Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3kggq34DVJQ7pYFeQAUXU5cYmEBzJYZhKc8gfYfc24zV/1/D4A95BE48E4B84CA5C203C38B1BC90AF68262020.mft
File:                     D4A95BE48E4B84CA5C203C38B1BC90AF68262020.mft (raw, json)
Hash identifier:          yFXJxEpzW78RX0M4hyJLkRAzc998TPLpCB95cbgD9Kc=
Subject key identifier:   43:5E:FB:71:E6:01:AC:62:FC:68:05:A6:FC:91:C5:81:DA:76:C0:44
Authority key identifier: D4:A9:5B:E4:8E:4B:84:CA:5C:20:3C:38:B1:BC:90:AF:68:26:20:20
Certificate issuer:       /CN=D4A95BE48E4B84CA5C203C38B1BC90AF68262020
Certificate serial:       106AB6A585BE59CB1FE96C406C2C270BD98572C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4A95BE48E4B84CA5C203C38B1BC90AF68262020.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3kggq34DVJQ7pYFeQAUXU5cYmEBzJYZhKc8gfYfc24zV/1/D4A95BE48E4B84CA5C203C38B1BC90AF68262020.mft
Manifest number:          0134
Signing time:             Fri 22 Nov 2024 23:02:35 +0000
Manifest this update:     Fri 22 Nov 2024 22:57:35 +0000
Manifest next update:     Sat 23 Nov 2024 23:56:35 +0000
Files and hashes:         1: 3138372e3130392e34382e302f32302d3234203d3e203533313133.roa (hash: q4pSrFnxWwjb2tNxXIT7AO3djr0H2KhQLHBRoovtsfA=)
                          2: 323830343a323935303a3a2f33322d3438203d3e203533313133.roa (hash: ABAPmCg1EFj0o90Tulh1BRFRquHo+WGp36Q6eI63p/w=)
                          3: D4A95BE48E4B84CA5C203C38B1BC90AF68262020.crl (hash: kPhZybvbJ42izl3YD2vdnzSiffHpGH/3jFrjWikgkMs=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3kggq34DVJQ7pYFeQAUXU5cYmEBzJYZhKc8gfYfc24zV/1/D4A95BE48E4B84CA5C203C38B1BC90AF68262020.crl
                          rsync://rpki-repo.registro.br/repo/3kggq34DVJQ7pYFeQAUXU5cYmEBzJYZhKc8gfYfc24zV/1/D4A95BE48E4B84CA5C203C38B1BC90AF68262020.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4A95BE48E4B84CA5C203C38B1BC90AF68262020.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:56:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:6a:b6:a5:85:be:59:cb:1f:e9:6c:40:6c:2c:27:0b:d9:85:72:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4A95BE48E4B84CA5C203C38B1BC90AF68262020
        Validity
            Not Before: Nov 22 22:57:35 2024 GMT
            Not After : Nov 23 23:56:35 2024 GMT
        Subject: CN=435EFB71E601AC62FC6805A6FC91C581DA76C044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:19:cd:29:40:94:f0:ef:2c:d9:28:51:fa:30:
                    f4:de:b4:ac:3a:d1:ef:c2:ad:7b:b7:a1:00:0b:06:
                    2e:39:04:11:9c:b5:2e:8b:b8:e3:59:52:2e:81:cc:
                    85:01:94:0e:fe:dd:b2:32:13:28:b1:3c:06:bd:ce:
                    e9:73:95:fb:84:4e:bd:c4:c4:e6:1e:9f:d0:af:23:
                    d9:2a:c6:9f:1b:50:b8:cf:2e:84:fb:23:d6:4c:da:
                    a2:5f:b8:0e:3a:6f:33:ac:c7:e0:ab:15:5a:cf:07:
                    d1:a8:88:04:cb:21:0f:6f:4b:8f:6a:58:0d:a8:12:
                    f2:b2:a6:b3:3e:0e:d0:2f:dd:fc:42:f7:64:3d:67:
                    71:68:1c:fe:6a:c8:e8:0c:c3:a1:5b:db:5b:be:29:
                    7d:da:1f:be:70:63:bd:3b:7e:ef:02:fa:1d:8c:db:
                    47:7d:4e:50:d9:6d:3a:a0:de:8a:7c:f6:0f:4f:5b:
                    11:c6:04:1e:e4:b7:f4:b2:52:dd:ff:75:d2:5f:0d:
                    4d:b7:ec:44:7f:e9:3f:e5:9b:70:cc:bd:7c:92:e7:
                    80:4b:6f:ba:b2:50:9c:52:06:64:57:8f:ec:6b:6f:
                    b7:25:b5:26:4a:fa:df:b2:7c:f4:94:c8:ba:1d:fd:
                    10:e3:3b:ee:e1:7d:23:d1:9e:a5:7e:1c:3e:67:fc:
                    6e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:5E:FB:71:E6:01:AC:62:FC:68:05:A6:FC:91:C5:81:DA:76:C0:44
            X509v3 Authority Key Identifier:
                keyid:D4:A9:5B:E4:8E:4B:84:CA:5C:20:3C:38:B1:BC:90:AF:68:26:20:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3kggq34DVJQ7pYFeQAUXU5cYmEBzJYZhKc8gfYfc24zV/1/D4A95BE48E4B84CA5C203C38B1BC90AF68262020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4A95BE48E4B84CA5C203C38B1BC90AF68262020.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3kggq34DVJQ7pYFeQAUXU5cYmEBzJYZhKc8gfYfc24zV/1/D4A95BE48E4B84CA5C203C38B1BC90AF68262020.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:be:5f:f9:46:12:b3:7e:64:88:7e:63:8f:c3:83:4d:b5:9f:
         75:c6:38:f8:3a:1c:ca:cb:27:19:b8:94:56:a4:e6:20:37:1a:
         c9:2e:af:eb:c4:6a:1a:84:5d:dc:17:66:5d:a5:46:87:f3:11:
         93:e9:63:fa:8f:87:f5:f2:b5:b6:f3:ad:09:48:2a:64:d5:85:
         01:c0:3c:d6:04:cb:9e:05:1a:fa:4d:5f:6d:34:70:95:80:41:
         22:25:b9:b5:bf:83:fd:f1:ed:5a:ef:18:fe:d2:7f:ab:6e:41:
         25:b8:c5:c4:18:e6:2d:4b:18:97:6b:8f:12:5e:e1:c2:e5:a5:
         84:19:66:94:44:fc:43:7c:e3:89:c7:5e:02:54:82:0e:df:a0:
         ce:22:bf:00:7d:8f:70:70:3e:d9:2c:ca:29:9c:9b:f5:de:32:
         a4:fc:63:3b:d0:c0:9a:dc:0f:b9:8d:8a:cd:99:bd:79:7c:47:
         9f:5e:c0:21:8d:57:5a:1a:85:36:d4:c5:13:66:2c:1d:32:fe:
         8d:ca:e2:a4:90:df:49:78:8c:06:5d:8d:aa:19:95:4e:0b:d3:
         6b:31:28:af:eb:a7:ec:7b:c3:e1:01:6d:be:89:44:40:ed:dc:
         5b:ce:32:0e:94:c7:dc:7a:4c:b3:34:92:d6:85:e3:61:e3:8d:
         da:95:b8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:35 2024 by rpki-client on console-ams.rpki-client.org