Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/1/85DB34EBE698EED57C70A2DA30F6870FD1E74CE3.mft
File:                     85DB34EBE698EED57C70A2DA30F6870FD1E74CE3.mft (raw, json)
Hash identifier:          7xxsXRFsp9jQBvIeLIxHkXmjt3Y8bWInRrFZoqYZK/Q=
Subject key identifier:   07:65:FF:0B:DA:DF:35:31:53:FA:5A:CA:7E:2E:DD:91:96:75:26:E5
Authority key identifier: 85:DB:34:EB:E6:98:EE:D5:7C:70:A2:DA:30:F6:87:0F:D1:E7:4C:E3
Certificate issuer:       /CN=85DB34EBE698EED57C70A2DA30F6870FD1E74CE3
Certificate serial:       7DCEF78E80CE263001E7CB7F9A7BFF65B0AA9F17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85DB34EBE698EED57C70A2DA30F6870FD1E74CE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/1/85DB34EBE698EED57C70A2DA30F6870FD1E74CE3.mft
Manifest number:          0135
Signing time:             Fri 22 Nov 2024 18:50:56 +0000
Manifest this update:     Fri 22 Nov 2024 18:45:56 +0000
Manifest next update:     Sat 23 Nov 2024 20:54:56 +0000
Files and hashes:         1: 3230302e3137302e37362e302f32322d3234203d3e20323634353932.roa (hash: oExCq5Kv8j4KLUaME7OyHkUv+OnDlOVIRiT03fO/B18=)
                          2: 323830343a323231633a3a2f33322d3438203d3e20323634353932.roa (hash: IBouVo90fhO5vJyvlO8/HZ485BBuz+/0EMpeoRbfadI=)
                          3: 85DB34EBE698EED57C70A2DA30F6870FD1E74CE3.crl (hash: TQW7SIsTSXdEd63HcZQuiGFW9LcqpBE3XFWbp4U+hZc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/1/85DB34EBE698EED57C70A2DA30F6870FD1E74CE3.crl
                          rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/1/85DB34EBE698EED57C70A2DA30F6870FD1E74CE3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85DB34EBE698EED57C70A2DA30F6870FD1E74CE3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ce:f7:8e:80:ce:26:30:01:e7:cb:7f:9a:7b:ff:65:b0:aa:9f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85DB34EBE698EED57C70A2DA30F6870FD1E74CE3
        Validity
            Not Before: Nov 22 18:45:56 2024 GMT
            Not After : Nov 23 20:54:56 2024 GMT
        Subject: CN=0765FF0BDADF353153FA5ACA7E2EDD91967526E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c1:b7:09:b6:5b:7e:4b:04:98:40:96:ee:7d:
                    4b:71:5b:82:b2:fe:ce:95:7f:03:bb:b3:31:51:9c:
                    01:b5:f2:c3:be:33:0e:23:25:49:73:ea:26:fb:1d:
                    fa:80:07:df:71:5a:c7:e8:87:3b:e9:4e:3c:b4:30:
                    18:60:bb:32:df:d6:b4:15:2a:6b:c1:42:91:15:7a:
                    9c:d2:bc:53:4b:24:c9:e3:94:04:89:31:c2:93:a3:
                    25:cf:9e:c4:2f:80:8a:f4:32:a8:13:05:d2:b9:c2:
                    dc:57:2b:c8:d6:04:4a:f4:50:7b:ac:d4:8e:c1:09:
                    0c:17:ad:99:2a:0d:9b:1a:7b:7e:85:ab:d0:3c:1c:
                    79:eb:5a:98:3d:5d:fd:75:38:90:4a:a5:6f:45:7d:
                    34:78:7c:fa:36:c6:69:46:ca:dc:43:f1:98:2b:de:
                    b9:3f:51:7a:5b:62:75:92:49:82:3f:df:f4:56:39:
                    88:2b:55:d6:6e:64:5d:45:e1:96:19:51:a8:6d:c9:
                    99:ba:28:42:8a:c6:24:f4:ca:b5:1c:8a:49:6c:2a:
                    05:cf:8f:86:01:6a:37:37:40:79:35:75:65:6b:42:
                    a0:62:0f:49:d6:9a:37:ab:ce:3a:71:0b:97:b1:5d:
                    a7:17:7b:34:06:4a:cd:e7:f0:84:ea:5e:82:d8:48:
