Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft
File:                     8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft (raw, json)
Hash identifier:          8qrRKiWk0bRBNmM7Ia9CWa+tKuvNAs2HA/1UOyERYGs=
Subject key identifier:   32:FF:89:EB:98:54:D4:A6:58:7C:A1:F6:2A:83:C4:E4:8A:C3:A4:06
Authority key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
Certificate issuer:       /CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Certificate serial:       1B3B16C0180C44664F6FD75A8F0383477C93F8D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft
Manifest number:          0138
Signing time:             Fri 22 Nov 2024 11:30:02 +0000
Manifest this update:     Fri 22 Nov 2024 11:25:02 +0000
Manifest next update:     Sat 23 Nov 2024 14:10:02 +0000
Files and hashes:         1: 323830343a336231383a3a2f33322d3332203d3e20323636313239.roa (hash: bvGv0RwHmAOG0KbOo+dHivvzBSWYMPDGItuwFQ8/5qs=)
                          2: 323830343a336231383a383030303a3a2f33332d3333203d3e20323636313239.roa (hash: n9wVRNtaCZ3YRg95vYt8zaWsFHwFr0HgsuWLQ6ysjHE=)
                          3: 34352e362e39342e302f32342d3234203d3e20323636313239.roa (hash: To/Po4vurxJWuqBIhcK4Qzzd3rsHSJv9yvn0rc5QjOY=)
                          4: 34352e3136352e35342e302f32342d3234203d3e20323636313239.roa (hash: P5ZjxnCCOb87ccqjpXtpuH2zdUhWCDzVZ2uhnLkdF5M=)
                          5: 34352e362e39342e302f32332d3233203d3e20323636313239.roa (hash: coJ/ph8qkgTHa4oSpT/vhYMwvZHzNuHAsep8yBsb4yk=)
                          6: 34352e362e39352e302f32342d3234203d3e20323636313239.roa (hash: OPBuaqKwsdcnk4QsWp8+ROlG0YFA/IO+HP843n38M4I=)
                          7: 34352e362e39322e302f32332d3233203d3e20323636313239.roa (hash: eImD4yTBR7iUjK8Rrb2bpQ/BeLvAe5+CiEIDHQ7YoJQ=)
                          8: 323830343a336231383a3a2f33332d3333203d3e20323636313239.roa (hash: EngerUyMQ4nNVk0YeJ7JaJAPCjcwOiCBjO9Vlb7Gw0A=)
                          9: 8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl (hash: ECN1ievkt9xcQmvMx3rCczrO9jvx4z5kOeanR4ZEgu8=)
                          10: 323830343a336231383a3a2f33342d3334203d3e20323636313239.roa (hash: nycrjcpmzwTUX9pRaHeS0jf1GF5AX3sVojK1IKNnbiU=)
                          11: 34352e362e39332e302f32342d3234203d3e20323636313239.roa (hash: ZJK3shNNXEdrOMlfpq4aO9VpwZKweydV8kFQ9UWxHMQ=)
                          12: 34352e362e39322e302f32322d3232203d3e20323636313239.roa (hash: kiWBrKEMWJvicvnwFtJ52dxYqkDK2j/2JmTLdOEXXFU=)
                          13: 34352e362e39322e302f32342d3234203d3e20323636313239.roa (hash: sI7TT9ZuPdI97LxDzxq2jxR2UsqJ6PG5I4l7w3zvrFQ=)
                          14: 323830343a336231383a633030303a3a2f33342d3334203d3e20323636313239.roa (hash: 30zrJJ05qe0Pvx2mk8AUaAAA7iD27/M3+QgpqWsVqW0=)
                          15: 323830343a336231383a383030303a3a2f33342d3334203d3e20323636313239.roa (hash: fI+ZEmsH//NoSxdRxY/ojU7cwHlVHrDVERUxj+1ohwI=)
                          16: 323830343a336231383a343030303a3a2f33342d3334203d3e20323636313239.roa (hash: NPAiiTAojXB19HKPCVMi33GbqceZMZNsrK/HL5SXrcY=)
