Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/20AD4CD5EF5C755C8B0F92F4F9C89072ADB65286.mft
File:                     20AD4CD5EF5C755C8B0F92F4F9C89072ADB65286.mft (raw, json)
Hash identifier:          AfKwufWKhubyheGn/uIbHTdPd0+fWqBGcdvKkpGMWFs=
Subject key identifier:   1B:8A:E3:CF:94:17:EE:64:95:D9:FA:AF:E4:B3:7C:0F:8E:7F:84:DC
Authority key identifier: 20:AD:4C:D5:EF:5C:75:5C:8B:0F:92:F4:F9:C8:90:72:AD:B6:52:86
Certificate issuer:       /CN=20AD4CD5EF5C755C8B0F92F4F9C89072ADB65286
Certificate serial:       4415759745AE0D10983D12A8B375F045A42D8788
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20AD4CD5EF5C755C8B0F92F4F9C89072ADB65286.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/20AD4CD5EF5C755C8B0F92F4F9C89072ADB65286.mft
Manifest number:          0143
Signing time:             Sat 09 Dec 2023 07:42:47 +0000
Manifest this update:     Sat 09 Dec 2023 07:37:47 +0000
Manifest next update:     Sun 10 Dec 2023 11:32:47 +0000
Files and hashes:         1: 323830343a386232303a3a2f33322d3438203d3e20323733373133.roa (hash: cCvNCiLRghHygQMKwu7f86vaa+AGlzd1Z1KIkrx4riE=)
                          2: 20AD4CD5EF5C755C8B0F92F4F9C89072ADB65286.crl (hash: wFCJZ7co8YegHacL6vsUKlBsBR6dW2/5Z2MAWrg5UB4=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/20AD4CD5EF5C755C8B0F92F4F9C89072ADB65286.crl
                          rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/20AD4CD5EF5C755C8B0F92F4F9C89072ADB65286.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20AD4CD5EF5C755C8B0F92F4F9C89072ADB65286.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Dec 2023 08:15:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:15:75:97:45:ae:0d:10:98:3d:12:a8:b3:75:f0:45:a4:2d:87:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20AD4CD5EF5C755C8B0F92F4F9C89072ADB65286
        Validity
            Not Before: Dec  9 07:37:47 2023 GMT
            Not After : Dec 10 11:32:47 2023 GMT
        Subject: CN=1B8AE3CF9417EE6495D9FAAFE4B37C0F8E7F84DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:17:7a:53:e1:2c:c4:61:2e:e6:49:5a:ba:fc:
                    b8:b0:74:58:65:ff:22:99:c5:fa:dc:a2:ce:ae:76:
                    63:e9:be:9a:a8:96:a0:04:c4:d4:a6:ac:cd:56:a0:
                    9e:f1:57:63:7c:85:5a:54:98:dd:0b:be:68:9c:e3:
                    5a:df:6d:26:56:15:b9:5b:68:e4:d7:99:c0:97:ab:
                    83:48:6b:cd:13:30:62:e1:81:d9:84:36:3e:c9:07:
                    ca:e9:6e:c2:15:2d:56:86:ba:91:6f:67:16:2c:01:
                    0f:1b:76:c1:bb:4d:1f:d8:aa:99:c4:41:41:4d:5a:
                    94:70:7d:e9:71:ba:19:5f:4b:83:76:fb:7d:1e:9c:
                    91:d5:2f:dc:1c:cd:6b:1f:b7:ed:0f:e8:8d:0a:27:
                    61:77:4b:45:a9:3f:90:e7:a0:3c:3c:1e:84:3f:7a:
                    3d:6f:cc:38:77:13:1d:a6:2c:7e:67:94:42:54:e6:
                    a4:7c:e9:4c:1d:58:c2:7c:a2:ec:a0:93:75:0b:2b:
                    8a:42:a0:75:b8:eb:d5:92:79:65:d0:ec:3a:c3:bc:
                    fc:6a:aa:34:03:9b:30:ea:fc:58:f8:3b:6e:7a:f5:
                    69:e4:aa:39:80:70:15:ea:0c:b8:1a:8e:87:54:aa:
                    03:ae:0b:d1:8f:f2:32:38:22:8c:79:31:2d:eb:d4:
                    e6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8A:E3:CF:94:17:EE:64:95:D9:FA:AF:E4:B3:7C:0F:8E:7F:84:DC
            X509v3 Authority Key Identifier:
                keyid:20:AD:4C:D5:EF:5C:75:5C:8B:0F:92:F4:F9:C8:90:72:AD:B6:52:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/20AD4CD5EF5C755C8B0F92F4F9C89072ADB65286.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20AD4CD5EF5C755C8B0F92F4F9C89072ADB65286.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/20AD4CD5EF5C755C8B0F92F4F9C89072ADB65286.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:6b:43:b9:a6:68:c7:55:0c:b0:e9:ef:01:af:c4:34:2b:49:
         f2:61:bf:fe:c4:4b:0a:ae:25:5d:ce:eb:85:59:c4:aa:3a:83:
         37:ff:25:af:78:9c:43:fd:f5:94:77:5f:2d:4a:11:f8:68:30:
         64:ad:9f:7d:d2:65:89:85:17:e4:65:a6:4e:1a:96:72:38:c2:
         80:f9:20:a9:05:27:1b:7f:12:e4:7b:fe:e4:6c:5f:ed:db:8d:
         de:5c:06:9b:70:c6:b7:ec:a8:c1:63:ce:47:6c:27:5f:47:38:
         f4:2e:b7:3d:f6:46:41:96:bf:dd:1c:c9:a0:c2:a5:df:78:7d:
         3f:58:46:5e:40:40:6a:a3:30:f0:f3:cd:7d:c9:17:1f:90:63:
         34:73:ad:af:6b:56:0f:90:a0:9c:d6:0b:cb:1a:96:e9:6d:79:
         8c:c5:a8:51:b3:1b:82:25:b7:f8:4a:65:5c:85:7b:fe:8a:65:
         ea:07:8f:cd:3b:98:a0:71:04:b0:96:3f:a3:51:37:37:34:fd:
         ee:ab:c9:ff:39:bd:ff:77:a9:fc:69:6a:6b:cc:4c:62:2f:c4:
         15:47:1e:09:b9:57:33:ab:3a:67:77:65:6a:bd:51:38:96:29:
         ba:4d:b3:7a:20:69:e2:19:18:b5:35:93:08:0a:a0:e8:8e:dc:
         64:ed:7a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 9 08:23:21 2023 by rpki-client on console-ams.rpki-client.org