Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/38Hcd1im6iS6g7in2C3eh9zsRtt1t9D2caLegg9Ttu4K/0/EA7B2CBE05347D3DA4F21DE666EDAEDA9DDEEF51.mft
File:                     EA7B2CBE05347D3DA4F21DE666EDAEDA9DDEEF51.mft (raw, json)
Hash identifier:          QQyt5VfFTPkD7uktXlu6OeNfaeE4H6H/j/KGv8zaNrY=
Subject key identifier:   C2:2C:68:60:26:40:64:E9:F5:85:79:05:EA:B2:52:72:9F:52:F2:50
Authority key identifier: EA:7B:2C:BE:05:34:7D:3D:A4:F2:1D:E6:66:ED:AE:DA:9D:DE:EF:51
Certificate issuer:       /CN=EA7B2CBE05347D3DA4F21DE666EDAEDA9DDEEF51
Certificate serial:       7D5C5D375427ED7C05C709C7B000B83985ED40CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA7B2CBE05347D3DA4F21DE666EDAEDA9DDEEF51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38Hcd1im6iS6g7in2C3eh9zsRtt1t9D2caLegg9Ttu4K/0/EA7B2CBE05347D3DA4F21DE666EDAEDA9DDEEF51.mft
Manifest number:          2F
Signing time:             Sun 02 Jun 2024 22:02:03 +0000
Manifest this update:     Sun 02 Jun 2024 21:57:03 +0000
Manifest next update:     Tue 04 Jun 2024 00:46:03 +0000
Files and hashes:         1: 323830343a386134343a3a2f33322d3438203d3e20323733363538.roa (hash: yByfZUnzUAdTUdZz9JBji9awfvazKdpqldSApUdxvPQ=)
                          2: EA7B2CBE05347D3DA4F21DE666EDAEDA9DDEEF51.crl (hash: XPaC2IsHFXWqPSNNq4Fj7iTmO2p87Gb+fChHR7S9ppY=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/38Hcd1im6iS6g7in2C3eh9zsRtt1t9D2caLegg9Ttu4K/0/EA7B2CBE05347D3DA4F21DE666EDAEDA9DDEEF51.crl
                          rsync://rpki-repo.registro.br/repo/38Hcd1im6iS6g7in2C3eh9zsRtt1t9D2caLegg9Ttu4K/0/EA7B2CBE05347D3DA4F21DE666EDAEDA9DDEEF51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA7B2CBE05347D3DA4F21DE666EDAEDA9DDEEF51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 23:57:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5c:5d:37:54:27:ed:7c:05:c7:09:c7:b0:00:b8:39:85:ed:40:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA7B2CBE05347D3DA4F21DE666EDAEDA9DDEEF51
        Validity
            Not Before: Jun  2 21:57:03 2024 GMT
            Not After : Jun  4 00:46:03 2024 GMT
        Subject: CN=C22C6860264064E9F5857905EAB252729F52F250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5e:c9:50:ee:d0:27:78:54:5e:43:ae:2e:86:
                    23:3c:66:bb:27:e1:0e:38:f8:c1:db:64:b4:fa:0a:
                    aa:65:6d:39:b7:15:49:c0:5b:f3:a4:0c:44:3f:81:
                    57:0a:19:88:b4:d7:4c:a6:90:8a:81:ab:77:a8:be:
                    cf:e8:1f:07:ae:bf:66:8f:d9:0c:56:70:f2:0e:8f:
                    0e:4e:c9:f9:f4:1d:33:c0:bc:16:6c:57:81:71:9a:
                    77:1f:14:81:56:ba:da:4e:5c:68:94:b2:ea:e9:07:
                    51:70:73:70:c8:e2:b4:1c:cb:9e:b8:40:cd:a1:0a:
                    81:47:9a:cf:a4:a0:fa:cb:d0:77:fc:02:a3:36:ac:
                    a6:5a:01:88:97:9c:01:af:c4:45:0f:22:4a:3e:d7:
                    e7:fd:13:ab:9a:7c:c6:9d:c7:66:83:89:db:3d:ec:
                    d1:dc:fd:58:96:9b:37:97:e7:bf:8d:6b:8b:93:1a:
                    50:2a:33:1a:89:e2:a0:81:ee:2f:1f:eb:03:47:96:
                    69:68:a1:79:6f:77:63:df:98:ad:b4:25:e3:f6:97:
                    a6:7b:07:61:b9:21:94:7e:73:31:cb:1e:f4:7e:b0:
                    02:6b:bd:04:2c:7a:41:02:25:77:23:62:b4:0a:b6:
                    74:3b:e0:8b:93:ca:47:c7:a8:e2:e8:d0:e9:0d:12:
