Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.mft
File:                     BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.mft (raw, json)
Hash identifier:          iscKlFlkzu1FUM+SG/YFrIujg4Km4RSZDo2f6FJ7g20=
Subject key identifier:   6A:B5:DD:83:D2:95:80:82:12:56:3B:BC:EC:5F:A4:41:51:42:72:B7
Authority key identifier: BC:61:E6:D5:F8:50:C8:FF:71:4F:E8:34:B7:A2:E7:1D:62:AB:BC:5C
Certificate issuer:       /CN=BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C
Certificate serial:       5299A07C40D7F0BF9C3A48D6C67DF0A4C9C12A16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.mft
Manifest number:          72
Signing time:             Sat 23 Nov 2024 06:02:13 +0000
Manifest this update:     Sat 23 Nov 2024 05:57:13 +0000
Manifest next update:     Sun 24 Nov 2024 08:06:13 +0000
Files and hashes:         1: 323830313a38303a313465303a3a2f34332d3433203d3e203131303937.roa (hash: gm427+WBlod+SUEXyz9V4hrazrDbhXpwuR5mggdLLEc=)
                          2: 3230302e302e37302e302f32342d3234203d3e203131303937.roa (hash: xotI7hM2mTFv5y5OflAaHUuwCd2pvgm7mRVHqjoi/Tg=)
                          3: 323830313a38303a313430303a3a2f34382d3438203d3e203131303937.roa (hash: LcogDBF+THn6mEy67zxRdC3qMKlItwuZ0aDxeiKNAvI=)
                          4: 323830313a38303a313431343a3a2f34382d3438203d3e203131303937.roa (hash: KMRbv+dUgs9hvuUuulmdN6jWOPXNgDSidoF9vhF6YB8=)
                          5: 323830313a38303a313430303a3a2f34302d3430203d3e203131303937.roa (hash: BL/5DKb0BWbF6Hiu84bMCgAx2JTs30ICjMBcBcLfbxc=)
                          6: 323830313a38303a313430633a3a2f34382d3438203d3e203131303937.roa (hash: dBjqhmKIbomYiPIWgYyKOkUNl22jSO3JlrZokFMOZgI=)
                          7: 3230302e3230322e3132382e302f31382d3138203d3e203131303937.roa (hash: OkutLj4e7JyHVW2LGlPUP0jIifoIUOZgjO7Y2YcXVhU=)
                          8: 323830313a38303a313431383a3a2f34382d3438203d3e203131303937.roa (hash: iwcd3M9dZBznAj00mfcVMrzIqPZD2xUaB20cVZo3PVU=)
                          9: 3139322e3230372e3139342e302f32342d3234203d3e203131303937.roa (hash: hvjvs23AftUOwDYivzpZs0z7cEs2ppJAbGobYebWmY0=)
                          10: BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.crl (hash: Murrs8Kd4imMJI4QH+5NuOhgjeQwuLk2xaBBBDzzlTU=)
                          11: 323830313a38303a313438633a3a2f34382d3438203d3e203131303937.roa (hash: snGj6veLVvhoi+VD36/yADEzvhynCHCZsLfmRKh+Xx8=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.crl
                          rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:99:a0:7c:40:d7:f0:bf:9c:3a:48:d6:c6:7d:f0:a4:c9:c1:2a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C
        Validity
            Not Before: Nov 23 05:57:13 2024 GMT
            Not After : Nov 24 08:06:13 2024 GMT
        Subject: CN=6AB5DD83D295808212563BBCEC5FA441514272B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:de:6a:f9:63:2e:2f:c1:f3:8d:68:2d:db:ec:
                    71:1f:6f:bc:54:c7:03:1f:44:e3:2e:e1:b4:80:74:
                    17:72:ba:a7:94:d9:32:66:14:78:43:ce:9a:57:6d:
                    1e:d7:75:25:12:21:a2:74:ef:7e:62:b9:72:91:4e:
                    e8:37:c7:af:a2:92:70:80:ee:34:c7:54:84:59:ca:
                    a8:28:98:b8:88:47:91:a6:42:f4:91:97:c0:8e:c5:
                    12:cb:6e:ed:c0:90:62:14:c1:fa:25:0f:83:e3:9b:
                    a2:ee:e9:f6:f6:81:fb:a6:94:ec:59:26:bf:07:19:
                    41:08:c2:88:c5:1d:ab:bf:9c:0b:c8:19:a1:93:47:
                    c1:18:07:e2:3d:b0:77:15:c6:c6:3e:28:74:e1:39:
                    c8:37:05:09:d1:47:9e:75:37:05:fa:fe:67:82:bf:
                    64:f9:7e:77:86:9a:48:af:bc:c3:cc:3b:36:aa:a7:
                    81:0f:f2:19:e5:cb:67:f4:51:f7:30:85:1c:66:63:
                    10:5d:66:ec:ee:27:e4:18:c0:81:bd:ec:51:75:31:
                    b7:66:73:01:b0:25:25:6d:7a:bf:18:00:9b:fc:51:
                    8f:a1:2d:5b:f1:f1:c5:3c:e8:b5:7d:72:41:c7:05:
                    27:9b:87:fa:d3:a7:42:02:ec:b7:1e:c7:6a:82:e6:
                    d0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B5:DD:83:D2:95:80:82:12:56:3B:BC:EC:5F:A4:41:51:42:72:B7
            X509v3 Authority Key Identifier:
                keyid:BC:61:E6:D5:F8:50:C8:FF:71:4F:E8:34:B7:A2:E7:1D:62:AB:BC:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:e1:64:79:83:9c:85:5b:7d:04:30:18:b2:df:57:25:46:f7:
         42:02:fe:49:8a:ac:d3:8c:45:2c:f5:9c:9f:96:7f:a8:6b:03:
         aa:fb:f8:00:6a:70:bc:58:3c:91:74:4d:20:78:f3:c2:7a:17:
         18:42:eb:23:69:e3:f8:1b:dd:3e:94:f7:43:88:bd:cf:ae:21:
         17:75:1c:0f:f3:16:f1:5d:a8:f0:b9:1d:c2:f4:ca:61:ea:43:
         3e:6e:90:a3:05:f8:42:40:b2:f6:87:d4:04:44:1c:cc:09:aa:
         b5:9d:34:da:44:a1:60:53:0e:e8:ec:b7:b2:fc:ee:be:73:c1:
         19:5f:97:e4:c0:1d:7d:52:b6:cf:13:c5:cd:45:26:51:61:97:
         89:18:27:fb:45:63:1c:88:7b:1c:a2:9d:4b:06:e1:f4:ed:ca:
         84:5e:c2:ec:dc:ea:a9:85:29:24:81:e9:61:e5:d5:eb:8e:62:
         7d:74:d5:f1:80:84:82:be:5e:ef:3a:80:41:17:cc:77:a1:f2:
         f4:41:5c:cc:28:8f:4e:6f:83:9c:61:35:a3:b7:5c:51:11:33:
         4c:b0:55:81:c3:b5:ed:5a:bc:f4:ed:8a:0f:36:06:d7:cf:13:
         83:ba:47:13:50:d0:e8:a2:c4:a5:5a:f4:6a:d8:7f:f8:af:cd:
         79:51:3a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:31 2024 by rpki-client on console-ams.rpki-client.org