Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.mft
File:                     0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.mft (raw, json)
Hash identifier:          LxermiNQfhRCkhU28cWmAyPupBIrpdH1ouX4VnCD+WA=
Subject key identifier:   8E:2B:FE:91:19:AB:D3:47:FA:11:54:D1:7B:A6:9D:51:A9:22:33:DA
Authority key identifier: 0C:37:3D:8F:76:8B:10:5D:A0:24:0C:6A:EA:40:CD:1A:D7:62:EB:A4
Certificate issuer:       /CN=0C373D8F768B105DA0240C6AEA40CD1AD762EBA4
Certificate serial:       2240C1ABBD074D4DCD5AE50E8063AA27D54E9700
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.mft
Manifest number:          0138
Signing time:             Fri 22 Nov 2024 07:30:00 +0000
Manifest this update:     Fri 22 Nov 2024 07:25:00 +0000
Manifest next update:     Sat 23 Nov 2024 10:09:00 +0000
Files and hashes:         1: 34352e3136382e3232302e302f32322d3232203d3e20323638303932.roa (hash: wkOkytQYhRDncFmcz7/3fqGfF+7WhBYzNL/6c6PlXrg=)
                          2: 323830343a353765303a3a2f33322d3332203d3e20323638303932.roa (hash: c2yPwTt1IB0STqBQqxtoaDWfKGid8NSabcZ1T6i6wOY=)
                          3: 0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.crl (hash: M0iBPxsZUf1rFmbY96imBLAWnbwnJomJOuKwMzw8IjQ=)
                          4: 323830343a353765303a3a2f33322d3438203d3e20323638303932.roa (hash: g5eGmuciyBppIfmQIc2KWrRRbQ2JvVMgPICz8m8pIgk=)
                          5: 34352e3136382e3232322e302f32332d3233203d3e20323638303932.roa (hash: jsJlZuvxiRkoC7nHZoJkpQHKTdtyvUFt/Z7T6oxNfwQ=)
                          6: 34352e3136382e3232302e302f32322d3234203d3e20323638303932.roa (hash: ekqpN325Er5rgfUQrpnvNSOxW5/EO9gNUijdhzNi768=)
                          7: 34352e3136382e3232302e302f32332d3233203d3e20323638303932.roa (hash: 8HHY0EhNy0EUD7VS2/ZTNfhP7n/IyI5IzlLWLOc9hRQ=)
                          8: 34352e3136382e3232312e302f32342d3234203d3e20323638303932.roa (hash: iyHXY+xZ8p7r0tQc5OcVHH/BHjfJetuArB85ul5n2i0=)
                          9: 34352e3136382e3232332e302f32342d3234203d3e20323638303932.roa (hash: u3ekFAwfhV68Loo42PSTKRJXIvtiGlQ+cTT9RieyTSo=)
                          10: 34352e3136382e3232302e302f32342d3234203d3e20323638303932.roa (hash: WngeZmvS3ro+oFYDNMZTrEfwXKZRRaRVlj6tREpoD5U=)
                          11: 323830343a353765303a3a2f33332d3333203d3e20323638303932.roa (hash: Wo2hQP+ygE6CuYmZ8DIXHTKF6SX1ulrWyB5+0gwaRnU=)
                          12: 34352e3136382e3232322e302f32342d3234203d3e20323638303932.roa (hash: KCPzpIyYubpRcPSCnoi5tqCYJ4LaONuKbH4qRafmMCE=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.crl
                          rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:40:c1:ab:bd:07:4d:4d:cd:5a:e5:0e:80:63:aa:27:d5:4e:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C373D8F768B105DA0240C6AEA40CD1AD762EBA4
