Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/1/02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B.mft
File:                     02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B.mft (raw, json)
Hash identifier:          mWM4yXWXxuMoqcxN871KlJPVi0JlHcbYK2rLhPxs5zQ=
Subject key identifier:   9D:6F:AC:54:F0:5B:CF:5D:69:41:FA:61:88:75:78:B6:69:47:12:79
Authority key identifier: 02:A8:99:EE:C2:9A:12:C9:18:BD:AF:B4:FE:9E:A4:EE:76:04:F5:7B
Certificate issuer:       /CN=02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B
Certificate serial:       02BD12E69F7C8A30E552C0F0AA2A94A7910376DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/1/02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B.mft
Manifest number:          71
Signing time:             Wed 26 Jun 2024 12:37:01 +0000
Manifest this update:     Wed 26 Jun 2024 12:32:01 +0000
Manifest next update:     Thu 27 Jun 2024 12:51:01 +0000
Files and hashes:         1: 3137372e3132382e3232382e302f32322d3332203d3e203238353932.roa (hash: GTMmaps83KIyQfD52BupOZEennV0bzOePHnC0MGWVz8=)
                          2: 02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B.crl (hash: 0Mf641+c19nz/Bm+ffD1YkHcP8Xzk8zeHSzZF/c6McI=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/1/02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B.crl
                          rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/1/02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 12:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:bd:12:e6:9f:7c:8a:30:e5:52:c0:f0:aa:2a:94:a7:91:03:76:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B
        Validity
            Not Before: Jun 26 12:32:01 2024 GMT
            Not After : Jun 27 12:51:01 2024 GMT
        Subject: CN=9D6FAC54F05BCF5D6941FA61887578B669471279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:4c:75:7f:6c:21:08:38:95:ff:a1:9d:ad:29:
                    73:c0:d2:00:6a:5c:d3:5a:11:03:3b:44:b4:06:cb:
                    c4:40:2d:c6:fe:79:9f:4d:27:7d:e9:61:d6:cb:f2:
                    56:b0:bc:d6:4e:47:a7:4c:c6:27:aa:1e:1e:88:40:
                    51:d5:2e:bf:69:36:37:35:ce:e5:5c:ac:f8:34:75:
                    19:f5:1b:be:cf:9e:69:1a:78:7b:95:9f:62:e7:5e:
                    d8:52:47:f4:70:b3:2a:85:a6:6b:97:5b:d8:30:73:
                    7b:6c:55:48:90:d5:96:e9:0d:28:85:14:c1:15:d8:
                    a1:e8:94:cb:d5:87:8e:52:d5:0b:40:12:62:60:1c:
                    7b:93:ce:0e:5b:57:4b:0c:69:d2:a9:e0:0a:3c:85:
                    d5:a6:03:24:69:60:98:4f:0c:62:e7:7a:28:b8:07:
                    2d:61:6c:f4:a5:98:e6:d2:6b:8f:48:12:00:0d:1c:
                    f5:b7:9d:01:4a:bc:8f:24:0b:d8:32:eb:c8:0d:85:
                    be:b4:26:78:63:7c:54:08:64:a4:56:bb:a4:21:5b:
                    a1:15:d0:14:59:e0:c2:fa:a1:8a:dc:67:95:4d:16:
                    b1:22:3d:c9:ba:2a:73:7f:8e:bc:2f:da:d4:73:da:
                    1b:ae:be:db:fd:c9:5d:66:ce:58:8e:51:df:2f:87:
                    e8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6F:AC:54:F0:5B:CF:5D:69:41:FA:61:88:75:78:B6:69:47:12:79
            X509v3 Authority Key Identifier:
                keyid:02:A8:99:EE:C2:9A:12:C9:18:BD:AF:B4:FE:9E:A4:EE:76:04:F5:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/1/02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/1/02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:83:32:20:d1:37:40:e1:da:c9:21:94:fb:f6:f5:39:1b:bb:
         89:40:f4:75:19:ba:4b:03:55:b4:d4:58:65:3d:a1:e9:98:b0:
         50:19:e3:46:64:ce:9c:7e:f9:af:da:5a:fb:de:bc:c4:69:ab:
         8e:71:45:5d:22:de:b2:83:da:2b:a5:47:17:f2:10:27:63:60:
         47:0f:ab:4b:f4:f9:63:37:7a:60:bb:90:a1:37:5a:7f:2e:dd:
         c4:98:8f:d1:60:8d:27:ef:b5:25:b2:7f:11:69:3c:77:cf:cd:
         d1:e6:52:c9:7a:3b:72:01:a0:31:df:06:cb:1c:55:e4:a8:58:
         4d:e2:b3:2e:84:fd:f8:09:62:a7:6f:c3:14:22:41:af:76:68:
         b0:1d:fa:8d:40:d4:33:47:49:4d:5b:d0:2b:9b:04:da:95:6f:
         c0:40:aa:61:22:ee:df:de:f6:e8:ef:1e:03:48:c1:6a:df:43:
         a2:ee:e4:da:4b:21:47:bd:1c:9c:b2:39:3e:d8:3f:59:5c:0d:
         a0:96:a3:1c:6e:80:7a:fe:09:c6:46:d4:a7:d4:24:c2:e9:b1:
         8e:8b:27:3f:01:51:c5:02:68:5c:39:60:cc:2f:bc:a5:a5:7c:
         85:da:45:58:a4:85:9a:39:82:81:7a:ab:65:09:7c:d2:ae:13:
         0e:bd:66:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 16:27:41 2024 by rpki-client on console-fra.rpki-client.org