Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.mft
File:                     F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.mft (raw, json)
Hash identifier:          JkQgolBycucewmDzlIrd313cswcBxNuKPkueLscnui8=
Subject key identifier:   BD:72:AA:AC:1D:BA:36:DE:33:AE:47:4B:FD:F6:59:78:4A:16:D3:85
Authority key identifier: F3:D7:BC:2A:62:A3:A3:55:A4:38:BA:6B:F4:3C:6E:99:3B:37:CE:D1
Certificate issuer:       /CN=F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1
Certificate serial:       6780A5981A741127BC00260965716CEFE8571A18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.mft
Manifest number:          0139
Signing time:             Sat 23 Nov 2024 02:36:23 +0000
Manifest this update:     Sat 23 Nov 2024 02:31:23 +0000
Manifest next update:     Sun 24 Nov 2024 06:08:23 +0000
Files and hashes:         1: 323830343a323262343a3a2f33322d3438203d3e20323634313137.roa (hash: 6sD/Sf2anV1pS9eG9gDw+hoJ+XB/VpbA9sPrfdKEnJc=)
                          2: 3133382e39372e32382e302f32322d3234203d3e20323634313137.roa (hash: 4d8+W6yD7UMMY7fKA5kBTROsjdS1XWZybi1BYG8Whr4=)
                          3: F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.crl (hash: 0yd+6NcQ9lfq5kW4qIONtccMxnzoH6t/9lrwbzGSY1o=)
                          4: 3137372e36362e37362e302f32322d3234203d3e20323634313137.roa (hash: J99KtxOz7SLJBsqzR2fSZQ1vpbcp7RrpKqWmx/D4tn0=)
                          5: 3134332e3235352e342e302f32322d3234203d3e20323634313137.roa (hash: SaDS0RzheLUBwA7hwEiAbalWwAQHuD6hbOLrK6+3IpU=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.crl
                          rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:80:a5:98:1a:74:11:27:bc:00:26:09:65:71:6c:ef:e8:57:1a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1
        Validity
            Not Before: Nov 23 02:31:23 2024 GMT
            Not After : Nov 24 06:08:23 2024 GMT
        Subject: CN=BD72AAAC1DBA36DE33AE474BFDF659784A16D385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:03:2d:78:4c:9b:50:a9:25:9a:f3:42:89:4d:
                    bd:48:7e:8d:71:f8:8b:d2:ee:87:01:f7:7c:41:5d:
                    6f:db:3b:f1:56:be:6b:14:63:27:4c:45:dd:e4:0d:
                    1e:16:82:5b:e1:fa:68:64:c0:9d:11:9e:93:7c:d1:
                    af:46:e4:25:75:c7:53:42:39:ed:cd:84:0f:97:98:
                    7e:66:03:8d:59:4d:40:be:e5:81:5b:16:2f:91:f4:
                    99:5b:39:9c:dd:b2:d8:0c:55:1b:0c:e1:5c:a1:2a:
                    ac:0f:80:b5:61:bb:4b:de:2b:52:63:33:33:32:29:
                    16:1e:ed:65:45:3b:a1:8f:a2:2f:93:34:a1:9f:70:
                    e1:d2:e2:29:bc:2b:b9:ce:60:3b:48:9a:ce:80:f5:
                    6a:6f:97:80:7d:42:9d:88:15:cf:23:75:2c:37:88:
                    aa:58:76:8d:db:d6:2e:ae:ee:f0:3a:c2:29:38:01:
                    e3:67:cf:a5:84:e1:1b:a1:0d:5d:70:c9:ad:00:2f:
                    52:64:e3:43:ad:91:ba:33:03:09:a1:29:3a:75:b2:
                    f2:2d:e1:9e:11:a4:bc:1e:16:c3:f5:a4:e2:a2:d3:
                    bb:53:dd:17:33:85:23:7f:0f:03:71:7c:4a:3a:11:
                    9f:33:a2:ac:12:9d:85:8c:fa:41:67:e7:c0:a6:bd:
                    4d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:72:AA:AC:1D:BA:36:DE:33:AE:47:4B:FD:F6:59:78:4A:16:D3:85
            X509v3 Authority Key Identifier:
                keyid:F3:D7:BC:2A:62:A3:A3:55:A4:38:BA:6B:F4:3C:6E:99:3B:37:CE:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:9f:f0:fe:95:37:56:3a:c6:e6:82:db:78:ca:ae:ed:58:9a:
         91:d7:dc:69:24:7b:48:f8:bb:55:9e:73:f8:70:13:80:a0:81:
         fb:2f:80:35:d3:7a:15:49:d2:59:0f:ac:d4:23:d6:95:7b:78:
         04:34:85:87:49:d0:08:01:0e:e0:bc:7d:93:bc:da:f6:03:ea:
         87:ee:e6:fe:53:32:b9:94:69:af:e9:e4:e8:8f:63:87:b2:12:
         db:e0:4d:4f:61:d6:1c:9c:c7:9c:c5:3a:ad:eb:04:12:dd:db:
         97:83:fa:34:95:da:fc:29:35:0d:ea:e9:c0:e8:bd:f8:01:62:
         05:48:16:03:e4:a4:1e:18:f2:74:a9:19:11:9d:57:78:d7:11:
         33:d8:aa:50:79:0f:a0:1c:1b:bf:bf:da:3d:aa:a5:d4:26:fe:
         80:9a:28:06:26:31:fb:76:ed:b7:16:6f:6b:ed:b5:b2:9a:46:
         f0:63:16:b6:07:08:8c:4a:86:1b:cc:9d:d2:ed:4f:b4:2b:ad:
         ff:b5:f1:9d:d9:b6:c2:b8:5a:14:94:fc:ff:b8:69:47:1e:0b:
         d2:44:ae:73:7c:34:b5:7f:0a:39:6d:12:6d:cd:1c:dd:63:00:
         cd:df:3c:25:9b:bf:1a:42:05:0f:52:ed:89:a0:76:88:bf:bb:
         bb:b3:71:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:52 2024 by rpki-client on console-fra.rpki-client.org