Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
File:                     03981ED1B457034CCBAC00F384454B3A021E294E.mft (raw, json)
Hash identifier:          YWx9b9jCzUnYFxsi8oysoKOgPwF/l74B8dGo/ToKX9M=
Subject key identifier:   F2:41:E5:FE:1E:04:17:A4:CB:2E:0F:A0:2F:A8:94:FE:45:C1:21:D2
Authority key identifier: 03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E
Certificate issuer:       /CN=03981ED1B457034CCBAC00F384454B3A021E294E
Certificate serial:       2F607691195C41CC3BC299A222F142D51F0C42D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
Manifest number:          0137
Signing time:             Fri 22 Nov 2024 15:33:01 +0000
Manifest this update:     Fri 22 Nov 2024 15:28:01 +0000
Manifest next update:     Sat 23 Nov 2024 15:44:01 +0000
Files and hashes:         1: 3133382e302e3139322e302f32322d3234203d3e203238313331.roa (hash: hbtZOBonk6WjP2hSly/sa+JaxMAEKmZiCXoshAxOaQU=)
                          2: 323830343a3137303a343330303a3a2f34302d3430203d3e203238313331.roa (hash: Ik0orpXWNtPhJw/Q5AcR/2jwIm2T/ncKd03B1SqEPU8=)
                          3: 323830343a3137303a343830303a3a2f34302d3430203d3e203238313331.roa (hash: IqwF15pPmNMKmJ/qSqFIQtApM5i1GAnQqwxp+Q3JunE=)
                          4: 323830343a3137303a343430303a3a2f34302d3430203d3e203238313331.roa (hash: 82gOQBwVEoR4jSncd1E7GKCSjkM589/c7jXxyGx6MVc=)
                          5: 03981ED1B457034CCBAC00F384454B3A021E294E.crl (hash: xiO+pHmVnWHBX/KLIpYCisCx9WzjJ1wGG+0kQTajA20=)
                          6: 323830343a3137303a3a2f33322d3332203d3e203238313331.roa (hash: 4nMtgRt/ICMjWwHk7tlF5i8i981KNwxHO0dVt7uF4j4=)
                          7: 3137302e38312e3137362e302f32322d3234203d3e203238313331.roa (hash: AEb8yOYwCcCrOyndvTakLg30WWUIaHP0eGitwkm1krw=)
                          8: 3138362e3230382e3232342e302f32302d3234203d3e203238313331.roa (hash: q2fF22X/TSPGBt1LJEyEdze8YA34RB9ZNPze0P/0hEM=)
                          9: 3136372e3234392e3131322e302f32322d3234203d3e203238313331.roa (hash: CFFc1zRUNW7SPmJTCDw1iUiKOKLBtEyfmGi11IjADTg=)
                          10: 323830343a3137303a343930303a3a2f34302d3430203d3e203238313331.roa (hash: xJ7NQxT/mvgnMGboxK4ni5wegD2dEKWqB+Q2Np+biuU=)
                          11: 3137302e302e3234302e302f32322d3234203d3e203238313331.roa (hash: slUPL89Xa4IzisxJX9odHxBR9ZtwrYH1tZaDOGkq8n4=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl
                          rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:44:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:60:76:91:19:5c:41:cc:3b:c2:99:a2:22:f1:42:d5:1f:0c:42:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03981ED1B457034CCBAC00F384454B3A021E294E
        Validity
            Not Before: Nov 22 15:28:01 2024 GMT
            Not After : Nov 23 15:44:01 2024 GMT
        Subject: CN=F241E5FE1E0417A4CB2E0FA02FA894FE45C121D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:58:12:63:9f:3c:39:a6:40:b9:18:10:df:43:
                    02:af:41:8c:5c:dc:e5:f5:8d:18:77:3b:ca:6f:ec:
                    ac:63:6e:c2:c3:02:41:f2:52:11:f9:e6:04:ec:39:
                    bc:ec:1a:8e:92:b3:a4:f5:c1:22:7c:32:5a:3f:11:
                    b2:4c:a1:1d:ed:03:39:98:32:1f:24:00:58:67:fb:
                    62:35:b9:18:df:c3:bf:6a:c3:dd:52:af:35:1e:f0:
                    09:c6:3b:f7:b4:79:26:53:79:50:13:78:f9:fb:b3:
                    39:f0:d5:a5:dd:47:a3:30:fd:63:ff:a3:66:f8:f9:
                    10:1b:eb:fe:29:cc:36:3b:57:57:c2:cb:6e:2c:ca:
                    97:7e:56:89:d0:51:ac:b6:a9:73:50:31:a9:ca:c9:
                    79:e0:28:03:aa:93:ab:03:44:e1:c4:e2:4e:08:91:
                    7b:a7:7d:f4:a0:12:7c:15:75:3b:b3:4e:8c:af:90:
                    4b:6b:a1:48:a0:97:1e:00:1b:00:fe:d5:4b:09:1b:
                    d1:74:ff:af:59:9e:c2:a2:ff:e3:35:ab:ce:f9:cf:
                    89:4f:3b:27:5c:54:2e:95:3d:5c:7b:4a:1d:47:26:
                    7d:a4:e0:66:56:50:08:24:35:8e:e5:1e:9c:0b:41:
                    e7:f2:33:1c:70:72:dd:68:2c:27:4f:13:47:3e:51:
                    67:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:41:E5:FE:1E:04:17:A4:CB:2E:0F:A0:2F:A8:94:FE:45:C1:21:D2
            X509v3 Authority Key Identifier:
                keyid:03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:91:11:7b:8d:2f:3f:1c:e4:c7:b9:b1:e5:1b:b8:99:54:12:
         63:ce:6c:02:a4:ea:19:30:2c:da:56:f4:52:a9:1d:5a:b3:69:
         5b:bb:4d:19:ec:02:56:d5:28:a2:c0:9a:7a:e3:4a:f6:3a:74:
         43:dc:51:c2:4c:2a:5e:d9:17:5f:d7:7a:3e:7b:3a:81:3f:64:
         d3:b8:b7:4a:dd:11:ed:2a:a4:e8:a1:e4:d6:48:7b:f7:db:1c:
         78:f8:4c:e5:8a:59:0d:63:19:ce:be:f8:e8:a4:3b:77:c2:e0:
         6f:49:48:61:ee:b8:ea:5c:84:01:82:c8:ce:62:85:97:cb:0a:
         3a:35:b8:3d:77:1c:69:c3:3a:47:16:18:9c:88:cd:aa:ef:f3:
         39:4e:a8:4e:58:e3:e7:d1:c4:5b:35:ee:aa:aa:c2:5c:25:db:
         d6:c3:8a:54:52:de:d1:3f:a6:10:0e:81:ec:19:31:82:93:8a:
         d1:88:cf:e4:42:89:39:3a:61:f3:00:9c:82:f0:6a:fb:a1:9b:
         e3:8b:e5:b5:8c:2d:f9:89:eb:08:00:dd:74:72:5a:95:26:d1:
         d6:28:b0:59:05:60:fb:24:8f:a2:aa:d6:40:c4:91:e0:44:39:
         79:d9:25:36:3e:3b:13:5f:d3:22:80:b1:18:6a:85:40:58:33:
         16:6e:77:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:19 2024 by rpki-client on console-fra.rpki-client.org