Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/2B9BAD4A649403CAA3BD93A70813B16191638E2F.mft
File:                     2B9BAD4A649403CAA3BD93A70813B16191638E2F.mft (raw, json)
Hash identifier:          diTEnLYUZzqqUO/Q3NrygJUCESHvIe8+RQKAiPaNhMk=
Subject key identifier:   07:A2:DC:B8:C8:54:8F:BA:AE:EC:6E:92:3E:9E:1E:17:D5:CA:C6:1B
Authority key identifier: 2B:9B:AD:4A:64:94:03:CA:A3:BD:93:A7:08:13:B1:61:91:63:8E:2F
Certificate issuer:       /CN=2B9BAD4A649403CAA3BD93A70813B16191638E2F
Certificate serial:       64912E88B1D086937465A5733943EF4356231C2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B9BAD4A649403CAA3BD93A70813B16191638E2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/2B9BAD4A649403CAA3BD93A70813B16191638E2F.mft
Manifest number:          01EE
Signing time:             Mon 08 Jan 2024 23:01:57 +0000
Manifest this update:     Mon 08 Jan 2024 22:56:57 +0000
Manifest next update:     Tue 09 Jan 2024 23:50:57 +0000
Files and hashes:         1: 2B9BAD4A649403CAA3BD93A70813B16191638E2F.crl (hash: rPPGDpaJje9d5LyztEcCMh3heRyoWOn/8cZgW5ZROb8=)
                          2: 323830343a383937383a3a2f33322d3335203d3e20323733363036.roa (hash: PXACFPWo6qYZYoNQ3pTWvu+OzT453yPwczlg/+iPJcw=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/2B9BAD4A649403CAA3BD93A70813B16191638E2F.crl
                          rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/2B9BAD4A649403CAA3BD93A70813B16191638E2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B9BAD4A649403CAA3BD93A70813B16191638E2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Jan 2024 23:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:91:2e:88:b1:d0:86:93:74:65:a5:73:39:43:ef:43:56:23:1c:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B9BAD4A649403CAA3BD93A70813B16191638E2F
        Validity
            Not Before: Jan  8 22:56:57 2024 GMT
            Not After : Jan  9 23:50:57 2024 GMT
        Subject: CN=07A2DCB8C8548FBAAEEC6E923E9E1E17D5CAC61B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fa:05:7b:4e:61:3b:6b:2d:c9:40:83:62:53:
                    e0:7e:25:0c:7e:90:5a:79:e3:31:5a:7a:58:b9:30:
                    c3:81:48:77:a6:bf:e3:a5:2c:50:c9:4e:40:04:7b:
                    36:69:e2:d2:36:8e:8b:11:57:c2:ba:fc:47:a7:0a:
                    31:10:05:8b:df:cc:b9:fa:a3:e3:8a:60:a5:92:67:
                    4d:9f:eb:87:a3:2b:bf:5d:95:70:ca:57:0c:c7:71:
                    0d:6b:9f:43:4e:ea:3c:dc:1d:63:44:c5:fb:72:59:
                    7f:1b:91:cf:86:7f:07:61:50:bc:39:85:74:25:2a:
                    d1:86:66:ab:cf:64:22:7c:28:53:35:12:23:76:9b:
                    c2:9b:50:95:35:ee:4f:d2:11:93:8d:7a:4c:79:42:
                    79:b7:2e:9d:17:ea:f0:34:be:9b:c0:94:46:56:6e:
                    78:cc:bc:50:19:4d:b1:0d:e5:1a:a2:ef:8d:96:4a:
                    2b:b4:e4:8b:03:66:ab:43:6d:2e:22:05:cd:dc:3d:
                    48:9a:0d:be:b5:98:52:29:3b:e8:b0:cd:bc:c6:35:
                    d8:4d:83:f5:5a:9a:04:1c:3c:0e:06:6a:f8:82:51:
                    50:bd:07:83:83:b9:eb:c6:f1:0c:0c:5f:a8:87:98:
                    b9:0b:d8:dc:dd:06:b4:bd:56:04:24:00:f9:fc:50:
                    ca:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A2:DC:B8:C8:54:8F:BA:AE:EC:6E:92:3E:9E:1E:17:D5:CA:C6:1B
            X509v3 Authority Key Identifier:
                keyid:2B:9B:AD:4A:64:94:03:CA:A3:BD:93:A7:08:13:B1:61:91:63:8E:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/2B9BAD4A649403CAA3BD93A70813B16191638E2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B9BAD4A649403CAA3BD93A70813B16191638E2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/2B9BAD4A649403CAA3BD93A70813B16191638E2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:a8:61:bc:68:90:15:99:a2:9d:62:94:f5:6f:f6:64:76:90:
         2f:20:e0:b5:55:1d:24:cb:c4:aa:78:60:6f:77:43:a6:75:d8:
         e3:e1:71:76:fa:2e:dd:86:2f:ab:3d:9c:8f:cd:c2:66:55:a4:
         03:7a:05:b7:51:f1:57:ca:ab:17:80:25:26:a1:f1:99:9f:56:
         fa:93:42:63:7b:b2:cc:6d:fd:2c:8d:40:b5:f5:94:55:de:e3:
         67:fa:d4:c3:a0:d6:6a:3a:5d:fe:e8:1f:ec:78:9e:ba:18:64:
         5f:e6:4c:72:74:a4:aa:69:dc:86:85:37:e5:a6:70:97:2b:d8:
         19:56:38:b7:3d:c5:92:c5:49:94:13:a4:77:05:0c:c4:c4:1c:
         ac:3c:bf:be:7b:cf:6b:56:bb:ff:d8:e1:8b:33:12:5c:c7:09:
         d2:10:9c:8c:bd:05:30:64:9b:47:c1:e2:92:56:a8:8f:f3:1f:
         5c:54:44:9b:b1:1c:35:7d:16:79:0d:40:63:21:f5:ba:00:be:
         63:be:23:fd:b2:7f:ba:16:e2:b1:69:b2:0c:6e:10:e8:48:89:
         da:9b:1e:f0:96:d1:3a:fd:e1:be:bc:54:3a:09:c1:8c:a6:c0:
         23:00:ac:8a:d3:43:d9:ed:85:3f:45:b4:6b:da:4d:bf:09:35:
         6e:47:06:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 00:20:36 2024 by rpki-client on console.sobornost.net