Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft
File:                     9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft (raw, json)
Hash identifier:          Dhk5R9YpQWKhGZlwzUX4mwzVM1Jly7X72MneGm2HTZU=
Subject key identifier:   AF:88:88:CC:8D:41:AF:54:8A:77:9B:D4:C6:7C:5B:25:AA:F7:D0:67
Authority key identifier: 9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41
Certificate issuer:       /CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41
Certificate serial:       5817A7D8F61CC0A4CE1B7804218106A63D66C6BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft
Manifest number:          0139
Signing time:             Fri 22 Nov 2024 13:56:41 +0000
Manifest this update:     Fri 22 Nov 2024 13:51:41 +0000
Manifest next update:     Sat 23 Nov 2024 14:18:41 +0000
Files and hashes:         1: 9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl (hash: KFJL0/iO/Iy5qonrbV1Egs62LCUBFufj+Axs2SAEKs0=)
                          2: 323830343a346434343a6164613a3a2f34382d3438203d3e20323632393738.roa (hash: Q1hEVTsuLyFppYKVgDI3+N9l+J52P5aA25BwMBKWrFI=)
                          3: 323830343a346434343a633a3a2f34382d3438203d3e20323632393738.roa (hash: Cmd04OJAx92pZ3Qfq6xAyxrup8hosLsJeu/0dQ7qTF8=)
                          4: 3134332e302e3132302e302f32322d3234203d3e20323632393738.roa (hash: I80SLORz2SXS0OyNEOLUx03qYkqRibTicpGUL22pulI=)
                          5: 323830343a346434343a31303a3a2f34382d3438203d3e20323632393738.roa (hash: m2udYBptDBMZentMXcr5c8yk4srZ+XKJTUQFM3elQXw=)
                          6: 3138362e3235302e3138342e302f32322d3234203d3e20323632393738.roa (hash: Q+hmduLNSECzf2hQISK2GS5iRHcmwTDAD+NNzReH4Qg=)
                          7: 323830343a346434343a3a2f33322d3332203d3e20323632393738.roa (hash: JwF3Yc0Skl0fo8lx+pEGRTVbivZXE5LoaDMWmDboN/U=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl
                          rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:18:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:17:a7:d8:f6:1c:c0:a4:ce:1b:78:04:21:81:06:a6:3d:66:c6:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41
        Validity
            Not Before: Nov 22 13:51:41 2024 GMT
            Not After : Nov 23 14:18:41 2024 GMT
        Subject: CN=AF8888CC8D41AF548A779BD4C67C5B25AAF7D067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:92:d6:3f:f4:67:bb:5c:db:ff:df:f4:4b:59:
                    71:e4:6d:68:65:50:62:e5:fb:ef:1d:c6:ec:91:ab:
                    b0:01:c7:35:f2:82:72:fc:95:ef:8b:08:3c:c9:66:
                    88:13:45:a1:9f:dd:8d:94:b2:65:0a:c5:61:c4:27:
                    fc:70:e4:99:df:ef:7e:70:17:be:23:4c:ce:6d:72:
                    b1:22:cd:af:d8:b5:7f:c9:38:ce:51:5a:c6:16:02:
                    b8:69:50:96:d1:a9:07:e5:ee:93:64:cc:dd:10:38:
                    8b:ae:6c:7f:00:f8:b6:ac:5c:02:9b:03:93:02:e5:
                    d3:fd:3b:ed:9c:b4:a3:16:84:a0:9f:9b:30:eb:5e:
                    f5:0c:ed:e4:1d:eb:da:97:c9:05:3c:e2:19:00:30:
                    d7:8f:92:69:2d:b8:30:6a:a4:e3:2c:6a:f1:ca:e4:
                    4b:79:4f:55:3d:75:5a:1d:6a:6e:a3:52:64:f2:2d:
                    da:8d:e2:d1:59:5d:c8:2c:16:95:d8:50:2f:de:37:
                    c4:0e:9a:b3:78:a3:07:49:fc:20:7b:05:ac:19:6f:
                    35:b5:29:d9:ec:3f:d4:88:f6:87:f3:8f:8f:7b:c0:
                    b8:fe:e2:6b:45:cc:bf:58:f4:01:4c:1b:db:89:c5:
                    06:ac:71:4e:35:2b:59:77:07:71:2b:6f:66:44:8b:
                    0e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:88:88:CC:8D:41:AF:54:8A:77:9B:D4:C6:7C:5B:25:AA:F7:D0:67
            X509v3 Authority Key Identifier:
                keyid:9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:92:f6:0e:c2:03:07:2f:9f:bf:b4:9e:55:20:aa:3f:9a:4e:
         81:00:ad:56:4c:2c:43:ed:79:bb:75:ca:d7:98:b9:9b:b3:d6:
         2b:02:b3:2a:54:af:1b:61:bb:35:49:bf:96:34:95:34:8c:ac:
         a3:80:71:f1:94:e7:07:b2:73:e9:27:1e:de:22:d4:90:78:42:
         f6:c3:ae:1a:2d:ce:b0:58:60:d4:8a:99:4c:9b:f4:a3:a6:9d:
         ff:c8:db:83:2b:7f:55:55:ee:80:24:82:93:8e:16:a8:5b:0c:
         6f:aa:11:d0:06:c4:90:48:e8:f6:62:5c:69:56:28:e7:7c:f3:
         4f:4e:45:c4:c0:61:de:a2:03:8d:63:b9:b8:80:e3:24:00:b0:
         4d:85:71:84:7b:8d:4f:3e:79:0a:ad:f8:9c:85:e2:70:79:be:
         5b:27:1f:97:5f:01:bd:80:fb:6a:68:80:23:0d:2b:f0:be:9a:
         36:49:0e:ca:8a:8d:5c:f4:2c:94:ca:02:36:86:4d:7e:03:e4:
         23:9d:49:cf:83:b8:d1:33:6c:b5:ea:35:30:a3:fb:c6:1a:18:
         8b:66:7e:c6:6e:59:9d:05:c1:89:a6:97:c8:04:7a:11:9c:f7:
         41:1c:19:d8:e2:9f:bf:45:38:cb:70:6f:bd:71:78:6d:47:bb:
         39:d8:e1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:35 2024 by rpki-client on console-fra.rpki-client.org