Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.mft
File:                     AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.mft (raw, json)
Hash identifier:          tTcFd5Rxs2ZBB6P4JgyZq9Jz/4bRBSxlzYHDuqRcYcQ=
Subject key identifier:   2C:35:46:84:9B:97:01:05:CD:A3:92:0C:82:05:44:38:0E:E4:3F:69
Authority key identifier: AE:59:A4:8B:AA:81:6C:14:CB:96:DA:B0:CA:10:6B:59:B3:B8:DC:83
Certificate issuer:       /CN=AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83
Certificate serial:       7278055BDA95877E51CA0FB3F936F8764A138F2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.mft
Manifest number:          0139
Signing time:             Fri 22 Nov 2024 14:34:33 +0000
Manifest this update:     Fri 22 Nov 2024 14:29:33 +0000
Manifest next update:     Sat 23 Nov 2024 16:46:33 +0000
Files and hashes:         1: 3133382e39342e3136382e302f32332d3233203d3e20323730383736.roa (hash: faklJiG2Xz/D3j5gxFG1sn7kbUB1cKI3skMbhyxSoSU=)
                          2: 3133382e39342e3137312e302f32342d3234203d3e20323730383736.roa (hash: mJV+9fKEvyAs1r7M6PaQgUzY9Ao8xbl7dKmA2j1ezu8=)
                          3: 3133382e39342e3137302e302f32342d3234203d3e20323730383736.roa (hash: wdBRREDsJIZdEBzSvRMD8vETYrYpn2gRPuxQR7SaBQw=)
                          4: 3133382e39342e3137302e302f32332d3233203d3e20323730383736.roa (hash: RMV/rmMTb4a8jqemK7Ciu3bfp399OfHl0czGGnnC8xk=)
                          5: AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.crl (hash: Ahcu+hiVf4q85LO6JLWqqmf4pEySXVl14Lc9MKCGXCc=)
                          6: 3133382e39342e3136382e302f32322d3232203d3e20323730383736.roa (hash: 9YugNT+oBYz35tDwFmvePqTpqv/qV28BywMBrTJPv4c=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.crl
                          rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:78:05:5b:da:95:87:7e:51:ca:0f:b3:f9:36:f8:76:4a:13:8f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83
        Validity
            Not Before: Nov 22 14:29:33 2024 GMT
            Not After : Nov 23 16:46:33 2024 GMT
        Subject: CN=2C3546849B970105CDA3920C820544380EE43F69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d9:bf:b0:94:5a:2f:dc:4a:91:a5:56:c5:15:
                    f3:87:b1:3e:e7:ed:f5:f9:7a:69:8e:53:87:2a:e8:
                    27:25:c7:db:08:8d:0c:d6:a0:37:d8:bd:95:fd:2c:
                    17:5c:72:d1:98:0c:0a:66:46:fc:4d:10:6a:02:6b:
                    ce:7d:a7:67:2d:71:49:09:c9:2f:e7:fa:4a:01:e3:
                    82:fa:e1:7b:ca:48:4b:f7:78:8e:da:24:41:77:25:
                    7b:8b:99:1e:79:e2:00:b2:ee:ef:aa:1f:a1:20:ad:
                    03:73:c8:0f:98:a9:97:84:78:13:cd:03:19:f6:8a:
                    b2:38:10:bd:b6:56:c5:e2:3d:fd:80:62:02:63:22:
                    d4:11:40:88:52:26:f8:1b:37:25:0a:d7:21:1f:e6:
                    5b:7b:9a:db:9d:22:94:b4:70:2b:e5:75:74:09:c8:
                    5d:f0:ee:41:2b:b0:df:94:1a:7a:3d:82:7e:70:f6:
                    60:a4:d5:c7:f0:c8:b3:be:d4:cd:00:4e:2c:c1:55:
                    82:11:f1:62:e9:d9:c0:45:db:70:f6:b5:c5:1f:65:
                    dc:3f:a6:82:cb:86:e2:17:65:28:ab:b1:09:50:50:
                    fe:0c:69:3f:44:51:0a:c2:84:4d:1e:1b:80:da:c4:
                    42:3d:38:f2:91:c7:90:1c:97:47:32:fe:7e:46:5f:
                    9b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:35:46:84:9B:97:01:05:CD:A3:92:0C:82:05:44:38:0E:E4:3F:69
            X509v3 Authority Key Identifier:
                keyid:AE:59:A4:8B:AA:81:6C:14:CB:96:DA:B0:CA:10:6B:59:B3:B8:DC:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:07:dd:9c:08:94:13:6a:0a:74:11:1f:f7:e2:72:6e:a9:69:
         1a:aa:22:af:a0:25:e5:30:4e:6b:ba:9e:96:8e:b2:3e:fd:90:
         71:31:2e:37:6f:0b:1b:56:95:14:8d:52:5d:b5:aa:d0:3b:ab:
         19:12:72:26:2d:6f:26:68:f8:e1:ee:4b:b4:4f:2a:2d:40:a8:
         a2:66:22:c6:fc:44:59:38:16:b7:36:d9:85:22:a4:2c:89:f7:
         b1:ae:72:80:08:24:3d:25:e1:d3:a5:86:8f:18:dd:87:60:37:
         85:4a:55:b9:7b:23:75:e4:e5:a1:d6:ec:9d:5a:70:c6:ef:d9:
         03:64:a6:c1:ca:59:ba:2b:fe:ab:cf:4e:5d:f8:3a:1f:32:33:
         14:6b:ba:6d:eb:05:eb:36:ce:58:40:ee:59:0f:5c:e5:68:29:
         3c:71:63:d0:1d:6e:59:b7:ed:aa:d7:22:fb:5d:f8:30:87:68:
         35:22:72:66:15:f4:bf:e0:6f:90:ec:94:3d:1d:fa:47:17:a6:
         56:2d:80:fd:0c:bb:e6:08:52:dc:e0:45:20:9b:7c:fe:3e:8b:
         1d:41:6d:22:ee:bd:71:3f:ba:6b:40:4c:31:c3:87:9a:56:fb:
         59:d5:2b:21:69:e0:72:67:72:f1:23:86:72:cc:2c:ca:38:7d:
         a3:5c:d9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:53 2024 by rpki-client on console-ams.rpki-client.org