Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/33D2D52AEBFE5389EA6D3EC0B86D15B4F14B18D8.mft
File:                     33D2D52AEBFE5389EA6D3EC0B86D15B4F14B18D8.mft (raw, json)
Hash identifier:          y/g3/YvkEVyazkkd5PyD0b7Mn36lG+KmpIiIArKZpw4=
Subject key identifier:   9E:80:76:55:78:EE:3E:0B:E4:35:FF:95:72:87:21:58:41:06:FD:A8
Authority key identifier: 33:D2:D5:2A:EB:FE:53:89:EA:6D:3E:C0:B8:6D:15:B4:F1:4B:18:D8
Certificate issuer:       /CN=33D2D52AEBFE5389EA6D3EC0B86D15B4F14B18D8
Certificate serial:       785B69A6633484B4132D51340BAD24C8C3D2FDB4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33D2D52AEBFE5389EA6D3EC0B86D15B4F14B18D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/33D2D52AEBFE5389EA6D3EC0B86D15B4F14B18D8.mft
Manifest number:          9F
Signing time:             Tue 09 Jan 2024 00:58:11 +0000
Manifest this update:     Tue 09 Jan 2024 00:53:11 +0000
Manifest next update:     Wed 10 Jan 2024 02:31:11 +0000
Files and hashes:         1: 33D2D52AEBFE5389EA6D3EC0B86D15B4F14B18D8.crl (hash: ZFHdTmLFH2U8PsiI4tvk18ESNovhE+OUkZ7ChoGGAhA=)
                          2: 3137372e33392e3133362e302f32322d3234203d3e20323632343330.roa (hash: GTfvKkEJByo8aQXllAEXvVcm06/bnn0VNaGddEX9mjI=)
                          3: 3138362e3232342e36342e302f32302d3234203d3e203238313432.roa (hash: KjzIiuUNLjm9fkm8YXPwbiATZrpMAW7YRBSMdcShtTQ=)
                          4: 3138372e34392e38302e302f32302d3234203d3e203238313432.roa (hash: nhLMwe1VPFQptPMxpcbQeCvLJd2VQbsgGxk7Yqgzdv8=)
                          5: 323830343a66633a3a2f33322d3430203d3e203238313432.roa (hash: dbV921lJ+mVRw5RZOJaSoW6ZSqWDfmzUBvd5sjTJZ4Y=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/33D2D52AEBFE5389EA6D3EC0B86D15B4F14B18D8.crl
                          rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/33D2D52AEBFE5389EA6D3EC0B86D15B4F14B18D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33D2D52AEBFE5389EA6D3EC0B86D15B4F14B18D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 01:32:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:5b:69:a6:63:34:84:b4:13:2d:51:34:0b:ad:24:c8:c3:d2:fd:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D2D52AEBFE5389EA6D3EC0B86D15B4F14B18D8
        Validity
            Not Before: Jan  9 00:53:11 2024 GMT
            Not After : Jan 10 02:31:11 2024 GMT
        Subject: CN=9E80765578EE3E0BE435FF95728721584106FDA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:50:d5:5a:c9:a7:81:88:1a:a6:53:58:85:2a:
                    bc:93:26:56:b0:a7:c5:00:33:cf:a1:3a:69:fe:94:
                    89:c9:37:90:50:3c:5a:ea:c4:e3:98:9e:4f:44:54:
                    2a:99:dd:b1:80:91:e5:88:a8:2a:0a:53:b4:0e:e7:
                    31:4c:58:59:7b:d7:c2:88:af:e8:b4:9f:32:80:43:
                    8c:00:e6:01:6c:fc:c7:10:53:84:a8:e6:47:36:e4:
                    3f:cc:29:71:a0:e6:cc:38:6d:ee:09:b0:52:30:ea:
                    f4:9f:df:cd:d4:f0:eb:ca:f4:49:8c:0c:de:5a:60:
                    ca:ac:3b:16:8a:a2:be:0c:f1:8c:f2:9f:00:49:77:
                    00:82:50:0a:d9:41:73:b4:66:06:00:37:f7:1f:6e:
                    47:7d:80:18:98:1d:0b:54:3e:34:37:2a:bb:72:1a:
                    9f:ba:c8:dc:1d:c0:d7:f2:d4:d6:e6:da:f5:5e:67:
                    c1:07:79:26:25:4c:91:3d:e2:e2:0c:97:f6:a0:b5:
                    db:c3:78:50:c9:94:21:b9:4a:38:d0:79:22:84:36:
                    02:9b:1a:f6:a7:93:c8:fd:e9:a5:f5:6d:0e:f0:dd:
                    94:54:d7:91:47:61:77:5c:16:20:a1:d2:4f:6f:75:
                    87:c7:1a:9d:0f:59:7d:06:67:1e:a7:5e:01:dc:5d:
                    89:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:80:76:55:78:EE:3E:0B:E4:35:FF:95:72:87:21:58:41:06:FD:A8
            X509v3 Authority Key Identifier:
                keyid:33:D2:D5:2A:EB:FE:53:89:EA:6D:3E:C0:B8:6D:15:B4:F1:4B:18:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/33D2D52AEBFE5389EA6D3EC0B86D15B4F14B18D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33D2D52AEBFE5389EA6D3EC0B86D15B4F14B18D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/33D2D52AEBFE5389EA6D3EC0B86D15B4F14B18D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:86:07:94:3e:3f:78:bf:8e:35:75:74:a1:4b:2a:0f:af:41:
         8d:8d:c1:c7:22:ac:7e:c9:5e:c8:9e:44:34:03:f9:03:99:d6:
         15:dd:c7:93:6d:0b:1e:21:82:b4:97:3c:12:64:e9:0d:ce:db:
         8b:91:93:48:e6:b7:1a:4d:c6:65:8a:5a:88:53:bf:15:43:01:
         0c:11:4a:74:f0:73:a1:15:9a:08:19:ed:56:58:bf:83:b3:2a:
         cc:fe:d4:c0:33:5f:bf:95:1d:41:a3:cd:de:84:d3:7d:72:39:
         b5:20:55:27:42:7f:81:8a:a7:fd:a2:e3:ff:9c:a8:e0:7e:67:
         94:0c:48:16:e1:0c:08:18:d9:40:bf:46:d9:0e:ca:33:02:8e:
         ce:3b:29:86:92:5d:b8:93:ed:5d:44:a8:6b:a3:aa:c2:b4:95:
         80:af:e7:6f:d1:a3:6e:0b:ae:ae:67:fe:c4:2c:50:ff:6a:f8:
         ea:eb:22:2e:ba:06:0e:f2:e6:b2:4e:ad:95:b5:f2:ad:6b:8b:
         8a:7a:a2:e7:98:89:e0:73:f8:9c:e1:07:a1:5b:07:c1:9d:38:
         4d:59:95:99:d7:04:fa:85:2b:26:91:4f:96:3f:69:dc:c1:f5:
         c0:8e:30:1e:81:b0:70:04:e3:59:fe:d2:65:40:92:6d:73:59:
         f3:22:6e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 02:15:25 2024 by rpki-client on console.sobornost.net