Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/D77B35FDC76F706D76A2ADD59ACF808B63ACF1D9.mft
File:                     D77B35FDC76F706D76A2ADD59ACF808B63ACF1D9.mft (raw, json)
Hash identifier:          PhQAxxkYGtmDsnQ6l08v2GuSOYOJT8aZAHbiIEhyqfE=
Subject key identifier:   B8:E9:C2:17:F6:2F:0D:83:1F:B4:27:5B:D8:7A:6B:33:C4:F0:BA:0F
Authority key identifier: D7:7B:35:FD:C7:6F:70:6D:76:A2:AD:D5:9A:CF:80:8B:63:AC:F1:D9
Certificate issuer:       /CN=D77B35FDC76F706D76A2ADD59ACF808B63ACF1D9
Certificate serial:       241F5F8DEF9D91BF5DDCE7412E0CEB5C680A234B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D77B35FDC76F706D76A2ADD59ACF808B63ACF1D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/D77B35FDC76F706D76A2ADD59ACF808B63ACF1D9.mft
Manifest number:          0216
Signing time:             Tue 09 Jan 2024 05:59:01 +0000
Manifest this update:     Tue 09 Jan 2024 05:54:01 +0000
Manifest next update:     Wed 10 Jan 2024 09:35:01 +0000
Files and hashes:         1: 3133382e3235352e3133362e302f32322d3234203d3e20323634323830.roa (hash: /zpnTD216oX0tL1Iayoo7LSt8xvSxWzzY8BWbMrK3cA=)
                          2: 323830343a323536633a3a2f33322d3335203d3e20323634323830.roa (hash: RNgtGEPDQ6zr0VZei/dCv81xUp4x8jsKN4riNJhDUxc=)
                          3: D77B35FDC76F706D76A2ADD59ACF808B63ACF1D9.crl (hash: 6jPrPvwjw/hWaEF6Y/OvIuA/wtv1h71NeShsz/WBDn8=)
                          4: 3133382e3132312e34342e302f32322d3234203d3e20323634323830.roa (hash: +u2UUeYTwedvFoUOB1cqlkyGA0jaSjzqOwFoLFzSlxA=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/D77B35FDC76F706D76A2ADD59ACF808B63ACF1D9.crl
                          rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/D77B35FDC76F706D76A2ADD59ACF808B63ACF1D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D77B35FDC76F706D76A2ADD59ACF808B63ACF1D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 06:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:1f:5f:8d:ef:9d:91:bf:5d:dc:e7:41:2e:0c:eb:5c:68:0a:23:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D77B35FDC76F706D76A2ADD59ACF808B63ACF1D9
        Validity
            Not Before: Jan  9 05:54:01 2024 GMT
            Not After : Jan 10 09:35:01 2024 GMT
        Subject: CN=B8E9C217F62F0D831FB4275BD87A6B33C4F0BA0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:74:b8:34:43:c8:93:36:00:13:17:c2:52:81:
                    a8:15:e6:d5:ae:e7:3c:0a:fd:dc:ae:61:26:e9:01:
                    a7:f8:04:fe:ca:de:9f:92:e5:9b:cf:ce:ed:ad:23:
                    d2:ad:5c:ae:81:26:2f:e9:7f:14:91:56:7b:c3:43:
                    e9:0a:61:79:aa:98:b0:f2:f9:5c:d0:13:5f:03:b2:
                    41:00:58:a4:e7:4d:0a:f2:b3:2e:76:c9:6f:01:a1:
                    11:4c:12:63:1d:c2:d3:85:43:9d:47:57:f2:2a:ca:
                    05:56:ca:95:37:08:bb:aa:76:f6:38:8d:af:c9:b7:
                    38:bc:14:b5:aa:45:3e:d5:d2:5b:44:4b:8f:f3:26:
                    48:dc:ef:d8:8f:8e:e8:bd:00:0c:5b:58:67:42:b0:
                    ed:58:e0:ee:33:7c:7b:1c:3d:56:8a:11:a3:68:fb:
                    29:e9:a0:8e:92:67:c4:05:a5:0e:e1:51:fb:40:12:
                    9e:f4:b1:c2:b4:d1:5d:d1:24:b1:09:51:3a:a1:b9:
                    a7:d0:27:24:7c:dd:c4:09:e0:71:66:84:ad:a8:ef:
                    78:4a:dc:e0:8a:1c:6e:81:89:fc:08:76:35:2e:3f:
                    c5:b6:6c:c0:0f:86:aa:2a:88:e3:fe:a4:07:17:32:
                    1c:ed:60:b4:a8:04:b8:b8:cf:0c:1e:df:7f:28:9f:
                    3a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E9:C2:17:F6:2F:0D:83:1F:B4:27:5B:D8:7A:6B:33:C4:F0:BA:0F
            X509v3 Authority Key Identifier:
                keyid:D7:7B:35:FD:C7:6F:70:6D:76:A2:AD:D5:9A:CF:80:8B:63:AC:F1:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/D77B35FDC76F706D76A2ADD59ACF808B63ACF1D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D77B35FDC76F706D76A2ADD59ACF808B63ACF1D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/D77B35FDC76F706D76A2ADD59ACF808B63ACF1D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:87:db:a2:5e:c5:08:55:19:d2:bf:1e:e4:d9:7d:3c:fb:ae:
         b3:5c:99:44:bc:f6:5d:ac:04:15:5f:74:67:7d:a8:42:17:e2:
         55:5d:85:6a:29:d5:b6:c6:a0:91:37:7f:ad:f5:03:58:79:a8:
         41:88:9e:6a:06:b6:ef:12:46:0e:a5:c7:3f:89:fd:ba:79:1e:
         bc:ee:6b:4a:c3:9a:11:57:17:84:82:9a:3f:35:30:40:c2:3f:
         f3:52:69:ae:6c:52:d2:2e:d2:fa:9f:9f:92:c3:87:d8:28:5d:
         5b:5f:c8:15:91:c7:28:d1:b9:44:cd:4a:eb:d3:1c:23:36:b3:
         21:e5:b9:ea:fe:8d:f2:2c:b5:32:3d:ad:d6:09:50:ed:c6:17:
         7c:e7:b3:a5:14:69:70:5a:b2:4e:e9:b4:04:66:fb:08:3b:c7:
         fe:6e:60:ac:4f:c5:a9:4c:28:6c:c4:59:38:a3:17:51:fe:c9:
         b0:54:ad:bb:d2:24:80:a6:fe:b9:b7:75:3f:fb:d7:67:43:c7:
         fb:40:3e:4f:f8:b9:e5:38:b2:fa:16:71:9e:16:7a:50:66:88:
         9b:d6:86:20:e1:29:c1:42:bc:a8:89:14:7f:2e:22:0f:9d:ae:
         2d:58:0b:c4:c4:e1:2e:20:9a:b8:f6:cf:f8:71:71:07:59:03:
         a7:69:a4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 07:51:56 2024 by rpki-client on console.sobornost.net