Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/38Hcd1im6iS6g7in2C3eh9zsRtt1t9D2caLegg9Ttu4K/0/EA7B2CBE05347D3DA4F21DE666EDAEDA9DDEEF51.mft
File:                     EA7B2CBE05347D3DA4F21DE666EDAEDA9DDEEF51.mft (raw, json)
Hash identifier:          eggc+a8UHzbOupjNcNloeh5/wJQohDu/z5YoXIDn8Pk=
Subject key identifier:   56:BD:A1:D9:04:06:38:9F:95:2C:A6:DA:69:EE:2C:33:DF:8E:3D:8B
Authority key identifier: EA:7B:2C:BE:05:34:7D:3D:A4:F2:1D:E6:66:ED:AE:DA:9D:DE:EF:51
Certificate issuer:       /CN=EA7B2CBE05347D3DA4F21DE666EDAEDA9DDEEF51
Certificate serial:       2422FCC291ABF3F73BF1D5E5823A0DECB018D40A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA7B2CBE05347D3DA4F21DE666EDAEDA9DDEEF51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38Hcd1im6iS6g7in2C3eh9zsRtt1t9D2caLegg9Ttu4K/0/EA7B2CBE05347D3DA4F21DE666EDAEDA9DDEEF51.mft
Manifest number:          0119
Signing time:             Mon 25 Nov 2024 13:32:17 +0000
Manifest this update:     Mon 25 Nov 2024 13:27:17 +0000
Manifest next update:     Tue 26 Nov 2024 14:24:17 +0000
Files and hashes:         1: 323830343a386134343a3a2f33322d3438203d3e20323733363538.roa (hash: yByfZUnzUAdTUdZz9JBji9awfvazKdpqldSApUdxvPQ=)
                          2: EA7B2CBE05347D3DA4F21DE666EDAEDA9DDEEF51.crl (hash: DsoFNVhbva5SuONiWUOshKQMekrHCMWqRxuJD8VfWro=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/38Hcd1im6iS6g7in2C3eh9zsRtt1t9D2caLegg9Ttu4K/0/EA7B2CBE05347D3DA4F21DE666EDAEDA9DDEEF51.crl
                          rsync://rpki-repo.registro.br/repo/38Hcd1im6iS6g7in2C3eh9zsRtt1t9D2caLegg9Ttu4K/0/EA7B2CBE05347D3DA4F21DE666EDAEDA9DDEEF51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA7B2CBE05347D3DA4F21DE666EDAEDA9DDEEF51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 14:24:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:22:fc:c2:91:ab:f3:f7:3b:f1:d5:e5:82:3a:0d:ec:b0:18:d4:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA7B2CBE05347D3DA4F21DE666EDAEDA9DDEEF51
        Validity
            Not Before: Nov 25 13:27:17 2024 GMT
            Not After : Nov 26 14:24:17 2024 GMT
        Subject: CN=56BDA1D90406389F952CA6DA69EE2C33DF8E3D8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4e:06:91:35:1e:a1:81:c1:33:ba:42:15:01:
                    20:6b:f3:10:ce:ac:47:e7:ba:4c:ef:bd:74:e0:95:
                    f1:0b:8b:35:40:df:5d:fd:93:d9:f0:93:6c:b9:07:
                    b2:33:e9:06:18:1b:c4:a6:49:ef:af:f9:c3:f4:1d:
                    97:27:d6:c7:b3:83:87:82:7f:6f:78:d8:63:52:8f:
                    f7:cb:1d:0a:09:c9:d9:1e:d2:4b:61:ba:a0:9b:48:
                    94:27:cd:26:3e:3a:68:29:6e:6f:10:a7:65:f1:69:
                    fe:84:31:df:0d:de:44:c0:e0:17:f9:5b:74:be:df:
                    3e:b4:8a:c6:44:4c:07:c7:c6:6c:85:13:6e:b5:22:
                    be:59:54:fa:65:4e:d4:6b:0b:32:97:d8:8a:d0:0b:
                    fb:55:d1:44:46:87:8d:67:46:90:ab:ed:55:10:bd:
                    de:81:1a:49:f4:23:cd:cb:79:94:d3:ec:2d:8d:31:
                    db:3e:58:a6:0e:96:2c:26:75:6d:5d:bf:85:09:8a:
                    d8:82:46:ff:63:50:f4:1b:58:c6:38:33:ab:6f:e2:
                    e1:53:d9:94:53:d8:07:15:dc:08:0f:75:a1:a7:50:
                    7a:47:2d:07:1d:00:a4:f8:8e:bf:87:1a:e3:01:3d:
                    98:7d:e5:d7:25:04:30:1e:f9:5a:32:09:1f:7a:a7:
