Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft
File:                     CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft (raw, json)
Hash identifier:          6mVza6iQpVpt28/qNh/PBs3q6tdxLFkU52A6mzaK31U=
Subject key identifier:   05:40:FB:22:DC:71:09:25:39:AA:79:AA:E5:C5:06:33:02:5F:C0:9E
Authority key identifier: CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9
Certificate issuer:       /CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9
Certificate serial:       3FF2510CA59683E0E35CA3478E04369AE611CAC5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft
Manifest number:          013B
Signing time:             Sat 23 Nov 2024 09:55:44 +0000
Manifest this update:     Sat 23 Nov 2024 09:50:44 +0000
Manifest next update:     Sun 24 Nov 2024 10:21:44 +0000
Files and hashes:         1: 323830343a313561343a3a2f33322d3434203d3e20323633343030.roa (hash: VX19Z63xB2lZzXQUh0Pz85qxJTgELtypgrInYKjEe08=)
                          2: 3137372e3232322e3233322e302f32312d3233203d3e20323633343030.roa (hash: lSV/o4YOc33lWUDRl1YfEXFloffiS8CE/b74ZMOG18A=)
                          3: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl (hash: zd9v8cLDo7EzdT9nT+1qBncXwMaxJ71bhX08+cYWNg0=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl
                          rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f2:51:0c:a5:96:83:e0:e3:5c:a3:47:8e:04:36:9a:e6:11:ca:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9
        Validity
            Not Before: Nov 23 09:50:44 2024 GMT
            Not After : Nov 24 10:21:44 2024 GMT
        Subject: CN=0540FB22DC71092539AA79AAE5C50633025FC09E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4d:16:2e:7a:cc:75:89:86:03:59:29:71:a0:
                    50:e5:8d:f6:44:fa:5f:2c:42:53:58:08:6d:45:fc:
                    75:32:50:a2:6b:07:50:de:8e:fa:6b:2c:6e:5b:40:
                    77:c1:42:7f:b3:d4:bf:2e:77:a1:a8:ed:23:78:83:
                    0a:6f:35:4f:46:1e:21:e1:65:d1:91:57:91:c4:79:
                    22:aa:dd:a2:77:57:20:23:68:79:fb:cc:1d:59:33:
                    38:2b:10:82:67:d7:8a:10:5b:c6:b9:d9:55:3b:71:
                    8e:70:1a:78:44:ab:8b:55:72:0d:12:ce:de:e8:37:
                    1e:05:4d:f1:92:75:1d:f5:54:59:97:dc:36:0b:99:
                    25:bf:14:a8:16:9b:7a:81:0f:90:9c:8c:c5:f6:00:
                    2c:13:1f:98:20:1e:56:bf:69:93:77:72:20:0c:66:
                    1d:4f:0c:1b:e1:81:b2:ce:7a:1c:d1:d1:74:ce:ff:
                    3a:80:f5:d7:24:98:05:5c:27:ba:88:cf:3d:27:43:
                    05:17:2b:db:c1:bf:25:54:1f:a2:c4:2a:5b:18:2f:
                    79:52:55:38:4f:65:2e:98:fc:57:6b:a6:ff:05:82:
                    4e:ec:8d:cb:f7:aa:70:72:c5:6a:98:bc:b8:f2:b0:
                    61:99:ee:e5:5c:e5:27:a7:00:91:70:33:21:61:bf:
                    d5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:40:FB:22:DC:71:09:25:39:AA:79:AA:E5:C5:06:33:02:5F:C0:9E
            X509v3 Authority Key Identifier:
                keyid:CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:3a:f0:09:d9:8e:71:3d:db:28:db:dc:03:9e:10:41:e8:ab:
         12:52:56:e5:46:f5:79:e2:83:9b:ea:e4:8f:db:bb:55:1b:c6:
         bf:d1:b2:4b:cf:2e:7d:76:56:ef:11:d8:d5:f6:0c:38:95:d4:
         07:b7:f8:b6:88:7b:3e:da:49:3b:e3:cb:77:3c:10:58:c8:05:
         55:60:5c:29:2e:ef:88:31:18:b6:13:1f:66:fb:77:2e:e3:df:
         6f:49:c3:db:8c:ca:d3:42:f6:63:5f:b0:db:0b:8b:4d:71:9f:
         33:e5:c7:c6:08:0e:10:ed:91:af:22:50:4a:10:00:5e:9f:be:
         b2:af:90:b5:0e:c8:2a:45:e0:e2:2b:76:95:99:bd:4e:a0:49:
         02:6b:79:e1:7f:54:90:83:d6:83:f7:d6:17:d3:1c:aa:09:e2:
         92:0e:5d:8b:19:76:e0:5b:f3:ba:32:5c:8f:b2:f3:67:db:80:
         c7:33:4c:72:9a:26:05:aa:ee:eb:fe:47:52:44:29:84:af:f3:
         f3:16:f6:e6:50:44:dd:5b:4e:37:ac:2d:b0:2b:21:ca:f4:4c:
         d7:a2:5d:59:42:09:00:88:d8:4a:70:bd:74:d0:8b:32:c2:d2:
         60:24:c4:a0:b5:7c:f7:34:ec:7d:50:23:49:c3:b7:6f:f3:05:
         60:41:f4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:29 2024 by rpki-client on console-ams.rpki-client.org