Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/587A7060AE39D3889856189D6E56ABF59427459F.mft
File:                     587A7060AE39D3889856189D6E56ABF59427459F.mft (raw, json)
Hash identifier:          5IYkJIvMEH54r7TthLODaFPVpYmssnRb6QGNNY9Sea8=
Subject key identifier:   9A:4E:54:F0:B3:E7:78:28:56:F1:47:09:36:12:A4:27:63:8A:63:1B
Authority key identifier: 58:7A:70:60:AE:39:D3:88:98:56:18:9D:6E:56:AB:F5:94:27:45:9F
Certificate issuer:       /CN=587A7060AE39D3889856189D6E56ABF59427459F
Certificate serial:       783A3EDE1C4BFAA0603282CE23AA867318F94887
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/587A7060AE39D3889856189D6E56ABF59427459F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/587A7060AE39D3889856189D6E56ABF59427459F.mft
Manifest number:          013C
Signing time:             Tue 09 Jan 2024 08:19:26 +0000
Manifest this update:     Tue 09 Jan 2024 08:14:26 +0000
Manifest next update:     Wed 10 Jan 2024 10:33:26 +0000
Files and hashes:         1: 587A7060AE39D3889856189D6E56ABF59427459F.crl (hash: Xz6oI6joTR28sC8gblC/NVx/gB9zA958JfHUR51wsKU=)
                          2: 323830343a313237303a3a2f33322d313238203d3e20323632383531.roa (hash: BZ07AquBkS+cL5g+sui5KNQkqvJN+FAu2LCikZjRLek=)
                          3: 3139312e3234322e3131322e302f32302d3332203d3e20323632383531.roa (hash: R3kyhIPokOEu5bPuxteHL1xqAVeAEdIk24qfWmk1sMc=)
                          4: 3137372e38362e3134342e302f32312d3332203d3e20323632383531.roa (hash: xpR1jkUxdPU1ngV/dx8sIKAX87ZMgN6b7PlsJQCFGbU=)
                          5: 3139312e3234302e3230302e302f32312d3332203d3e20323632383531.roa (hash: 9SahB0g5GFiEBSS8bt+AgACQJHSN4+7pQSlvspp1rbk=)
                          6: 3137372e31302e3134342e302f32312d3332203d3e20323632383531.roa (hash: HaFw2i59yRgk2MzYQA5V3aORTMm/WP8oYeSexTDm8Eg=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/587A7060AE39D3889856189D6E56ABF59427459F.crl
                          rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/587A7060AE39D3889856189D6E56ABF59427459F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/587A7060AE39D3889856189D6E56ABF59427459F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 10:33:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:3a:3e:de:1c:4b:fa:a0:60:32:82:ce:23:aa:86:73:18:f9:48:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=587A7060AE39D3889856189D6E56ABF59427459F
        Validity
            Not Before: Jan  9 08:14:26 2024 GMT
            Not After : Jan 10 10:33:26 2024 GMT
        Subject: CN=9A4E54F0B3E7782856F147093612A427638A631B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:aa:49:84:d7:42:94:90:b4:1d:15:a6:40:17:
                    ef:ca:b9:a2:df:af:08:3a:f3:48:7c:92:54:b9:07:
                    61:b0:85:0c:d8:b2:02:b1:34:81:29:4a:8e:6f:df:
                    c7:2b:61:53:cf:51:cb:f1:e7:69:f6:4d:6d:ee:19:
                    b1:3f:65:fe:67:d4:be:c4:af:dd:a3:01:87:ad:a6:
                    a8:f4:66:a1:fe:a1:43:3c:4f:c2:ac:1a:ac:0e:75:
                    f4:af:fb:1d:f2:ba:16:ef:6c:49:49:26:e1:61:9e:
                    8e:0b:1a:74:4d:cb:72:b3:f1:f8:d6:db:28:87:02:
                    27:c3:e0:9e:f7:cb:41:bf:80:01:0c:52:1d:da:dc:
                    86:9d:6e:d6:db:ad:ed:05:3a:1b:f7:6c:33:e3:f9:
                    27:89:a4:62:c2:b3:f2:f8:b4:7c:65:05:b9:f5:55:
                    98:43:99:77:10:e5:aa:f4:e6:f0:bc:a5:36:e1:3f:
                    55:61:fb:df:44:a5:96:05:0a:84:aa:a8:89:6c:3c:
                    1e:83:77:fd:5b:4e:3c:1e:94:f1:91:cf:29:d7:bb:
                    50:88:9b:32:0f:72:a8:6a:0b:54:1e:ee:42:f4:15:
                    28:76:89:60:a4:1d:8d:34:2c:96:37:85:56:25:00:
                    dc:4f:fb:d6:96:45:0a:e3:02:3c:5e:5d:97:3a:87:
                    db:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4E:54:F0:B3:E7:78:28:56:F1:47:09:36:12:A4:27:63:8A:63:1B
            X509v3 Authority Key Identifier:
                keyid:58:7A:70:60:AE:39:D3:88:98:56:18:9D:6E:56:AB:F5:94:27:45:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/587A7060AE39D3889856189D6E56ABF59427459F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/587A7060AE39D3889856189D6E56ABF59427459F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/587A7060AE39D3889856189D6E56ABF59427459F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:20:f6:ec:9b:31:59:83:d0:c6:dd:5d:4d:a1:e5:59:f8:a6:
         20:a1:90:86:13:7a:2f:28:04:f9:74:0d:fe:9f:80:9a:a3:ed:
         53:cc:e1:ed:1e:20:b1:1d:a6:76:50:e1:45:21:d3:a4:6f:7d:
         3f:4c:77:8f:25:f9:b9:c6:89:58:92:de:7c:99:39:ae:bf:17:
         ec:05:62:89:3a:2c:9c:54:b4:6e:fe:7f:26:81:b2:c0:f7:08:
         25:e4:99:17:19:31:c3:5c:4f:3d:31:7d:68:a8:62:08:f4:49:
         7a:32:d0:3c:e4:c6:42:c9:57:03:bd:54:ba:ab:fa:b0:93:cb:
         12:96:d4:0f:a2:c8:e6:2a:6e:95:2e:44:94:de:a4:18:72:a0:
         b8:dc:3a:c2:bb:64:2f:89:4a:69:28:d6:54:70:8b:3d:41:9e:
         ca:f3:31:e6:7f:e8:b1:45:37:bb:71:c3:eb:4d:9c:82:51:8e:
         fc:a0:27:55:8a:da:74:82:aa:30:2f:71:e5:d8:6d:22:7f:4d:
         d0:77:1c:d7:90:cb:a7:5f:54:14:fa:4a:f9:51:29:af:e6:10:
         ad:a3:82:26:fb:59:28:e8:a7:2c:a9:9a:45:8e:de:59:b7:36:
         38:21:8a:e9:f9:1e:5a:af:47:25:04:0c:6f:06:6a:93:ca:80:
         9a:c4:dc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:43 2024 by rpki-client on console.sobornost.net