Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/AFC7A0EBD883A8EF974EE48C3E0749F4AC811AA3.mft
File:                     AFC7A0EBD883A8EF974EE48C3E0749F4AC811AA3.mft (raw, json)
Hash identifier:          l2QMZygB1wFvMSYFKnenApFW3N0aLcGRPbTUSU4yjMg=
Subject key identifier:   BD:A8:DA:52:F5:48:D2:04:6C:F1:35:15:04:DC:F8:79:4A:15:C9:AA
Authority key identifier: AF:C7:A0:EB:D8:83:A8:EF:97:4E:E4:8C:3E:07:49:F4:AC:81:1A:A3
Certificate issuer:       /CN=AFC7A0EBD883A8EF974EE48C3E0749F4AC811AA3
Certificate serial:       0D154581293DD1C1A0A47F0165BAD19BAAB59EFB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFC7A0EBD883A8EF974EE48C3E0749F4AC811AA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/AFC7A0EBD883A8EF974EE48C3E0749F4AC811AA3.mft
Manifest number:          09
Signing time:             Thu 04 Jan 2024 22:26:06 +0000
Manifest this update:     Thu 04 Jan 2024 22:21:06 +0000
Manifest next update:     Sat 06 Jan 2024 00:19:06 +0000
Files and hashes:         1: AFC7A0EBD883A8EF974EE48C3E0749F4AC811AA3.crl (hash: oiBHy9ZJMxRJr4nG9YUX+pb/BWOUEE+JnSf/WW4TcGw=)
                          2: 3138312e3139312e39322e302f32342d3234203d3e20323636303032.roa (hash: GZ+QS1xw7MRCAR/QMeiVF+AKjPA1qUx3Zqpk2Fo2880=)
                          3: 3138312e3139312e39352e302f32342d3234203d3e20323636303032.roa (hash: pGN0tp9Eb/HYlmBg0vrdGcWKPjWQLCaKd7MHuJW2Y+0=)
                          4: 323830343a343131343a3a2f33342d3334203d3e20323636303032.roa (hash: W4urYgIqWYCYw8SU+lLbQZR9qS82PC1IRGdJua5bfXs=)
                          5: 323830343a343131343a633030303a3a2f33342d3334203d3e20323636303032.roa (hash: gjOaA+gbJY+xKmtDIZGBiyCwxtzb4Lv+xYDYFiefbxA=)
                          6: 3138312e3139312e39332e302f32342d3234203d3e20323636303032.roa (hash: 9UJhAtamSV+p38Xpmk6RF3GPPLgAwet/WyzOSzyQO40=)
                          7: 3138312e3139312e39342e302f32342d3234203d3e20323636303032.roa (hash: 5KOtVM4u0cRWzN5iGszTQ0kCHy4XUORFVZyF075i0Ew=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/AFC7A0EBD883A8EF974EE48C3E0749F4AC811AA3.crl
                          rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/AFC7A0EBD883A8EF974EE48C3E0749F4AC811AA3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFC7A0EBD883A8EF974EE48C3E0749F4AC811AA3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Jan 2024 00:19:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:15:45:81:29:3d:d1:c1:a0:a4:7f:01:65:ba:d1:9b:aa:b5:9e:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFC7A0EBD883A8EF974EE48C3E0749F4AC811AA3
        Validity
            Not Before: Jan  4 22:21:06 2024 GMT
            Not After : Jan  6 00:19:06 2024 GMT
        Subject: CN=BDA8DA52F548D2046CF1351504DCF8794A15C9AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8d:65:cf:13:0e:1a:4d:ad:bd:9d:1f:5e:30:
                    d8:d3:e8:7d:fc:54:fc:c0:bd:04:b3:89:f6:5f:b6:
                    27:48:fb:e4:dc:45:92:f8:54:dc:cb:ff:fb:4f:33:
                    a4:fc:b0:f4:12:29:62:83:5f:fa:ac:05:5d:be:d0:
                    0a:81:8c:65:0d:b8:3d:08:29:63:aa:ca:21:a2:a6:
                    25:20:d2:69:39:d0:54:c1:86:2e:35:e2:49:e6:cc:
                    24:39:86:99:11:cb:97:15:48:4f:e1:8f:92:3f:08:
                    01:2b:09:fd:83:27:cd:2b:ec:46:bb:4e:d6:99:b4:
                    ed:3a:f2:82:6a:2c:ec:31:ef:22:3b:ee:09:66:af:
                    44:16:1f:d4:ed:5c:0f:e5:63:d0:63:de:4c:c6:55:
                    51:3d:95:64:ac:74:02:53:7a:4d:54:23:f5:13:45:
                    d3:2d:7b:4a:e2:fc:61:aa:4d:de:02:d3:1a:6c:aa:
                    f1:8a:75:59:a2:b3:ad:ef:3a:4d:c2:25:fb:d3:5f:
                    81:44:19:ca:81:41:f3:55:a2:f3:9a:6c:3a:09:f6:
                    5c:93:65:5b:ac:1c:27:92:42:5b:67:99:58:b6:a1:
                    b3:ef:a2:02:66:39:e5:87:89:9d:14:6c:3f:e3:52:
                    a2:ca:be:19:2a:56:b9:d5:dc:c6:cf:00:5d:d5:1e:
                    7f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A8:DA:52:F5:48:D2:04:6C:F1:35:15:04:DC:F8:79:4A:15:C9:AA
            X509v3 Authority Key Identifier:
                keyid:AF:C7:A0:EB:D8:83:A8:EF:97:4E:E4:8C:3E:07:49:F4:AC:81:1A:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/AFC7A0EBD883A8EF974EE48C3E0749F4AC811AA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFC7A0EBD883A8EF974EE48C3E0749F4AC811AA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/AFC7A0EBD883A8EF974EE48C3E0749F4AC811AA3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:72:75:71:38:6a:84:1d:39:dd:19:05:f0:c8:fe:16:21:74:
         7e:2e:4e:9f:9e:76:6a:ac:6a:24:e2:97:ab:6c:20:62:16:6f:
         05:01:61:a7:a4:6b:e5:7b:69:9c:6d:17:e9:db:fc:b2:99:14:
         9c:eb:10:d8:55:43:b8:0c:72:6c:45:63:f5:df:14:df:f5:1d:
         b9:5f:9e:45:6c:a9:2a:09:fd:04:3a:d5:7d:20:93:75:d4:66:
         0e:fb:60:57:c8:87:1b:6d:1a:b9:10:64:6f:95:7b:9f:d7:cb:
         4a:b1:cf:ff:a0:fa:13:08:c8:11:3e:bc:47:08:25:c5:5b:11:
         82:66:56:d0:f0:9a:59:d8:60:c8:be:4e:4c:95:c5:e8:3b:f9:
         6f:11:a3:6d:fd:74:e9:07:38:99:5b:40:29:93:33:a6:a6:fc:
         5c:9b:0d:cf:d8:ba:e6:37:4f:82:47:79:fb:79:fe:47:d3:1e:
         68:8a:56:13:ed:40:83:c3:f9:d6:40:67:70:f1:ef:53:11:d4:
         9b:d8:10:c2:22:44:af:63:83:90:cc:6d:5c:e4:95:47:51:05:
         14:c9:58:90:45:80:11:fc:02:82:ca:fe:1c:e7:19:3e:53:74:
         b3:67:4f:02:d2:b6:8a:ef:8d:c7:e3:e6:58:5e:71:eb:bb:cc:
         6e:52:a2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 00:09:28 2024 by rpki-client on console.sobornost.net