Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
File:                     71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft (raw, json)
Hash identifier:          aSTv8elxAZAu7IE0dN7fuIKvPQudb74uhc56wWI9DVE=
Subject key identifier:   B4:F9:F6:3D:E9:EB:4A:62:96:4B:AB:A1:7F:30:F7:C4:2A:14:99:A1
Authority key identifier: 71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF
Certificate issuer:       /CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
Certificate serial:       721601526808A21F06A6AC367BBC239D94EF61CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
Manifest number:          013D
Signing time:             Mon 25 Nov 2024 21:53:44 +0000
Manifest this update:     Mon 25 Nov 2024 21:48:44 +0000
Manifest next update:     Wed 27 Nov 2024 00:11:44 +0000
Files and hashes:         1: 323830343a366138303a333031303a3a2f34382d3438203d3e20323730333430.roa (hash: LD/UGVVm4qlYvHAL2/fnxdK3bcRUIqzOvPd7xR40mUQ=)
                          2: 71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl (hash: D8ChN7a6cGH9CX2Jhv6jKY9oAof3ga1gLtn5pGnEPmQ=)
                          3: 323830343a366138303a333030313a3a2f34382d3439203d3e20323730333430.roa (hash: ySnr+4QiWuGNmsmQ/3zOPKMnXq5l5QeZLrjk9TVALsw=)
                          4: 323830343a366138303a333031333a3a2f34382d3438203d3e20323730333430.roa (hash: aMA/t5brOv+uJIfy3xyMXWGRRB6A3EcUoUeSN/kqmWE=)
                          5: 323830343a366138303a333030613a3a2f34382d3438203d3e20323730333430.roa (hash: DSNwdrZEZRCEv9RWciMdEKkyW9krIQGT0KvuJKzFqOc=)
                          6: 3139302e38332e38342e302f32322d3234203d3e20323730333430.roa (hash: 8Qu+0mY1ee/Kj9/L/7cbeoHuqUYh548Qm2r0htTwwUU=)
                          7: 323830343a366138303a333030393a3a2f34382d3438203d3e20323730333430.roa (hash: jc4H+FoPx0IzlG94ZRD+KT1MTW5Luh7EWab/QVjceBk=)
                          8: 323830343a366138303a333030373a3a2f34382d3438203d3e20323730333430.roa (hash: VilToWNGAigNJWZR/k4U+nQgvsXCwfTkyCOMwJgxE+0=)
                          9: 323830343a366138303a333030363a3a2f34382d3438203d3e20323730333430.roa (hash: 83lsUd5EZGdz4YZ08CHNeWnBp5RDpzpj1pX2XeilFtQ=)
                          10: 323830343a366138303a333031313a3a2f34382d3438203d3e20323730333430.roa (hash: jLFMGW3/pg1qZ3ZbpnmAcsc6bC66YGy97UcPz3EHPuI=)
                          11: 323830343a366138303a333031343a3a2f34382d3438203d3e20323730333430.roa (hash: GfGeMvc9EiQCdBLlxOynBJULYIJ0kkRmTinpLrD8HX4=)
                          12: 323830343a366138303a333031323a3a2f34382d3438203d3e20323730333430.roa (hash: xTzlxTmn8Q2w5H3HpCVVPVMAiTm0RoF3xCkGCfL6ztk=)
                          13: 323830343a366138303a333030383a3a2f34382d3438203d3e20323730333430.roa (hash: a11twepnJ/4egmKPr62kFadNcPT5I4wGdT0r9NcAIUo=)
                          14: 323830343a366138303a3a2f33322d3430203d3e20323730333430.roa (hash: zHeqkabC+bK4f9N+806krAelKN8I1a3bN3vpt0riTVs=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl
