Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/A27FF772C1B91F2211F2356575C33177798AEB56.mft
File:                     A27FF772C1B91F2211F2356575C33177798AEB56.mft (raw, json)
Hash identifier:          pvg8kX0vXgQycPNiwFAncyoDcaZIyiiyUGsticyJMfw=
Subject key identifier:   E2:2A:B4:BB:CC:CA:A4:D7:61:13:FE:07:3B:D8:4D:B0:7F:0E:93:EF
Authority key identifier: A2:7F:F7:72:C1:B9:1F:22:11:F2:35:65:75:C3:31:77:79:8A:EB:56
Certificate issuer:       /CN=A27FF772C1B91F2211F2356575C33177798AEB56
Certificate serial:       1BD217A5C30285D89E00C4313407BA6F1DBF7E5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A27FF772C1B91F2211F2356575C33177798AEB56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/A27FF772C1B91F2211F2356575C33177798AEB56.mft
Manifest number:          75
Signing time:             Tue 09 Jan 2024 02:34:04 +0000
Manifest this update:     Tue 09 Jan 2024 02:29:04 +0000
Manifest next update:     Wed 10 Jan 2024 04:38:04 +0000
Files and hashes:         1: 323830343a363535383a3a2f33322d313238203d3e20323639343834.roa (hash: NFuQQhrkSEMwJu5m4s+QnQXncCtUhDBH/5aizlfc7Zs=)
                          2: 34352e3138372e34302e302f32322d3332203d3e20323639343834.roa (hash: EBwU05WahtT/umIdRV9cO9hKwTh9C7LFzZfvJim7QDI=)
                          3: A27FF772C1B91F2211F2356575C33177798AEB56.crl (hash: S4OEe5Wh/++Xp2WWrZW030JXO+Tt6zm4iX1Z5AOTZBc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/A27FF772C1B91F2211F2356575C33177798AEB56.crl
                          rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/A27FF772C1B91F2211F2356575C33177798AEB56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A27FF772C1B91F2211F2356575C33177798AEB56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 04:38:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d2:17:a5:c3:02:85:d8:9e:00:c4:31:34:07:ba:6f:1d:bf:7e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A27FF772C1B91F2211F2356575C33177798AEB56
        Validity
            Not Before: Jan  9 02:29:04 2024 GMT
            Not After : Jan 10 04:38:04 2024 GMT
        Subject: CN=E22AB4BBCCCAA4D76113FE073BD84DB07F0E93EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d4:c2:77:65:17:e7:85:c2:44:71:98:80:e8:
                    ff:86:a4:6b:47:c8:88:25:f7:7f:bf:c1:b3:a8:82:
                    9c:25:53:b6:0e:36:4b:5e:2c:98:6e:aa:ad:24:89:
                    85:57:58:77:09:0b:af:4f:ed:cb:67:50:9b:f7:5a:
                    3c:38:fd:39:31:a7:3e:84:87:48:e3:f3:56:4f:58:
                    e5:3a:0c:fd:32:8b:80:04:73:7b:0c:0c:a2:dd:5e:
                    ab:7d:71:ed:06:22:af:89:83:27:d3:57:45:90:e7:
                    97:01:e7:66:3b:34:cf:6f:fd:d3:c7:0a:ae:5c:33:
                    7c:e0:da:33:c0:f9:0c:82:74:ca:b3:24:8e:51:11:
                    29:03:0b:5c:73:f9:09:c8:79:d4:eb:99:03:15:54:
                    62:f9:47:d9:b4:52:60:6a:00:9b:53:9c:5e:f3:e7:
                    27:84:a7:de:a8:2f:c2:f0:7d:2b:63:c2:e2:b6:a8:
                    91:4f:ee:3d:d3:c6:4f:b0:3b:12:10:b6:7a:74:39:
                    40:d6:65:cc:1f:31:20:ad:02:db:6d:3a:d6:5c:18:
                    72:7d:5d:d8:93:02:05:73:da:f1:05:4d:c7:2e:f2:
                    9c:5f:aa:21:68:00:ea:3d:36:33:27:b6:c1:43:24:
                    26:a2:0a:1d:0a:cf:71:b7:03:04:78:f1:1c:28:0e:
