Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft
File:                     8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft (raw, json)
Hash identifier:          zUHX+UF9W2amDHS6OMhH8NWmkspb/zOUyESN+uyT5+w=
Subject key identifier:   3E:2B:1A:5F:4A:25:CF:56:8B:36:56:90:96:59:25:10:FC:8E:7F:3C
Authority key identifier: 8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05
Certificate issuer:       /CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505
Certificate serial:       676EE250DAB973C3CB4A93CAB21A40BE64902079
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft
Manifest number:          0137
Signing time:             Fri 22 Nov 2024 20:33:07 +0000
Manifest this update:     Fri 22 Nov 2024 20:28:07 +0000
Manifest next update:     Sat 23 Nov 2024 22:59:07 +0000
Files and hashes:         1: 323830343a366663343a3a2f33332d3333203d3e20323730363833.roa (hash: YJ7KH3nhoAkdC00h5neKD/OWTxec8U4h5L1R0JYnuLg=)
                          2: 3230302e3138372e3130322e302f32332d3233203d3e20323730363833.roa (hash: m/W3pGGcVb56GWMySDqhgLahlN78TFNqIF8q6w2stfE=)
                          3: 3230302e3138372e3130302e302f32322d3232203d3e20323730363833.roa (hash: MYGP7z4z0cDvNwflhjW3Np0fQMv+hsuoZw0sGx2FiVs=)
                          4: 323830343a366663343a3a2f33322d3332203d3e20323730363833.roa (hash: SgMgEeH86kapC5KHaE2tCOv1C+7gWgt0nQjF0OeRpYI=)
                          5: 8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl (hash: DWliW0sEE6i37V4IPYtjtUD6DkzD9I18zQoVurfLutU=)
                          6: 3230302e3138372e3130302e302f32332d3233203d3e20323730363833.roa (hash: C4H6zy5Gq5BfzwVmyTjeX736AiyNBOiUn68/HotVq8w=)
                          7: 3230302e3138372e3130302e302f32342d3234203d3e20323730363833.roa (hash: CtckgpHoDFLabqmrcfYo+qhZr0nLt1UpK8b8bbyp5Yk=)
                          8: 3230302e3138372e3130312e302f32342d3234203d3e20323730363833.roa (hash: lJHmIb590Rof2ERWv+hOuUEwukAqSpOHJZBbNPhw/+Q=)
                          9: 3230302e3138372e3130322e302f32342d3234203d3e20323730363833.roa (hash: JBMXJO7GZvNC3L4EwzRryvTyYZWu00Ru9wc5oHNKt0Q=)
                          10: 3230302e3138372e3130332e302f32342d3234203d3e20323730363833.roa (hash: l3rHIjFRuowW8a/7iZiWGdBRCnJ/8fewkqDWWDqrYSQ=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl
                          rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:6e:e2:50:da:b9:73:c3:cb:4a:93:ca:b2:1a:40:be:64:90:20:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505
        Validity
            Not Before: Nov 22 20:28:07 2024 GMT
            Not After : Nov 23 22:59:07 2024 GMT
        Subject: CN=3E2B1A5F4A25CF568B36569096592510FC8E7F3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:37:6d:7c:5b:48:01:8b:b0:d4:ef:7d:09:9e:
                    18:aa:f4:41:64:ee:d1:5b:83:b2:4d:d8:e7:15:04:
                    af:47:71:aa:f6:79:c4:33:66:9b:cd:80:d5:ef:6c:
                    af:e1:d9:3a:61:9a:d2:40:5b:ca:00:db:75:4d:c5:
                    6b:3e:4e:b2:9a:4a:f2:bf:02:8a:8f:9b:83:ee:30:
                    68:d1:7a:f5:aa:2a:d0:06:be:11:76:f2:21:2d:40:
                    dd:2a:4c:d2:1d:56:94:8b:ac:8f:a9:a5:da:3a:2e:
                    0b:fb:41:96:6d:74:2f:6c:f5:a3:9c:7b:10:80:97:
                    d6:51:fe:b2:e8:20:8f:32:c1:ec:32:24:45:e5:15:
                    8d:0c:54:f2:f9:86:43:b0:a0:c2:ad:0b:5f:95:d1:
