Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/059DC642C88BAB8691AB9D3A8185BFF204907ABF.mft
File:                     059DC642C88BAB8691AB9D3A8185BFF204907ABF.mft (raw, json)
Hash identifier:          f1yakhc5E3dq6cfbtum1gZEv/9tcwAXik0VfRUFLQ5o=
Subject key identifier:   2B:75:17:0B:90:67:24:46:8E:43:9A:C0:F4:11:19:DB:A6:F5:08:B6
Authority key identifier: 05:9D:C6:42:C8:8B:AB:86:91:AB:9D:3A:81:85:BF:F2:04:90:7A:BF
Certificate issuer:       /CN=059DC642C88BAB8691AB9D3A8185BFF204907ABF
Certificate serial:       499CCEC6424F1F58F033C6C043A08F3E70B47AC5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/059DC642C88BAB8691AB9D3A8185BFF204907ABF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/059DC642C88BAB8691AB9D3A8185BFF204907ABF.mft
Manifest number:          6B
Signing time:             Tue 09 Jan 2024 12:56:51 +0000
Manifest this update:     Tue 09 Jan 2024 12:51:51 +0000
Manifest next update:     Wed 10 Jan 2024 15:23:51 +0000
Files and hashes:         1: 3138312e3138392e36342e302f32322d3332203d3e20323731333530.roa (hash: /zY6/33QIXZUjWSWyGNGR1Tt7MyB38oqUDIqShOwu5c=)
                          2: 323830343a376132343a3a2f33322d313238203d3e20323731333530.roa (hash: zm0G4TVPrO0ZTgSjtKFBVGwrvi3uT4QyP/YgHiTLuSs=)
                          3: 059DC642C88BAB8691AB9D3A8185BFF204907ABF.crl (hash: 1R0VS2XOaF0zxKIKMs+BKqrUn3/t2T6HI7yqpj+wo+k=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/059DC642C88BAB8691AB9D3A8185BFF204907ABF.crl
                          rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/059DC642C88BAB8691AB9D3A8185BFF204907ABF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/059DC642C88BAB8691AB9D3A8185BFF204907ABF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 15:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:9c:ce:c6:42:4f:1f:58:f0:33:c6:c0:43:a0:8f:3e:70:b4:7a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=059DC642C88BAB8691AB9D3A8185BFF204907ABF
        Validity
            Not Before: Jan  9 12:51:51 2024 GMT
            Not After : Jan 10 15:23:51 2024 GMT
        Subject: CN=2B75170B906724468E439AC0F41119DBA6F508B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3c:25:a1:36:db:7f:64:77:b9:46:e1:59:11:
                    88:37:e8:44:7e:8b:5c:58:58:48:71:02:48:bf:f0:
                    1c:83:ca:6b:6d:6e:33:76:8c:c9:42:ba:e4:64:73:
                    87:40:24:00:e3:4b:96:4c:7f:8f:9a:c8:1a:16:2f:
                    4a:07:19:ce:9f:24:83:10:d5:c6:ba:27:a3:1e:4d:
                    8f:55:3b:85:06:1d:2e:3e:92:24:11:1b:c2:64:0a:
                    65:00:88:0d:44:04:20:9b:96:7d:c2:8c:17:31:6e:
                    69:8d:52:9b:c0:c9:ff:de:c8:8c:83:ed:fa:26:9b:
                    a2:53:f4:b5:64:18:3a:f5:19:b6:7d:48:d6:70:1c:
                    05:cd:83:b1:6e:75:2b:1e:6b:52:0f:e5:31:8d:12:
                    53:34:1c:05:fa:52:2f:6b:0e:3a:68:b5:36:56:47:
                    3a:64:04:29:d5:87:c7:be:84:91:f0:b1:5b:e9:23:
                    c6:1a:a3:a7:d9:ee:61:2b:ff:2c:f2:dd:de:4b:26:
                    29:d3:f5:c9:8f:d7:28:71:1b:dc:fb:c7:c6:50:8c:
                    cf:bf:a7:38:3a:23:bc:91:f0:25:a4:77:91:a7:fa:
                    da:57:8a:8d:c7:52:f5:bc:79:3f:8e:26:59:f1:6b:
                    d1:56:7e:bb:e8:8d:df:8f:9b:86:d7:89:fb:16:b8:
