Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/2B388AC45AD4E0C291BBD140A577D7E912E67CF0.mft
File:                     2B388AC45AD4E0C291BBD140A577D7E912E67CF0.mft (raw, json)
Hash identifier:          ocZfdwOzK4bGwfHoudz+0aIG2avSXC2iDXF0E8/U3PY=
Subject key identifier:   E3:66:CB:84:07:66:9D:E6:6E:7B:E3:21:5E:C1:00:23:08:CF:2F:15
Authority key identifier: 2B:38:8A:C4:5A:D4:E0:C2:91:BB:D1:40:A5:77:D7:E9:12:E6:7C:F0
Certificate issuer:       /CN=2B388AC45AD4E0C291BBD140A577D7E912E67CF0
Certificate serial:       22BBD082B8A1275FE67F6EB31BA064501C74372C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B388AC45AD4E0C291BBD140A577D7E912E67CF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/2B388AC45AD4E0C291BBD140A577D7E912E67CF0.mft
Manifest number:          06B8
Signing time:             Mon 08 Jan 2024 23:25:14 +0000
Manifest this update:     Mon 08 Jan 2024 23:20:14 +0000
Manifest next update:     Wed 10 Jan 2024 00:52:14 +0000
Files and hashes:         1: 2B388AC45AD4E0C291BBD140A577D7E912E67CF0.crl (hash: a3hf/r4Xlx8XivFdN6FyOASoY0YdphXTBB1Bg2/4l0U=)
                          2: 323830343a336163633a3a2f33322d3334203d3e20323636313130.roa (hash: FPB2XtaSc6Kk/aRwGnYlAoGI0ZgMsB5SipVjv+Do2W4=)
                          3: 34352e352e3234342e302f32322d3234203d3e20323636313130.roa (hash: dRdwaceQaNmazf+3CTJ6rsT7AVToA4+Q/TOaDD9vfLg=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/2B388AC45AD4E0C291BBD140A577D7E912E67CF0.crl
                          rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/2B388AC45AD4E0C291BBD140A577D7E912E67CF0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B388AC45AD4E0C291BBD140A577D7E912E67CF0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 00:52:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:bb:d0:82:b8:a1:27:5f:e6:7f:6e:b3:1b:a0:64:50:1c:74:37:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B388AC45AD4E0C291BBD140A577D7E912E67CF0
        Validity
            Not Before: Jan  8 23:20:14 2024 GMT
            Not After : Jan 10 00:52:14 2024 GMT
        Subject: CN=E366CB8407669DE66E7BE3215EC1002308CF2F15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c7:94:41:e4:c1:5e:d2:d3:bb:54:88:e4:e5:
                    28:b6:7b:68:16:9e:41:ba:02:79:cf:07:06:56:bb:
                    8e:1d:09:4b:86:b7:41:99:0b:e5:2c:90:1f:4c:f0:
                    2f:bd:56:f9:83:0b:1b:1f:79:e1:f5:13:38:06:34:
                    95:55:be:23:ed:e4:6f:f8:fe:85:21:b4:45:3f:14:
                    c2:a0:af:94:93:a9:4a:78:84:ae:2a:84:a6:f4:bb:
                    db:02:4f:0c:bc:cc:79:f1:28:ba:f3:8d:64:e4:de:
                    77:4f:77:7d:de:a3:32:f3:79:d3:3f:90:0e:da:95:
                    2d:9b:a5:af:48:6c:60:16:5e:b1:cf:8a:24:b6:5b:
                    cc:52:93:b1:b4:7c:e9:85:7c:d5:37:6f:87:1a:71:
                    e2:a2:47:c3:dc:47:e2:a0:0d:5f:a0:6a:d6:c3:ac:
                    ee:27:43:7d:d7:a5:cd:be:eb:26:84:fc:5d:3c:9b:
                    2c:a4:0a:9c:ea:68:a6:12:68:f1:87:02:7c:1b:84:
                    53:0d:65:4e:66:62:4f:0c:c9:7d:85:2b:2e:54:b6:
                    3d:65:67:52:54:b2:8c:82:5e:d9:e5:f0:c3:73:b4:
                    0a:82:bc:a6:2d:a1:05:ef:b5:08:3f:5c:8a:98:6e:
                    1a:64:31:3b:2b:94:20:4d:3b:e3:e8:b0:13:17:00:
