Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
File:                     D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft (raw, json)
Hash identifier:          0XUHoEGX2tSxdmJMDf5VNSpLXsHzBfZWAS4dnQbabm8=
Subject key identifier:   BF:0F:4A:EE:01:4C:43:F1:8D:5F:F3:F4:70:C7:5E:EA:18:75:A3:02
Authority key identifier: D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7
Certificate issuer:       /CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7
Certificate serial:       76FAE3DAE71A4DF0A7069EC3766EBC2C6ECEED2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
Manifest number:          012B
Signing time:             Thu 14 Nov 2024 09:48:09 +0000
Manifest this update:     Thu 14 Nov 2024 09:43:09 +0000
Manifest next update:     Fri 15 Nov 2024 13:19:09 +0000
Files and hashes:         1: 323830343a323232633a3130303a3a2f34302d3434203d3e20323634353936.roa (hash: dccJ0RTJgBkmoLXWoYtC/9gsEbtGwKwahHhDApG7+xY=)
                          2: 323830343a323232633a3230303a3a2f34302d3434203d3e20323634353936.roa (hash: TV60F90sQodx2n6kQJsN8Ms9JLOP8hQUNbiowybKdGY=)
                          3: 323830343a323232633a3330303a3a2f34302d3434203d3e20323634353936.roa (hash: rEiO5pll376/CUP5vC9XaOcpXFgt2tZBdE/3k1vPRsM=)
                          4: 3133382e35392e34322e302f32332d3234203d3e20323634353936.roa (hash: aKY141EfAaA37XN03Q6CpU0qCMrX758xZHivfrKvhUA=)
                          5: D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl (hash: iZ/ZpAeNTH3CCE3NYfJQSDS/LFwVIbRDXJznbMKtdr0=)
                          6: 3133382e35392e34302e302f32322d3232203d3e20323634353936.roa (hash: eiw0eTzymdl+OlfR0nT8nXYGXnOGiiZX42fMdMhzxUY=)
                          7: 3133382e35392e34302e302f32332d3234203d3e20323634353936.roa (hash: 2dRMWOgdkymGvJa0sOGjGRDSeDaBqxH3lWLSDJ6J2kI=)
                          8: 323830343a323232633a3a2f33322d3332203d3e20323634353936.roa (hash: WgLPUWbopOZUFs5oQLdKQnBgxB12YPbN0k2ECBWNoVc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl
                          rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 15 Nov 2024 08:36:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:fa:e3:da:e7:1a:4d:f0:a7:06:9e:c3:76:6e:bc:2c:6e:ce:ed:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7
        Validity
            Not Before: Nov 14 09:43:09 2024 GMT
            Not After : Nov 15 13:19:09 2024 GMT
        Subject: CN=BF0F4AEE014C43F18D5FF3F470C75EEA1875A302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d1:dd:91:5a:8e:c2:cc:3c:22:fd:3a:ff:a7:
                    3e:53:e2:75:8b:94:e5:89:b3:6c:09:c5:15:e9:9d:
                    70:c8:f2:59:ef:6c:f0:52:2f:34:4f:95:c0:3a:5d:
                    c3:90:02:bb:15:d3:33:c5:f8:8c:8c:f7:4e:0b:a9:
                    fd:58:a7:5e:2d:16:82:2b:94:74:1f:3e:52:49:16:
                    f0:9c:8f:32:11:a3:37:5b:22:e0:92:f9:77:fe:72:
                    6f:64:09:ba:7e:59:31:29:8b:ea:bd:6f:d0:c3:6d:
                    04:b0:b7:08:22:58:5f:50:de:d8:a3:92:8b:14:cf:
                    86:c8:44:2f:4e:f3:f9:1e:75:bf:0f:11:e5:d9:7c:
                    17:e1:d9:8e:59:4b:83:98:79:1a:3f:f5:dd:15:8e:
                    d5:94:24:e9:4a:ab:15:93:dd:c3:c2:81:b2:0b:9c:
                    c5:98:e1:62:35:63:6b:84:fa:24:f8:85:5e:e4:57:
                    59:97:ea:1a:ff:eb:e1:6b:fb:5a:ce:e6:2a:31:8e:
                    e1:2a:15:fb:0f:6b:b1:82:7f:1c:87:ea:3d:a6:99:
                    42:3c:d4:45:f0:df:26:c4:d2:b7:0b:ef:7c:c0:33:
                    d0:51:b1:8d:13:33:63:6c:9a:a9:c9:03:9a:6a:cd:
                    f5:65:12:cd:0f:9f:4d:39:25:97:9d:69:96:b2:6e:
                    16:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0F:4A:EE:01:4C:43:F1:8D:5F:F3:F4:70:C7:5E:EA:18:75:A3:02
            X509v3 Authority Key Identifier:
                keyid:D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:f9:72:ba:48:09:d6:b1:c3:86:63:49:c4:29:c3:04:fa:ef:
         47:e9:21:8d:b9:5a:73:eb:e0:7d:31:99:c6:c7:f6:a6:03:e6:
         e3:08:54:1b:b1:68:f3:01:90:02:56:bc:df:76:ba:52:02:c5:
         af:4b:e0:0f:39:33:12:5f:d8:93:ef:72:9a:85:d7:d8:96:6d:
         b1:39:0a:54:92:a5:9a:ee:bd:3d:71:49:6c:ef:1d:ce:7c:44:
         b2:a0:dd:f2:8e:df:ca:3b:bc:87:b4:d7:cf:d0:3a:58:70:cc:
         12:7a:cc:fe:08:41:35:0f:04:68:fd:10:b8:27:58:fb:7b:3d:
         98:ea:ec:f9:f4:ab:58:76:db:47:a4:dd:c9:5e:88:ab:46:33:
         f1:6a:67:8a:5f:0d:1b:5f:5f:52:06:3c:cc:97:70:0a:d0:3d:
         67:a0:11:70:9c:1d:d2:76:54:cf:1f:7f:b6:96:5d:2e:d7:83:
         6c:0b:3a:ed:13:c7:74:e8:78:4a:64:a5:ac:84:d0:70:10:25:
         d9:a0:a4:eb:36:b1:15:60:ff:70:be:64:3a:59:6b:ce:59:83:
         cc:f4:42:d5:58:0d:f3:f4:34:3b:90:e9:29:64:0e:56:49:c4:
         a7:41:ce:3f:4e:b7:df:e6:30:9a:c1:79:56:42:25:38:42:85:
         82:91:dc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 11:18:05 2024 by rpki-client on console-fra.rpki-client.org