Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/D15FF3E533CB361A60F4C269CA7A0C08AD799132.mft
File:                     D15FF3E533CB361A60F4C269CA7A0C08AD799132.mft (raw, json)
Hash identifier:          VwvaNXddbmuuj7q28fH9Awq/sIIe2RqYB34QLg1TftA=
Subject key identifier:   13:99:9B:4D:B2:0E:AA:28:20:EA:80:43:17:08:B8:47:76:DF:FE:A3
Authority key identifier: D1:5F:F3:E5:33:CB:36:1A:60:F4:C2:69:CA:7A:0C:08:AD:79:91:32
Certificate issuer:       /CN=D15FF3E533CB361A60F4C269CA7A0C08AD799132
Certificate serial:       54B0ECF5A1598507CC09BD74AD8B2528398A018D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15FF3E533CB361A60F4C269CA7A0C08AD799132.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/D15FF3E533CB361A60F4C269CA7A0C08AD799132.mft
Manifest number:          9F
Signing time:             Fri 22 Nov 2024 21:52:02 +0000
Manifest this update:     Fri 22 Nov 2024 21:47:02 +0000
Manifest next update:     Sun 24 Nov 2024 01:12:02 +0000
Files and hashes:         1: 3137372e38352e382e302f32342d3234203d3e20323731323633.roa (hash: CFNZ/u6o+I8DRkP+BNDvMlb/omet9ro/ususEiy23ao=)
                          2: 3137372e38352e392e302f32342d3234203d3e20323731323633.roa (hash: 7YI1RjreNNYYpg7xPxXjE+lc4rKTlsuvP/U2tfD1/EQ=)
                          3: 3137372e38352e31312e302f32342d3234203d3e20323731323633.roa (hash: yZdpl1MeiH0X1iYrn0mf4e0WK0lNkAQ0zftlllFyDQg=)
                          4: 3137372e38352e31302e302f32342d3234203d3e20323731323633.roa (hash: 8A3zq9EsRbE2d/r/m4Yz6Bq+PPjl4MpjNL13Wo7c8LU=)
                          5: 3137372e38352e382e302f32322d3232203d3e20323731323633.roa (hash: UD4osjkE+MafwEBZCoEFABfKuQuTBWU8nKXWUb8SVPw=)
                          6: D15FF3E533CB361A60F4C269CA7A0C08AD799132.crl (hash: k0QPmA8EX5Nwr857l/VoFIXmwsEgFuUmEOJ+IO1svxA=)
                          7: 323830343a373863303a3a2f33322d3332203d3e20323731323633.roa (hash: IxxYss7a6LKV1wRq6NkcoTgtcoKXCjvfumIDNTpOHJE=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/D15FF3E533CB361A60F4C269CA7A0C08AD799132.crl
                          rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/D15FF3E533CB361A60F4C269CA7A0C08AD799132.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15FF3E533CB361A60F4C269CA7A0C08AD799132.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:b0:ec:f5:a1:59:85:07:cc:09:bd:74:ad:8b:25:28:39:8a:01:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D15FF3E533CB361A60F4C269CA7A0C08AD799132
        Validity
            Not Before: Nov 22 21:47:02 2024 GMT
            Not After : Nov 24 01:12:02 2024 GMT
        Subject: CN=13999B4DB20EAA2820EA80431708B84776DFFEA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9d:16:c0:26:26:a9:32:f9:a7:39:3e:cd:7c:
                    61:d6:f8:a4:a7:2f:ad:4a:0d:7d:7b:39:02:2a:15:
                    89:04:b3:11:76:eb:e2:75:a5:98:55:78:76:19:3d:
                    ec:df:ce:e2:96:2d:b5:f5:01:29:9b:be:fc:6f:47:
                    b9:2c:dc:b3:47:9e:34:f6:e0:09:8f:01:35:99:41:
                    a3:c2:ca:d8:10:61:45:fe:b5:29:ad:6c:f7:8c:1f:
                    df:8e:4b:88:20:dc:54:5d:88:fd:58:67:7c:10:a4:
                    aa:50:d3:5f:96:2f:8e:10:0f:c9:63:79:e6:05:98:
                    d6:88:cd:e3:74:4a:05:38:7e:98:94:e8:ba:ab:43:
                    e3:e7:f3:f4:2e:4f:0a:e8:a9:66:90:36:26:47:4c:
                    06:1d:3b:cc:c6:93:89:e5:48:40:23:32:0b:f7:2d:
                    16:7b:64:79:d3:26:3f:21:66:b1:9b:6e:fa:93:ac:
                    7d:43:d7:76:e6:85:37:e3:c7:b5:1f:b0:44:2a:f5:
