Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/B509D727BCD6E24457885EF3F37267029BA029F1.mft
File:                     B509D727BCD6E24457885EF3F37267029BA029F1.mft (raw, json)
Hash identifier:          fbfoJA3FuNIw+ovkF8F9plzJkjNHivo4Wv03YVtWusU=
Subject key identifier:   D4:1A:76:11:ED:18:E1:92:21:69:E3:0E:30:CC:CD:25:0D:34:E0:6C
Authority key identifier: B5:09:D7:27:BC:D6:E2:44:57:88:5E:F3:F3:72:67:02:9B:A0:29:F1
Certificate issuer:       /CN=B509D727BCD6E24457885EF3F37267029BA029F1
Certificate serial:       32D3BB710E214AB226C1C3C74B1C56F50297B83A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B509D727BCD6E24457885EF3F37267029BA029F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/B509D727BCD6E24457885EF3F37267029BA029F1.mft
Manifest number:          20
Signing time:             Tue 09 Jan 2024 08:01:16 +0000
Manifest this update:     Tue 09 Jan 2024 07:56:16 +0000
Manifest next update:     Wed 10 Jan 2024 11:18:16 +0000
Files and hashes:         1: 323830343a323965343a3a2f33322d313238203d3e20323634303432.roa (hash: aQalFrtoqgMbvxDa3OFnD3ubenN9gw4SqBNjrAiJDEw=)
                          2: 3134332e3133372e3135322e302f32322d3332203d3e20323634303432.roa (hash: MQMPfrGfr4YhOYlUxRm98UWY9hBNGBWwEZfAFn4nA6c=)
                          3: B509D727BCD6E24457885EF3F37267029BA029F1.crl (hash: zlqZMpJDq7jAceBwK72rCtC3isk+bb72K4vB94r7J6k=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/B509D727BCD6E24457885EF3F37267029BA029F1.crl
                          rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/B509D727BCD6E24457885EF3F37267029BA029F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B509D727BCD6E24457885EF3F37267029BA029F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 11:18:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d3:bb:71:0e:21:4a:b2:26:c1:c3:c7:4b:1c:56:f5:02:97:b8:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B509D727BCD6E24457885EF3F37267029BA029F1
        Validity
            Not Before: Jan  9 07:56:16 2024 GMT
            Not After : Jan 10 11:18:16 2024 GMT
        Subject: CN=D41A7611ED18E1922169E30E30CCCD250D34E06C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5b:ef:78:24:0a:36:9e:1c:de:46:6b:c9:fd:
                    1b:7d:ad:06:8d:65:07:ea:73:6a:f6:b1:01:5d:4b:
                    4f:f1:21:7c:8a:a4:56:5c:74:55:88:98:d2:7e:70:
                    ac:2b:8a:8a:aa:39:86:89:cf:2a:71:78:e9:4e:7a:
                    90:2d:19:e0:f6:1c:96:e9:e2:77:dd:6a:bd:cf:84:
                    96:b7:a6:0b:ac:71:a2:c7:1a:f5:53:4f:8f:f3:69:
                    60:4e:4d:83:85:c1:05:b3:25:b3:dc:2d:29:98:72:
                    48:e9:e5:8a:dd:52:b2:56:66:6f:4a:8c:37:b6:24:
                    b6:13:bf:e4:1e:41:f1:29:93:ad:46:c1:2e:66:58:
                    98:b5:83:6d:1f:d7:c3:bb:61:1a:b7:37:d2:6e:53:
                    33:bc:3f:55:77:70:25:1e:d4:15:42:ca:13:a8:20:
                    33:f0:81:80:28:1e:73:bb:41:01:0d:e6:61:15:22:
                    86:b2:e5:2a:16:d5:57:e0:91:5f:a7:3b:8f:d3:05:
                    86:9c:79:46:b3:58:80:33:a1:11:72:2d:a4:39:e9:
                    92:ce:32:11:62:66:17:42:1e:8b:fd:d5:21:33:69:
                    42:e4:d8:5f:6a:2b:ff:98:09:20:cc:18:f1:b4:d4:
                    73:40:c0:22:ba:d5:07:3e:65:32:af:93:d4:c8:d5:
                    f6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1A:76:11:ED:18:E1:92:21:69:E3:0E:30:CC:CD:25:0D:34:E0:6C
            X509v3 Authority Key Identifier:
                keyid:B5:09:D7:27:BC:D6:E2:44:57:88:5E:F3:F3:72:67:02:9B:A0:29:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/B509D727BCD6E24457885EF3F37267029BA029F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B509D727BCD6E24457885EF3F37267029BA029F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/B509D727BCD6E24457885EF3F37267029BA029F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:e8:23:3d:61:e0:38:61:97:ec:63:42:bb:9c:ec:fa:4e:5d:
         52:fc:43:c4:47:1b:4e:a4:1a:ba:d5:10:5e:88:3b:df:86:f8:
         c3:8b:ce:5c:25:06:09:f7:76:92:5f:9f:a5:d4:e2:20:dc:86:
         00:be:ae:da:0c:80:ce:a5:e9:47:a9:d6:f2:58:65:09:f0:17:
         3e:96:0a:33:59:ac:fe:29:ac:2d:9c:e4:af:d3:8a:49:61:ed:
         f2:85:89:41:f9:9d:f7:2d:1e:0f:3a:9b:20:ca:5c:7c:7b:23:
         f2:8b:36:4a:03:72:8f:69:a7:ad:da:da:35:c9:18:58:ab:5b:
         3c:2c:91:f7:e5:b3:b0:15:ca:1d:cf:1e:70:22:d2:20:b5:6d:
         3f:82:04:79:e4:1b:02:12:2a:9b:60:df:0b:12:95:58:9c:96:
         68:71:c2:97:3a:43:69:20:97:2c:38:f2:5d:4d:04:61:6d:ad:
         3e:ef:73:f5:bb:cf:4b:ba:bf:ef:d5:84:9b:ef:97:fb:61:ef:
         47:04:1d:ce:cc:3e:18:08:5b:14:21:f5:28:45:22:08:61:fb:
         85:a1:75:a1:9a:69:3d:5f:77:ba:c2:73:dd:d9:44:1e:00:0e:
         a7:8a:5f:30:52:85:d6:a3:b7:06:ab:e0:3d:95:5c:62:5d:74:
         5a:cf:b7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:40 2024 by rpki-client on console.sobornost.net