                    4f:39:d0:09:07:70:47:9c:ec:c1:4f:98:22:0b:42:
                    76:8c:40:31:0f:ae:3c:38:3a:b7:31:9f:7a:7d:9e:
                    d8:23:14:5e:23:58:c0:ed:59:7b:c2:28:18:1e:95:
                    b2:ea:30:27:0d:72:19:8e:2c:46:bb:cf:3a:a8:70:
                    ad:68:72:dd:a0:51:6b:da:aa:99:ec:be:4a:41:ba:
                    d0:f4:7c:a0:36:5f:6d:2b:30:9a:17:ff:94:00:06:
                    bf:9b:9c:18:0d:bb:20:22:6f:d0:49:a9:e4:2e:1f:
                    a9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2B:1A:5F:4A:25:CF:56:8B:36:56:90:96:59:25:10:FC:8E:7F:3C
            X509v3 Authority Key Identifier:
                keyid:8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:9a:dc:9e:c8:3a:a8:e9:78:c5:08:e1:d0:96:e9:a0:d9:17:
         e2:1a:02:f3:df:73:7f:28:41:a6:77:8c:a8:33:e6:0a:c0:12:
         fe:e6:1a:8f:ae:84:42:4b:34:64:d9:f5:e5:fd:1d:61:ae:a6:
         f7:c7:23:77:7e:8e:ac:28:fc:7e:1b:dd:a2:38:19:a6:48:46:
         44:95:31:83:b3:42:e5:71:bc:90:46:12:68:0e:36:2e:db:16:
         d7:af:9b:d1:0f:21:1e:9f:85:a8:d2:9c:1c:0f:57:17:84:4a:
         3f:bf:64:8a:d5:f7:75:d6:c5:73:8e:6f:5e:1c:94:eb:4f:5e:
         e3:1c:4f:80:53:54:ea:58:6e:11:02:c9:8f:52:d4:43:e0:4f:
         8c:94:dd:db:57:e3:8f:d0:54:7d:bc:05:51:c2:16:50:fd:c3:
         e5:9d:b6:98:74:03:cc:bf:79:9e:c6:15:c3:56:0c:93:a0:fa:
         7b:e8:6d:2b:a7:f4:83:e9:d5:95:3b:bc:7b:26:99:f7:e8:c6:
         67:a4:0c:81:10:2c:0d:ea:85:b0:71:0b:a0:3c:ad:df:25:bc:
         63:2a:16:a0:06:fe:aa:13:aa:de:3b:26:ec:cc:ae:70:7e:95:
         f7:f3:85:c7:1f:49:33:9c:34:f7:a5:cc:99:90:ec:34:a0:0e:
         77:b5:c7:30
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZ27iUNq5c8PLSpPKshpAvmSQIHkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVBMjE0OTlEOUY3NkRBODVFRUM4RDhCMUE4RTNCMDY5
RDRDNzUwNTAeFw0yNDExMjIyMDI4MDdaFw0yNDExMjMyMjU5MDdaMDMxMTAvBgNV
BAMTKDNFMkIxQTVGNEEyNUNGNTY4QjM2NTY5MDk2NTkyNTEwRkM4RTdGM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTN218W0gBi7DU730Jnhiq9EFk
7tFbg7JN2OcVBK9Hcar2ecQzZpvNgNXvbK/h2TphmtJAW8oA23VNxWs+TrKaSvK/
AoqPm4PuMGjRevWqKtAGvhF28iEtQN0qTNIdVpSLrI+ppdo6Lgv7QZZtdC9s9aOc
exCAl9ZR/rLoII8ywewyJEXlFY0MVPL5hkOwoMKtC1+V0U850AkHcEec7MFPmCIL
QnaMQDEPrjw4Orcxn3p9ntgjFF4jWMDtWXvCKBgelbLqMCcNchmOLEa7zzqocK1o
ct2gUWvaqpnsvkpButD0fKA2X20rMJoX/5QABr+bnBgNuyAib9BJqeQuH6nNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUPisaX0olz1aLNlaQllklEPyOfzwwHwYDVR0j
BBgwFoAUjqIUmdn3bahe7I2LGo47Bp1MdQUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkN4dEtnVk5qMlRQZ0cyOHJOUXp6VnI0bjIxNXRWUUV4TWdnSkF1TnJI
UHkvMS84RUEyMTQ5OUQ5Rjc2REE4NUVFQzhEOEIxQThFM0IwNjlENEM3NTA1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFQTIxNDk5RDlGNzZEQTg1
RUVDOEQ4QjFBOEUzQjA2OUQ0Qzc1MDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MkN4dEtnVk5qMlRQZ0cyOHJOUXp6VnI0bjIxNXRWUUV4TWdnSkF1TnJIUHkvMS84
RUEyMTQ5OUQ5Rjc2REE4NUVFQzhEOEIxQThFM0IwNjlENEM3NTA1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwprcnsg6qOl4xQjh0JbpoNkX4hoC899zfyhBpneMqDPmCsAS/uYaj66EQks0
ZNn15f0dYa6m98cjd36OrCj8fhvdojgZpkhGRJUxg7NC5XG8kEYSaA42LtsW16+b
0Q8hHp+FqNKcHA9XF4RKP79kitX3ddbFc45vXhyU609e4xxPgFNU6lhuEQLJj1LU
Q+BPjJTd21fjj9BUfbwFUcIWUP3D5Z22mHQDzL95nsYVw1YMk6D6e+htK6f0g+nV
lTu8eyaZ9+jGZ6QMgRAsDeqFsHELoDyt3yW8YyoWoAb+qhOq3jsm7MyucH6V9/OF
xx9JM5w096XMmZDsNKAOd7XHMA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:05 2024 by rpki-client on console-fra.rpki-client.org