                          rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:16:01:52:68:08:a2:1f:06:a6:ac:36:7b:bc:23:9d:94:ef:61:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
        Validity
            Not Before: Nov 25 21:48:44 2024 GMT
            Not After : Nov 27 00:11:44 2024 GMT
        Subject: CN=B4F9F63DE9EB4A62964BABA17F30F7C42A1499A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1a:57:02:72:9f:7f:d9:9b:97:a6:72:fb:d6:
                    8b:27:81:b3:bc:be:da:9c:20:ea:aa:02:f2:7b:47:
                    7a:15:4f:3e:91:45:c8:37:03:20:9c:a1:7a:9a:80:
                    51:da:16:ce:30:4c:02:7b:4b:91:61:fc:6c:2b:be:
                    fb:15:b9:11:d3:45:f3:df:62:f5:12:b0:c2:b2:b2:
                    2d:55:04:79:75:60:e0:03:3f:e3:15:a9:69:3a:05:
                    be:35:06:54:c5:c2:d2:9e:de:f9:a4:f6:c8:67:99:
                    3c:c9:4b:bc:62:69:28:e5:9c:7b:bb:b0:4b:67:d1:
                    de:ad:22:b3:cf:ea:77:3e:2a:39:e6:68:7c:cc:93:
                    f4:2d:5d:69:f8:25:d9:5a:d9:f3:b1:c7:78:4a:01:
                    44:a9:b8:76:41:35:4f:85:81:cd:d0:44:af:85:05:
                    c2:15:8d:ee:0c:a9:97:18:fd:32:7e:0e:d4:30:8c:
                    9c:11:ab:bb:8c:e1:32:53:8d:96:c0:e5:04:62:42:
                    59:42:dc:1a:8b:4e:8d:8a:14:65:90:25:13:35:df:
                    18:46:17:ac:af:9f:65:37:9d:dd:b2:c6:fb:cc:cc:
                    52:d2:03:7a:56:b3:df:63:12:42:b1:95:89:04:c9:
                    d6:b1:7e:68:db:55:27:e9:60:75:e7:fb:40:1e:95:
                    9f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F9:F6:3D:E9:EB:4A:62:96:4B:AB:A1:7F:30:F7:C4:2A:14:99:A1
            X509v3 Authority Key Identifier:
                keyid:71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:46:50:39:7b:9d:01:be:e7:59:d7:d4:0d:3d:fc:5d:f4:3d:
         6e:9a:2a:9d:de:0f:a2:6e:58:4e:cc:2b:d0:58:a5:83:6a:0e:
         ec:37:a7:db:ab:75:0d:56:e5:13:a7:2d:cd:ef:64:df:49:ed:
         c5:9a:9b:95:e8:96:c6:96:5c:d0:59:39:5c:ba:98:9b:31:c3:
         19:8e:2a:8f:db:09:b2:9d:3a:ea:67:62:57:34:a4:39:f0:92:
         aa:18:f6:8b:f0:7a:b6:da:fb:54:89:3f:50:38:33:a5:55:de:
         f3:5b:33:d7:6c:84:e4:dd:bc:12:1a:59:b5:79:6e:2a:b2:39:
         70:cd:65:46:0d:1d:59:cf:1a:38:59:04:27:29:60:69:bb:a5:
         24:9f:f5:98:51:9e:7c:5d:55:99:af:dd:61:78:bc:64:15:bd:
         79:8a:e0:38:5a:d5:84:6c:8f:36:da:0f:f4:df:81:62:1d:47:
         c1:9b:cd:64:ed:ad:23:78:d1:47:83:72:b9:8c:e6:e5:6e:86:
         73:8e:04:d5:a5:13:7f:37:24:8e:ff:9b:bc:b5:bc:cd:ab:c1:
         73:79:a1:42:25:69:99:86:62:06:f3:fc:07:04:a9:5b:e8:00:
         bb:66:91:0a:ac:82:12:fc:b6:df:a6:e2:d8:87:01:e8:4f:5e:
         87:7c:dc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:50 2024 by rpki-client on console-fra.rpki-client.org