                    20:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:75:17:0B:90:67:24:46:8E:43:9A:C0:F4:11:19:DB:A6:F5:08:B6
            X509v3 Authority Key Identifier:
                keyid:05:9D:C6:42:C8:8B:AB:86:91:AB:9D:3A:81:85:BF:F2:04:90:7A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/059DC642C88BAB8691AB9D3A8185BFF204907ABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/059DC642C88BAB8691AB9D3A8185BFF204907ABF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/059DC642C88BAB8691AB9D3A8185BFF204907ABF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:32:4f:91:56:5e:bc:fb:30:37:69:b2:e9:d3:b6:71:bc:b7:
         28:02:4f:ea:f8:8c:3f:2d:a9:83:69:94:44:88:e2:4b:a2:9b:
         fa:7c:ae:3d:14:5a:8e:f1:6f:4a:79:8f:39:11:0a:4a:fe:49:
         60:20:3a:87:76:bb:30:80:bc:2b:e2:14:46:8a:6e:89:c2:67:
         ad:3e:19:a8:32:26:a5:7b:12:a3:fa:36:ee:29:a9:87:36:39:
         5e:28:4f:ad:ad:64:c1:14:1b:26:83:f8:a9:f0:7e:93:c9:f9:
         5c:02:e0:12:29:0f:44:11:2c:75:8c:93:ee:4b:69:aa:6c:14:
         93:69:63:73:bc:ce:8c:63:55:d9:61:ce:1b:d9:d0:54:33:e1:
         3c:de:59:b8:a5:b2:5f:79:0a:c0:d8:5b:fa:dc:b3:13:05:a5:
         f4:3b:36:a2:8c:94:be:56:e4:1d:05:5a:ab:f3:72:ca:9f:2c:
         bb:8d:90:60:b4:08:92:47:56:0b:c1:16:e9:9b:b4:00:98:9c:
         f5:d8:02:da:6d:56:79:91:6b:f0:e8:26:7c:80:95:d6:1f:b4:
         ba:f5:71:c7:32:b7:1c:82:d6:1d:31:e1:07:98:35:3d:8b:ba:
         8d:f3:7b:e7:ae:0d:59:99:d7:10:47:c2:f7:8d:8f:3e:8a:cc:
         14:78:ff:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSZzOxkJPH1jwM8bAQ6CPPnC0esUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDU5REM2NDJDODhCQUI4NjkxQUI5RDNBODE4NUJGRjIw
NDkwN0FCRjAeFw0yNDAxMDkxMjUxNTFaFw0yNDAxMTAxNTIzNTFaMDMxMTAvBgNV
BAMTKDJCNzUxNzBCOTA2NzI0NDY4RTQzOUFDMEY0MTExOURCQTZGNTA4QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsPCWhNtt/ZHe5RuFZEYg36ER+
i1xYWEhxAki/8ByDymttbjN2jMlCuuRkc4dAJADjS5ZMf4+ayBoWL0oHGc6fJIMQ
1ca6J6MeTY9VO4UGHS4+kiQRG8JkCmUAiA1EBCCbln3CjBcxbmmNUpvAyf/eyIyD
7fomm6JT9LVkGDr1GbZ9SNZwHAXNg7FudSsea1IP5TGNElM0HAX6Ui9rDjpotTZW
RzpkBCnVh8e+hJHwsVvpI8Yao6fZ7mEr/yzy3d5LJinT9cmP1yhxG9z7x8ZQjM+/
pzg6I7yR8CWkd5Gn+tpXio3HUvW8eT+OJlnxa9FWfrvojd+Pm4bXifsWuCCHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUK3UXC5BnJEaOQ5rA9BEZ26b1CLYwHwYDVR0j
BBgwFoAUBZ3GQsiLq4aRq506gYW/8gSQer8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHMxazZIMm42Q3lOWlF2QVZRWEpHamU1VWFKSHQxOVhCZFJWM1BEa003
ZW0vMC8wNTlEQzY0MkM4OEJBQjg2OTFBQjlEM0E4MTg1QkZGMjA0OTA3QUJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA1OURDNjQyQzg4QkFCODY5
MUFCOUQzQTgxODVCRkYyMDQ5MDdBQkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RHMxazZIMm42Q3lOWlF2QVZRWEpHamU1VWFKSHQxOVhCZFJWM1BEa003ZW0vMC8w
NTlEQzY0MkM4OEJBQjg2OTFBQjlEM0E4MTg1QkZGMjA0OTA3QUJGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGjJPkVZevPswN2my6dO2cby3KAJP6viMPy2pg2mURIjiS6Kb+nyuPRRajvFv
SnmPOREKSv5JYCA6h3a7MIC8K+IURopuicJnrT4ZqDImpXsSo/o27imphzY5XihP
ra1kwRQbJoP4qfB+k8n5XALgEikPRBEsdYyT7ktpqmwUk2ljc7zOjGNV2WHOG9nQ
VDPhPN5ZuKWyX3kKwNhb+tyzEwWl9Ds2ooyUvlbkHQVaq/Nyyp8su42QYLQIkkdW
C8EW6Zu0AJic9dgC2m1WeZFr8OgmfICV1h+0uvVxxzK3HILWHTHhB5g1PYu6jfN7
564NWZnXEEfC942PPorMFHj/CQ==
-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:35 2024 by rpki-client on console.sobornost.net