Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/0/6468A873ACEBE81402DD4AFEF8F2098C75E0383A.mft
File:                     6468A873ACEBE81402DD4AFEF8F2098C75E0383A.mft (raw, json)
Hash identifier:          5r/fKvQN+nWthg0JbjkmaRxBz8uUPAoLZ59Pd2WFca4=
Subject key identifier:   B1:BA:A6:B2:60:17:66:76:77:A7:64:4D:B8:B8:8D:F3:B6:DF:3A:77
Authority key identifier: 64:68:A8:73:AC:EB:E8:14:02:DD:4A:FE:F8:F2:09:8C:75:E0:38:3A
Certificate issuer:       /CN=6468A873ACEBE81402DD4AFEF8F2098C75E0383A
Certificate serial:       1ACD917CDD8B59A0900BF0281EAE27CC2D07AB3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6468A873ACEBE81402DD4AFEF8F2098C75E0383A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/0/6468A873ACEBE81402DD4AFEF8F2098C75E0383A.mft
Manifest number:          05F2
Signing time:             Tue 09 Jan 2024 13:34:49 +0000
Manifest this update:     Tue 09 Jan 2024 13:29:49 +0000
Manifest next update:     Wed 10 Jan 2024 16:58:49 +0000
Files and hashes:         1: 6468A873ACEBE81402DD4AFEF8F2098C75E0383A.crl (hash: nehoD3U7a14wkKne18JRIPJDghs7G6RwX3IwWQA96jo=)
                          2: 323830343a356533343a3a2f33322d3334203d3e20323639303138.roa (hash: 8PZg1hOUnfCwkXcmc2PnXkmEoLxjyXrMbmmGOX5jiBc=)
                          3: 34352e3137382e3131362e302f32322d3234203d3e20323639303138.roa (hash: De0x1EGO2euXgqNaO+pqWAu8Nyfdo2WAP1Q9Q0Uup60=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/0/6468A873ACEBE81402DD4AFEF8F2098C75E0383A.crl
                          rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/0/6468A873ACEBE81402DD4AFEF8F2098C75E0383A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6468A873ACEBE81402DD4AFEF8F2098C75E0383A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:cd:91:7c:dd:8b:59:a0:90:0b:f0:28:1e:ae:27:cc:2d:07:ab:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6468A873ACEBE81402DD4AFEF8F2098C75E0383A
        Validity
            Not Before: Jan  9 13:29:49 2024 GMT
            Not After : Jan 10 16:58:49 2024 GMT
        Subject: CN=B1BAA6B26017667677A7644DB8B88DF3B6DF3A77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7e:a3:1c:87:78:27:ee:17:e2:e3:b4:4a:15:
                    af:7f:cc:18:b4:fc:6e:7b:1b:5a:6f:96:63:3f:b9:
                    d7:6a:6c:e2:8e:bd:22:f5:c1:ad:b0:1f:f1:70:3c:
                    a6:fe:3b:1f:ed:d4:4f:f7:96:1f:1c:1b:81:c3:13:
                    2e:ef:a6:31:f7:76:05:79:1d:72:97:21:e1:7c:46:
                    c5:14:83:88:63:08:10:e2:46:1b:ea:53:bb:4a:9b:
                    a2:b5:70:b1:9c:16:54:87:a2:ad:23:6e:2d:e3:04:
                    bb:90:68:6e:fc:ed:84:d0:11:48:cc:85:67:d5:8f:
                    1a:30:91:d2:6a:2d:2d:c0:f4:88:e5:03:ff:63:02:
                    4e:aa:fa:dc:95:7c:99:68:5d:7c:15:0e:ff:4e:fa:
                    a6:cb:b7:07:41:5f:f8:7b:33:1d:4d:cd:8c:1a:cd:
                    ea:ad:4d:05:39:e6:35:aa:e2:4c:26:87:2d:35:df:
                    5d:29:e0:72:3d:2f:f1:06:2b:bb:3f:e9:d2:36:03:
                    ff:07:8b:f9:a0:14:9c:95:18:b0:7b:f4:70:1f:3e:
                    aa:58:77:35:d1:39:c7:e2:ae:b6:b5:7b:a8:c5:9e:
                    7e:a4:18:7c:3c:78:0c:f9:29:77:67:b3:19:70:ce:
                    ed:c0:25:8c:c2:b9:01:b2:a0:7e:b8:e4:3a:6b:32:
                    5c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BA:A6:B2:60:17:66:76:77:A7:64:4D:B8:B8:8D:F3:B6:DF:3A:77
            X509v3 Authority Key Identifier:
                keyid:64:68:A8:73:AC:EB:E8:14:02:DD:4A:FE:F8:F2:09:8C:75:E0:38:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/0/6468A873ACEBE81402DD4AFEF8F2098C75E0383A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6468A873ACEBE81402DD4AFEF8F2098C75E0383A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/0/6468A873ACEBE81402DD4AFEF8F2098C75E0383A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ca:b3:5e:ac:d5:0c:74:53:eb:13:de:32:78:51:d2:8d:c7:
         44:57:83:b3:38:16:d7:16:6a:75:29:b2:7b:16:5b:66:b7:44:
         32:37:d7:a1:6d:f6:11:4a:56:20:ee:25:12:1f:52:6e:b1:60:
         f8:c0:7c:50:55:f1:70:46:83:28:d1:ca:d4:b5:22:d6:9c:52:
         51:db:26:37:ec:71:ad:5b:3a:50:b7:02:2f:5c:85:b9:f0:69:
         4c:4d:2e:41:6d:02:62:72:a2:4b:97:17:53:15:2e:4a:37:1e:
         17:05:49:8a:0c:67:d9:71:37:2b:33:6d:a5:e4:37:a5:c5:b2:
         43:2d:85:fc:9b:8c:10:d9:fb:d9:2b:e2:54:9c:bb:8d:7e:6c:
         1a:91:37:25:00:09:cc:b9:4f:d1:09:1d:ba:71:0b:17:a9:15:
         7b:b2:68:ef:5b:c6:20:12:f6:3d:88:5a:a5:34:c4:37:a3:ba:
         10:ad:33:08:a9:1c:3e:80:85:a3:7f:63:49:0a:c9:77:fc:6d:
         d6:1c:ac:47:72:55:2e:0b:7f:cd:77:9c:76:0e:85:e9:c8:29:
         ee:6e:d2:56:79:72:9c:e5:57:0f:97:b6:d4:f4:7c:49:0a:6b:
         50:a9:c6:ad:63:ae:1a:20:83:60:f3:39:61:ae:28:ed:40:5b:
         2e:99:b8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:35 2024 by rpki-client on console.sobornost.net