Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
File:                     961AE5D479B2534022682B64D7F0EFE6AA11F791.mft (raw, json)
Hash identifier:          5EVm+xy1cZOcLX8Q5ju1RYCpyXU8zQzRwYKFiicqG9c=
Subject key identifier:   F3:5E:80:7A:C9:91:E7:B5:27:0C:11:34:36:A2:8F:BE:03:50:97:F6
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Certificate issuer:       /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial:       5EBD105673CBD93773303F58857BDC77462329F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
Manifest number:          013B
Signing time:             Fri 22 Nov 2024 23:10:00 +0000
Manifest this update:     Fri 22 Nov 2024 23:05:00 +0000
Manifest next update:     Sun 24 Nov 2024 01:57:00 +0000
Files and hashes:         1: 3138362e3233352e3138382e302f32342d3234203d3e203631383838.roa (hash: ccVpUCCD3O0Br7zTyGsGBvpZmVzOVjnQjZ2iml4XPNg=)
                          2: 323830343a6536303a3330303a3a2f34332d3433203d3e203631383838.roa (hash: A5f4pCiXkDsOhNdJ/YUFU81wuRkjCtE8pAQkjgL462s=)
                          3: 3138362e3233352e3139302e302f32332d3233203d3e203631383838.roa (hash: SEs9NDWV+vQifvpHnioOaZNF+UnmnWX68w3FmVRar8o=)
                          4: 3138362e3233352e3138342e302f32322d3234203d3e203631383838.roa (hash: 4C0JEVlJowGwTWY1PAmnxx2WurBxLZlvgden9Ta5dtQ=)
                          5: 3138362e3233352e3139312e302f32342d3234203d3e203631383838.roa (hash: lvk8fhPXdkKEH0mWwedPFRQG/knPhq87dhTkD9+3G3E=)
                          6: 3138362e3233352e3138382e302f32322d3232203d3e203631383838.roa (hash: VeGt6qFpjtl/xtl2bUwBekytuUqVPi/VQZGSdsVrPTc=)
                          7: 323830343a6536303a31313a3a2f34382d3438203d3e203631383838.roa (hash: NNg5YX36GV7v2iPqLd2Amp48shiqiAok02uo2TWggmc=)
                          8: 3138362e3233352e3138382e302f32332d3233203d3e203631383838.roa (hash: D64RwG7Iqh6Fpb+2oYcbZtDRvfa+SWcYsP/vx2LcvzY=)
                          9: 961AE5D479B2534022682B64D7F0EFE6AA11F791.crl (hash: 5y4FqebrCnUe4uIf/qe2d4OeLvTSat5bG1swz4kexD0=)
                          10: 323830343a6536303a666130303a3a2f34302d3430203d3e203631383838.roa (hash: Wk/V4fq1Taq/tZL/JRCb7EZyS/gApeAvZGh1GEdUiIw=)
                          11: 323830343a6536303a3332303a3a2f34342d3434203d3e203631383838.roa (hash: 4U6KZVoLYQAtt4WKcHo3rIkL/F9oWZim6PEiq3H+Ad0=)
                          12: 323830343a6536303a3230303a3a2f34302d3430203d3e203631383838.roa (hash: cO1ar55DkfzGrV3trWAV2Ulnxn4i1yM05uw8Vq/dms8=)
                          13: 323830343a6536303a666666663a3a2f34382d3438203d3e203631383838.roa (hash: EHO3eCNgESIPP1EqMQMux8exVKok4Dj6ZPJ9UyPzwoo=)
                          14: 323830343a6536303a31303a3a2f34382d3438203d3e203631383838.roa (hash: SYhmR6+/hFmotzQP8VxLbkEt8im83uIMmM/jTjGCHd0=)
                          15: 3138362e3233352e3139302e302f32342d3234203d3e203631383838.roa (hash: KXAxqMwdvsiETVq9bEWQipL/SAeUoEBsNGGSxDcKdRU=)
                          16: 3138362e3233352e3138392e302f32342d3234203d3e203631383838.roa (hash: qf5zgfKw2IH2ly+nGQHv0F06sGRIczCQsHuKuFxy4HI=)
                          17: 323830343a6536303a3a2f33322d3333203d3e203631383838.roa (hash: XzHptJdoqVoTtDRljuLSrTBRRZ5PlqWdNUA0ah1irEU=)
                          18: 323830343a6536303a3130303a3a2f34302d3430203d3e203631383838.roa (hash: 4cmkx/trNHs3YSjRbL0TTFvXnjF5Uq0qY0WLlKUGh68=)
