Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.mft
File:                     DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.mft (raw, json)
Hash identifier:          rCnK2P2EzFC7FUYQ88CUu7EXzc+WgveXiryU7N/dc/Y=
Subject key identifier:   E0:4C:90:01:66:A1:AE:56:05:D4:DA:C5:20:CA:E7:D0:03:0E:58:AE
Authority key identifier: DB:0F:B5:DC:10:22:40:8D:3B:32:D7:E9:47:B0:03:1E:5E:C1:8C:C5
Certificate issuer:       /CN=DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5
Certificate serial:       0EF8AA85A42CDB67BE11CF522F6502509A7F2C6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.mft
Manifest number:          73
Signing time:             Sat 29 Jun 2024 00:38:39 +0000
Manifest this update:     Sat 29 Jun 2024 00:33:39 +0000
Manifest next update:     Sun 30 Jun 2024 00:47:39 +0000
Files and hashes:         1: 3133322e3235352e3137362e302f32342d3234203d3e203533303438.roa (hash: 2SgcxUBlY8iXxm+1OmtjeikUXEcxemZ4FlXZUn+AV3Y=)
                          2: 3133322e3235352e3137382e302f32342d3234203d3e203533303438.roa (hash: UrdPQLoa0TxMXLjMzh8CwFjpvtKMiVPhO6Co2Vh7lmQ=)
                          3: 3133322e3235352e3137392e302f32342d3234203d3e203533303438.roa (hash: a7yY2V06TQfCGjqsfLquqpljtY7Kox1ZNuldpZEhSys=)
                          4: 323830343a316230343a3a2f33322d3438203d3e203533303438.roa (hash: BRIX8CHGyFlfH9JtWXjqQIN3WWPiPdHeuKYX+FUzxak=)
                          5: DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.crl (hash: vqNE+0vlEs/pvAGwLfev2YExSdK7fLJqhD6oxNelJw8=)
                          6: 3138372e37332e39362e302f32302d3234203d3e203533303438.roa (hash: Hqjs/PbFSDkxrybRCxZeEVTtm2o+USDMcS3p7EQ5D5w=)
                          7: 3137372e3133372e34382e302f32312d3234203d3e203533303438.roa (hash: iEzqNd19l3t5Wdk3u/dZl3HqoY74l8/stdODsp3vEk4=)
                          8: 3133322e3235352e3137372e302f32342d3234203d3e203533303438.roa (hash: 38nKtQ/8mjsA5rvZn/sn9r72T0pgmqFFGmAe/dew88o=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.crl
                          rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 00:47:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f8:aa:85:a4:2c:db:67:be:11:cf:52:2f:65:02:50:9a:7f:2c:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5
        Validity
            Not Before: Jun 29 00:33:39 2024 GMT
            Not After : Jun 30 00:47:39 2024 GMT
        Subject: CN=E04C900166A1AE5605D4DAC520CAE7D0030E58AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:86:0d:0b:3c:b5:09:a4:4e:70:7b:5b:f0:25:
                    7a:20:14:c3:a0:0b:ce:3e:5e:f8:b1:70:09:d4:52:
                    31:87:d9:8d:dc:29:5a:b3:ff:97:77:ff:65:f9:6d:
                    bb:38:37:43:ab:d4:8e:e7:ae:c1:20:8b:ce:5f:9b:
                    c2:09:ac:cd:d5:40:38:45:f0:4a:81:df:fa:4d:56:
                    f5:da:08:06:78:eb:e4:65:bd:72:de:a4:b1:4d:1c:
                    3b:cc:f9:6c:30:a9:5a:ea:be:3b:52:05:6a:35:c8:
                    ff:86:0a:df:24:aa:55:bf:6c:27:c6:58:77:35:32:
                    35:83:b0:3f:1c:89:7e:53:79:1f:7e:5b:57:3a:c5:
                    fd:cd:15:4d:ca:4e:ef:fd:f1:dc:cf:98:22:5c:fe:
                    2b:d3:20:7c:c2:c4:d0:ab:2e:31:1f:90:75:d4:6e:
                    f8:26:2c:91:33:1d:ac:17:b7:ca:31:56:33:6c:9b:
                    3e:05:89:53:c6:72:2f:39:cd:b6:1b:5d:3d:a7:da:
                    47:3d:6b:40:d6:50:9a:fd:9a:08:3d:0a:30:38:0f:
                    38:f9:04:2d:86:69:d6:96:f5:b0:30:ba:5b:d1:71:
                    f5:e6:52:61:4f:e3:e5:74:f0:36:04:11:82:e0:54:
                    ba:18:72:05:4c:0a:c9:eb:fc:ec:31:b3:aa:11:e4:
                    28:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4C:90:01:66:A1:AE:56:05:D4:DA:C5:20:CA:E7:D0:03:0E:58:AE
            X509v3 Authority Key Identifier:
                keyid:DB:0F:B5:DC:10:22:40:8D:3B:32:D7:E9:47:B0:03:1E:5E:C1:8C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:89:98:a8:56:33:85:9a:d9:c9:62:0d:6a:55:98:0d:1a:42:
         81:2b:04:8f:ce:ed:dd:4e:ba:c1:5a:2d:30:2a:46:50:c3:e7:
         83:f0:11:e7:a3:8e:0e:2c:f8:95:56:4e:d4:71:6b:67:b4:6f:
         87:f0:b7:56:a0:3e:54:a3:b6:e9:d7:c4:77:7a:57:c5:09:17:
         9e:35:f5:87:32:c1:df:8f:89:5d:57:f1:f7:c6:b9:7d:79:65:
         68:5c:92:37:ac:40:5a:11:72:d5:07:13:d9:75:81:a1:6a:4f:
         ec:01:8d:98:16:2c:5b:79:be:f8:b3:22:7a:80:0a:17:1a:6b:
         84:39:77:83:14:c8:77:33:09:84:b9:29:a1:31:09:3b:09:69:
         9b:34:6c:9a:dc:a3:6c:af:ab:58:e7:8b:9b:4b:db:4f:b5:92:
         d8:bf:01:3d:6d:3f:ab:95:51:c4:ef:5c:35:8d:e0:4c:e6:cb:
         78:c0:5a:6d:d1:07:75:9b:c6:2f:34:41:a4:18:cb:e3:fa:89:
         1c:61:62:70:70:01:85:dd:c3:50:3a:00:ff:26:78:9d:4c:a3:
         08:6b:da:41:70:ca:3a:af:d7:d5:1b:53:d6:e7:c4:77:3c:87:
         8c:bb:0b:78:e1:31:19:cc:0c:fc:f1:6c:ef:fd:82:07:10:2d:
         62:40:41:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:53 2024 by rpki-client on console-fra.rpki-client.org