Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft
File:                     2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft (raw, json)
Hash identifier:          YTckcjcFFHg7rxo8Rq20PiVkbEGYDkQzFmt4DqcedNs=
Subject key identifier:   DA:94:B3:04:02:51:0B:76:E1:48:11:90:FD:78:24:64:33:76:B4:11
Authority key identifier: 2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C
Certificate issuer:       /CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
Certificate serial:       02D459C7C942201803D2BBD713FE6AA1FEAB3DEE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft
Manifest number:          0137
Signing time:             Fri 22 Nov 2024 19:10:00 +0000
Manifest this update:     Fri 22 Nov 2024 19:05:00 +0000
Manifest next update:     Sat 23 Nov 2024 19:25:00 +0000
Files and hashes:         1: 323830343a323264383a383030303a3a2f33342d3334203d3e20323634313236.roa (hash: RBHCVx5gkWPasarSi3AXPAVrb50m5N/hZRG8KQ/erRk=)
                          2: 2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl (hash: CbuJ0WYFrgzNNg6UQB456WkaAb97P9QSHlL+Jo02lKk=)
                          3: 3133382e35392e3230302e302f32342d3234203d3e20323634313236.roa (hash: te9dM/vi02hOJYa63nbqx+ItnCy/6UpGoTr9av2znFg=)
                          4: 3133382e35392e3230312e302f32342d3234203d3e20323634313236.roa (hash: YfBKrz1gz6yEvL3LgIuZuwZCnm7221JlsZykss/I3T8=)
                          5: 3133382e35392e3230332e302f32342d3234203d3e20323634313236.roa (hash: eCxoO4eaxGp+jMUOjngkSlFBxG1IGgEjd9AWnv43dw8=)
                          6: 323830343a323264383a633030303a3a2f33342d3334203d3e20323634313236.roa (hash: OXrpzDapbBO8PUy+PtSJ8r/CO/cajogyoFdnT17tOo0=)
                          7: 323830343a323264383a3a2f33322d3332203d3e20323634313236.roa (hash: 7eXiPSQtJqEauJplv2F1gFSBqdTejg67+k7BlrP/Mmw=)
                          8: 3133382e35392e3230322e302f32342d3234203d3e20323634313236.roa (hash: rHG4r1lRtuDUqHXbl4Iy0MnaJKmxPCZsmvzX9xP12A8=)
                          9: 3133382e35392e3230302e302f32322d3232203d3e20323634313236.roa (hash: O016C9Fiec+VsfKKbfxIBNuK03OQx616A+e1kZCIfFI=)
                          10: 323830343a323264383a376630303a3a2f34302d3430203d3e20323634313236.roa (hash: rQHh2l0gVxEXQ3KQGzgnL425zhkyXLDE1DYpPZuWrkw=)
                          11: 3133382e35392e3230302e302f32332d3233203d3e20323634313236.roa (hash: BH2KMr/CpadpFwudbhz3XYf7E62NveStdRYq4WHpv38=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl
                          rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:d4:59:c7:c9:42:20:18:03:d2:bb:d7:13:fe:6a:a1:fe:ab:3d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
        Validity
            Not Before: Nov 22 19:05:00 2024 GMT
            Not After : Nov 23 19:25:00 2024 GMT
        Subject: CN=DA94B30402510B76E1481190FD7824643376B411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2e:49:80:8b:8d:db:39:a0:4c:a1:a8:9f:79:
                    2b:5e:99:5f:d9:23:54:9c:53:8f:8b:e0:06:bc:42:
                    ed:1f:9f:0f:1c:a9:e4:b0:d1:18:f9:47:fd:5c:a7:
                    0e:09:52:e5:94:2b:c2:0f:c6:d2:9e:02:ca:6c:52:
                    82:8e:fa:c3:d8:ac:4a:4b:25:25:36:8d:0b:f2:85:
                    62:31:84:99:59:af:d2:19:c1:50:d4:2c:85:94:0f:
                    f3:b6:f4:e1:fa:5f:e5:25:b1:39:6f:6c:1f:98:33:
                    42:bb:70:75:bc:a5:0b:90:09:82:6e:78:d7:d2:e0:
                    4c:e2:34:4c:6c:6f:2a:23:8f:ed:f3:d2:d8:0f:08:
                    9c:74:0a:c9:c3:12:73:b9:be:e6:dd:59:af:5a:34:
                    41:a5:d8:f7:be:db:0a:05:d9:8c:92:d8:a9:cc:94:
                    c0:66:7a:a3:c5:8a:9d:6d:34:5b:20:96:69:ed:d4:
                    9b:70:b0:66:d5:f1:d8:99:66:11:99:80:3d:6e:c3:
                    28:e6:64:67:8d:91:2c:b7:3c:dc:f1:98:f4:d4:41:
                    df:4f:23:83:28:a6:e5:7d:86:6b:ed:2a:1b:e7:83:
                    e9:08:07:d3:19:c1:95:fd:ac:7a:f1:da:ab:35:ad:
                    ea:72:28:25:92:84:7c:6c:fb:5f:26:65:22:5f:4b:
                    b2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:94:B3:04:02:51:0B:76:E1:48:11:90:FD:78:24:64:33:76:B4:11
            X509v3 Authority Key Identifier:
                keyid:2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:04:14:e0:29:6b:dc:45:7f:28:6f:f6:53:31:a2:fa:fa:db:
         88:4e:f5:73:02:b9:e5:a5:d8:ee:1c:a1:d5:08:6b:20:0f:c9:
         79:af:cf:10:5b:4c:de:00:2a:e6:ce:90:99:26:dd:4c:5b:fd:
         55:15:4f:6f:7b:ad:1e:94:42:15:5c:60:c4:36:e1:db:eb:fb:
         e8:02:d0:1d:2c:f1:a6:f3:3b:81:ca:1e:6d:fd:a0:dd:f8:a9:
         37:dd:6a:95:47:ff:f8:6a:15:e8:95:0f:f5:6f:cf:2a:8f:64:
         44:1b:63:f7:cb:e8:60:e2:d0:86:a2:cb:47:1d:53:de:d6:ad:
         27:37:2c:9a:e0:6c:48:fb:4a:1f:e5:fb:59:f9:75:ed:dc:62:
         a2:ad:bf:ce:4e:70:df:9d:03:9c:8e:e4:98:ed:90:76:43:74:
         00:60:88:12:e8:d9:9b:0c:38:92:0d:61:38:35:cc:54:a4:b7:
         cd:02:48:ca:0b:75:e8:f5:9d:58:75:ec:89:f6:05:40:42:05:
         0b:15:ea:c7:f0:c7:63:44:39:81:35:16:0d:4d:a9:09:4c:fa:
         13:e4:a0:62:40:66:7d:93:8d:47:a8:35:bf:59:b9:34:6f:26:
         c5:0f:8b:42:bb:26:ab:76:c7:08:5a:ea:6b:b9:b6:79:34:0a:
         cf:c4:e5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:57 2024 by rpki-client on console-ams.rpki-client.org