Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3N4fYrG9tE9XrQPzpKmsyw8wLqdgzq4nY7vsoDKzcEwE/0/EF7F74C9655ED59EB1DC59F431A39ECCAF84AEB6.mft
File:                     EF7F74C9655ED59EB1DC59F431A39ECCAF84AEB6.mft (raw, json)
Hash identifier:          QnQVFlbAaWCD5PHkcYNbyvwB9qZRgFYqp9oU5W3Fnho=
Subject key identifier:   60:35:11:B6:1E:45:01:84:A3:B1:68:EB:87:97:83:5F:B3:2C:E6:7A
Authority key identifier: EF:7F:74:C9:65:5E:D5:9E:B1:DC:59:F4:31:A3:9E:CC:AF:84:AE:B6
Certificate issuer:       /CN=EF7F74C9655ED59EB1DC59F431A39ECCAF84AEB6
Certificate serial:       3668748E03A926E92CEF232B2A46E169DFFF7A20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF7F74C9655ED59EB1DC59F431A39ECCAF84AEB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3N4fYrG9tE9XrQPzpKmsyw8wLqdgzq4nY7vsoDKzcEwE/0/EF7F74C9655ED59EB1DC59F431A39ECCAF84AEB6.mft
Manifest number:          0126
Signing time:             Fri 22 Nov 2024 04:40:43 +0000
Manifest this update:     Fri 22 Nov 2024 04:35:43 +0000
Manifest next update:     Sat 23 Nov 2024 06:28:43 +0000
Files and hashes:         1: 3137392e34392e3135322e302f32322d3234203d3e20323731313935.roa (hash: d9DzIfNg4s24A6FyI3nZvel7ZFxbNigH9WmVg25MAMo=)
                          2: EF7F74C9655ED59EB1DC59F431A39ECCAF84AEB6.crl (hash: ttp+Rlzef97m3Y1Gtf1riF6YYXEUBl8HFlBYMioPJjk=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3N4fYrG9tE9XrQPzpKmsyw8wLqdgzq4nY7vsoDKzcEwE/0/EF7F74C9655ED59EB1DC59F431A39ECCAF84AEB6.crl
                          rsync://rpki-repo.registro.br/repo/3N4fYrG9tE9XrQPzpKmsyw8wLqdgzq4nY7vsoDKzcEwE/0/EF7F74C9655ED59EB1DC59F431A39ECCAF84AEB6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF7F74C9655ED59EB1DC59F431A39ECCAF84AEB6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:28:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:68:74:8e:03:a9:26:e9:2c:ef:23:2b:2a:46:e1:69:df:ff:7a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF7F74C9655ED59EB1DC59F431A39ECCAF84AEB6
        Validity
            Not Before: Nov 22 04:35:43 2024 GMT
            Not After : Nov 23 06:28:43 2024 GMT
        Subject: CN=603511B61E450184A3B168EB8797835FB32CE67A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1b:63:ca:c3:1b:92:a1:e2:aa:c6:fd:a8:e1:
                    0e:e8:b3:b5:62:d6:8a:db:a0:ff:80:03:28:68:22:
                    e2:6c:0e:22:36:68:a3:9d:06:c0:78:31:9f:ca:52:
                    84:22:e2:5a:39:52:05:27:42:7e:5d:b5:d4:95:c2:
                    cc:13:77:6d:7c:ca:79:39:7a:63:0f:fe:bb:e0:00:
                    e1:c2:9c:a4:d6:0a:91:22:0a:99:a6:4d:15:fe:4f:
                    ef:63:b3:99:72:87:c0:2e:88:8c:82:4f:c9:3d:4a:
                    70:4e:08:6d:31:4e:7d:03:49:d0:58:78:fa:ff:c4:
                    c8:b0:f3:4c:05:d6:04:05:69:03:f5:7f:ad:21:9d:
                    a5:80:00:fe:1f:92:65:ae:ca:eb:b8:d5:86:a5:1e:
                    45:16:64:eb:e8:0f:db:b3:92:47:4b:5a:97:50:d4:
                    3a:74:85:e3:74:f0:df:32:29:16:ef:c2:c0:04:7b:
                    e9:b4:09:9f:4a:b8:1a:0d:75:bb:67:5c:19:09:a3:
                    18:4f:0b:a5:a1:3b:69:8f:a5:60:55:86:92:93:00:
                    b3:9b:2e:dc:98:2c:c2:31:f1:31:02:7c:36:79:f9:
                    f7:29:ca:04:50:37:04:a3:fe:7e:53:f6:5b:3d:60:
                    7c:34:de:93:0d:7c:21:2b:92:8d:d8:8b:a4:a7:5a:
                    f0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:35:11:B6:1E:45:01:84:A3:B1:68:EB:87:97:83:5F:B3:2C:E6:7A
            X509v3 Authority Key Identifier:
                keyid:EF:7F:74:C9:65:5E:D5:9E:B1:DC:59:F4:31:A3:9E:CC:AF:84:AE:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3N4fYrG9tE9XrQPzpKmsyw8wLqdgzq4nY7vsoDKzcEwE/0/EF7F74C9655ED59EB1DC59F431A39ECCAF84AEB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF7F74C9655ED59EB1DC59F431A39ECCAF84AEB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3N4fYrG9tE9XrQPzpKmsyw8wLqdgzq4nY7vsoDKzcEwE/0/EF7F74C9655ED59EB1DC59F431A39ECCAF84AEB6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:2d:f4:85:d8:ba:1d:58:5b:54:56:b2:18:9e:17:19:a3:58:
         f8:c0:8d:40:97:96:58:24:32:cb:7b:3a:f8:88:eb:e6:ce:73:
         ef:d1:22:96:af:d0:f9:44:39:ee:38:eb:58:7a:12:2e:13:96:
         32:c8:a7:11:94:d2:2f:77:db:77:ce:13:1f:f2:8c:67:cd:39:
         2f:55:a8:b1:ca:57:a8:d6:0b:4d:79:38:be:f8:69:e2:f7:34:
         16:72:1e:ae:3f:92:31:67:2f:64:e1:ce:07:9e:e0:14:52:7e:
         34:db:27:d0:8d:5a:9b:a5:75:e1:08:f4:39:36:6f:0b:70:9c:
         c1:5e:80:ad:88:81:b0:9a:bb:bd:cf:7e:fd:e3:33:4a:48:27:
         db:75:0c:21:3e:0b:bc:53:a2:da:82:a6:b3:c9:b4:82:2b:5a:
         ea:2a:2c:f1:95:22:8b:3d:9a:32:19:2f:23:ba:f7:63:0a:17:
         90:9f:55:1d:dd:80:5d:9d:78:da:3c:27:e0:4b:9f:ed:ca:be:
         5a:fa:79:ab:b8:19:59:3f:1f:e2:e8:ce:a3:80:64:f4:0a:82:
         8a:24:59:4a:36:72:38:55:f1:61:fd:de:bd:40:14:b1:f0:0d:
         ac:89:8c:c2:7f:5c:77:51:ba:a9:b6:51:e9:19:78:14:f6:3b:
         d6:33:0a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:36 2024 by rpki-client on console-fra.rpki-client.org