Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/68E11CA51A49C7293330A057D51A83866DBC98E7.mft
File:                     68E11CA51A49C7293330A057D51A83866DBC98E7.mft (raw, json)
Hash identifier:          +qJAeSA9cnHqcsh78hz9NRi6rR3KXhlPKFT/Hi+fglY=
Subject key identifier:   FA:DE:50:40:5A:98:90:E2:FA:56:B2:8F:D4:7B:5D:27:94:B8:2B:BA
Authority key identifier: 68:E1:1C:A5:1A:49:C7:29:33:30:A0:57:D5:1A:83:86:6D:BC:98:E7
Certificate issuer:       /CN=68E11CA51A49C7293330A057D51A83866DBC98E7
Certificate serial:       2F5566D8C151C7E0D358AEB3B2AC226717F689D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68E11CA51A49C7293330A057D51A83866DBC98E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/68E11CA51A49C7293330A057D51A83866DBC98E7.mft
Manifest number:          0617
Signing time:             Tue 09 Jan 2024 14:08:00 +0000
Manifest this update:     Tue 09 Jan 2024 14:03:00 +0000
Manifest next update:     Wed 10 Jan 2024 14:08:00 +0000
Files and hashes:         1: 68E11CA51A49C7293330A057D51A83866DBC98E7.crl (hash: duJ4AYp4q8oLFrwq8HF4QJpKbNEkPHZqLmLJ1cJTqUA=)
                          2: 323830343a376466633a3a2f33322d3438203d3e20323731353935.roa (hash: HiP+04e6QGP4w8grm/q90yaixm7dqWmSQNeLf029b20=)
                          3: 3139302e392e38342e302f32322d3234203d3e20323731353935.roa (hash: SY0/dwfTAJ8Bdkal015sSnBO1cTsl1nKf5MVoxCAFpM=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/68E11CA51A49C7293330A057D51A83866DBC98E7.crl
                          rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/68E11CA51A49C7293330A057D51A83866DBC98E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68E11CA51A49C7293330A057D51A83866DBC98E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 14:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:55:66:d8:c1:51:c7:e0:d3:58:ae:b3:b2:ac:22:67:17:f6:89:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68E11CA51A49C7293330A057D51A83866DBC98E7
        Validity
            Not Before: Jan  9 14:03:00 2024 GMT
            Not After : Jan 16 14:08:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f3:6f:49:53:9a:0d:a3:41:c8:4e:d9:3e:3d:
                    51:dc:7b:80:5f:46:95:51:79:fc:15:ab:0c:56:0d:
                    82:74:24:0a:a2:60:d5:49:34:65:ce:ab:59:4e:b4:
                    39:e7:d0:3a:22:bf:bc:78:45:b6:cb:cd:f3:71:1e:
                    39:e9:5f:9d:93:9a:a1:45:7b:df:dc:7c:f5:40:69:
                    c5:40:56:5b:57:65:81:43:a6:8a:d3:4e:c0:12:47:
                    20:93:4a:e9:c0:ef:64:95:e8:29:f9:43:79:dd:b8:
                    85:67:4d:08:b3:58:2a:ba:a5:82:22:95:a0:c6:60:
                    e5:0d:b0:a6:85:a7:60:51:cf:52:95:a6:03:ee:26:
                    99:1c:90:cd:69:13:6f:36:35:55:99:51:9a:7d:3b:
                    d6:4d:de:a8:98:69:b6:cf:87:39:2a:6d:c6:2c:59:
                    48:a1:cf:e4:0b:e5:89:5c:c3:a0:d0:73:ad:cb:97:
                    d6:53:b6:23:d7:c6:21:58:28:41:0a:2d:f0:14:37:
                    07:ea:1d:a3:ec:98:cc:7f:5c:f7:f0:ad:ac:2a:c8:
                    99:4d:f5:bf:a8:96:45:2d:62:fd:66:15:bf:d2:f2:
                    0b:94:2c:78:d7:83:e4:3b:d8:75:05:ca:7f:7e:71:
                    5d:ed:85:4a:e2:5f:05:d6:b2:80:67:a7:a7:92:8d:
                    3b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DE:50:40:5A:98:90:E2:FA:56:B2:8F:D4:7B:5D:27:94:B8:2B:BA
            X509v3 Authority Key Identifier:
                keyid:68:E1:1C:A5:1A:49:C7:29:33:30:A0:57:D5:1A:83:86:6D:BC:98:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/68E11CA51A49C7293330A057D51A83866DBC98E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68E11CA51A49C7293330A057D51A83866DBC98E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/68E11CA51A49C7293330A057D51A83866DBC98E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:39:29:1d:30:87:90:5e:10:14:db:ad:2d:97:7b:f2:5d:a7:
         c9:83:f5:4c:e9:f7:05:bf:1e:da:cd:3b:74:e7:0c:40:91:fd:
         8b:2d:ee:27:57:d1:83:a1:ee:be:17:fb:b7:6a:27:1a:e3:15:
         15:08:48:5a:4c:37:e3:85:26:43:ac:6c:bc:75:80:e3:72:0d:
         96:c5:0e:1e:28:0f:25:14:31:8a:be:a2:8a:72:59:8d:9f:3a:
         58:d1:d2:f1:e9:e4:14:c4:b6:db:30:d6:8f:6f:9d:51:29:dd:
         82:cc:a6:46:f8:bf:a7:97:a2:b2:5b:23:df:f4:2f:95:19:2f:
         b5:30:99:78:de:42:b2:8d:64:1a:d7:60:34:fb:7f:6c:69:96:
         7b:42:ec:e6:a3:10:2e:86:d7:9e:0c:8e:85:2c:9d:79:f7:dc:
         3e:b1:15:c4:8b:65:44:35:60:5a:06:bb:55:e1:0d:f2:41:3d:
         31:f7:97:8c:92:55:68:4e:f3:5c:d0:e5:4d:f5:18:2e:19:f4:
         a6:c8:33:38:5a:12:7c:b9:25:9b:dc:1f:5d:1b:63:ee:63:67:
         87:d6:a6:56:48:fc:5c:ff:0b:99:60:2c:74:16:37:4c:9c:4e:
         d7:24:8a:71:de:c0:82:d5:91:6e:f3:f1:06:5a:5c:f9:ff:b7:
         8b:6e:2b:b7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:36 2024 by rpki-client on console.sobornost.net