Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.mft
File:                     0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.mft (raw, json)
Hash identifier:          IVMEouRDP+ZFHaM66unYxdPrWVW3Ek4LdyTo7A3mCqU=
Subject key identifier:   39:30:6C:5D:D6:54:60:9D:92:4C:4C:B6:C6:45:96:64:9D:C8:85:4A
Authority key identifier: 0B:DA:57:76:E6:D9:6F:40:CC:3E:4E:7A:CB:15:D5:80:14:44:FF:25
Certificate issuer:       /CN=0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25
Certificate serial:       65F08D9A048569D1BADAA1188844A58EA968A999
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.mft
Manifest number:          1E
Signing time:             Fri 29 Nov 2024 10:02:28 +0000
Manifest this update:     Fri 29 Nov 2024 09:57:28 +0000
Manifest next update:     Sat 30 Nov 2024 12:14:28 +0000
Files and hashes:         1: 0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.crl (hash: HRVKs5iGEMRtHNasap4NG1HkJmKv2ziQADFuJYgaOr0=)
                          2: 3138372e34392e3137362e302f32322d3235203d3e20323634353632.roa (hash: e6e5Lg+QGVSi7TERvy2MUUKY8wIQe1UD2GuznUI7JH4=)
                          3: 323830343a323139303a3a2f33322d3438203d3e20323634353632.roa (hash: VrZuPNAbPVqLyGGFDvEABBLvwHuXnVb6IdEUzbV8zm4=)
                          4: 3136382e3233322e38342e302f32322d3235203d3e20323634353632.roa (hash: IwPy8cJnRbIeNAaOwXPjbV7hLJS0yRkVjKHBPB1d+6w=)
                          5: 3133382e33362e302e302f32322d3235203d3e20323634353632.roa (hash: TIPF3ML7nX64Ev8dDpk41OgYBBU2M889STRTLQ2o/mk=)
                          6: 34352e3137342e3138382e302f32322d3235203d3e20323634353632.roa (hash: 6s36JvyTeHB1Rv+U02USvWCPrDk9cuNiHpjC6zdThQk=)
                          7: 34352e3233392e382e302f32322d3235203d3e20323634353632.roa (hash: s9+YYnGcqro2z6EgY2o9lsyYglwFCCQ1QtyYnqh5dyk=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.crl
                          rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 10:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f0:8d:9a:04:85:69:d1:ba:da:a1:18:88:44:a5:8e:a9:68:a9:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25
        Validity
            Not Before: Nov 29 09:57:28 2024 GMT
            Not After : Nov 30 12:14:28 2024 GMT
        Subject: CN=39306C5DD654609D924C4CB6C64596649DC8854A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f2:fa:00:d6:5e:5f:6d:fd:74:ff:9b:33:12:
                    19:81:7f:f2:c7:8f:8d:94:52:29:ed:b4:04:50:09:
                    75:03:1e:c8:c3:85:c7:11:af:ee:3d:74:89:88:ba:
                    7a:04:fa:c9:76:4c:56:37:bc:cc:69:16:61:f4:64:
                    aa:ec:20:4a:67:e9:80:98:6e:bc:b0:17:dc:9e:8b:
                    62:0a:f0:98:5d:04:09:83:da:33:cf:1e:c0:c6:71:
                    a5:51:e7:c2:39:4e:6d:fc:5d:06:54:3e:69:8c:a6:
                    ea:e4:13:b2:a0:42:f2:e9:7b:6b:48:ba:06:d3:f9:
                    79:f8:d9:3d:a5:f6:74:78:9f:f8:90:6a:a6:dc:d9:
                    88:e6:50:5d:5b:da:52:4f:89:e6:d4:83:25:43:8c:
                    b1:ec:91:26:51:51:7f:19:f4:86:51:0c:ec:80:f2:
                    cc:da:95:35:b2:99:03:49:74:0c:52:b6:9b:50:4f:
                    6a:64:ca:1c:5f:e1:06:d7:8c:e2:bd:25:73:40:41:
                    69:6d:d1:9d:56:fc:bf:3e:0a:7b:2c:30:6e:a5:e1:
                    db:e6:ae:a3:74:29:7e:f2:e0:81:7a:2d:fc:a8:59:
                    e2:1b:d4:ee:13:ba:0f:2c:fa:ee:89:f5:aa:f0:07:
                    21:24:67:e6:c5:a8:7c:eb:de:47:6d:5c:2e:26:19:
                    b1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:30:6C:5D:D6:54:60:9D:92:4C:4C:B6:C6:45:96:64:9D:C8:85:4A
            X509v3 Authority Key Identifier:
                keyid:0B:DA:57:76:E6:D9:6F:40:CC:3E:4E:7A:CB:15:D5:80:14:44:FF:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:20:d3:ba:7b:78:85:7e:30:d5:91:fd:8a:23:be:0c:8d:4a:
         b3:50:c3:95:17:72:6b:14:01:91:08:c8:cc:9a:6a:2e:78:6a:
         a9:84:34:58:db:ad:a0:9d:3e:e1:b9:bb:f8:d4:0b:70:85:a6:
         4f:89:e5:9a:01:20:fb:93:f9:04:51:36:3a:5f:da:65:75:20:
         1a:b4:89:b6:7e:f8:b1:e8:56:06:4c:ab:e8:d6:eb:be:ae:fa:
         b1:ee:bf:d3:a6:aa:ae:8b:e4:94:9d:0a:73:e8:d9:4a:a0:9f:
         5d:f0:54:5f:11:1d:5a:11:35:93:a1:99:b9:5b:67:e1:58:41:
         3a:9f:17:e1:c0:28:67:b8:87:14:52:41:1c:a9:68:db:ae:cc:
         f4:5b:52:ca:91:1c:14:be:a4:a4:49:b4:4d:87:2e:50:12:e9:
         c7:90:15:41:d2:ee:39:0a:72:75:da:7c:ac:cc:8d:80:80:24:
         17:ef:63:1a:c2:39:ff:82:d2:3f:b9:9d:70:7c:5a:0c:68:d5:
         d9:40:2e:25:94:7d:4b:79:2b:d9:29:f3:31:4d:75:13:70:e5:
         64:0e:d7:f0:18:59:da:01:a8:c5:cd:eb:e5:72:ee:f7:06:91:
         dd:c1:5f:1e:77:47:6e:23:19:ad:7b:06:fb:de:86:fa:b3:e1:
         67:10:4b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 10:38:36 2024 by rpki-client on console-fra.rpki-client.org