Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/2528D69D9B3102A9B7F74F26C79FD003A4AFE791.mft
File:                     2528D69D9B3102A9B7F74F26C79FD003A4AFE791.mft (raw, json)
Hash identifier:          7wK5DF0+sbrpwPzpDf7uw4b+GeYnja8ESWBtQfDELbA=
Subject key identifier:   15:A7:BD:5D:88:F9:EF:C7:CD:8E:33:0E:82:93:57:FA:F1:7A:EE:B2
Authority key identifier: 25:28:D6:9D:9B:31:02:A9:B7:F7:4F:26:C7:9F:D0:03:A4:AF:E7:91
Certificate issuer:       /CN=2528D69D9B3102A9B7F74F26C79FD003A4AFE791
Certificate serial:       C611E11AFAA5DFEB5A4736ED18A9B20FF465D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2528D69D9B3102A9B7F74F26C79FD003A4AFE791.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/2528D69D9B3102A9B7F74F26C79FD003A4AFE791.mft
Manifest number:          3D
Signing time:             Fri 22 Nov 2024 20:31:05 +0000
Manifest this update:     Fri 22 Nov 2024 20:26:05 +0000
Manifest next update:     Sat 23 Nov 2024 21:39:05 +0000
Files and hashes:         1: 2528D69D9B3102A9B7F74F26C79FD003A4AFE791.crl (hash: cO+L7SkjmdcMXu/jkg9Q2nqcciptqr3oijY10vPFUZY=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/2528D69D9B3102A9B7F74F26C79FD003A4AFE791.crl
                          rsync://rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/2528D69D9B3102A9B7F74F26C79FD003A4AFE791.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2528D69D9B3102A9B7F74F26C79FD003A4AFE791.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:39:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c6:11:e1:1a:fa:a5:df:eb:5a:47:36:ed:18:a9:b2:0f:f4:65:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2528D69D9B3102A9B7F74F26C79FD003A4AFE791
        Validity
            Not Before: Nov 22 20:26:05 2024 GMT
            Not After : Nov 23 21:39:05 2024 GMT
        Subject: CN=15A7BD5D88F9EFC7CD8E330E829357FAF17AEEB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fa:cc:2d:2f:23:7b:b9:1a:46:a7:a5:83:50:
                    e6:fb:b1:bc:38:89:f8:ca:51:9e:bc:02:a6:84:9e:
                    d5:25:f6:01:5b:ae:50:05:78:97:4b:bf:25:5d:67:
                    d0:b8:c8:d8:c8:24:b4:d9:41:b0:da:87:7f:66:95:
                    f6:5f:c9:0e:18:bd:97:81:6c:51:af:b4:1c:e7:82:
                    f4:e5:82:49:9c:69:5c:ca:84:89:65:ed:3d:e2:55:
                    8c:07:2a:26:27:53:c7:5b:08:2d:08:f3:ad:45:16:
                    ea:4e:85:1d:26:13:33:34:77:76:34:09:83:6f:27:
                    02:e8:b5:ff:88:a5:d6:f8:32:03:04:0a:23:ab:ce:
                    54:06:4d:ba:29:47:63:58:cd:62:1d:74:74:cb:76:
                    dc:4f:65:2e:ae:88:04:81:3f:ee:ec:44:b2:89:68:
                    38:a7:29:62:2c:6d:32:09:c9:2f:03:54:b6:6a:b9:
                    2b:bd:3e:27:84:15:4f:8d:27:2d:93:c1:11:d7:dd:
                    6f:44:ad:c1:dc:22:8e:2d:42:71:d4:1f:51:f1:6b:
                    39:dd:1e:1f:df:9e:ab:87:26:a6:8c:db:5d:1e:15:
                    7c:67:f8:48:e8:ce:63:cc:97:75:f7:ff:15:d5:e4:
                    7d:3e:f6:74:fe:69:92:d0:ca:c0:48:5e:d7:52:4a:
                    aa:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A7:BD:5D:88:F9:EF:C7:CD:8E:33:0E:82:93:57:FA:F1:7A:EE:B2
            X509v3 Authority Key Identifier:
                keyid:25:28:D6:9D:9B:31:02:A9:B7:F7:4F:26:C7:9F:D0:03:A4:AF:E7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/2528D69D9B3102A9B7F74F26C79FD003A4AFE791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2528D69D9B3102A9B7F74F26C79FD003A4AFE791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/2528D69D9B3102A9B7F74F26C79FD003A4AFE791.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ae:5c:45:a2:cd:1f:dc:bd:20:7f:a6:83:13:2f:c7:8b:67:
         4e:d6:99:7c:3a:f7:93:61:f8:d0:74:13:56:46:c1:92:19:d2:
         f3:83:f2:7b:62:f5:60:b1:73:64:5a:06:c1:d5:3e:b1:60:b1:
         d3:a1:07:95:23:85:5f:c0:b5:00:4b:55:85:f0:66:4c:c4:b5:
         4a:33:7b:05:bf:9d:1a:42:75:a4:69:1a:a9:ff:7d:ff:56:c4:
         9e:33:77:bc:2a:af:95:ff:dd:3f:d5:4e:84:92:e5:76:42:fa:
         61:a1:e4:6c:60:e1:f0:e2:86:c9:fa:bb:f0:a2:10:d4:3e:91:
         b8:2d:2d:96:84:26:94:e0:d5:84:02:4e:d6:85:2d:83:52:12:
         bc:29:cd:c9:10:67:23:b8:59:c1:d6:37:be:a5:4a:cb:63:78:
         3f:7b:b5:a5:a3:86:c5:bd:4e:7c:8b:13:17:f7:0f:60:ae:bf:
         2e:31:84:4f:1e:ae:0e:a9:ec:8c:18:8e:82:39:58:ba:e5:77:
         c2:e5:16:b9:5b:e3:41:5f:7e:e7:6e:1b:ee:82:49:4f:ce:57:
         f4:a0:3c:18:61:95:05:be:a4:40:bd:56:6f:5f:da:00:ce:62:
         5f:bb:19:05:7d:97:1d:ce:aa:b8:b9:c4:f5:24:32:1d:ae:88:
         f1:fa:77:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:53 2024 by rpki-client on console-ams.rpki-client.org