                    cf:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:2A:B4:BB:CC:CA:A4:D7:61:13:FE:07:3B:D8:4D:B0:7F:0E:93:EF
            X509v3 Authority Key Identifier:
                keyid:A2:7F:F7:72:C1:B9:1F:22:11:F2:35:65:75:C3:31:77:79:8A:EB:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/A27FF772C1B91F2211F2356575C33177798AEB56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A27FF772C1B91F2211F2356575C33177798AEB56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/A27FF772C1B91F2211F2356575C33177798AEB56.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:60:e7:86:f6:02:38:4b:6a:14:b7:13:a2:f9:89:eb:a4:29:
         32:b7:25:4d:8a:c8:fa:e6:43:83:9f:bf:10:a7:74:e7:f4:9b:
         19:26:7a:f8:0b:5a:7a:f9:6b:b0:0f:9c:6d:14:bb:5c:c1:cc:
         93:4e:08:aa:77:31:fd:15:25:de:67:2c:10:95:17:21:d0:d8:
         68:6e:be:3d:49:80:d7:ef:29:41:af:b3:95:5b:a2:23:aa:e6:
         6e:14:e8:99:ba:4a:01:57:95:27:8c:b3:9b:c6:3b:07:95:f6:
         c3:34:ed:d4:72:bd:95:03:4c:94:1f:bb:ab:a4:6a:b8:fb:ae:
         14:f2:66:37:23:f1:cc:db:63:38:cd:01:0f:de:69:a1:df:0f:
         76:42:bc:8f:3f:f7:88:b9:71:1b:9f:16:ad:68:24:c2:4d:fd:
         ec:36:b6:8f:c4:cb:78:c1:d5:ac:6b:f7:7c:a8:ee:e8:c7:0c:
         06:a1:b6:1f:b8:c9:7e:8b:c4:e6:cf:e3:85:b3:da:54:8a:ac:
         23:67:bd:6a:85:2a:26:dc:83:c1:cb:5b:c5:45:69:7c:40:49:
         be:78:7f:20:85:a4:95:ea:a9:71:7e:80:bd:98:37:40:58:f0:
         57:c2:59:e3:99:ab:08:a7:09:84:bf:d0:35:f2:b8:46:40:c1:
         75:eb:e3:d5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUG9IXpcMChdieAMQxNAe6bx2/flswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTI3RkY3NzJDMUI5MUYyMjExRjIzNTY1NzVDMzMxNzc3
OThBRUI1NjAeFw0yNDAxMDkwMjI5MDRaFw0yNDAxMTAwNDM4MDRaMDMxMTAvBgNV
BAMTKEUyMkFCNEJCQ0NDQUE0RDc2MTEzRkUwNzNCRDg0REIwN0YwRTkzRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK1MJ3ZRfnhcJEcZiA6P+GpGtH
yIgl93+/wbOogpwlU7YONkteLJhuqq0kiYVXWHcJC69P7ctnUJv3Wjw4/Tkxpz6E
h0jj81ZPWOU6DP0yi4AEc3sMDKLdXqt9ce0GIq+JgyfTV0WQ55cB52Y7NM9v/dPH
Cq5cM3zg2jPA+QyCdMqzJI5RESkDC1xz+QnIedTrmQMVVGL5R9m0UmBqAJtTnF7z
5yeEp96oL8LwfStjwuK2qJFP7j3Txk+wOxIQtnp0OUDWZcwfMSCtAtttOtZcGHJ9
XdiTAgVz2vEFTccu8pxfqiFoAOo9NjMntsFDJCaiCh0Kz3G3AwR48RwoDs93AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU4iq0u8zKpNdhE/4HO9hNsH8Ok+8wHwYDVR0j
BBgwFoAUon/3csG5HyIR8jVldcMxd3mK61YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWs1UXY4MkFCa3ZkOFpETTh1TVlpdGtnaE1uOEpBMUhDakdzUTl4NjU2
VWIvMC9BMjdGRjc3MkMxQjkxRjIyMTFGMjM1NjU3NUMzMzE3Nzc5OEFFQjU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EyN0ZGNzcyQzFCOTFGMjIx
MUYyMzU2NTc1QzMzMTc3Nzk4QUVCNTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RWs1UXY4MkFCa3ZkOFpETTh1TVlpdGtnaE1uOEpBMUhDakdzUTl4NjU2VWIvMC9B
MjdGRjc3MkMxQjkxRjIyMTFGMjM1NjU3NUMzMzE3Nzc5OEFFQjU2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXmDnhvYCOEtqFLcTovmJ66QpMrclTYrI+uZDg5+/EKd05/SbGSZ6+Ataevlr
sA+cbRS7XMHMk04Iqncx/RUl3mcsEJUXIdDYaG6+PUmA1+8pQa+zlVuiI6rmbhTo
mbpKAVeVJ4yzm8Y7B5X2wzTt1HK9lQNMlB+7q6RquPuuFPJmNyPxzNtjOM0BD95p
od8PdkK8jz/3iLlxG58WrWgkwk397Da2j8TLeMHVrGv3fKju6McMBqG2H7jJfovE
5s/jhbPaVIqsI2e9aoUqJtyDwctbxUVpfEBJvnh/IIWkleqpcX6AvZg3QFjwV8JZ
45mrCKcJhL/QNfK4RkDBdevj1Q==
-----END CERTIFICATE-----
Generated at Tue Jan 9 03:49:11 2024 by rpki-client on console.sobornost.net