        Validity
            Not Before: Nov 22 07:25:00 2024 GMT
            Not After : Nov 23 10:09:00 2024 GMT
        Subject: CN=8E2BFE9119ABD347FA1154D17BA69D51A92233DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:13:96:22:1d:37:71:e4:5c:82:2f:61:16:54:
                    ea:9a:35:87:48:5c:00:1e:30:6d:d9:af:09:e8:45:
                    09:5f:56:ae:20:18:7a:ef:8c:ff:1f:8d:e3:06:8a:
                    16:95:98:86:1e:44:b0:2b:fb:3d:8f:d9:63:26:3f:
                    11:03:f1:9c:42:0a:5f:76:b4:96:67:63:13:d4:aa:
                    b3:be:7c:7b:d1:20:cd:57:34:5e:78:2c:47:4b:fe:
                    d6:8e:65:78:dc:22:2c:2a:1a:a3:b7:10:f3:80:d8:
                    6f:7a:72:f4:cb:68:cb:6c:e2:8d:08:b4:ae:d2:19:
                    9c:3e:65:01:3d:da:5e:0b:ef:de:1d:3b:2d:8e:80:
                    54:c4:fa:f5:10:4b:ea:c8:d4:8a:de:8a:e6:f1:58:
                    97:0c:6e:46:91:22:fe:95:c7:ee:bb:b4:23:8c:4c:
                    09:67:cb:da:4c:c8:4b:df:70:b1:bb:7d:58:c2:95:
                    81:13:94:f2:b6:b2:ed:c1:f1:67:6a:ca:ef:e3:1c:
                    80:f1:a8:b8:78:48:ca:c4:ad:13:57:5c:0c:d5:e9:
                    10:18:6f:cb:7d:63:39:7e:56:2c:d4:b6:e0:2a:ff:
                    9e:b5:06:4b:01:e7:9a:14:68:7e:0b:e3:c0:35:09:
                    32:42:60:57:39:54:8a:ee:52:57:98:d1:1a:16:30:
                    40:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2B:FE:91:19:AB:D3:47:FA:11:54:D1:7B:A6:9D:51:A9:22:33:DA
            X509v3 Authority Key Identifier:
                keyid:0C:37:3D:8F:76:8B:10:5D:A0:24:0C:6A:EA:40:CD:1A:D7:62:EB:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:84:2a:ed:58:27:7a:8c:23:03:68:17:53:42:2c:04:1d:49:
         53:38:8b:e7:ab:91:ce:f3:95:e2:07:77:ff:85:f5:b1:9a:16:
         97:b0:22:dc:e0:d4:28:4f:07:53:17:3a:ba:c6:67:1d:f5:3c:
         3d:db:e5:db:7c:0c:05:9c:a8:93:6b:0c:61:af:00:6c:41:08:
         10:da:d1:ec:27:0e:b5:55:92:c2:2a:0b:bf:ab:e5:2f:9e:f7:
         7e:e5:3c:ee:aa:fc:28:ef:f0:d3:e3:05:20:51:2e:9e:63:ef:
         f1:7c:6d:db:f9:ec:e8:27:4f:43:f3:b2:00:72:d3:01:58:59:
         ca:5d:b7:98:06:12:54:92:96:c6:85:ce:c0:cf:ab:78:39:1d:
         f6:bb:6b:1b:72:ff:97:b1:f7:3a:6a:51:e7:89:15:78:fd:66:
         d1:b5:c0:48:7f:31:25:35:c9:53:c1:6c:a6:76:01:cd:a3:54:
         29:41:ce:35:46:51:fb:e0:8f:12:6f:71:41:5d:13:87:a9:70:
         23:c7:1f:e6:a8:5b:43:aa:1f:46:e3:9c:ea:96:93:54:78:45:
         0c:4b:13:48:05:70:67:53:c5:cf:fb:3e:ab:bd:9d:24:81:0f:
         ee:f1:7b:14:b4:42:95:7a:7d:9e:c2:74:29:7e:4c:f4:55:75:
         00:92:03:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:18 2024 by rpki-client on console-ams.rpki-client.org