Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft
File:                     67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft (raw, json)
Hash identifier:          7y7xbexKqLoB6DAZy61r2qx5ft7BS4NWcXE3fJH871c=
Subject key identifier:   FF:BC:98:32:92:A3:49:38:29:9C:20:BC:8D:4A:03:1C:E2:36:B4:02
Authority key identifier: 67:21:0E:55:22:F5:15:3F:DA:7A:73:E4:EE:2B:30:0B:C0:CC:9A:0B
Certificate issuer:       /CN=67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B
Certificate serial:       3D1AC594B8AA3CF6774D86BF0454A72BD307BFB4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft
Manifest number:          015F
Signing time:             Fri 22 Nov 2024 17:20:01 +0000
Manifest this update:     Fri 22 Nov 2024 17:15:01 +0000
Manifest next update:     Sat 23 Nov 2024 17:20:01 +0000
Files and hashes:         1: 323830343a353231383a3a2f33322d3335203d3e20323638343934.roa (hash: 8GkojUgfR4uXc6T1+OndaW0um7MSBU9wSjAYpSUZOU4=)
                          2: 34352e3136322e33362e302f32322d3234203d3e20323638343934.roa (hash: htDrm3180TpGf356KEX3as8s5IV6o9V9GPpBqCiw5N4=)
                          3: 67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl (hash: zq3wItvt5C38WTTDr/M6tORusLr61HhMFkGIyGsKu34=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl
                          rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:1a:c5:94:b8:aa:3c:f6:77:4d:86:bf:04:54:a7:2b:d3:07:bf:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B
        Validity
            Not Before: Nov 22 17:15:01 2024 GMT
            Not After : Nov 23 17:20:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:70:1d:8d:f0:fc:34:88:03:5b:80:77:ca:9c:
                    12:50:9c:55:f2:43:9b:d4:d5:97:c1:33:70:a5:d5:
                    e6:64:44:e1:6d:5e:68:3f:b0:b2:f6:0e:82:6c:53:
                    24:8d:95:7d:78:bb:d2:0a:e8:a4:c0:4d:aa:8e:d1:
                    fb:be:50:93:2a:db:31:84:ef:7f:c3:d5:7f:55:53:
                    a5:69:86:0d:ea:c0:09:14:55:77:74:f8:c1:67:66:
                    01:d0:c7:0c:36:42:e4:e8:4e:d5:60:41:ec:9c:16:
                    b0:d0:0a:34:ae:ac:b9:99:76:b0:65:1a:73:e2:bf:
                    f3:a6:f1:e7:c5:19:12:96:2a:b3:7e:11:38:03:e6:
                    50:26:ec:f4:fa:63:69:78:f0:00:23:de:83:63:c3:
                    78:93:b5:0f:09:93:db:50:7f:38:d2:9a:2d:55:a0:
                    5e:b7:fa:26:6b:62:f8:89:95:91:13:5b:2d:99:ce:
                    9f:2e:35:d4:bc:d1:f3:c0:18:51:7e:50:cb:d7:eb:
                    a7:ac:af:03:2d:1c:b4:c5:db:41:dd:99:74:fe:90:
                    2e:a3:9d:5b:95:8e:e8:a7:8e:99:b8:2d:3a:08:60:
                    b3:c3:4d:55:75:b2:14:4a:81:34:64:c6:0d:f5:bc:
                    77:be:28:0b:28:4e:01:17:f2:11:41:2f:cb:8e:e5:
                    a6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BC:98:32:92:A3:49:38:29:9C:20:BC:8D:4A:03:1C:E2:36:B4:02
            X509v3 Authority Key Identifier:
                keyid:67:21:0E:55:22:F5:15:3F:DA:7A:73:E4:EE:2B:30:0B:C0:CC:9A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:3d:c3:69:ee:f2:9e:f6:60:f1:cc:ad:52:95:0d:7f:84:34:
         2f:ed:07:c1:75:06:53:a1:dd:9e:38:e8:99:52:2f:07:f0:1b:
         5b:65:23:fc:d1:94:c2:74:53:42:00:26:5c:c4:e3:08:3e:51:
