Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.mft
File:                     8204A8F62764E655E183BB09417B0875F11B3A7D.mft (raw, json)
Hash identifier:          fn94xcIz9IqoAXVRXhw8UIeUBlCL6CaqAroyqeWQ6g0=
Subject key identifier:   25:BE:A0:B7:76:2B:C4:1D:20:73:FE:97:51:96:CB:EE:5D:59:D5:E9
Authority key identifier: 82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D
Certificate issuer:       /CN=8204A8F62764E655E183BB09417B0875F11B3A7D
Certificate serial:       7CA8CFF5B5B61E563646D436C1579D8EEA23D248
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.mft
Manifest number:          0145
Signing time:             Sat 23 Nov 2024 12:21:00 +0000
Manifest this update:     Sat 23 Nov 2024 12:16:00 +0000
Manifest next update:     Sun 24 Nov 2024 14:32:00 +0000
Files and hashes:         1: 3137372e32332e3136382e302f32312d3234203d3e203532393133.roa (hash: IirKOzBLZuSasinOivcc63TROxrNRMNE2yTFMY/5FAc=)
                          2: 8204A8F62764E655E183BB09417B0875F11B3A7D.crl (hash: SCVyRHhrqNS2NsKF/nZ6zTCdEOcrwNUb/f55uot2bTo=)
                          3: 3137392e3132372e34302e302f32312d3234203d3e203532393133.roa (hash: c+YTitVyQm2fO5QJPj9WWn7uHc42bP0SQRNpWcro8a4=)
                          4: 323830343a313038383a3a2f33322d3438203d3e203532393133.roa (hash: GwPm2g2MNZjdOqx6Lcw+CEjGDtw0uvGi9kDqotISbMA=)
                          5: 3136372e3234392e342e302f32322d3234203d3e203532393133.roa (hash: jMcKLEMzA1jopUVdI60oFwVAkRrbeK4M/JrMe0v8++I=)
                          6: 3139302e3130392e38302e302f32322d3234203d3e203532393133.roa (hash: KBKf+/Qevujhk42l2QwVZocEnpKDDMhbt2v7hUmGz6g=)
                          7: 3137302e3234362e3136342e302f32322d3234203d3e203532393133.roa (hash: 2fFxuD2yyrixMo75WIv+JPJ76SgA2m0AqWMofxekrCw=)
                          8: 3137302e3135302e37362e302f32322d3234203d3e203532393133.roa (hash: L/WWOUuPLI48V4qXCClBdP1gnMP+oIXPnaipdk7/9y8=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.crl
                          rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a8:cf:f5:b5:b6:1e:56:36:46:d4:36:c1:57:9d:8e:ea:23:d2:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8204A8F62764E655E183BB09417B0875F11B3A7D
        Validity
            Not Before: Nov 23 12:16:00 2024 GMT
            Not After : Nov 24 14:32:00 2024 GMT
        Subject: CN=25BEA0B7762BC41D2073FE975196CBEE5D59D5E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ad:80:3b:e1:91:48:c2:c5:dd:05:f1:92:97:
                    03:f6:3a:cf:f6:eb:74:44:03:c2:cc:f8:ee:c0:d5:
                    f0:b2:2a:ea:0f:c0:4b:4b:82:48:c2:bb:ca:fe:ee:
                    b3:27:f7:2e:61:36:84:46:90:bb:32:57:97:dd:dd:
                    74:67:10:39:33:60:8b:a3:3f:57:51:91:fc:5c:4e:
                    3b:c9:49:fc:5c:bd:5a:0b:74:49:17:59:fc:36:0d:
                    b5:30:a4:3b:cb:5d:53:5a:73:66:37:40:d7:b3:71:
                    58:05:8b:87:49:5d:5b:5c:72:5b:9d:e2:51:bd:ad:
                    14:f1:16:21:00:6d:34:42:f2:78:40:97:1f:ba:95:
                    1d:a6:d1:a9:2c:db:ec:17:ab:0f:be:47:5a:e0:62:
                    1a:e9:80:05:3d:01:d8:7a:ab:ea:22:73:9e:26:a5:
                    bb:aa:58:ea:b2:e0:0a:54:f1:ae:95:34:e3:87:25:
                    dc:24:dd:df:6e:0e:02:f1:c6:de:61:96:0e:73:48:
                    90:4d:9c:d1:d9:d7:62:7c:9a:39:d5:ce:88:43:4b:
                    21:ad:b1:a6:43:b3:c9:88:c1:3f:12:a0:0d:23:6f:
                    fd:f8:17:13:28:51:7f:47:84:66:7e:38:f7:27:b0:
                    88:5b:3e:04:ce:56:d8:ad:6a:0d:14:8b:44:1e:04:
                    2e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:BE:A0:B7:76:2B:C4:1D:20:73:FE:97:51:96:CB:EE:5D:59:D5:E9
            X509v3 Authority Key Identifier:
                keyid:82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:44:12:c5:b4:ec:8b:0d:fd:85:c2:17:9f:8e:99:9b:a0:fe:
         3c:12:34:38:68:06:f6:34:ae:03:9e:5e:58:ad:49:a7:02:5c:
         5e:f6:62:64:aa:1c:cf:b3:75:7f:22:97:6a:5b:c5:31:e6:4b:
         62:d8:65:fd:43:8e:74:24:d1:9b:3e:3e:4a:a0:31:bd:00:49:
         bb:8b:29:cc:66:b7:ce:a9:42:a8:ce:dc:84:7c:b0:e4:eb:16:
         3a:3d:86:e1:07:67:24:df:b8:35:ec:40:97:45:7c:b4:dd:ac:
         d3:46:17:c7:99:bd:8a:d0:58:3d:8b:95:8f:74:68:3f:de:24:
         dc:ee:34:0e:18:c2:67:18:90:24:27:4b:e4:b9:28:ef:ca:58:
         f1:64:a3:32:e2:5b:f2:10:ef:48:36:09:66:c6:c4:99:0e:83:
         64:cc:63:4e:de:7d:79:6f:9e:2f:fa:6f:8a:01:a7:f5:86:dd:
         9a:b8:af:e9:57:07:7f:4b:b4:ed:0c:00:30:bf:b4:21:3f:18:
         4a:c4:1a:da:95:1f:59:7b:0a:a5:bd:bd:b2:38:8d:45:3a:1c:
         5a:31:8e:e5:3a:22:63:c5:2e:78:09:6e:71:af:22:10:80:b8:
         d2:09:26:08:28:fb:eb:97:73:5d:3b:72:2f:38:53:d4:af:5f:
         ec:c7:72:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:51 2024 by rpki-client on console-ams.rpki-client.org