                    79:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:66:CB:84:07:66:9D:E6:6E:7B:E3:21:5E:C1:00:23:08:CF:2F:15
            X509v3 Authority Key Identifier:
                keyid:2B:38:8A:C4:5A:D4:E0:C2:91:BB:D1:40:A5:77:D7:E9:12:E6:7C:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/2B388AC45AD4E0C291BBD140A577D7E912E67CF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B388AC45AD4E0C291BBD140A577D7E912E67CF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/2B388AC45AD4E0C291BBD140A577D7E912E67CF0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:8c:8c:e8:60:66:49:2c:44:4b:cf:ca:63:02:09:3c:b0:72:
         46:af:26:85:a6:45:43:40:34:b7:cc:1f:99:f5:43:c5:8d:50:
         32:f7:2d:dc:7f:9f:bd:e9:64:f1:74:3a:1a:5f:bb:96:35:34:
         c1:d8:53:7a:7d:49:98:69:c6:04:5e:73:9f:1f:17:18:ae:17:
         96:c2:ba:a8:87:f4:fe:a1:3e:01:2f:2f:00:5f:b9:3c:0f:7b:
         75:42:7f:59:a4:34:35:a5:91:d9:d2:b1:c7:15:e3:5f:c7:8a:
         68:b3:49:52:13:dc:89:7e:fe:c9:89:b6:7a:59:64:c4:35:81:
         ed:fd:1f:2d:cb:1b:01:c7:53:97:f5:3a:42:fd:cc:45:bc:7f:
         04:09:21:9d:de:c6:f1:70:8c:37:6d:e2:c5:64:82:51:83:e4:
         f4:fd:45:29:28:c0:67:3e:c8:48:a7:c0:14:52:e5:4a:3a:23:
         94:01:e5:c3:4e:ec:b8:7d:a2:95:4a:e9:47:19:79:d1:32:4f:
         b7:b5:fe:4d:bf:df:24:cb:6c:1f:2e:89:ca:ce:09:56:69:46:
         61:a4:5c:ba:fe:a2:25:f6:b3:22:4b:96:f1:d3:f1:c5:61:1f:
         07:a9:3f:b6:04:f6:2a:10:ae:c9:59:7e:a9:5e:53:87:ef:78:
         f9:21:d5:eb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIrvQgrihJ1/mf26zG6BkUBx0NywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkIzODhBQzQ1QUQ0RTBDMjkxQkJEMTQwQTU3N0Q3RTkx
MkU2N0NGMDAeFw0yNDAxMDgyMzIwMTRaFw0yNDAxMTAwMDUyMTRaMDMxMTAvBgNV
BAMTKEUzNjZDQjg0MDc2NjlERTY2RTdCRTMyMTVFQzEwMDIzMDhDRjJGMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnx5RB5MFe0tO7VIjk5Si2e2gW
nkG6AnnPBwZWu44dCUuGt0GZC+UskB9M8C+9VvmDCxsfeeH1EzgGNJVVviPt5G/4
/oUhtEU/FMKgr5STqUp4hK4qhKb0u9sCTwy8zHnxKLrzjWTk3ndPd33eozLzedM/
kA7alS2bpa9IbGAWXrHPiiS2W8xSk7G0fOmFfNU3b4caceKiR8PcR+KgDV+gatbD
rO4nQ33Xpc2+6yaE/F08myykCpzqaKYSaPGHAnwbhFMNZU5mYk8MyX2FKy5Utj1l
Z1JUsoyCXtnl8MNztAqCvKYtoQXvtQg/XIqYbhpkMTsrlCBNO+PosBMXAHmTAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU42bLhAdmneZue+MhXsEAIwjPLxUwHwYDVR0j
BBgwFoAUKziKxFrU4MKRu9FApXfX6RLmfPAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGZ2RUVzSFkxclNEbTdHdnl6ZVVqYlVXYkRINzMyd3NncXVUYkVDN0Zu
a0cvMC8yQjM4OEFDNDVBRDRFMEMyOTFCQkQxNDBBNTc3RDdFOTEyRTY3Q0YwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJCMzg4QUM0NUFENEUwQzI5
MUJCRDE0MEE1NzdEN0U5MTJFNjdDRjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RGZ2RUVzSFkxclNEbTdHdnl6ZVVqYlVXYkRINzMyd3NncXVUYkVDN0Zua0cvMC8y
QjM4OEFDNDVBRDRFMEMyOTFCQkQxNDBBNTc3RDdFOTEyRTY3Q0YwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjIyM6GBmSSxES8/KYwIJPLByRq8mhaZFQ0A0t8wfmfVDxY1QMvct3H+fvelk
8XQ6Gl+7ljU0wdhTen1JmGnGBF5znx8XGK4XlsK6qIf0/qE+AS8vAF+5PA97dUJ/
WaQ0NaWR2dKxxxXjX8eKaLNJUhPciX7+yYm2ellkxDWB7f0fLcsbAcdTl/U6Qv3M
Rbx/BAkhnd7G8XCMN23ixWSCUYPk9P1FKSjAZz7ISKfAFFLlSjojlAHlw07suH2i
lUrpRxl50TJPt7X+Tb/fJMtsHy6Jys4JVmlGYaRcuv6iJfazIkuW8dPxxWEfB6k/
tgT2KhCuyVl+qV5Th+94+SHV6w==
-----END CERTIFICATE-----
Generated at Tue Jan 9 02:15:20 2024 by rpki-client on console.sobornost.net