                    fb:d1:2c:0c:aa:10:5f:71:de:b0:91:d2:60:6a:63:
                    a9:7a:23:cf:6e:66:aa:15:5e:dc:98:84:bb:fe:11:
                    d9:61:56:3f:84:6a:ce:d9:3d:6b:26:05:5a:c3:f0:
                    a7:0f:bf:80:3f:fb:a8:3e:1b:07:73:b7:a4:6a:1f:
                    e9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:99:9B:4D:B2:0E:AA:28:20:EA:80:43:17:08:B8:47:76:DF:FE:A3
            X509v3 Authority Key Identifier:
                keyid:D1:5F:F3:E5:33:CB:36:1A:60:F4:C2:69:CA:7A:0C:08:AD:79:91:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/D15FF3E533CB361A60F4C269CA7A0C08AD799132.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15FF3E533CB361A60F4C269CA7A0C08AD799132.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/D15FF3E533CB361A60F4C269CA7A0C08AD799132.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:21:33:f7:b2:96:1a:35:c9:ee:03:a3:8b:94:90:d8:80:28:
         56:ec:07:88:38:79:4c:f0:a0:41:06:45:66:e0:da:91:35:32:
         19:65:89:29:32:67:20:05:22:4e:36:99:67:3a:57:99:82:fc:
         6a:0c:2c:2f:ad:8c:f4:35:4b:81:89:cc:3b:7b:7d:11:73:a1:
         00:48:68:18:24:ba:bc:f5:11:9d:5c:29:be:38:8a:ca:54:bd:
         09:c1:0f:6e:43:2e:91:8f:4c:80:7b:61:76:b9:9c:91:51:ed:
         dc:62:af:d3:21:4c:6a:32:53:3a:c6:a1:94:b9:08:86:ca:2a:
         5e:a9:4a:3d:bc:75:99:6e:e4:db:11:5b:79:ba:2f:0d:81:16:
         85:88:16:b6:ab:dd:cb:52:a6:2c:c3:da:22:32:5e:19:dd:6e:
         24:53:81:71:6e:dd:ae:7e:8a:08:64:64:a0:55:ea:ec:1a:fd:
         b1:91:17:f9:06:30:8a:c2:66:27:b4:2e:fa:a5:c0:3f:9f:57:
         d8:61:7e:32:41:ba:cb:37:f5:90:58:53:6f:f7:36:22:92:69:
         cf:78:da:89:bb:5f:73:96:de:8a:ed:ce:81:ba:7c:74:43:78:
         a3:d4:8e:25:68:cb:e4:bc:f5:e4:ac:a7:ef:e4:5d:13:88:07:
         20:75:ca:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUVLDs9aFZhQfMCb10rYslKDmKAY0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDE1RkYzRTUzM0NCMzYxQTYwRjRDMjY5Q0E3QTBDMDhB
RDc5OTEzMjAeFw0yNDExMjIyMTQ3MDJaFw0yNDExMjQwMTEyMDJaMDMxMTAvBgNV
BAMTKDEzOTk5QjREQjIwRUFBMjgyMEVBODA0MzE3MDhCODQ3NzZERkZFQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcnRbAJiapMvmnOT7NfGHW+KSn
L61KDX17OQIqFYkEsxF26+J1pZhVeHYZPezfzuKWLbX1ASmbvvxvR7ks3LNHnjT2
4AmPATWZQaPCytgQYUX+tSmtbPeMH9+OS4gg3FRdiP1YZ3wQpKpQ01+WL44QD8lj
eeYFmNaIzeN0SgU4fpiU6LqrQ+Pn8/QuTwroqWaQNiZHTAYdO8zGk4nlSEAjMgv3
LRZ7ZHnTJj8hZrGbbvqTrH1D13bmhTfjx7UfsEQq9fvRLAyqEF9x3rCR0mBqY6l6
I89uZqoVXtyYhLv+EdlhVj+Eas7ZPWsmBVrD8KcPv4A/+6g+Gwdzt6RqH+kRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUE5mbTbIOqigg6oBDFwi4R3bf/qMwHwYDVR0j
BBgwFoAU0V/z5TPLNhpg9MJpynoMCK15kTIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHRQbkxydER0cUFpQnJBY25xTk5rb3hWSjJndjV2ZjdGNXNHRnpYYnM4
eksvMC9EMTVGRjNFNTMzQ0IzNjFBNjBGNEMyNjlDQTdBMEMwOEFENzk5MTMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxNUZGM0U1MzNDQjM2MUE2
MEY0QzI2OUNBN0EwQzA4QUQ3OTkxMzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NHRQbkxydER0cUFpQnJBY25xTk5rb3hWSjJndjV2ZjdGNXNHRnpYYnM4eksvMC9E
MTVGRjNFNTMzQ0IzNjFBNjBGNEMyNjlDQTdBMEMwOEFENzk5MTMyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARCEz97KWGjXJ7gOji5SQ2IAoVuwHiDh5TPCgQQZFZuDakTUyGWWJKTJnIAUi
TjaZZzpXmYL8agwsL62M9DVLgYnMO3t9EXOhAEhoGCS6vPURnVwpvjiKylS9CcEP
bkMukY9MgHthdrmckVHt3GKv0yFMajJTOsahlLkIhsoqXqlKPbx1mW7k2xFbebov
DYEWhYgWtqvdy1KmLMPaIjJeGd1uJFOBcW7drn6KCGRkoFXq7Br9sZEX+QYwisJm
J7Qu+qXAP59X2GF+MkG6yzf1kFhTb/c2IpJpz3jaibtfc5beiu3Ogbp8dEN4o9SO
JWjL5Lz15Kyn7+RdE4gHIHXKNQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:31 2024 by rpki-client on console-fra.rpki-client.org