Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.mft
File:                     42D604698AFA9BA492807398AA6527B6E7B04AB4.mft (raw, json)
Hash identifier:          Wrk86offomae4SJb8GiBx3Xr36bnakaR27EYnLRDmLA=
Subject key identifier:   46:E1:25:00:C0:60:0F:9E:22:A8:24:60:85:A2:FB:0B:4B:3A:FC:F4
Authority key identifier: 42:D6:04:69:8A:FA:9B:A4:92:80:73:98:AA:65:27:B6:E7:B0:4A:B4
Certificate issuer:       /CN=42D604698AFA9BA492807398AA6527B6E7B04AB4
Certificate serial:       6DF6AA7EE76DA81283821610F17B0FDE09278EF7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.mft
Manifest number:          F8
Signing time:             Mon 25 Nov 2024 17:35:16 +0000
Manifest this update:     Mon 25 Nov 2024 17:30:16 +0000
Manifest next update:     Tue 26 Nov 2024 18:29:16 +0000
Files and hashes:         1: 34352e3233362e35322e302f32322d3232203d3e20323638323231.roa (hash: DyMsIolMJZV321T0cBRoRbsiiat/HZ54rBCkTTrlbmc=)
                          2: 323830343a346464303a3a2f33322d3336203d3e20323638323231.roa (hash: cd/o+cgKT+7B5IJvmnlfVE22M1Gk5tst27TuMc9NCmo=)
                          3: 42D604698AFA9BA492807398AA6527B6E7B04AB4.crl (hash: o0Q89M6PlQZc1QE9B07O1ypBF9wi3nOP/xlB+PCp7NY=)
                          4: 34352e3233362e35322e302f32332d3233203d3e20323638323231.roa (hash: TP1DZhDPcJtZEbCLC5hzbgMAWAKbtcDJimX9hhg43y4=)
                          5: 34352e3233362e35322e302f32322d3234203d3e20323638323231.roa (hash: vGrE2QkyLb0ZqSk3VbDFyFYQZDWgFD0gMkk1SZHUtZ8=)
                          6: 34352e3233362e35342e302f32332d3233203d3e20323638323231.roa (hash: eMu5Pox28SzpvKP8YjdU77zU4I+utFls48SBZE/y4GM=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.crl
                          rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:29:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f6:aa:7e:e7:6d:a8:12:83:82:16:10:f1:7b:0f:de:09:27:8e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42D604698AFA9BA492807398AA6527B6E7B04AB4
        Validity
            Not Before: Nov 25 17:30:16 2024 GMT
            Not After : Nov 26 18:29:16 2024 GMT
        Subject: CN=46E12500C0600F9E22A8246085A2FB0B4B3AFCF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:06:fc:4a:c2:84:4c:31:8e:52:0a:38:ac:83:
                    ea:cd:bf:da:25:17:a9:90:02:15:81:70:56:4e:9d:
                    79:ea:37:a7:e4:4b:93:67:34:48:b9:c3:90:71:7a:
                    70:e8:75:19:77:c1:6c:80:1f:fd:3f:a9:15:59:6e:
                    85:31:4e:d6:02:4e:75:92:f5:ea:ed:e3:17:8b:53:
                    54:45:e2:7c:dd:47:28:01:a5:16:b1:e2:62:07:c4:
                    cf:40:6d:69:cf:e1:bf:46:13:da:78:5d:3f:c3:25:
                    88:a7:2c:0a:19:0d:02:f5:69:b2:72:f8:6f:f7:46:
                    a3:2a:87:a4:ce:4f:6d:32:4f:1d:f4:ac:81:e7:27:
                    ea:f5:d5:d2:79:a9:4d:fd:4a:00:e7:31:fe:80:81:
                    87:41:e9:ab:a6:3e:d9:b4:ac:61:46:7e:f5:90:de:
                    23:60:37:f2:45:23:a4:0d:59:a5:a3:f4:1c:66:c2:
                    51:f8:8e:1a:16:a5:8a:9a:fc:bc:b2:e7:94:a0:18:
                    00:2e:a4:cb:41:68:07:8d:22:87:b3:14:01:b0:97:
                    60:dd:f2:19:2e:75:86:8f:f4:82:3d:55:c4:97:01:
                    e4:d3:e1:96:fc:31:d8:1d:78:9f:12:f5:5f:56:74:
                    da:70:0a:ec:0e:f3:c3:9a:33:e2:8e:21:d6:f4:8d:
                    90:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E1:25:00:C0:60:0F:9E:22:A8:24:60:85:A2:FB:0B:4B:3A:FC:F4
            X509v3 Authority Key Identifier:
                keyid:42:D6:04:69:8A:FA:9B:A4:92:80:73:98:AA:65:27:B6:E7:B0:4A:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f6:b6:ca:50:fd:54:bd:3d:a0:3e:da:18:7a:ad:25:41:06:
         1a:b6:97:48:a8:72:de:fc:8c:51:fa:be:91:6e:90:e2:fc:44:
         64:f2:83:48:a4:38:55:16:51:59:7b:54:51:61:b6:da:e0:2b:
         53:18:02:d5:00:9a:46:7c:a8:c8:1d:c1:a1:5d:9f:18:7b:de:
         cf:06:d0:25:11:ed:1b:9d:c9:13:51:52:71:a5:35:54:ec:df:
         91:4d:bb:5a:89:6a:44:c9:26:e9:88:68:11:79:08:c8:e5:b5:
         f1:e5:39:0f:73:b6:f0:41:60:7a:6a:bd:64:9e:73:a8:b9:c4:
         03:2c:1d:46:6a:0d:3f:8e:93:7a:5c:09:ce:9e:e6:02:8f:df:
         06:31:1b:c2:03:60:e9:d9:9b:75:0c:07:24:11:9b:f8:6b:5f:
         63:0b:e8:76:34:3a:80:e0:9c:cb:6a:77:b8:52:74:c0:4e:cf:
         c0:58:d9:e7:f7:f4:0c:01:8c:3f:01:f5:a2:fe:ef:a7:51:d2:
         d2:61:1a:34:b2:b7:2d:6f:ee:94:48:c3:3f:76:c5:af:35:bb:
         fe:05:d4:31:3a:88:e8:65:c6:33:d9:49:70:db:d8:e7:79:4d:
         0e:85:18:c6:6c:01:dc:0e:01:80:7a:06:cd:8b:1d:58:7c:29:
         98:54:09:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:09 2024 by rpki-client on console-ams.rpki-client.org