Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
File:                     8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft (raw, json)
Hash identifier:          T3zwb3Y2fw26qvpM584q5GnO/m6/ZPRBXwapSgaIxG8=
Subject key identifier:   D2:7A:2B:77:22:FA:2E:F7:4E:28:A4:87:B0:0D:1F:3C:3F:CE:DE:A5
Authority key identifier: 8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC
Certificate issuer:       /CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
Certificate serial:       19ED5151ACD41BA1D13C9B126A2FBC55FE87FEAC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
Manifest number:          9A
Signing time:             Fri 22 Nov 2024 15:22:46 +0000
Manifest this update:     Fri 22 Nov 2024 15:17:46 +0000
Manifest next update:     Sat 23 Nov 2024 16:04:46 +0000
Files and hashes:         1: 3138312e3139312e3230302e302f32322d3332203d3e203631363738.roa (hash: 3kdSaSAmdl/G7ppO5+ZSY5gb3WZSUNqO0u7us0ffcaM=)
                          2: 3133312e3130382e3136342e302f32322d3332203d3e203631363738.roa (hash: iyxltKN78mePz4Y5Z3Y6H/UwibveqSISPy8V5PUc2EY=)
                          3: 323830343a316364343a3a2f33322d313238203d3e203631363738.roa (hash: ZAFNIJgwCnwyt7SK/Ssd+849ytnqcqzaf8HYlhtxbkM=)
                          4: 3133382e3132322e3134302e302f32322d3332203d3e203631363738.roa (hash: ASiz0ZcbAT9VDKQt49gxDLD444Lbu3KuDz6l5NFIFoI=)
                          5: 8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl (hash: HKWlsedh1/hJNPiuDb9h0C5JBrJP0JRXIR7oNb4/Vvc=)
                          6: 3136382e39302e302e302f32322d3332203d3e203631363738.roa (hash: V41xaScAGBtx86DO+b01mCts3BvnSF090MGF8ATKJ90=)
                          7: 3137302e3234362e3233362e302f32322d3332203d3e203631363738.roa (hash: dZkR7OkwOdS1tzWkqugp2XWNw/VURw0l47xCQklPHRg=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl
                          rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ed:51:51:ac:d4:1b:a1:d1:3c:9b:12:6a:2f:bc:55:fe:87:fe:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
        Validity
            Not Before: Nov 22 15:17:46 2024 GMT
            Not After : Nov 23 16:04:46 2024 GMT
        Subject: CN=D27A2B7722FA2EF74E28A487B00D1F3C3FCEDEA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:df:f6:2f:25:c3:a5:50:ad:81:0c:a2:37:c7:
                    ae:bb:42:2f:35:2c:0e:15:c1:fd:80:14:de:71:9e:
                    22:3f:ec:5c:1d:2b:99:9d:63:62:c0:42:95:6b:51:
                    26:e0:c6:04:2d:db:40:97:c6:e5:45:aa:1d:cd:5e:
                    4e:7f:69:6d:60:e7:5a:44:3b:f3:8d:5a:9c:60:53:
                    a3:28:6a:7d:dc:59:77:df:93:93:22:fb:7d:f9:19:
                    22:a6:8f:48:75:91:6e:20:57:77:39:96:49:a1:fd:
                    e4:4b:87:27:0e:43:70:fc:14:d9:cd:19:17:58:0d:
                    a4:89:46:d8:2b:d4:8d:de:08:4f:e9:a8:8a:2b:a7:
                    8c:4f:03:b6:10:d7:46:83:c9:20:ad:79:9d:87:79:
                    db:2b:18:f4:1c:39:25:34:ee:e9:70:e8:48:8b:10:
                    17:c0:49:eb:b7:7a:49:d9:67:5c:eb:10:80:2a:6a:
                    25:3d:9c:2c:38:22:b8:b5:25:6d:25:94:3b:73:68:
                    3c:89:22:37:12:30:f4:b7:3a:78:e9:3d:64:a4:70:
