Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/41E49D87299166D22055B6ADC5AA3AED91A219F6.mft
File:                     41E49D87299166D22055B6ADC5AA3AED91A219F6.mft (raw, json)
Hash identifier:          pu/hzvodcrSvBQGq0EnH1V1Ek0xwULwde5fOI5obTug=
Subject key identifier:   81:D9:17:64:09:12:42:BE:16:B2:7F:25:53:B0:BE:06:8E:33:D1:E5
Authority key identifier: 41:E4:9D:87:29:91:66:D2:20:55:B6:AD:C5:AA:3A:ED:91:A2:19:F6
Certificate issuer:       /CN=41E49D87299166D22055B6ADC5AA3AED91A219F6
Certificate serial:       29B89C94BD68AD8DB1988E29272A5A453B88BC98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41E49D87299166D22055B6ADC5AA3AED91A219F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/41E49D87299166D22055B6ADC5AA3AED91A219F6.mft
Manifest number:          BD
Signing time:             Fri 22 Nov 2024 02:06:11 +0000
Manifest this update:     Fri 22 Nov 2024 02:01:11 +0000
Manifest next update:     Sat 23 Nov 2024 02:54:11 +0000
Files and hashes:         1: 34352e3138332e3136342e302f32342d3234203d3e20323639323838.roa (hash: CGqfB2D4CNXmgxZVSekXoMnChqhPaziX/xIWhC22rDM=)
                          2: 34352e3138332e3136372e302f32342d3234203d3e20323639323838.roa (hash: Kn8YQPfLSaYtfwkhkIRR1Nnn4t03jqrUysZaX+TouUw=)
                          3: 34352e3138332e3136352e302f32342d3234203d3e20323639323838.roa (hash: iC/YRRHvMTWpLbQoAWI4zzDM3Lo6Wx7Z8VK5GQ7C4ws=)
                          4: 41E49D87299166D22055B6ADC5AA3AED91A219F6.crl (hash: gs9hRiNeO/dVn/zCvnJ86fahI71jLGb2TBD1XXPjeW4=)
                          5: 34352e3138332e3136362e302f32332d3233203d3e20323639323838.roa (hash: ypfzFmW8R2tQ6aJVH2dxegfDaasnTccRKrPbUgc3yas=)
                          6: 34352e3138332e3136362e302f32342d3234203d3e20323639323838.roa (hash: TlwvYCiI5f6VVu7op4BYNOOMEpnQxda8GZRKuOfker4=)
                          7: 323830343a363234383a3a2f33322d3336203d3e20323639323838.roa (hash: eTPYkdb2mX37cxm63Xf/O0Dl0paeHsYrWPSKjran+YE=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/41E49D87299166D22055B6ADC5AA3AED91A219F6.crl
                          rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/41E49D87299166D22055B6ADC5AA3AED91A219F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41E49D87299166D22055B6ADC5AA3AED91A219F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:b8:9c:94:bd:68:ad:8d:b1:98:8e:29:27:2a:5a:45:3b:88:bc:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41E49D87299166D22055B6ADC5AA3AED91A219F6
        Validity
            Not Before: Nov 22 02:01:11 2024 GMT
            Not After : Nov 23 02:54:11 2024 GMT
        Subject: CN=81D91764091242BE16B27F2553B0BE068E33D1E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8c:49:0e:a7:18:0e:e0:35:54:d1:af:cb:42:
                    9b:0d:ab:2b:6a:1b:46:b8:3c:54:09:a2:00:5b:18:
                    e8:ed:18:77:3e:5d:cd:79:1a:2b:2a:04:4b:41:e3:
                    64:cd:f2:9d:1d:f5:a7:a2:90:fb:86:d0:31:21:e2:
                    11:16:6a:33:f2:68:e6:d0:66:0a:11:50:cd:2e:63:
                    df:d1:2e:84:be:44:29:36:70:ca:69:b2:7e:5c:ee:
                    b6:ec:02:56:3e:2f:d4:4f:43:dd:d4:bf:36:de:a9:
                    35:9f:fd:d5:07:c6:89:e9:ad:06:08:52:ac:6c:f5:
                    23:44:ed:2d:d6:c7:bb:06:99:d8:b1:cc:57:56:6a:
                    e6:bb:db:b9:42:f6:51:05:89:f6:17:7d:b3:9a:da:
                    23:81:71:1f:92:e4:3c:79:31:57:f8:21:ec:15:82:
                    2e:24:85:e0:f5:97:fd:d0:42:3d:d8:db:55:ea:e6:
                    d4:84:44:0c:bd:2f:a6:76:ff:de:e9:d2:9d:19:70:
                    59:db:c8:32:e4:f8:d3:2f:57:aa:ad:1d:7b:47:67:
                    ca:0f:01:81:fc:7b:72:3f:cc:86:86:50:86:ce:cd:
                    23:2d:73:1d:6a:53:5b:71:86:81:74:de:ae:a3:1d:
                    ac:b0:77:77:87:45:7e:e5:32:6c:2b:97:24:01:11:
                    d1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D9:17:64:09:12:42:BE:16:B2:7F:25:53:B0:BE:06:8E:33:D1:E5
            X509v3 Authority Key Identifier:
                keyid:41:E4:9D:87:29:91:66:D2:20:55:B6:AD:C5:AA:3A:ED:91:A2:19:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/41E49D87299166D22055B6ADC5AA3AED91A219F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41E49D87299166D22055B6ADC5AA3AED91A219F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/41E49D87299166D22055B6ADC5AA3AED91A219F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:81:fe:2f:7c:19:af:ea:98:9b:a7:7b:85:4a:e1:e4:56:12:
         11:c2:0a:47:9e:5d:7c:5d:6e:26:47:fd:4d:f0:d9:73:70:5c:
         5c:f3:61:14:94:52:0e:10:12:d8:bb:a0:a6:44:7b:68:08:86:
         68:14:c1:50:91:5f:37:3f:4d:ea:cb:5c:0f:e0:52:7e:f2:cb:
         5a:63:c1:05:b4:86:21:5f:07:9a:ac:c8:f4:05:38:44:80:02:
         2d:42:25:2d:55:7f:e4:0f:87:08:3e:77:5b:20:3c:c7:ac:ea:
         38:97:10:b4:a4:32:67:6b:9c:e4:5f:33:2c:fc:75:d6:01:4e:
         1b:e5:87:74:7a:0f:1c:eb:c5:1e:ae:ec:be:5d:f7:48:f9:db:
         95:87:73:45:49:cd:d6:43:a0:9e:bb:2b:36:bf:e7:db:f7:b7:
         38:58:ec:44:97:e7:95:f4:e3:58:93:27:4f:e1:1d:b7:02:dd:
         e4:67:bf:5e:35:27:36:05:0b:43:98:b8:c0:9c:cb:04:fa:f7:
         e1:9b:c3:d3:fb:90:ef:4f:5a:54:c0:e0:4b:f0:25:d3:67:2e:
         3b:7c:33:d5:e1:58:23:fd:de:9d:ce:ed:de:fc:06:de:00:8c:
         3a:97:be:50:d6:00:70:b7:8c:4c:cc:47:99:48:dd:19:dc:7c:
         8f:fd:cd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:17 2024 by rpki-client on console-fra.rpki-client.org