                    6e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:65:FF:0B:DA:DF:35:31:53:FA:5A:CA:7E:2E:DD:91:96:75:26:E5
            X509v3 Authority Key Identifier:
                keyid:85:DB:34:EB:E6:98:EE:D5:7C:70:A2:DA:30:F6:87:0F:D1:E7:4C:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/1/85DB34EBE698EED57C70A2DA30F6870FD1E74CE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85DB34EBE698EED57C70A2DA30F6870FD1E74CE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/1/85DB34EBE698EED57C70A2DA30F6870FD1E74CE3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:62:a5:30:50:1a:58:bf:fd:97:ac:7b:b6:f5:a7:95:23:84:
         97:26:a7:3b:e4:ff:a0:d0:64:a1:ac:3f:df:e3:42:be:e9:ba:
         f8:cd:b7:a3:11:95:12:76:0f:9e:d9:bf:a8:0b:99:6c:d7:9d:
         84:e0:5d:a2:96:ce:4c:f9:18:5b:35:5d:bc:a8:0b:00:19:52:
         c4:15:55:cf:3d:75:10:7e:a2:50:b0:19:1b:7f:75:9d:33:b3:
         3a:42:ad:36:77:ff:b5:26:44:f3:8b:2e:40:e8:5d:4a:b4:ee:
         46:58:1a:7a:7d:94:ab:53:96:e1:5e:05:a2:a3:52:23:6b:d8:
         d9:e9:5c:6d:65:a1:28:cb:37:1f:9c:81:60:3e:ec:be:df:7e:
         0c:86:29:66:47:f9:1c:8b:6a:02:58:68:4b:d3:8d:2f:9b:e9:
         51:36:c8:0e:f3:8b:2c:89:7d:86:dc:e1:9c:c4:fc:b0:21:52:
         9a:37:2e:36:f1:a8:a9:ac:c4:5d:72:68:ef:87:aa:4c:6e:c8:
         34:a6:e7:65:bd:ae:2c:4c:df:d0:03:3f:c5:3e:96:8c:f4:e5:
         04:57:98:0f:13:d7:d5:68:f4:ab:1f:a2:5a:e4:ce:9b:4d:e1:
         0b:8b:e8:8f:0e:34:ba:0f:b4:13:af:9f:20:b0:c1:b7:54:b1:
         12:4f:9b:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfc73joDOJjAB58t/mnv/ZbCqnxcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVEQjM0RUJFNjk4RUVENTdDNzBBMkRBMzBGNjg3MEZE
MUU3NENFMzAeFw0yNDExMjIxODQ1NTZaFw0yNDExMjMyMDU0NTZaMDMxMTAvBgNV
BAMTKDA3NjVGRjBCREFERjM1MzE1M0ZBNUFDQTdFMkVERDkxOTY3NTI2RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCswbcJtlt+SwSYQJbufUtxW4Ky
/s6VfwO7szFRnAG18sO+Mw4jJUlz6ib7HfqAB99xWsfohzvpTjy0MBhguzLf1rQV
KmvBQpEVepzSvFNLJMnjlASJMcKToyXPnsQvgIr0MqgTBdK5wtxXK8jWBEr0UHus
1I7BCQwXrZkqDZsae36Fq9A8HHnrWpg9Xf11OJBKpW9FfTR4fPo2xmlGytxD8Zgr
3rk/UXpbYnWSSYI/3/RWOYgrVdZuZF1F4ZYZUahtyZm6KEKKxiT0yrUciklsKgXP
j4YBajc3QHk1dWVrQqBiD0nWmjerzjpxC5exXacXezQGSs3n8ITqXoLYSG7jAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUB2X/C9rfNTFT+lrKfi7dkZZ1JuUwHwYDVR0j
BBgwFoAUhds06+aY7tV8cKLaMPaHD9HnTOMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnZXZThQZkVldEpyM1Z2M0ZETjVxaEtXYVZvNXB5bTNRQ3pHMkJzaUVw
U1EvMS84NURCMzRFQkU2OThFRUQ1N0M3MEEyREEzMEY2ODcwRkQxRTc0Q0UzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1REIzNEVCRTY5OEVFRDU3
QzcwQTJEQTMwRjY4NzBGRDFFNzRDRTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MnZXZThQZkVldEpyM1Z2M0ZETjVxaEtXYVZvNXB5bTNRQ3pHMkJzaUVwU1EvMS84
NURCMzRFQkU2OThFRUQ1N0M3MEEyREEzMEY2ODcwRkQxRTc0Q0UzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcWKlMFAaWL/9l6x7tvWnlSOElyanO+T/oNBkoaw/3+NCvum6+M23oxGVEnYP
ntm/qAuZbNedhOBdopbOTPkYWzVdvKgLABlSxBVVzz11EH6iULAZG391nTOzOkKt
Nnf/tSZE84suQOhdSrTuRlgaen2Uq1OW4V4FoqNSI2vY2elcbWWhKMs3H5yBYD7s
vt9+DIYpZkf5HItqAlhoS9ONL5vpUTbIDvOLLIl9htzhnMT8sCFSmjcuNvGoqazE
XXJo74eqTG7INKbnZb2uLEzf0AM/xT6WjPTlBFeYDxPX1Wj0qx+iWuTOm03hC4vo
jw40ug+0E6+fILDBt1SxEk+b0Q==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:13 2024 by rpki-client on console-fra.rpki-client.org