Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.mft
File:                     3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.mft (raw, json)
Hash identifier:          +eonHyBotrj1nRtqIXoN42HbEj/SE4K8OsOXyQcdGsA=
Subject key identifier:   16:C8:9D:A8:52:E3:4A:BE:06:83:ED:AD:2E:00:66:AD:CE:77:9A:83
Authority key identifier: 35:36:DA:9F:A1:CF:7E:31:2A:AF:77:21:ED:15:38:4E:06:3A:E2:E2
Certificate issuer:       /CN=3536DA9FA1CF7E312AAF7721ED15384E063AE2E2
Certificate serial:       1E271C306FD9D08A0C77DCE9C1A7DA6659712315
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.mft
Manifest number:          0138
Signing time:             Fri 22 Nov 2024 14:37:36 +0000
Manifest this update:     Fri 22 Nov 2024 14:32:36 +0000
Manifest next update:     Sat 23 Nov 2024 15:42:36 +0000
Files and hashes:         1: 3137302e38322e3132302e302f32322d3234203d3e20323633363638.roa (hash: lXFqDJqFTV03GvEbpjass+8DqzqGC8Z9LWxa8lKtPd8=)
                          2: 323830343a313134383a3a2f33322d3438203d3e20323633363638.roa (hash: ovOfNhZHWXVIGXcRXN0XGeOIarfY9y3Exgn7CwMh0Wg=)
                          3: 3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.crl (hash: nNeYaiQd/mSHKS/k1HLEXKde99REmYKGE4Hq/R8Uya0=)
                          4: 3139312e3234312e35362e302f32322d3234203d3e20323633363638.roa (hash: KziogyOV/MWL4wuLPDZOvgJocTdi3i0NC94EHSaeW7o=)
                          5: 3134332e3133372e37362e302f32322d3234203d3e20323633363638.roa (hash: Plbsgk1mgbvydt71dO0Sd43Rmrz/o3Q+taVD4sbTJ68=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.crl
                          rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:27:1c:30:6f:d9:d0:8a:0c:77:dc:e9:c1:a7:da:66:59:71:23:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3536DA9FA1CF7E312AAF7721ED15384E063AE2E2
        Validity
            Not Before: Nov 22 14:32:36 2024 GMT
            Not After : Nov 23 15:42:36 2024 GMT
        Subject: CN=16C89DA852E34ABE0683EDAD2E0066ADCE779A83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:44:04:f0:4d:89:a6:87:b1:f1:65:46:9c:d2:
                    6d:32:08:26:bf:74:a5:f9:be:d0:c3:92:4d:2e:5e:
                    23:2f:d6:c8:5c:82:b1:37:b5:bc:1c:6d:b0:97:44:
                    9f:a4:66:a8:53:d3:7b:a9:9e:69:33:5d:f1:62:02:
                    c1:ff:16:22:20:cb:30:d7:cc:e6:2e:07:81:6c:4b:
                    71:84:b3:32:9c:32:cf:3d:87:68:dc:b9:84:72:a7:
                    bc:9c:30:2c:bf:48:04:49:46:af:05:54:fd:57:89:
                    5a:5b:0f:6b:74:41:b8:5f:d4:03:b8:17:2a:27:a8:
                    94:9d:f3:eb:ef:d8:8c:60:ab:ff:1d:3e:9f:8c:77:
                    19:cf:af:ea:d0:54:21:2a:20:e6:36:4c:41:6b:bb:
                    61:d4:bd:f8:d3:c2:bc:73:0d:a3:ef:79:19:30:fb:
                    0a:e4:b8:40:29:cd:1b:89:9d:a3:f5:b1:04:fc:84:
                    b6:ca:50:33:5b:5d:86:e9:75:b7:fa:74:3f:12:d8:
                    45:b6:5c:21:07:5e:23:37:35:f8:e6:3c:27:7b:71:
                    bd:80:39:61:69:8f:1a:3d:35:0b:2d:5c:7d:64:cd:
                    98:47:99:d3:6c:af:e4:8e:fb:45:70:6e:81:68:b3:
                    66:c9:f1:8a:d5:cf:79:1a:c2:55:78:f5:be:f4:e6:
                    27:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C8:9D:A8:52:E3:4A:BE:06:83:ED:AD:2E:00:66:AD:CE:77:9A:83
            X509v3 Authority Key Identifier:
                keyid:35:36:DA:9F:A1:CF:7E:31:2A:AF:77:21:ED:15:38:4E:06:3A:E2:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:34:d8:aa:dd:81:df:0b:27:12:85:71:ff:74:e0:fd:ac:37:
         02:34:82:74:2c:92:59:b5:32:c1:f0:f7:4f:ae:17:03:bb:dd:
         32:2d:d6:3c:72:68:2b:9f:26:8e:22:1f:27:b4:07:6c:87:46:
         06:a7:b6:20:36:d2:41:28:fa:cb:29:5e:ae:5e:e8:06:42:61:
         82:c8:56:9a:7e:2f:45:3e:84:68:d7:64:bc:dd:60:7d:28:30:
         1d:1b:b0:04:f5:4c:d2:81:5c:1d:55:e7:96:11:f4:91:78:f8:
         77:f0:92:ad:6c:85:76:61:f2:31:86:30:43:82:12:13:7b:8b:
         dc:85:af:5f:6d:0f:6b:e3:28:e9:cd:86:fa:e8:9b:50:05:a3:
         f9:96:5c:ee:e7:ef:bc:bc:d2:f2:85:93:55:5d:d3:d1:33:69:
         eb:76:46:d1:10:13:ac:42:fc:e5:f3:dc:8c:32:d4:a2:23:4f:
         d8:c8:30:e5:21:06:3a:31:94:26:68:69:20:ba:9a:75:67:40:
         3a:78:27:7d:da:d3:c4:58:e4:9a:4e:53:ae:d2:73:93:ff:cb:
         fd:be:7f:10:99:cf:b7:82:38:e6:a3:51:9f:6f:89:3c:ea:76:
         77:a6:c0:bf:8a:55:a4:a5:b0:d4:9e:9f:2e:50:25:1a:55:ff:
         f6:3d:df:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:36 2024 by rpki-client on console-fra.rpki-client.org