                          17: 34352e3136352e35352e302f32342d3234203d3e20323636313239.roa (hash: 6pDj3PUCPabTFqfoagUqW9wkJhhzTEYy+kVT2WlpTqA=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl
                          rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:3b:16:c0:18:0c:44:66:4f:6f:d7:5a:8f:03:83:47:7c:93:f8:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
        Validity
            Not Before: Nov 22 11:25:02 2024 GMT
            Not After : Nov 23 14:10:02 2024 GMT
        Subject: CN=32FF89EB9854D4A6587CA1F62A83C4E48AC3A406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:18:df:90:20:cd:33:be:2e:43:8d:1a:c9:37:
                    f7:81:18:de:ea:83:ff:47:70:da:89:bd:39:c7:2d:
                    07:04:8d:3f:00:04:dd:9b:ad:25:5c:22:4a:95:38:
                    70:0f:59:70:68:86:99:5b:32:73:23:39:e5:0c:ba:
                    0c:10:3e:5d:34:c6:8a:79:5d:52:ca:ec:d6:22:5a:
                    b5:19:dd:8b:9a:c6:ff:26:55:dd:76:f5:8d:08:e4:
                    15:b5:ee:67:1e:77:4b:91:88:f1:fe:24:d5:ac:01:
                    8f:20:06:44:c8:03:ac:e5:22:92:e7:b0:24:53:b0:
                    c5:50:04:c4:85:3e:07:0a:3a:17:69:bc:d8:58:78:
                    07:d5:98:c7:62:a8:9f:88:e4:2f:28:d1:d5:12:72:
                    93:26:be:e7:85:19:48:42:48:2c:d9:70:ff:35:74:
                    44:9f:7e:ae:a2:e4:c5:41:88:cc:1f:67:a5:85:23:
                    21:37:9d:8a:50:ff:18:0d:3b:5b:68:f7:49:b3:7b:
                    54:52:ed:27:c9:be:49:4e:1f:c5:2c:2d:4f:8c:8c:
                    51:10:f4:05:c3:dd:d9:4b:47:b8:e2:cb:28:1b:26:
                    29:c1:f4:62:7b:a9:fc:48:2c:9d:48:25:50:16:a6:
                    4f:54:ff:65:28:2e:86:0d:9f:e4:f8:08:e6:e2:ec:
                    9e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FF:89:EB:98:54:D4:A6:58:7C:A1:F6:2A:83:C4:E4:8A:C3:A4:06
            X509v3 Authority Key Identifier:
                keyid:8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b1:b0:59:1e:f6:4f:ab:04:cd:db:d2:f7:76:f6:72:2e:e8:
         a4:59:0b:df:26:f5:15:c1:f2:44:0d:67:95:ca:80:fd:c7:fb:
         1b:55:81:6d:ee:8c:5b:35:e7:48:49:c0:1f:2a:60:d4:a9:ee:
         cd:4b:42:2f:f9:89:11:10:8a:f1:4a:95:94:49:31:ab:d2:21:
         1c:89:ea:3c:d4:f1:55:de:62:f4:88:e3:59:52:99:56:39:2b:
         1e:47:78:43:9a:24:2b:42:a4:67:3b:0a:b9:e9:50:1b:16:d3:
         36:59:48:48:45:3a:73:7c:05:04:48:8b:84:50:13:dd:a9:44:
         65:f7:47:64:1c:9c:21:6a:64:60:17:10:fa:55:9d:55:4f:32:
         3f:9f:67:77:c1:78:df:82:60:bb:70:0d:b9:9d:3e:b1:3c:37:
         2a:b8:82:04:67:70:ea:eb:a8:2d:05:45:73:2f:b4:2e:a0:59:
         64:0b:79:0d:ee:ae:79:87:57:75:75:50:01:36:83:7c:23:70:
         6d:49:bf:db:6d:b2:61:52:4c:d0:c3:3c:2c:5b:83:b8:ff:ef:
         d9:4a:af:e9:0e:79:b9:ae:05:d7:96:31:3a:ca:cc:ec:fe:f2:
         0d:24:cb:d7:77:3f:ba:dd:61:0e:32:93:4c:1d:b0:30:07:39:
         d9:f3:68:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:33 2024 by rpki-client on console-ams.rpki-client.org