         18:29:23:47:8b:4e:e0:02:80:a5:e4:5a:45:e1:8e:2e:7d:85:
         93:3e:3d:05:34:62:99:ae:54:21:8f:85:51:1b:3b:cb:07:34:
         79:62:42:66:8d:3b:8a:a7:23:71:45:8b:fc:95:1b:92:9d:de:
         5b:68:7b:2b:0d:fa:ee:f1:7d:82:a1:c0:63:2f:39:8a:88:f7:
         b1:13:b3:50:d0:bd:bc:2e:9f:47:a9:bb:d9:46:cf:b0:df:60:
         3e:e4:bf:1a:15:71:5c:0e:7a:b0:69:11:d1:7e:91:87:e4:f9:
         67:7e:77:10:3b:4c:40:05:fc:22:d8:86:c9:ef:5a:4e:61:9c:
         f2:1d:58:4a:44:48:9f:93:17:a5:df:6f:c9:1c:16:a4:1c:7d:
         1b:a8:bf:6e:3c:ff:b3:de:7c:59:fc:10:52:92:3a:4b:5d:67:
         e4:e5:04:5a:fa:90:b4:27:d7:76:82:16:af:af:68:d7:0d:79:
         01:01:79:9c:f6:de:ab:77:6c:59:ce:7c:c1:82:e1:aa:b6:f1:
         9a:17:62:a2
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUPRrFlLiqPPZ3TYa/BFSnK9MHv7QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjcyMTBFNTUyMkY1MTUzRkRBN0E3M0U0RUUyQjMwMEJD
MENDOUEwQjAeFw0yNDExMjIxNzE1MDFaFw0yNDExMjMxNzIwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkE3MDFEOERGMEZDMzQ4ODAz
NUI4MDc3Q0E5QzEyNTA5QzU1RjI0MzlCRDRENTk3QzEzMzcwQTVENUU2NjQ0NEUx
NkQ1RTY4M0ZCMEIyRjYwRTgyNkM1MzI0OEQ5NTdENzhCQkQyMEFFOEE0QzA0REFB
OEVEMUZCQkU1MDkzMkFEQjMxODRFRjdGQzNENTdGNTU1M0E1Njk4NjBERUFDMDA5
MTQ1NTc3NzRGOEMxNjc2NjAxRDBDNzBDMzY0MkU0RTg0RUQ1NjA0MUVDOUMxNkIw
RDAwQTM0QUVBQ0I5OTk3NkIwNjUxQTczRTJCRkYzQTZGMUU3QzUxOTEyOTYyQUIz
N0UxMTM4MDNFNjUwMjZFQ0Y0RkE2MzY5NzhGMDAwMjNERTgzNjNDMzc4OTNCNTBG
MDk5M0RCNTA3RjM4RDI5QTJENTVBMDVFQjdGQTI2NkI2MkY4ODk5NTkxMTM1QjJE
OTlDRTlGMkUzNUQ0QkNEMUYzQzAxODUxN0U1MENCRDdFQkE3QUNBRjAzMkQxQ0I0
QzVEQjQxREQ5OTc0RkU5MDJFQTM5RDVCOTU4RUU4QTc4RTk5QjgyRDNBMDg2MEIz
QzM0RDU1NzVCMjE0NEE4MTM0NjRDNjBERjVCQzc3QkUyODBCMjg0RTAxMTdGMjEx
NDEyRkNCOEVFNUE2OUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAunAdjfD8NIgDW4B3ypwSUJxV8kOb1NWXwTNwpdXmZEThbV5oP7Cy
9g6CbFMkjZV9eLvSCuikwE2qjtH7vlCTKtsxhO9/w9V/VVOlaYYN6sAJFFV3dPjB
Z2YB0McMNkLk6E7VYEHsnBaw0Ao0rqy5mXawZRpz4r/zpvHnxRkSliqzfhE4A+ZQ
Juz0+mNpePAAI96DY8N4k7UPCZPbUH840potVaBet/oma2L4iZWRE1stmc6fLjXU
vNHzwBhRflDL1+unrK8DLRy0xdtB3Zl0/pAuo51blY7op46ZuC06CGCzw01VdbIU
SoE0ZMYN9bx3vigLKE4BF/IRQS/LjuWmnwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FP+8mDKSo0k4KZwgvI1KAxziNrQCMB8GA1UdIwQYMBaAFGchDlUi9RU/2npz5O4r
MAvAzJoLMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzI4UnhOYnZLREVTUkdO
RDlmbk1wVlFFMmtwN1FUYXc1QWVVSE1nZVFEOVQ2LzEvNjcyMTBFNTUyMkY1MTUz
RkRBN0E3M0U0RUUyQjMwMEJDMENDOUEwQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS82NzIxMEU1NTIyRjUxNTNGREE3QTczRTRFRTJCMzAwQkMwQ0M5
QTBCLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzI4UnhOYnZLREVTUkdORDlmbk1w
VlFFMmtwN1FUYXc1QWVVSE1nZVFEOVQ2LzEvNjcyMTBFNTUyMkY1MTUzRkRBN0E3
M0U0RUUyQjMwMEJDMENDOUEwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAK89w2nu8p72YPHMrVKVDX+E
NC/tB8F1BlOh3Z446JlSLwfwG1tlI/zRlMJ0U0IAJlzE4wg+URgpI0eLTuACgKXk
WkXhji59hZM+PQU0YpmuVCGPhVEbO8sHNHliQmaNO4qnI3FFi/yVG5Kd3ltoeysN
+u7xfYKhwGMvOYqI97ETs1DQvbwun0epu9lGz7DfYD7kvxoVcVwOerBpEdF+kYfk
+Wd+dxA7TEAF/CLYhsnvWk5hnPIdWEpESJ+TF6Xfb8kcFqQcfRuov248/7PefFn8
EFKSOktdZ+TlBFr6kLQn13aCFq+vaNcNeQEBeZz23qt3bFnOfMGC4aq28ZoXYqI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:13 2024 by rpki-client on console-fra.rpki-client.org