                    4d:1d:c3:ab:66:85:68:7d:fa:cf:12:2b:ba:8c:71:
                    57:31:6c:5c:77:6d:dd:de:db:13:bc:9a:4f:06:8a:
                    e3:2a:0a:0f:5f:d1:eb:ba:55:58:2c:14:66:a8:86:
                    bb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:7A:2B:77:22:FA:2E:F7:4E:28:A4:87:B0:0D:1F:3C:3F:CE:DE:A5
            X509v3 Authority Key Identifier:
                keyid:8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:c1:51:61:aa:00:6c:f0:18:6f:13:5d:d3:13:96:58:ba:63:
         96:51:4f:0a:08:37:92:c9:79:3e:ff:1c:17:10:d1:44:38:8a:
         0c:b7:58:26:01:3e:aa:ea:16:23:59:29:66:5d:db:7f:e3:04:
         45:68:03:91:24:29:d1:14:23:bd:a8:94:fb:27:8b:85:25:73:
         ce:ee:87:de:02:3a:ac:22:82:99:80:75:c6:92:cd:b3:9d:f5:
         37:fb:e3:d1:8d:05:06:6a:10:45:18:e0:5e:3f:b1:8d:24:91:
         3f:3b:e7:12:d4:05:69:b8:51:77:ef:b0:22:b9:e8:6e:7c:e4:
         1d:fa:0b:78:6d:0f:61:9d:a1:64:e4:a4:71:a5:9b:4c:9d:b4:
         06:bf:f1:b5:c5:37:df:36:86:ea:d3:52:11:36:da:18:c0:21:
         6f:f7:9b:1e:6e:f2:80:e7:bf:de:f2:e8:d9:e9:a5:8b:00:3e:
         40:d9:9e:2e:d6:c2:c6:56:2b:78:f6:1b:50:e7:37:a5:49:c5:
         6a:90:df:62:36:08:77:55:d3:0e:88:57:09:d2:cc:d2:4e:0f:
         51:42:88:6d:08:a1:00:d8:0b:6d:02:41:c4:b4:f1:b8:bc:13:
         3a:3a:7a:fb:c4:3c:4d:3c:28:d8:ee:c6:59:a5:f8:31:e4:ba:
         74:67:4b:10
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGe1RUazUG6HRPJsSai+8Vf6H/qwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU1MkM2QTlCRUFENzlEQzk1MEY5REE1NjBDNTMwRjI4
QkM2RkNEQzAeFw0yNDExMjIxNTE3NDZaFw0yNDExMjMxNjA0NDZaMDMxMTAvBgNV
BAMTKEQyN0EyQjc3MjJGQTJFRjc0RTI4QTQ4N0IwMEQxRjNDM0ZDRURFQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV3/YvJcOlUK2BDKI3x667Qi81
LA4Vwf2AFN5xniI/7FwdK5mdY2LAQpVrUSbgxgQt20CXxuVFqh3NXk5/aW1g51pE
O/ONWpxgU6Moan3cWXffk5Mi+335GSKmj0h1kW4gV3c5lkmh/eRLhycOQ3D8FNnN
GRdYDaSJRtgr1I3eCE/pqIorp4xPA7YQ10aDySCteZ2HedsrGPQcOSU07ulw6EiL
EBfASeu3eknZZ1zrEIAqaiU9nCw4Iri1JW0llDtzaDyJIjcSMPS3OnjpPWSkcE0d
w6tmhWh9+s8SK7qMcVcxbFx3bd3e2xO8mk8GiuMqCg9f0eu6VVgsFGaohrt7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU0nordyL6LvdOKKSHsA0fPD/O3qUwHwYDVR0j
BBgwFoAUjlLGqb6tedyVD52lYMUw8ovG/NwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFRoeGNNVkJuekZRSml3cFdCMW1LZ01EU3p4VlI2aDYxTDkzeW1iS3Yy
azkvMC84RTUyQzZBOUJFQUQ3OURDOTUwRjlEQTU2MEM1MzBGMjhCQzZGQ0RDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFNTJDNkE5QkVBRDc5REM5
NTBGOURBNTYwQzUzMEYyOEJDNkZDREMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NFRoeGNNVkJuekZRSml3cFdCMW1LZ01EU3p4VlI2aDYxTDkzeW1iS3YyazkvMC84
RTUyQzZBOUJFQUQ3OURDOTUwRjlEQTU2MEM1MzBGMjhCQzZGQ0RDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPsFRYaoAbPAYbxNd0xOWWLpjllFPCgg3ksl5Pv8cFxDRRDiKDLdYJgE+quoW
I1kpZl3bf+MERWgDkSQp0RQjvaiU+yeLhSVzzu6H3gI6rCKCmYB1xpLNs531N/vj
0Y0FBmoQRRjgXj+xjSSRPzvnEtQFabhRd++wIrnobnzkHfoLeG0PYZ2hZOSkcaWb
TJ20Br/xtcU33zaG6tNSETbaGMAhb/ebHm7ygOe/3vLo2emliwA+QNmeLtbCxlYr
ePYbUOc3pUnFapDfYjYId1XTDohXCdLM0k4PUUKIbQihANgLbQJBxLTxuLwTOjp6
+8Q8TTwo2O7GWaX4MeS6dGdLEA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:57 2024 by rpki-client on console-ams.rpki-client.org