Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft
File:                     4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft (raw, json)
Hash identifier:          pVgzuNGxIhjxx5RopBbfao/8cB70Ukt770nXYCkIHgg=
Subject key identifier:   09:6B:7E:45:1B:74:AB:34:1D:97:C0:1F:2F:59:28:84:F6:6F:39:D5
Authority key identifier: 4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2
Certificate issuer:       /CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
Certificate serial:       281C9F20FD1640D7ABD56C4FB3C06150ECA624FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft
Manifest number:          42
Signing time:             Wed 22 May 2024 14:56:28 +0000
Manifest this update:     Wed 22 May 2024 14:51:28 +0000
Manifest next update:     Thu 23 May 2024 15:15:28 +0000
Files and hashes:         1: 323830343a6439303a3a2f33322d3536203d3e20323032.roa (hash: jaoHusXNCNGcUE8+bGN35l6HY4OcWA9hE2Hzh8HEDak=)
                          2: 323830343a6439303a3a2f33322d3536203d3e20323033.roa (hash: QNFSmCud9ESuU9Qq0IbyzJ/FAVrlDDi+pQgSw9GKe1I=)
                          3: 3137392e39362e3137362e302f32312d3234203d3e203532363339.roa (hash: Fbj9xE5NwQ+5xRVqY3CC1+O/IvEPWkqj+rgR/JgvmBQ=)
                          4: 3136382e3139352e3131322e302f32322d3332203d3e20323033.roa (hash: 6Ja++yyUZH18ATOFhtYuSuvTd/+7zEPAPCmHjvONb6c=)
                          5: 3136382e3139352e3131322e302f32322d3234203d3e203532363339.roa (hash: Ah68P8jj3v8VVgHZRCV3+DE1cRYiq+nc1BVjBHnb4eQ=)
                          6: 3136382e3139352e3131322e302f32322d3332203d3e2033333536.roa (hash: bRxq3zPzQiByg/2hihk4JiNWjGyboVhT0XLt7WHG4Ao=)
                          7: 323830343a6439303a3a2f33322d3536203d3e2033333536.roa (hash: yidOPhSZ3TRdgq/dONmEAXYaVNinaDLL/oOkt0UlieY=)
                          8: 3137392e39362e3137362e302f32312d3332203d3e20323033.roa (hash: Z8aOam1Zz4y6LgNH81y0mvGREKphOiOWBOYVgff2weY=)
                          9: 3137392e39362e3137362e302f32312d3332203d3e20323032.roa (hash: Cd2gmVxgmGguXs1p5Fdj44tyMSbE13yOsecoPdj6jPg=)
                          10: 3137392e39362e3137362e302f32312d3332203d3e2033333536.roa (hash: ZM6X5rq7N221XCeilAiKgIJX7KQRJ5sjKDKhyKzrLA4=)
                          11: 3136382e3139352e3131322e302f32322d3332203d3e20323032.roa (hash: 5ogR+nfRfW18OnR2iRCxmoxYMyXDkhv3fwZ5aYTyO48=)
                          12: 323830343a6439303a3a2f33322d3334203d3e203532363339.roa (hash: YsXwC7TXdkmO+ZZR0+kXIFB9SQwQX1H1fY0Uy/JolmY=)
                          13: 4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl (hash: hmofphaFScpiDza+lBFFcmAOI7f+P5LKYI1tK0LFPuo=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl
                          rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 May 2024 15:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:1c:9f:20:fd:16:40:d7:ab:d5:6c:4f:b3:c0:61:50:ec:a6:24:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
        Validity
            Not Before: May 22 14:51:28 2024 GMT
            Not After : May 23 15:15:28 2024 GMT
        Subject: CN=096B7E451B74AB341D97C01F2F592884F66F39D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:12:97:98:cf:17:6b:1a:c2:2c:fa:07:26:8b:
                    59:c0:01:73:f6:8b:43:9b:5c:e6:6b:98:b7:e7:55:
                    54:01:88:e1:73:18:a1:83:47:65:64:9d:7c:88:d8:
                    9e:a8:92:6b:00:11:d4:27:ac:26:31:ee:e5:81:a4:
                    79:7a:cd:df:cb:87:65:b6:97:fd:6a:f2:90:ff:6b:
                    dd:a3:c0:f6:a2:69:16:2c:c3:f7:1c:46:7f:e4:33:
                    f9:75:c1:82:3e:b2:1b:61:60:cb:80:da:c1:30:75:
                    28:65:bb:7b:07:1d:2d:3d:0a:84:bf:95:a9:a4:b6:
                    6b:55:8e:ac:00:fb:63:c0:e9:b0:d8:1c:b2:ae:c0:
                    06:03:00:2b:09:b1:f9:d9:73:dc:9f:1f:29:23:7c:
                    39:79:64:74:8e:ad:eb:49:d1:4e:fd:2b:d0:ef:64:
                    b0:0a:10:ad:10:7e:5d:57:21:b3:41:3a:76:58:09:
                    61:3b:21:e0:4c:04:a5:a0:41:8f:ba:cf:a7:c9:8d:
                    9d:2c:44:4a:31:b9:5a:a6:a7:89:27:3f:b8:63:b0:
                    bb:16:6b:fd:e9:4f:de:9e:ba:61:6a:b2:40:86:d9:
                    4a:d9:e9:ee:7b:61:de:16:b1:d8:23:dc:66:06:a7:
                    e0:75:f3:da:be:9c:41:ab:6e:79:91:8c:45:24:3c:
                    cd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6B:7E:45:1B:74:AB:34:1D:97:C0:1F:2F:59:28:84:F6:6F:39:D5
            X509v3 Authority Key Identifier:
                keyid:4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e8:9e:08:10:a5:d2:4a:5e:ec:ec:16:98:bd:64:62:86:cf:67:
         e2:ac:c9:95:a7:23:9d:e4:a5:3c:f0:4a:01:33:1e:ea:ee:ce:
         7f:bb:5a:71:fe:50:53:de:a5:38:55:be:b2:6e:8f:86:bd:77:
         ec:31:c8:06:44:80:e8:0a:80:3d:59:bc:0e:8f:95:65:d4:42:
         91:c5:b6:9e:1c:34:3b:e4:af:68:56:85:ce:1d:44:40:13:a8:
         de:0a:bb:d3:be:9b:0a:6d:e7:ba:12:3d:3e:2e:a1:92:26:59:
         c0:d5:38:22:e1:10:16:1b:bd:52:27:03:d4:5b:bc:39:2d:1b:
         ec:10:d7:55:fa:f3:3a:ae:31:10:5a:ae:96:15:fb:fb:cb:77:
         bd:bd:a4:c3:f6:1a:d2:94:a7:2b:4c:59:b2:1b:1d:aa:85:f0:
         03:d3:e0:8d:16:4d:97:a1:eb:17:8b:c9:9e:64:99:43:b1:d9:
         c0:fc:0b:6a:f5:54:8d:3d:c0:44:b0:ce:cd:3d:46:59:74:c2:
         0c:e6:21:3f:b4:5d:d0:c9:cd:54:a8:9a:d3:f9:67:fa:a4:82:
         b9:90:a8:69:61:fe:3a:dd:f5:30:c8:5d:25:cf:e9:50:6b:6e:
         9d:69:83:b3:51:0f:04:b5:cd:51:bd:30:fa:a8:cf:74:b0:97:
         ae:d8:f4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 16:48:27 2024 by rpki-client on console-fra.rpki-client.org