=
Subject key identifier:   A2:B1:6C:AC:2F:C7:17:B3:BB:EC:F4:41:BB:53:03:9B:D5:34:0B:D4
Authority key identifier: 02:5C:56:B4:E3:6C:05:7A:ED:48:A8:7F:F1:BD:DF:65:18:C6:3C:27
Certificate issuer:       /CN=025C56B4E36C057AED48A87FF1BDDF6518C63C27
Certificate serial:       1C49D0F784CFCDDBD3321755CA3737552C59E7E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/025C56B4E36C057AED48A87FF1BDDF6518C63C27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRD4Xfa5Upoxjfu97t7BvhtnQfAekWaC5mGn1kG4tbJt/0/025C56B4E36C057AED48A87FF1BDDF6518C63C27.mft
Manifest number:          69
Signing time:             Tue 09 Jan 2024 04:26:05 +0000
Manifest this update:     Tue 09 Jan 2024 04:21:05 +0000
Manifest next update:     Wed 10 Jan 2024 05:50:05 +0000
Files and hashes:         1: 34352e3138372e38342e302f32332d3233203d3e20323639353839.roa (hash: ijYhYzzYGj8hxy8WCrLnOTtH6EbHi0dC++gZtn/EUaM=)
                          2: 323830343a363665343a323a3a2f34382d3438203d3e20323639353839.roa (hash: 0XXLnJawUMwpgWNdzhsfxeHLllkIK+gj0IUE7w73Pco=)
                          3: 34352e3138372e38362e302f32332d3233203d3e20323639353839.roa (hash: 4Bj22xlCBSCfpkcNNQPmooVugSjwO1dGmCpeF2jdXNc=)
                          4: 025C56B4E36C057AED48A87FF1BDDF6518C63C27.crl (hash: 92bkwG8d0YnvCsKcALeAMP648CYPZA6DVEWJt1Q8OE4=)
                          5: 323830343a363665343a3a2f33322d3332203d3e20323639353839.roa (hash: Gz9g0CCdvdtP14QUXsidN/MV0RZQb9Pd3zfTGFO75LI=)
                          6: 34352e3138372e38342e302f32322d3232203d3e20323639353839.roa (hash: vFcqjD+KuITvOFhuaPVZCeuRc4F9WW3dylpkGnEX6ts=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRD4Xfa5Upoxjfu97t7BvhtnQfAekWaC5mGn1kG4tbJt/0/025C56B4E36C057AED48A87FF1BDDF6518C63C27.crl
                          rsync://rpki-repo.registro.br/repo/DRD4Xfa5Upoxjfu97t7BvhtnQfAekWaC5mGn1kG4tbJt/0/025C56B4E36C057AED48A87FF1BDDF6518C63C27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/025C56B4E36C057AED48A87FF1BDDF6518C63C27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 05:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:49:d0:f7:84:cf:cd:db:d3:32:17:55:ca:37:37:55:2c:59:e7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=025C56B4E36C057AED48A87FF1BDDF6518C63C27
        Validity
            Not Before: Jan  9 04:21:05 2024 GMT
            Not After : Jan 10 05:50:05 2024 GMT
        Subject: CN=A2B16CAC2FC717B3BBECF441BB53039BD5340BD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3b:74:16:b3:9f:5f:ee:b1:01:f2:d5:73:a0:
                    c1:8b:9f:01:66:b2:54:d7:7e:fa:cc:27:bc:87:a4:
                    cb:d9:ad:6c:81:1e:11:60:e9:11:a2:ff:61:2c:58:
                    f0:48:6e:7d:8a:2e:07:4b:87:c9:e1:5b:05:95:1f:
                    27:64:a4:8a:1c:c5:15:f8:4b:d5:82:a3:6c:f5:d2:
                    cd:72:84:eb:26:0f:a0:65:63:3d:bc:a7:a8:7c:d3:
                    72:4e:24:ff:d5:a7:c3:83:87:72:42:62:28:f9:70:
                    dd:d9:eb:8d:5c:e8:36:a9:b9:22:de:11:81:a9:20:
                    8b:38:e1:ce:57:58:f2:1e:24:0f:5b:17:f6:65:65:
                    67:04:f6:9d:25:86:ee:87:bb:be:02:1b:3d:72:49:
                    77:5c:34:1e:23:e6:37:34:01:f2:cf:06:e9:1b:e3:
                    63:62:89:ba:9e:bb:60:6e:04:ab:2c:64:7a:3f:c2:
                    fe:e1:e2:98:17:90:18:63:23:25:a3:1c:a3:01:17:
                    0f:02:6c:02:61:9b:2a:cc:f5:2f:e5:54:1f:a2:7d:
                    bd:9e:4b:07:ce:29:01:db:e4:4b:94:96:ec:52:80:
                    14:88:f0:98:2d:ca:69:cf:0e:e6:a5:dd:c7:d1:8c:
                    48:6a:67:cf:15:08:c8:d0:1e:8b:43:1b:85:68:cb:
                    8b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B1:6C:AC:2F:C7:17:B3:BB:EC:F4:41:BB:53:03:9B:D5:34:0B:D4
            X509v3 Authority Key Identifier:
                keyid:02:5C:56:B4:E3:6C:05:7A:ED:48:A8:7F:F1:BD:DF:65:18:C6:3C:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRD4Xfa5Upoxjfu97t7BvhtnQfAekWaC5mGn1kG4tbJt/0/025C56B4E36C057AED48A87FF1BDDF6518C63C27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/025C56B4E36C057AED48A87FF1BDDF6518C63C27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRD4Xfa5Upoxjfu97t7BvhtnQfAekWaC5mGn1kG4tbJt/0/025C56B4E36C057AED48A87FF1BDDF6518C63C27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:38:cf:c9:46:64:dd:96:4e:bd:ab:ad:a6:bc:56:1c:29:af:
         4f:79:07:29:d5:03:f8:e9:81:1c:76:42:ed:4e:fc:1d:ca:85:
         e8:9b:ff:7f:7c:11:59:de:5e:06:ad:84:ff:05:ce:16:ad:82:
         67:e6:6b:ce:0b:5e:73:49:9e:fe:ed:a1:71:a6:87:6f:6c:b1:
         fe:02:76:73:b7:73:57:b9:a0:3b:40:7e:ce:5b:04:6d:4a:ab:
         8d:75:7a:27:ba:2f:9f:63:0a:a5:86:90:17:6e:dc:a0:0f:93:
         5f:12:68:94:2c:03:f2:9f:09:96:a8:a6:9e:26:fd:c0:be:ed:
         e7:57:3b:e2:4a:2c:79:47:52:5f:4a:00:d9:6a:13:a6:b4:2e:
         cd:a4:c5:ba:a2:bb:e4:a4:53:99:3e:bb:2d:df:eb:5f:2c:9c:
         db:f8:a9:c3:dc:4a:c0:92:7f:12:a3:50:4c:a6:ea:44:ab:7d:
         cc:8b:7b:63:18:77:0c:69:44:7f:e2:1a:ca:b8:a6:e8:de:96:
         9a:10:e0:5c:68:0e:2f:36:bb:4e:c1:08:2a:a4:d4:42:28:ae:
         ca:f9:ab:cb:a0:04:34:be:f2:7a:f3:81:58:ec:4e:fb:ad:eb:
         d2:2a:ee:71:38:56:66:03:ba:4f:16:ca:de:64:fb:9f:32:0b:
         56:e8:87:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 05:55:41 2024 by rpki-client on console.sobornost.net