                          19: 323830343a6536303a31333a3a2f34382d3438203d3e203631383838.roa (hash: srTwqXRG3ywZmiDL4Egi75pjTqHSjmNwhdxb21Q605c=)
                          20: 323830343a6536303a666163653a3a2f34382d3438203d3e203631383838.roa (hash: Qzy1JXiskG7EW/0CqMGalo0B279nbif18YLzIdBvuq4=)
                          21: 323830343a6536303a31343a3a2f34382d3438203d3e203631383838.roa (hash: m/puLqDxLWinbNB2PjE2trXCCHVCmwY4sJdtVAr8TGM=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
                          rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:bd:10:56:73:cb:d9:37:73:30:3f:58:85:7b:dc:77:46:23:29:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
        Validity
            Not Before: Nov 22 23:05:00 2024 GMT
            Not After : Nov 24 01:57:00 2024 GMT
        Subject: CN=F35E807AC991E7B5270C113436A28FBE035097F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:1c:65:ba:c8:74:1c:98:bb:74:66:4b:1a:2d:
                    c8:f7:38:97:04:1a:b3:b0:ad:b9:1f:d7:7f:c1:9a:
                    a4:fb:69:4f:dd:60:75:e2:88:8c:c7:d7:8c:76:07:
                    3b:5f:c4:86:3a:ce:9a:b6:1a:ce:ba:b0:a4:a0:e8:
                    bd:04:d5:3e:ab:36:2a:db:29:63:4e:1e:d0:f7:47:
                    0b:d2:a4:79:43:1c:f4:87:97:5b:29:4e:6e:1e:a0:
                    d7:65:73:15:ac:26:5f:00:57:3c:50:9f:af:19:30:
                    d4:3e:0f:f2:bb:83:fa:47:80:ad:9f:fc:f1:f2:77:
                    8a:fb:fe:54:e2:9c:93:32:a4:ab:17:ff:57:e9:7d:
                    dc:97:27:f0:93:e4:50:3a:89:2d:c8:12:8e:80:20:
                    2c:69:e8:4f:de:29:b9:62:f5:44:c9:33:c9:7d:b3:
                    f4:3d:1d:5a:ee:ca:6a:50:63:57:47:74:2a:95:c4:
                    f6:3c:31:69:08:f1:4e:c6:62:41:fd:83:b8:9b:f7:
                    6b:f1:36:d5:d5:f2:c7:34:98:26:48:30:2b:67:9e:
                    e0:b8:df:a1:f0:a9:e3:6d:2b:c5:50:d8:a5:91:b2:
                    40:71:49:c9:35:3e:a2:ca:f6:62:84:69:a5:0f:3f:
                    c6:be:a7:ae:af:da:3b:ac:d6:ff:06:e3:b7:2e:4b:
                    33:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5E:80:7A:C9:91:E7:B5:27:0C:11:34:36:A2:8F:BE:03:50:97:F6
            X509v3 Authority Key Identifier:
                keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:f1:e5:f0:55:c8:71:1f:ae:0f:8f:01:fa:d6:1b:c4:bb:07:
         4e:24:00:04:54:df:3e:09:99:d2:0a:c8:ed:ba:44:7f:54:01:
         21:fc:0c:7d:c8:5c:4c:10:36:34:2b:c5:fa:e1:d2:b9:58:8c:
         46:42:59:a7:10:a9:9c:f2:28:ef:a0:ab:2b:67:dc:54:9a:a1:
         b0:a3:00:6b:ee:1a:96:cc:0e:a5:53:36:a6:9a:8a:47:80:07:
         1f:27:fb:2c:a5:8e:09:62:52:ce:ef:55:69:1f:7f:8b:16:7f:
         08:02:d8:75:21:d5:d6:7e:3a:3a:6d:6a:f5:7c:c7:11:38:ec:
         0c:ed:61:e2:4c:8b:2a:d3:eb:b0:08:1d:c8:22:ba:5c:70:97:
         68:81:f9:91:34:1c:46:83:f0:e2:b0:b9:c4:57:26:8f:e4:64:
         95:06:51:b6:f4:e2:04:42:60:1a:39:53:b8:ac:7c:2d:ed:6e:
         4d:29:82:dd:a4:34:ae:fd:7b:c1:ea:4c:e5:33:13:38:40:47:
         00:6d:a1:7e:49:3c:05:53:d1:18:ef:9c:aa:8f:2c:a2:ca:8d:
         3b:b8:ee:84:e1:cf:69:79:d3:94:76:9e:15:d1:b1:82:82:a5:
         9f:01:ba:ab:6a:b4:6e:d8:34:d4:ab:a1:e3:d6:16:47:70:29:
         60:48:51:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:35 2024 by rpki-client on console-ams.rpki-client.org