                    85:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BD:A1:D9:04:06:38:9F:95:2C:A6:DA:69:EE:2C:33:DF:8E:3D:8B
            X509v3 Authority Key Identifier:
                keyid:EA:7B:2C:BE:05:34:7D:3D:A4:F2:1D:E6:66:ED:AE:DA:9D:DE:EF:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38Hcd1im6iS6g7in2C3eh9zsRtt1t9D2caLegg9Ttu4K/0/EA7B2CBE05347D3DA4F21DE666EDAEDA9DDEEF51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA7B2CBE05347D3DA4F21DE666EDAEDA9DDEEF51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38Hcd1im6iS6g7in2C3eh9zsRtt1t9D2caLegg9Ttu4K/0/EA7B2CBE05347D3DA4F21DE666EDAEDA9DDEEF51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:33:b4:9a:36:2f:ec:5a:e0:d2:e8:49:57:07:2f:95:12:e1:
         9f:7f:a1:81:a2:07:52:e6:b9:a5:ef:2b:10:e6:5b:33:51:35:
         ae:b3:04:e9:76:c8:28:e6:dd:21:e6:97:51:a4:e4:b1:33:25:
         d9:eb:17:ac:6f:a6:44:82:d2:6b:75:f3:76:a2:8c:e9:8b:48:
         e5:73:66:9a:bf:bc:c4:a7:ef:c2:4c:8f:79:59:df:f5:00:79:
         24:8f:d0:78:4a:bc:83:39:d4:57:97:be:84:c0:2c:7a:da:73:
         53:7b:d6:f2:1c:b9:6d:45:bf:d9:2f:d1:b0:b0:94:31:99:8d:
         48:20:15:de:f3:b6:70:9b:70:36:43:4b:fd:5b:1d:fb:3f:d0:
         c5:06:fb:5d:76:70:18:c7:71:b2:77:1f:21:7d:4e:2c:c4:aa:
         fd:2c:dd:89:2e:18:d0:f3:b2:af:0c:ab:af:00:1a:2b:40:28:
         80:17:cb:1a:36:b6:a4:8e:7c:1a:74:12:1e:8e:2c:8c:40:59:
         35:5b:1e:92:1d:49:8e:cb:73:2e:97:9f:a0:8b:c5:26:bc:49:
         89:76:f4:04:55:aa:72:9a:78:ec:af:20:70:f5:be:67:87:70:
         0b:48:cb:d1:46:c1:b5:a7:99:bf:ad:76:2a:c9:1e:59:be:ba:
         b2:00:b4:21
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJCL8wpGr8/c78dXlgjoN7LAY1AowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUE3QjJDQkUwNTM0N0QzREE0RjIxREU2NjZFREFFREE5
RERFRUY1MTAeFw0yNDExMjUxMzI3MTdaFw0yNDExMjYxNDI0MTdaMDMxMTAvBgNV
BAMTKDU2QkRBMUQ5MDQwNjM4OUY5NTJDQTZEQTY5RUUyQzMzREY4RTNEOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6TgaRNR6hgcEzukIVASBr8xDO
rEfnukzvvXTglfELizVA3139k9nwk2y5B7Iz6QYYG8SmSe+v+cP0HZcn1sezg4eC
f2942GNSj/fLHQoJydke0kthuqCbSJQnzSY+Omgpbm8Qp2Xxaf6EMd8N3kTA4Bf5
W3S+3z60isZETAfHxmyFE261Ir5ZVPplTtRrCzKX2IrQC/tV0URGh41nRpCr7VUQ
vd6BGkn0I83LeZTT7C2NMds+WKYOliwmdW1dv4UJitiCRv9jUPQbWMY4M6tv4uFT
2ZRT2AcV3AgPdaGnUHpHLQcdAKT4jr+HGuMBPZh95dclBDAe+VoyCR96p4XNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUVr2h2QQGOJ+VLKbaae4sM9+OPYswHwYDVR0j
BBgwFoAU6nssvgU0fT2k8h3mZu2u2p3e71EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzhIY2QxaW02aVM2ZzdpbjJDM2VoOXpzUnR0MXQ5RDJjYUxlZ2c5VHR1
NEsvMC9FQTdCMkNCRTA1MzQ3RDNEQTRGMjFERTY2NkVEQUVEQTlEREVFRjUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBN0IyQ0JFMDUzNDdEM0RB
NEYyMURFNjY2RURBRURBOURERUVGNTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MzhIY2QxaW02aVM2ZzdpbjJDM2VoOXpzUnR0MXQ5RDJjYUxlZ2c5VHR1NEsvMC9F
QTdCMkNCRTA1MzQ3RDNEQTRGMjFERTY2NkVEQUVEQTlEREVFRjUxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbTO0mjYv7Frg0uhJVwcvlRLhn3+hgaIHUua5pe8rEOZbM1E1rrME6XbIKObd
IeaXUaTksTMl2esXrG+mRILSa3XzdqKM6YtI5XNmmr+8xKfvwkyPeVnf9QB5JI/Q
eEq8gznUV5e+hMAsetpzU3vW8hy5bUW/2S/RsLCUMZmNSCAV3vO2cJtwNkNL/Vsd
+z/QxQb7XXZwGMdxsncfIX1OLMSq/SzdiS4Y0POyrwyrrwAaK0AogBfLGja2pI58
GnQSHo4sjEBZNVsekh1JjstzLpefoIvFJrxJiXb0BFWqcpp47K8gcPW+Z4dwC0jL
0UbBtaeZv612KskeWb66sgC0IQ==
-----END CERTIFICATE-----
Generated at Mon Nov 25 15:27:01 2024 by rpki-client on console-fra.rpki-client.org