Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/B22E94C68C47105DBC96228B65437C19A68102C7.mft
File:                     B22E94C68C47105DBC96228B65437C19A68102C7.mft (raw, json)
Hash identifier:          XbNgiwDfH4Gb/Scx+uOyHQKpYefHfcGzEjNXyCDGr6o=
Subject key identifier:   47:C4:BE:53:57:49:15:19:5D:7E:B1:C7:8D:35:EA:BA:9F:82:0F:6F
Authority key identifier: B2:2E:94:C6:8C:47:10:5D:BC:96:22:8B:65:43:7C:19:A6:81:02:C7
Certificate issuer:       /CN=B22E94C68C47105DBC96228B65437C19A68102C7
Certificate serial:       4865E54596A13E9C2E37FBF7D7066959D3592FFC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B22E94C68C47105DBC96228B65437C19A68102C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/B22E94C68C47105DBC96228B65437C19A68102C7.mft
Manifest number:          0138
Signing time:             Sat 23 Nov 2024 07:30:01 +0000
Manifest this update:     Sat 23 Nov 2024 07:25:01 +0000
Manifest next update:     Sun 24 Nov 2024 10:26:01 +0000
Files and hashes:         1: 34352e3136342e3136352e302f32342d3234203d3e20323638363237.roa (hash: /9OqlJbdPk/6j0wTUFRb4HuGVQ9Unk+iK+xPuR+IWH0=)
                          2: 34352e3136342e3136372e302f32342d3234203d3e20323638363237.roa (hash: e+7Sbfub0Hc6SUyH9NYyaVmN32bGit8zwMUGxyJgsKY=)
                          3: 34352e3136342e3136342e302f32342d3234203d3e20323638363237.roa (hash: QpwcERGraiYb2p1B1fnT6kZY9k7zo+7HU1VsCL7gRW8=)
                          4: 34352e3136342e3136342e302f32322d3232203d3e20323638363237.roa (hash: bs7jsNRjDx3sEX1eHs4CM1wRZJHzmFxcZApG/Ssd6ms=)
                          5: B22E94C68C47105DBC96228B65437C19A68102C7.crl (hash: 0hxuVzaobFuOW62eEPTy+Bk8QDLMZ4MnEWTSvmGV2Cw=)
                          6: 34352e3136342e3136362e302f32342d3234203d3e20323638363237.roa (hash: kalZ5pzgAsnHHO6/9ItBAH+aGEg/4Ty18SSTm0H+cas=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/B22E94C68C47105DBC96228B65437C19A68102C7.crl
                          rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/B22E94C68C47105DBC96228B65437C19A68102C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B22E94C68C47105DBC96228B65437C19A68102C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:65:e5:45:96:a1:3e:9c:2e:37:fb:f7:d7:06:69:59:d3:59:2f:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B22E94C68C47105DBC96228B65437C19A68102C7
        Validity
            Not Before: Nov 23 07:25:01 2024 GMT
            Not After : Nov 24 10:26:01 2024 GMT
        Subject: CN=47C4BE53574915195D7EB1C78D35EABA9F820F6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:87:90:ce:6b:7d:d4:db:e1:ab:43:45:60:e0:
                    75:98:d8:d8:67:72:19:b8:99:52:cf:bd:6d:3b:c4:
                    eb:d4:8e:6b:42:99:a0:a0:62:52:09:40:6f:b9:47:
                    3b:67:01:7f:b8:0c:c4:d5:2c:38:d3:5f:9f:cd:8f:
                    25:08:dc:75:c6:19:cc:0e:9f:1b:5c:d2:31:a7:8d:
                    dc:8a:dd:b7:47:fe:26:08:45:b5:84:67:d2:56:69:
                    87:10:f5:43:f5:32:61:e8:bd:53:62:b7:6b:28:85:
                    bf:2a:46:f4:80:88:45:9a:d6:17:a6:d2:20:ac:1b:
                    a0:a3:42:3e:b5:9e:c0:bf:de:71:b3:1e:52:2c:1c:
                    30:37:9b:eb:8b:28:65:e9:3f:4f:69:d4:a0:a0:cf:
                    92:6f:4b:dc:26:5f:67:09:0f:20:13:da:5f:60:65:
                    b4:64:01:53:d1:6e:f3:e5:09:19:3f:c4:7a:9e:3a:
                    92:e0:f2:e9:f4:c6:0a:11:77:99:81:41:c6:96:da:
                    03:55:ff:ad:73:c6:78:98:1c:32:0c:76:64:8b:0a:
                    1a:85:73:e2:f4:a3:6b:2d:cb:18:b5:c7:50:58:38:
                    bb:37:f0:23:c0:78:31:ee:f3:70:bb:bc:bb:fc:84:
                    75:a0:12:60:30:90:db:29:05:30:e6:76:df:47:68:
                    4a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C4:BE:53:57:49:15:19:5D:7E:B1:C7:8D:35:EA:BA:9F:82:0F:6F
            X509v3 Authority Key Identifier:
                keyid:B2:2E:94:C6:8C:47:10:5D:BC:96:22:8B:65:43:7C:19:A6:81:02:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/B22E94C68C47105DBC96228B65437C19A68102C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B22E94C68C47105DBC96228B65437C19A68102C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/B22E94C68C47105DBC96228B65437C19A68102C7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:f0:ac:6b:d4:96:46:f6:d5:9a:29:0f:59:21:ec:bb:d7:9c:
         1c:eb:6b:4a:32:12:1e:85:0f:67:c3:82:28:cc:28:a6:93:48:
         34:03:06:ce:e3:e2:69:49:15:88:12:a4:28:16:58:25:69:c7:
         bb:9c:b1:6c:ba:7a:3e:83:e4:89:82:cc:3b:d1:07:cd:fd:75:
         08:87:18:19:76:65:70:68:d5:f0:5f:bf:23:e3:23:c1:fa:fc:
         3e:6a:b3:34:0e:f0:28:b8:8d:77:92:f0:5e:71:0a:c8:f6:9b:
         bf:22:03:f7:56:9c:02:e5:fa:28:6d:29:44:ad:d3:37:b4:f4:
         e1:00:6c:e2:18:e3:af:d1:9e:53:2c:5b:fd:8e:04:11:84:bf:
         b8:d6:bf:a2:7a:47:6a:8e:3d:e5:71:d8:a9:f3:02:a3:4a:35:
         39:28:74:6d:3f:fb:a6:e2:56:f7:6a:a1:db:84:c3:77:de:1a:
         67:f2:d2:c7:29:ce:ab:60:f5:f0:97:f7:6b:b9:9a:c4:3e:f3:
         d3:60:c8:af:03:4a:7c:43:f6:29:f8:50:dc:02:87:e1:e2:78:
         24:bd:89:87:1a:6f:bf:f1:29:c9:c6:82:8e:e0:7b:36:bd:0a:
         ed:54:94:87:22:c5:27:5e:c8:d1:bb:77:a7:e5:c9:8f:09:34:
         29:e8:2e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:41:59 2024 by rpki-client on console-fra.rpki-client.org