Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/B9565814EEE07F40E147986C257744795A8CFC01.mft
File:                     B9565814EEE07F40E147986C257744795A8CFC01.mft (raw, json)
Hash identifier:          1ngvcgYhWNe+hu1cTysss8MM4yRyjZnNkr/mFfRL4xQ=
Subject key identifier:   E4:45:26:E5:E6:5B:0F:01:5A:44:47:0E:8A:84:43:3B:5A:70:FB:E2
Authority key identifier: B9:56:58:14:EE:E0:7F:40:E1:47:98:6C:25:77:44:79:5A:8C:FC:01
Certificate issuer:       /CN=B9565814EEE07F40E147986C257744795A8CFC01
Certificate serial:       640557EE02E76B3743E7F3978FE9AE4ADF91D818
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9565814EEE07F40E147986C257744795A8CFC01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/B9565814EEE07F40E147986C257744795A8CFC01.mft
Manifest number:          75
Signing time:             Fri 28 Jun 2024 07:33:31 +0000
Manifest this update:     Fri 28 Jun 2024 07:28:31 +0000
Manifest next update:     Sat 29 Jun 2024 11:25:31 +0000
Files and hashes:         1: 323830343a373261633a633030303a3a2f33342d3334203d3e20323730383638.roa (hash: /r19s+IcNIO/GVnW3SFavupuK0NHvOI7MuVdF6t5NRw=)
                          2: 3137372e32332e35302e302f32342d3234203d3e20323730383638.roa (hash: I5ZTHsRyT6slZ1dN5H2tvE+ueCCIcCBJQ3GK4nRgS6E=)
                          3: 3137372e32332e34382e302f32342d3234203d3e20323730383638.roa (hash: rcfR3E9Sa78x79FBhLyMcjH1u8j/90KL8BdJdtgRhQI=)
                          4: 323830343a373261633a3a2f33322d3332203d3e20323730383638.roa (hash: t/IJ5RUW3MvnhiUI8IVzKlLec2YDVUebepbxlnO/868=)
                          5: 3137372e32332e34392e302f32342d3234203d3e20323730383638.roa (hash: UmkFD2gTeG+DJqrfekUTcEcSsxv6D5TV1vy+K3LDAuM=)
                          6: B9565814EEE07F40E147986C257744795A8CFC01.crl (hash: c4o95T4Eld/0IvWs61jm6f7YRkwlBXH2XeILBkipOeE=)
                          7: 3137372e32332e34382e302f32322d3232203d3e20323730383638.roa (hash: MGkrEzLP28nuUNXgRLz1FbXsCNfo62gTigkAGjJE3Jo=)
                          8: 3137372e32332e35312e302f32342d3234203d3e20323730383638.roa (hash: J8mnXGmlyxi5S57OO5ZYvyglcLQ45LGC9Iyr0xMqj54=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/B9565814EEE07F40E147986C257744795A8CFC01.crl
                          rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/B9565814EEE07F40E147986C257744795A8CFC01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9565814EEE07F40E147986C257744795A8CFC01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:05:57:ee:02:e7:6b:37:43:e7:f3:97:8f:e9:ae:4a:df:91:d8:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9565814EEE07F40E147986C257744795A8CFC01
        Validity
            Not Before: Jun 28 07:28:31 2024 GMT
            Not After : Jun 29 11:25:31 2024 GMT
        Subject: CN=E44526E5E65B0F015A44470E8A84433B5A70FBE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:18:58:fb:d0:0c:0b:bc:0e:a4:5b:4b:f0:29:
                    54:70:78:e6:4a:c6:05:a0:2b:cb:e3:5a:58:69:1c:
                    3b:83:a1:68:e3:0f:2e:3c:05:1d:94:b6:d5:fc:51:
                    0f:f2:05:84:5d:60:56:2c:09:58:a2:be:cc:32:63:
                    fe:ba:5b:a4:5f:5d:ec:dc:8a:8d:25:69:1c:c5:62:
                    03:4d:12:8f:4e:56:d5:6a:33:6e:c9:06:f7:f3:be:
                    58:af:b5:c3:e3:a2:d6:1e:23:e5:e5:6c:e1:41:2c:
                    e2:68:97:fa:96:78:ce:5f:73:a3:58:49:d8:be:9c:
                    16:a1:6f:32:83:50:88:32:23:15:e3:b3:94:b2:2a:
                    46:9f:92:ef:8a:d3:28:5e:ad:c1:fa:4d:1c:36:7a:
                    b3:a8:73:b9:f2:64:cd:e7:c0:5a:ba:ae:94:ac:0f:
                    19:22:68:9d:84:f4:b3:91:21:32:b9:f8:46:7d:65:
                    47:e3:47:ab:94:84:08:79:3e:45:b2:ab:65:c2:46:
                    15:02:a3:51:a6:21:d1:cd:56:29:5c:cf:23:de:16:
                    7b:b6:47:79:44:a8:90:0b:8f:6c:d9:ea:b7:e6:bf:
                    21:48:5f:e4:8f:5a:e5:89:39:27:88:d9:2e:4b:70:
                    8b:92:52:8f:ac:e6:32:80:60:e1:b0:7a:bb:47:91:
                    c5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:45:26:E5:E6:5B:0F:01:5A:44:47:0E:8A:84:43:3B:5A:70:FB:E2
            X509v3 Authority Key Identifier:
                keyid:B9:56:58:14:EE:E0:7F:40:E1:47:98:6C:25:77:44:79:5A:8C:FC:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/B9565814EEE07F40E147986C257744795A8CFC01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9565814EEE07F40E147986C257744795A8CFC01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/B9565814EEE07F40E147986C257744795A8CFC01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:e3:f4:2d:6f:3c:58:e7:7d:68:07:b4:6f:00:7a:83:f7:08:
         6d:b1:ae:72:49:6a:05:8b:f7:d0:f7:a9:86:f3:82:94:5d:fa:
         cd:c2:a8:7b:1f:76:6c:22:38:02:2e:1f:f7:48:e5:95:d4:48:
         8b:9a:ac:17:43:a0:1c:f9:28:63:b7:03:e4:6a:00:d1:06:0a:
         22:b3:3a:2e:28:8d:af:52:24:09:27:c6:0a:f6:10:0b:7c:d1:
         15:59:13:36:70:e0:cd:08:c1:48:9f:8f:73:59:52:98:e1:96:
         d8:40:a0:97:94:de:55:9a:04:0a:9d:74:ae:f5:4f:10:9e:b7:
         b4:78:03:5a:33:0d:74:ca:f2:73:c0:87:06:a3:8e:15:48:32:
         cc:82:a0:ad:9c:f9:94:2d:c6:c5:d8:47:61:a5:6c:cd:74:c6:
         69:8b:c4:f4:79:0d:8d:d8:ae:d8:59:7c:af:f0:d0:de:62:8e:
         85:a0:7f:92:0f:31:d2:7b:7e:e2:75:96:ac:11:e2:4d:da:a4:
         8b:c6:e8:f0:e0:ee:59:45:bd:fc:3a:6e:b9:e2:59:fc:f7:8d:
         e9:60:2a:09:ed:a4:92:5d:f9:bc:dc:d6:73:96:62:6f:79:77:
         46:fc:90:2b:f8:02:d9:1d:8b:6f:a2:05:48:8d:a1:49:26:3e:
         d1:73:c7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:51:07 2024 by rpki-client on console-ams.rpki-client.org