Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft
File:                     2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft (raw, json)
Hash identifier:          uB6tLGhY3osJw+VpWUs5LV07Kqhe4Pdff5AhpYJH1h0=
Subject key identifier:   6F:1E:23:E9:C9:5D:B0:58:C1:9F:5A:B1:A3:58:AA:1C:51:58:75:74
Authority key identifier: 2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB
Certificate issuer:       /CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB
Certificate serial:       1A1664BA497B8C4B57DF8F70A0303712658902AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft
Manifest number:          0139
Signing time:             Fri 22 Nov 2024 19:58:25 +0000
Manifest this update:     Fri 22 Nov 2024 19:53:25 +0000
Manifest next update:     Sat 23 Nov 2024 22:42:25 +0000
Files and hashes:         1: 34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa (hash: AOEiMjPwvGQ2WWh1fjR8HS6XgJ2/wZLeqE4cnWeszyo=)
                          2: 3230382e35322e3136322e302f32332d3234203d3e20323638363238.roa (hash: ltGU9TfadFSytyS3qZ3OpJbFMrYDtGE03CwrDtct9x0=)
                          3: 323830343a353431383a3a2f33322d3438203d3e20323638363238.roa (hash: hA7z7gFEAl4e0Vd21ho9YyTZKrpOWO4ubNHsCDtD3CU=)
                          4: 2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl (hash: JkTMgYvgL/01dVG23TMHS817RsL8gzPsA+f48cPv6d4=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl
                          rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:16:64:ba:49:7b:8c:4b:57:df:8f:70:a0:30:37:12:65:89:02:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB
        Validity
            Not Before: Nov 22 19:53:25 2024 GMT
            Not After : Nov 23 22:42:25 2024 GMT
        Subject: CN=6F1E23E9C95DB058C19F5AB1A358AA1C51587574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8d:96:e6:4c:bd:56:46:97:13:af:c9:6b:73:
                    0a:8c:b3:d7:a3:62:89:91:1d:f8:7c:e5:0c:ef:90:
                    fa:0d:09:59:90:f3:af:82:7a:3d:b2:d3:64:cd:f9:
                    39:6e:f9:0b:ad:4e:bd:82:fc:40:5b:54:6b:a8:89:
                    fa:aa:62:d0:5a:77:03:a0:96:eb:6c:c6:9b:30:73:
                    bc:29:5b:6b:7c:b0:8f:5f:0c:a8:69:83:07:2c:ad:
                    2b:5c:53:58:8f:b2:6c:b5:94:17:6c:1c:ab:89:63:
                    17:17:59:a7:71:f3:a1:3a:95:6e:54:f2:5c:9d:52:
                    dd:e2:7c:5e:b3:bf:f6:20:fe:db:86:eb:a9:99:5c:
                    c9:8a:d8:3a:cc:90:e1:34:77:ac:b4:a9:c4:f0:f0:
                    f8:31:80:b2:29:85:2f:a1:57:68:82:61:24:89:ab:
                    97:36:9f:b8:5e:20:58:c0:7f:57:b8:00:78:7d:73:
                    bf:76:68:50:13:9c:5e:dd:bf:9a:1a:8a:7b:de:0c:
                    09:18:40:11:62:a0:62:be:11:70:a2:a0:10:fc:10:
                    50:f9:94:a4:19:28:ea:b0:51:cc:a4:09:68:c5:b6:
                    27:88:16:a3:f8:f1:86:81:c0:c7:1b:53:b3:3c:3e:
                    b5:68:e7:df:f8:cc:29:28:54:2c:24:60:02:08:f9:
                    ed:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1E:23:E9:C9:5D:B0:58:C1:9F:5A:B1:A3:58:AA:1C:51:58:75:74
            X509v3 Authority Key Identifier:
                keyid:2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:32:e7:18:bd:c1:bf:29:30:e7:f0:b9:49:ce:a5:38:c9:be:
         e4:1c:b3:b3:7d:04:08:c4:1a:e0:ab:0d:97:d4:5f:75:fe:8a:
         97:90:5a:c6:aa:00:d9:b1:2e:7e:df:0d:70:78:69:77:7b:76:
         79:b4:ba:20:a9:b4:e3:1d:96:83:d8:cb:dd:30:12:f6:6a:08:
         7e:3f:d2:ff:fd:e8:14:d4:a6:a0:de:b5:e0:f7:7f:1b:04:eb:
         0b:94:7e:df:12:c9:db:e1:92:53:39:fb:e9:5c:d0:b5:d0:c5:
         a0:40:7d:2f:bd:b6:87:c7:3d:b6:f5:33:3f:43:41:4e:89:12:
         b4:5e:59:dc:80:ff:a8:93:d3:c0:4c:ab:a9:dc:1e:9e:57:eb:
         18:d4:fb:ee:a0:fd:d3:03:4a:13:34:91:da:8c:53:5c:d0:b3:
         ab:6c:79:11:52:f5:c9:a8:0a:db:11:d9:59:d6:b9:f8:aa:1c:
         a8:98:9d:d6:30:1b:88:97:80:e4:40:1e:af:96:75:95:19:28:
         6f:13:64:11:75:e9:c4:7c:45:a3:df:f0:d4:9f:3e:03:ff:3b:
         2c:f0:f5:e8:1e:44:9b:37:98:04:68:92:b7:98:57:cd:e9:a9:
         c3:11:6e:c9:b8:95:17:69:6a:4c:9a:e7:7e:cb:2c:09:26:14:
         93:d6:62:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:32 2024 by rpki-client on console-fra.rpki-client.org