Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/C947EC19DD5216E11734983E3D954D61BC79E7C6.mft
File:                     C947EC19DD5216E11734983E3D954D61BC79E7C6.mft (raw, json)
Hash identifier:          8Iv8uVpKXjpliwpHl6aFX5CZ5mUfAt0x+8BDBsNwyoU=
Subject key identifier:   7F:D9:B4:2A:0D:9A:2F:9E:81:3F:49:1E:16:E1:3C:57:63:0C:FD:D9
Authority key identifier: C9:47:EC:19:DD:52:16:E1:17:34:98:3E:3D:95:4D:61:BC:79:E7:C6
Certificate issuer:       /CN=C947EC19DD5216E11734983E3D954D61BC79E7C6
Certificate serial:       20F37267E0671F5194B01F96FCDA748CC9CD3B81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C947EC19DD5216E11734983E3D954D61BC79E7C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/C947EC19DD5216E11734983E3D954D61BC79E7C6.mft
Manifest number:          D2
Signing time:             Mon 25 Nov 2024 18:48:09 +0000
Manifest this update:     Mon 25 Nov 2024 18:43:09 +0000
Manifest next update:     Tue 26 Nov 2024 21:53:09 +0000
Files and hashes:         1: 3139312e3234332e3232302e302f32322d3232203d3e20323633353135.roa (hash: uomxGEy9XdesoKUQ55H6BbtHDtT01Va0Tr8V+lGeGXU=)
                          2: 3139312e3234332e3231362e302f32322d3232203d3e20323633353135.roa (hash: zT+e2DAMZZ6235zyMWJfM8Mh0e6AoSm+pVQZo+EcgHc=)
                          3: C947EC19DD5216E11734983E3D954D61BC79E7C6.crl (hash: j92MbtbI6Wt45bp2SFpJ0SzOoX1hUjU2dEN786+TLqQ=)
                          4: 3139312e3234332e3231362e302f32312d3231203d3e20323633353135.roa (hash: vZGBQlqLGgKZSpier2taKaZwqllhse7GRGN7XT2pQzs=)
                          5: 323830343a313331383a3a2f33322d3333203d3e20323633353135.roa (hash: e+oXJBqOvzmMX9sr9AlYViwAqanW4OG8g9sSbTZAfDA=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/C947EC19DD5216E11734983E3D954D61BC79E7C6.crl
                          rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/C947EC19DD5216E11734983E3D954D61BC79E7C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C947EC19DD5216E11734983E3D954D61BC79E7C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f3:72:67:e0:67:1f:51:94:b0:1f:96:fc:da:74:8c:c9:cd:3b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C947EC19DD5216E11734983E3D954D61BC79E7C6
        Validity
            Not Before: Nov 25 18:43:09 2024 GMT
            Not After : Nov 26 21:53:09 2024 GMT
        Subject: CN=7FD9B42A0D9A2F9E813F491E16E13C57630CFDD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:22:50:eb:27:b5:77:b3:80:8b:bd:46:2f:f8:
                    f3:31:cf:11:87:2b:ce:77:7d:38:c2:c4:ef:46:0e:
                    41:16:87:f0:dc:a8:35:91:fa:c6:72:33:87:5a:0c:
                    1f:4a:f7:10:e8:50:8e:65:17:79:f5:65:87:48:ac:
                    48:2a:9e:af:ca:5b:a2:b0:b4:29:4c:84:fe:42:5c:
                    d9:53:72:94:11:1a:83:82:6c:6a:2d:9e:a1:bd:29:
                    20:f1:10:ee:4a:76:fd:36:5f:9e:ba:6f:5f:3d:0e:
                    14:a0:a2:89:18:c9:49:21:64:e5:23:69:e5:07:0d:
                    ef:ed:e5:15:f4:c7:8e:d5:ea:e4:91:27:8d:f2:ad:
                    fb:43:2e:42:48:52:c5:27:bd:ab:cb:fb:a2:4c:7a:
                    6c:dd:a3:3e:32:00:9c:13:9c:41:68:87:9b:7e:43:
                    52:fe:46:5f:37:38:83:06:23:cf:74:4e:18:e1:c1:
                    86:cf:10:0d:e6:75:b0:c7:58:bc:51:9b:41:13:8a:
                    d2:4d:e1:5d:46:78:fa:de:c7:7e:16:35:4a:53:40:
                    05:f8:34:78:6f:5f:78:67:c1:eb:00:96:38:0f:b2:
                    5d:2a:e1:ff:d2:c2:9c:ce:6d:b2:78:94:12:6d:2f:
                    66:f0:47:51:d0:4e:fb:1b:5b:30:87:b0:e1:65:6e:
                    d7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D9:B4:2A:0D:9A:2F:9E:81:3F:49:1E:16:E1:3C:57:63:0C:FD:D9
            X509v3 Authority Key Identifier:
                keyid:C9:47:EC:19:DD:52:16:E1:17:34:98:3E:3D:95:4D:61:BC:79:E7:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/C947EC19DD5216E11734983E3D954D61BC79E7C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C947EC19DD5216E11734983E3D954D61BC79E7C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/C947EC19DD5216E11734983E3D954D61BC79E7C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:96:32:07:ee:2c:38:39:39:4d:6f:2d:3a:a0:78:6f:30:fe:
         1f:94:2a:93:b2:8e:b2:65:b9:39:0c:4b:31:c8:67:2c:16:b3:
         73:21:8e:ac:13:c0:f9:68:c0:f5:59:e2:11:b9:af:1d:c6:d3:
         85:d9:b9:9a:06:b9:49:6b:48:38:4e:c3:0b:5f:8f:ef:7d:44:
         e3:ae:8b:90:a7:d1:6d:8c:17:f5:26:ae:83:4d:56:e5:fb:4b:
         6f:28:77:f6:68:b4:97:dc:86:94:4f:be:06:98:5e:72:92:84:
         3d:c4:d8:f3:d2:b7:26:77:9a:b2:d8:e4:df:c2:83:2f:a3:a0:
         2a:a8:fb:5c:1e:5a:02:d9:21:4c:44:9f:f9:70:a6:b8:76:21:
         80:43:05:00:25:17:9d:d9:f2:c1:86:55:75:14:61:3d:e8:5a:
         96:bd:eb:73:09:63:ab:61:f6:8f:d2:4a:24:39:c7:f8:cc:3e:
         6f:21:63:4e:cb:e7:8e:8b:42:37:ba:cc:28:d5:38:20:93:29:
         c2:53:0c:b1:df:71:33:4f:1d:d9:01:7a:25:57:da:e4:a4:f1:
         f8:96:d3:c8:cc:ec:95:d5:54:b7:e6:d1:85:12:40:ea:cb:2a:
         82:70:c2:66:2b:ad:a4:e1:cd:1b:be:71:ec:95:32:70:e0:e4:
         0c:d2:75:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:31 2024 by rpki-client on console-fra.rpki-client.org