Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.mft
File:                     94C8960DB5853BB60A49187478AA5E61DA0D3288.mft (raw, json)
Hash identifier:          ZDcxRAJ1WG3wuYQK6FcZqmmS+SHbdx85TFXbhtY0cwY=
Subject key identifier:   33:60:5C:35:F2:B9:B9:89:04:58:CF:76:AA:BC:DC:A2:3C:E6:1C:D4
Authority key identifier: 94:C8:96:0D:B5:85:3B:B6:0A:49:18:74:78:AA:5E:61:DA:0D:32:88
Certificate issuer:       /CN=94C8960DB5853BB60A49187478AA5E61DA0D3288
Certificate serial:       4C04E5F5331704BCDA116F0CFBB79C3727EBEAA9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.mft
Manifest number:          0137
Signing time:             Fri 22 Nov 2024 07:13:28 +0000
Manifest this update:     Fri 22 Nov 2024 07:08:28 +0000
Manifest next update:     Sat 23 Nov 2024 10:22:28 +0000
Files and hashes:         1: 3137372e33372e302e302f32302d3234203d3e20323632343632.roa (hash: 41Rv9e7zFvrq6ghuAecCeFoa0Q2eQK3kSNNd2V94aL4=)
                          2: 94C8960DB5853BB60A49187478AA5E61DA0D3288.crl (hash: YtHQtLw8gz/v0WPYhyEN/Vbdlib1DZc/S/KHULVsJsw=)
                          3: 3137372e35342e3232342e302f32302d3234203d3e20323632343632.roa (hash: MK5ox9ASNfhSSOS8iRUF0LnEiJgILem/KR53C31qqdU=)
                          4: 3137372e3130352e3134342e302f32302d3234203d3e20323632343632.roa (hash: NSg+5fEtojfAhR3MN9Tpye7ayGfaOYJU6Sv3xGnQM78=)
                          5: 3230302e3139362e3132382e302f32322d3234203d3e20323632343632.roa (hash: Rblwuqo5acf6dWKooH9NTGgYe271Q8C9fKdF7zt4wgs=)
                          6: 3138312e3232342e38342e302f32322d3234203d3e20323632343632.roa (hash: wgNMrz+2QJOgdjDxPA1fL7HXRAOVkOoz1Z9iLYolaV8=)
                          7: 323830343a3462633a3a2f33322d3438203d3e20323632343632.roa (hash: 62YPKnKgpIaYjo8mc14CxIa3pF0iXrv9y2W//p4uwt0=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.crl
                          rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:04:e5:f5:33:17:04:bc:da:11:6f:0c:fb:b7:9c:37:27:eb:ea:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C8960DB5853BB60A49187478AA5E61DA0D3288
        Validity
            Not Before: Nov 22 07:08:28 2024 GMT
            Not After : Nov 23 10:22:28 2024 GMT
        Subject: CN=33605C35F2B9B9890458CF76AABCDCA23CE61CD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c1:20:ea:e1:ac:53:31:cf:56:61:35:8b:4b:
                    c8:a2:6b:02:e8:3a:27:1d:dd:1e:c7:12:c3:ec:fa:
                    4f:c2:7c:61:5c:46:90:97:e2:5c:7a:a6:a4:c7:06:
                    79:88:7a:f6:96:bc:41:50:42:ae:9a:a5:c8:f2:f1:
                    ae:19:7d:2f:8c:33:ad:7e:76:2e:e4:69:67:aa:9d:
                    8d:a2:94:f5:a4:36:a3:8f:5f:54:64:3d:ab:42:1d:
                    b8:a7:58:5e:89:6e:5f:bd:64:8b:de:e9:7f:ad:34:
                    a4:2f:f5:69:48:7e:cb:82:44:61:d0:82:df:19:0f:
                    0d:87:bd:d8:82:08:2b:0f:a0:f6:cf:35:7a:c1:58:
                    73:26:d6:41:57:42:4a:ef:7a:f7:7e:2a:62:34:e1:
                    3a:4e:55:38:2d:6c:ad:86:cc:15:10:6d:9b:93:ad:
                    c3:21:e8:b6:90:9f:9b:64:5c:1b:d3:ae:fe:1f:e6:
                    17:22:87:17:c6:b1:e6:02:aa:c7:f4:02:33:4d:11:
                    02:a8:d9:52:b7:23:c1:f0:f5:1f:eb:a3:b7:f3:45:
                    c4:1e:66:cd:41:51:9b:66:57:c5:8a:b0:4c:1f:8a:
                    06:20:f6:38:20:ca:46:90:6f:b8:c0:9f:5c:04:dc:
                    f7:c0:63:82:7a:2b:57:cf:61:d6:34:fd:89:44:17:
                    6b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:60:5C:35:F2:B9:B9:89:04:58:CF:76:AA:BC:DC:A2:3C:E6:1C:D4
            X509v3 Authority Key Identifier:
                keyid:94:C8:96:0D:B5:85:3B:B6:0A:49:18:74:78:AA:5E:61:DA:0D:32:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:2b:a7:4a:59:27:6c:4a:9c:41:96:8b:db:79:d7:72:1a:4b:
         fd:1d:d5:82:14:9b:a0:26:a9:3c:87:9b:b8:67:23:f5:5a:3f:
         67:dd:0c:95:e9:5e:3d:f7:45:6a:14:3e:f3:48:69:42:fd:f4:
         41:ea:ce:4e:e6:39:80:d9:f7:18:0c:80:b4:e1:59:ed:2b:c2:
         c2:4a:84:9f:68:ef:d9:c7:b3:d2:a8:ba:d6:6a:59:97:5d:d3:
         cf:62:f1:05:33:4d:5e:a8:ed:69:19:6c:b2:75:89:7f:ef:87:
         a7:1b:ac:d8:31:b2:ed:1c:e3:40:83:7d:a1:54:51:c1:11:f5:
         c5:06:b5:74:3c:2b:b3:bf:10:ef:f3:b7:ce:c3:75:2c:e7:72:
         49:0a:80:15:44:44:6a:4c:a5:5f:25:7c:45:85:ef:93:8b:73:
         56:3c:fd:9f:29:cf:c6:56:57:e6:ae:c2:6d:fe:20:29:ca:1c:
         22:82:59:00:fe:9f:64:61:ca:1b:5a:6b:dc:bb:1c:22:7c:2d:
         8a:bc:33:53:87:92:00:36:3e:69:0b:59:b8:ac:19:c8:64:38:
         aa:bd:7c:44:86:56:ae:db:35:19:a5:e8:e2:cb:7c:49:5c:cd:
         2e:41:dc:2f:69:08:cd:74:f5:8c:f3:3b:76:ee:d9:e7:71:14:
         73:df:49:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:14 2024 by rpki-client on console-ams.rpki-client.org