Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.mft
File:                     8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.mft (raw, json)
Hash identifier:          SEXJHgmPKtPO7pruhp/bvEDYQTRIepOOHR1B6hgCrww=
Subject key identifier:   D4:01:10:DF:38:39:98:21:8C:3F:F5:70:AA:2A:8B:A0:3F:17:A0:DD
Authority key identifier: 80:93:B4:BD:8F:E0:7A:F6:9B:F3:09:FB:C4:AA:60:71:DE:9B:95:CC
Certificate issuer:       /CN=8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC
Certificate serial:       2104AB38CDE47FC47D2ED008B1ED1C5DB4321F10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.mft
Manifest number:          70
Signing time:             Tue 25 Jun 2024 17:57:04 +0000
Manifest this update:     Tue 25 Jun 2024 17:52:04 +0000
Manifest next update:     Wed 26 Jun 2024 19:39:04 +0000
Files and hashes:         1: 323830343a313964303a3a2f33332d3333203d3e203631383230.roa (hash: jxhiPRssu37cHMkR7YIW2tUBiuLRCIyZnffX7j1q9RE=)
                          2: 8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.crl (hash: s4CbCvfStPVyGmVpBSJ2b9d1oa/BX/rBRQ5laFvqhnM=)
                          3: 323830343a313964303a3a2f33322d3332203d3e203631383230.roa (hash: +jJ7McYtxL/FnVrF3UxCxBdWgTKFHWTy7J7NhUIJ63U=)
                          4: 3230312e3133312e3137362e302f32322d3232203d3e203631383230.roa (hash: sdHgg6PWq2yC2fMW3izgPppqlQkIopanDofpFEEB+28=)
                          5: 3230312e3133312e3137362e302f32332d3233203d3e203631383230.roa (hash: IBQNxIsGKEwTVKb3hmimDRJzCmRXj9qlU6Mvk5CKs2I=)
                          6: 3230312e3133312e3137382e302f32332d3233203d3e203631383230.roa (hash: ZqAmE9seeIBvSQ0FtQf2hmgDinuYqKWWIn2RCkd9J1U=)
                          7: 323830343a313964303a383030303a3a2f33332d3333203d3e203631383230.roa (hash: l1tnOuXxA4zzo2eaD1amrTfYVO348xXyIrG4hw7MYJg=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.crl
                          rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Jun 2024 19:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:04:ab:38:cd:e4:7f:c4:7d:2e:d0:08:b1:ed:1c:5d:b4:32:1f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC
        Validity
            Not Before: Jun 25 17:52:04 2024 GMT
            Not After : Jun 26 19:39:04 2024 GMT
        Subject: CN=D40110DF383998218C3FF570AA2A8BA03F17A0DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:88:cf:bc:da:4c:44:07:54:2e:49:23:cf:48:
                    1d:c4:ad:47:63:32:c7:98:1c:3d:83:f6:bb:d7:1f:
                    c8:98:a4:cd:25:ad:a1:95:94:53:63:91:a7:0a:ae:
                    51:45:69:57:7b:12:e6:9e:39:a7:06:d4:07:71:c8:
                    41:4c:86:8e:c3:ec:87:c6:eb:29:48:2f:c4:7a:74:
                    8f:4d:c5:72:3b:e3:17:8d:26:d0:7e:45:b6:20:d7:
                    58:2b:87:7d:4f:34:b1:0e:6c:60:7c:62:3b:cd:30:
                    68:13:78:f2:3c:b1:c3:1b:b5:d9:38:7e:6c:b0:39:
                    81:ba:f9:a4:fa:b0:ce:53:7c:2c:1b:22:c5:22:76:
                    51:94:2c:72:df:fc:cf:58:6a:ba:04:25:54:bd:b2:
                    8b:02:ad:ea:bc:f6:44:9b:39:0c:33:d1:59:1d:17:
                    80:12:f5:99:92:98:af:f3:d5:dd:3a:21:ef:76:f6:
                    a5:c3:9b:f0:cc:92:96:28:48:33:0e:e3:18:2f:57:
                    23:25:5a:1e:02:de:4a:91:fa:f2:fd:dc:0b:9d:1a:
                    87:fc:22:a6:a2:b3:8f:e0:14:11:5e:b0:74:75:75:
                    d4:91:46:b8:cd:78:ac:f8:d3:07:88:65:9e:c1:7a:
                    ab:29:be:a7:f5:e2:6e:6c:fe:69:64:37:e3:e1:6c:
                    3b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:01:10:DF:38:39:98:21:8C:3F:F5:70:AA:2A:8B:A0:3F:17:A0:DD
            X509v3 Authority Key Identifier:
                keyid:80:93:B4:BD:8F:E0:7A:F6:9B:F3:09:FB:C4:AA:60:71:DE:9B:95:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:23:74:79:77:b3:f9:87:29:6d:b7:aa:72:bc:bf:e6:a0:c6:
         bb:1c:16:b7:b5:ae:6e:55:7d:ff:91:af:61:8f:45:20:22:bb:
         22:8a:e9:eb:97:b3:ee:7d:77:ae:ed:6b:d7:7c:70:ae:90:39:
         1e:ae:07:3e:0d:82:12:76:e4:5a:1b:27:b6:55:d2:02:4f:5f:
         01:60:2a:58:5b:9a:54:92:91:2d:5e:ba:78:a7:9e:ae:d4:88:
         ff:03:c2:e2:57:e8:39:72:60:e5:13:ed:bd:91:bb:3d:49:66:
         54:c5:9f:27:8f:da:23:fd:8c:93:c8:f7:c5:7e:c1:f1:5e:d6:
         6e:0c:70:b3:ac:3b:87:40:08:5a:27:7d:5a:8f:48:0f:ae:89:
         2d:b8:fd:af:09:0b:93:91:54:3e:35:16:15:bc:af:10:cb:9d:
         73:e7:50:7b:e2:ec:04:ff:10:f4:dd:89:52:d8:a7:1a:53:22:
         b6:1e:a5:39:d8:43:ba:13:e4:b3:64:13:75:1e:57:5c:90:3d:
         30:b4:e6:69:bf:08:31:8e:37:d4:5b:6a:8e:9b:44:59:46:b2:
         f5:a8:57:71:32:e5:b6:92:a5:db:87:36:75:b2:7b:71:63:c0:
         b6:37:9b:4f:aa:de:03:b8:9b:d1:f3:d7:fd:13:65:03:e4:b7:
         90:17:bf:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 22:06:01 2024 by rpki-client on console-ams.rpki-client.org