                    32:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:2C:68:60:26:40:64:E9:F5:85:79:05:EA:B2:52:72:9F:52:F2:50
            X509v3 Authority Key Identifier:
                keyid:EA:7B:2C:BE:05:34:7D:3D:A4:F2:1D:E6:66:ED:AE:DA:9D:DE:EF:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38Hcd1im6iS6g7in2C3eh9zsRtt1t9D2caLegg9Ttu4K/0/EA7B2CBE05347D3DA4F21DE666EDAEDA9DDEEF51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA7B2CBE05347D3DA4F21DE666EDAEDA9DDEEF51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38Hcd1im6iS6g7in2C3eh9zsRtt1t9D2caLegg9Ttu4K/0/EA7B2CBE05347D3DA4F21DE666EDAEDA9DDEEF51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:ca:ba:22:fc:d1:2b:57:84:5e:b5:8d:2a:92:a1:36:48:0a:
         01:d8:7f:ed:e9:25:7f:9e:d4:e0:70:b6:db:fe:e9:8b:5b:1d:
         fa:c2:1b:a0:4f:29:01:10:62:84:6b:63:1e:6b:24:68:38:4a:
         dc:54:dc:3a:c0:df:66:a7:e0:18:f3:90:19:c5:37:04:25:f3:
         80:50:46:06:3b:1b:74:91:d9:a6:65:d7:98:c8:38:a5:f9:c5:
         10:0d:a2:ed:bb:14:1c:5d:4a:5f:d2:ea:b8:f4:e9:8e:08:19:
         fa:db:fc:55:67:98:d8:3f:69:f3:22:40:8e:c3:26:e6:a9:6f:
         a2:f8:45:b4:53:4a:72:ea:18:57:30:ea:e6:95:35:18:63:43:
         d2:4d:0f:cc:11:b1:35:64:5a:10:05:f5:cb:90:aa:5a:55:12:
         75:26:44:b3:69:04:a9:3e:12:1e:e4:8b:7a:8b:b7:e2:89:cd:
         3e:da:69:77:cc:89:b2:be:12:b0:dc:57:42:89:84:3a:55:ba:
         19:60:84:a0:06:04:cf:74:7b:b1:25:e1:9d:fe:48:16:e1:60:
         c6:c9:3b:57:c9:5e:e3:72:2b:6a:0e:92:f1:bf:48:db:d3:73:
         06:07:e2:22:53:2d:a8:79:8f:f4:fb:51:0b:3d:ff:f6:33:d8:
         76:63:cb:21
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfVxdN1Qn7XwFxwnHsAC4OYXtQMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUE3QjJDQkUwNTM0N0QzREE0RjIxREU2NjZFREFFREE5
RERFRUY1MTAeFw0yNDA2MDIyMTU3MDNaFw0yNDA2MDQwMDQ2MDNaMDMxMTAvBgNV
BAMTKEMyMkM2ODYwMjY0MDY0RTlGNTg1NzkwNUVBQjI1MjcyOUY1MkYyNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpXslQ7tAneFReQ64uhiM8Zrsn
4Q44+MHbZLT6CqplbTm3FUnAW/OkDEQ/gVcKGYi010ymkIqBq3eovs/oHweuv2aP
2QxWcPIOjw5Oyfn0HTPAvBZsV4FxmncfFIFWutpOXGiUsurpB1Fwc3DI4rQcy564
QM2hCoFHms+koPrL0Hf8AqM2rKZaAYiXnAGvxEUPIko+1+f9E6uafMadx2aDids9
7NHc/ViWmzeX57+Na4uTGlAqMxqJ4qCB7i8f6wNHlmlooXlvd2PfmK20JeP2l6Z7
B2G5IZR+czHLHvR+sAJrvQQsekECJXcjYrQKtnQ74IuTykfHqOLo0OkNEjJRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUwixoYCZAZOn1hXkF6rJScp9S8lAwHwYDVR0j
BBgwFoAU6nssvgU0fT2k8h3mZu2u2p3e71EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzhIY2QxaW02aVM2ZzdpbjJDM2VoOXpzUnR0MXQ5RDJjYUxlZ2c5VHR1
NEsvMC9FQTdCMkNCRTA1MzQ3RDNEQTRGMjFERTY2NkVEQUVEQTlEREVFRjUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBN0IyQ0JFMDUzNDdEM0RB
NEYyMURFNjY2RURBRURBOURERUVGNTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MzhIY2QxaW02aVM2ZzdpbjJDM2VoOXpzUnR0MXQ5RDJjYUxlZ2c5VHR1NEsvMC9F
QTdCMkNCRTA1MzQ3RDNEQTRGMjFERTY2NkVEQUVEQTlEREVFRjUxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAv8q6IvzRK1eEXrWNKpKhNkgKAdh/7eklf57U4HC22/7pi1sd+sIboE8pARBi
hGtjHmskaDhK3FTcOsDfZqfgGPOQGcU3BCXzgFBGBjsbdJHZpmXXmMg4pfnFEA2i
7bsUHF1KX9LquPTpjggZ+tv8VWeY2D9p8yJAjsMm5qlvovhFtFNKcuoYVzDq5pU1
GGND0k0PzBGxNWRaEAX1y5CqWlUSdSZEs2kEqT4SHuSLeou34onNPtppd8yJsr4S
sNxXQomEOlW6GWCEoAYEz3R7sSXhnf5IFuFgxsk7V8le43Irag6S8b9I29NzBgfi
IlMtqHmP9PtRCz3/9jPYdmPLIQ==
-----END CERTIFICATE-----
Generated at Sun Jun 2 22:25:42 2024 by rpki-client on console-fra.rpki-client.org