Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/0/BF452E5656E55804F69FC4B6025CFDC4F4BC8EF2.mft
File:                     BF452E5656E55804F69FC4B6025CFDC4F4BC8EF2.mft (raw, json)
Hash identifier:          nebpVBtkiTUdM8+O66VdzORSHewlo8uUKjUa7ph+WN8=
Subject key identifier:   1A:56:09:0F:80:E4:AC:FB:1E:AC:A6:91:DF:0A:62:76:C0:C4:65:F9
Authority key identifier: BF:45:2E:56:56:E5:58:04:F6:9F:C4:B6:02:5C:FD:C4:F4:BC:8E:F2
Certificate issuer:       /CN=BF452E5656E55804F69FC4B6025CFDC4F4BC8EF2
Certificate serial:       3F147E3E844125B499606359476187DB936DE9D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF452E5656E55804F69FC4B6025CFDC4F4BC8EF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/0/BF452E5656E55804F69FC4B6025CFDC4F4BC8EF2.mft
Manifest number:          1C
Signing time:             Tue 09 Jan 2024 00:42:55 +0000
Manifest this update:     Tue 09 Jan 2024 00:37:55 +0000
Manifest next update:     Wed 10 Jan 2024 03:53:55 +0000
Files and hashes:         1: 3137302e3233382e35322e302f32322d3232203d3e20323636333134.roa (hash: 3nga2oSatryKFTQhh7MLJTEg1WRtmC5yIbtUZCQfhv0=)
                          2: 323830343a333565383a3a2f33322d3332203d3e20323636333134.roa (hash: 8E3coltoJF+lf+0lG3JZeTGtCEXipkRSBPZ+NKX9ssM=)
                          3: BF452E5656E55804F69FC4B6025CFDC4F4BC8EF2.crl (hash: eXWp5fWwz7ny8cz0WqDBbtrBKv1zdduVd2+OsaHVodU=)
                          4: 3137302e3233382e35342e302f32342d3234203d3e20323636333134.roa (hash: UMK4AzAUjtPENC3OR/s26D4qShF+BEWQNs3j64gSsx8=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/0/BF452E5656E55804F69FC4B6025CFDC4F4BC8EF2.crl
                          rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/0/BF452E5656E55804F69FC4B6025CFDC4F4BC8EF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF452E5656E55804F69FC4B6025CFDC4F4BC8EF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 01:32:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:14:7e:3e:84:41:25:b4:99:60:63:59:47:61:87:db:93:6d:e9:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF452E5656E55804F69FC4B6025CFDC4F4BC8EF2
        Validity
            Not Before: Jan  9 00:37:55 2024 GMT
            Not After : Jan 10 03:53:55 2024 GMT
        Subject: CN=1A56090F80E4ACFB1EACA691DF0A6276C0C465F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0c:8b:27:81:20:41:a8:10:bd:b7:99:2f:6d:
                    1d:3a:b3:de:d2:34:87:66:e6:16:bf:d7:05:88:c1:
                    30:19:f8:97:16:dd:9d:c9:e9:65:b4:31:aa:30:50:
                    f1:38:9b:86:26:73:30:ef:ba:1f:b3:00:ee:20:f2:
                    2c:f9:2b:18:07:e2:89:b8:49:ee:c0:63:f4:f0:6a:
                    20:ad:d6:2c:65:64:00:67:2c:1a:01:ae:d0:23:e3:
                    5e:bd:b8:62:12:26:e4:02:0a:b5:d8:60:b4:39:5c:
                    d8:d6:5d:0c:df:b4:1c:67:40:40:23:d2:ed:c7:55:
                    5d:9c:0a:a2:5e:b8:8a:e1:a9:00:25:33:e4:ed:d5:
                    05:63:6d:2f:b7:c0:81:9b:f2:5d:28:46:66:9d:ea:
                    c1:86:3d:17:42:80:40:81:1b:9e:22:64:66:b0:bd:
                    fd:70:13:fd:3b:ca:75:cd:94:28:92:e2:1c:75:64:
                    72:1f:90:03:05:f0:6a:5b:65:0f:c6:30:44:cf:46:
                    ea:fc:8f:69:8a:1b:26:dd:d8:9a:0a:e0:9b:be:87:
                    af:31:00:79:26:4f:d5:64:31:9f:af:77:70:1a:b5:
                    ba:d0:50:92:8e:65:9a:d5:cf:9f:a6:a2:46:5c:43:
                    b7:bd:c4:70:c9:9f:5f:26:7a:b5:68:fa:d3:8a:0f:
                    f1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:56:09:0F:80:E4:AC:FB:1E:AC:A6:91:DF:0A:62:76:C0:C4:65:F9
            X509v3 Authority Key Identifier:
                keyid:BF:45:2E:56:56:E5:58:04:F6:9F:C4:B6:02:5C:FD:C4:F4:BC:8E:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/0/BF452E5656E55804F69FC4B6025CFDC4F4BC8EF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF452E5656E55804F69FC4B6025CFDC4F4BC8EF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/0/BF452E5656E55804F69FC4B6025CFDC4F4BC8EF2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:ff:6d:84:5b:fb:fb:49:2b:46:43:27:82:06:04:5a:14:71:
         56:fc:f6:b9:0f:2e:d7:b8:5f:39:a5:08:fd:0e:47:8a:c5:06:
         e0:dd:f1:d3:84:16:19:30:b8:ef:57:4c:a3:5d:85:15:e5:75:
         22:84:18:2c:2d:ff:69:26:b5:0c:07:a5:d2:60:d7:25:0f:32:
         a4:aa:af:59:48:6d:23:af:f5:ec:23:36:4b:9d:a2:b6:cb:7c:
         88:c6:03:da:e1:ec:12:5c:9c:ad:61:86:14:16:7f:07:08:44:
         e6:dc:69:f7:45:a3:80:24:ff:95:48:19:ab:61:42:2d:d8:5c:
         3f:e5:f7:51:b9:e6:d1:61:44:fe:d2:2e:fd:0c:e3:06:78:52:
         88:2c:60:74:eb:b4:d5:70:16:d0:af:a6:c4:d1:7b:49:c9:0b:
         6f:4d:e1:ec:4c:a5:0f:f0:e6:c0:c5:df:de:a8:55:bd:a6:05:
         18:74:63:79:79:7a:b9:cd:cc:d5:d6:c4:d9:a7:d0:ff:c8:65:
         bc:82:81:a0:74:65:a6:1d:05:80:af:f2:41:30:61:cb:3c:50:
         69:be:9b:00:2b:75:6e:4e:42:e8:79:3a:bc:1f:a6:33:23:eb:
         43:d8:25:fd:dc:d3:b1:ab:8b:ac:92:f2:7b:65:b5:7c:70:c0:
         c1:7d:f6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 02:15:22 2024 by rpki-client on console.sobornost.net