Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.mft
File:                     3AFD4BA8C10F1B3F69EC684228D490292CC7C736.mft (raw, json)
Hash identifier:          sQ2soNTPOGNL1Vu9wE+yQiPOkzPq0pT2RxfxJrmTA6g=
Subject key identifier:   1A:51:C5:2F:BF:DC:DF:34:0A:D7:48:B7:68:67:94:AA:7C:B7:EE:71
Authority key identifier: 3A:FD:4B:A8:C1:0F:1B:3F:69:EC:68:42:28:D4:90:29:2C:C7:C7:36
Certificate issuer:       /CN=3AFD4BA8C10F1B3F69EC684228D490292CC7C736
Certificate serial:       1A3F36A1072DAF0F6CCC604571BF0BC7F21F566B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.mft
Manifest number:          81
Signing time:             Sat 23 Nov 2024 07:05:37 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:37 +0000
Manifest next update:     Sun 24 Nov 2024 07:42:37 +0000
Files and hashes:         1: 323830343a383338383a3a2f34382d3438203d3e20323638383433.roa (hash: ps9FFVa0pbwR7Sm2zkYqf1DkcygY8HvK8Nf+CkI9fxo=)
                          2: 3AFD4BA8C10F1B3F69EC684228D490292CC7C736.crl (hash: TEIIi2APDtCvM+hIpF5TupBKxKFqRs8M5sna8Vi5xqs=)
                          3: 323830343a383338383a383030373a3a2f34382d3438203d3e20323638383433.roa (hash: 5+CIZ9LvG1wTzE9Xsnyw5i3rHDWA0Bh/la3ly+78VCQ=)
                          4: 34352e3137332e34362e302f32342d3234203d3e20323638383433.roa (hash: na1+EpulGfwXVRRsP+djXyhwDsWI5rVKJzeSH8O39Tc=)
                          5: 323830343a383338383a343030303a3a2f34382d3438203d3e20323638383433.roa (hash: 6kRHbE1h8q7d5tsWVXHgr8te1HuPLygJSRch5payQZE=)
                          6: 323830343a383338383a383030393a3a2f34382d3438203d3e20323638383433.roa (hash: xJRm+mPk4S8dtClnu8BwuaAY6xRFF8wo6KWJpQ9uF5w=)
                          7: 323830343a383338383a383030323a3a2f34382d3438203d3e20323638383433.roa (hash: CzdiL3MepT+Jk0RSkaPSPAV1WPqZgQyNhS2B0m2ufF4=)
                          8: 323830343a383338383a383030313a3a2f34382d3438203d3e20323638383433.roa (hash: O7lRxtgZl8BapuqLa5UPSp0xWtN5Trehm8J2qxloqwk=)
                          9: 323830343a383338383a383030343a3a2f34382d3438203d3e20323638383433.roa (hash: Nwf4Wx/U9RN9PQg2m7FLd1WdJCMfGvOKYyNg01RIOs4=)
                          10: 323830343a383338383a383030303a3a2f34382d3438203d3e20323638383433.roa (hash: 1/92VkU/7nnTUlr6lRHYZVj14qJ+RvBmMjXqR37XG+o=)
                          11: 323830343a383338383a383030353a3a2f34382d3438203d3e20323638383433.roa (hash: Eo8eJ/uT4h+fJ/Nv8I+Vvs/jjdWTMtmz5fYmUPl5lyY=)
                          12: 323830343a383338383a383030383a3a2f34382d3438203d3e20323638383433.roa (hash: fdpQYIJVmTEiBT+E0adx3TSm7eLU9HjIzB5XOSVCmhY=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.crl
                          rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:3f:36:a1:07:2d:af:0f:6c:cc:60:45:71:bf:0b:c7:f2:1f:56:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AFD4BA8C10F1B3F69EC684228D490292CC7C736
        Validity
            Not Before: Nov 23 07:00:37 2024 GMT
            Not After : Nov 24 07:42:37 2024 GMT
        Subject: CN=1A51C52FBFDCDF340AD748B7686794AA7CB7EE71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:16:38:ba:41:1c:06:d3:e5:3e:5b:94:02:20:
                    fb:a2:21:40:28:c0:f3:1c:fe:ca:bc:d2:d1:10:fb:
                    f6:15:69:fd:c0:f7:b2:75:d9:de:2f:43:a4:62:01:
                    40:ad:e7:df:2c:20:1d:f7:88:a5:79:50:0d:19:e5:
                    d7:69:d3:56:46:4f:67:76:44:9e:d5:54:99:9d:f0:
                    c2:e5:73:c4:d3:15:2a:e3:16:4f:dc:1c:74:d6:ad:
                    2d:4d:92:d4:e7:9a:b4:e4:06:67:1e:e1:d4:df:76:
                    df:63:bc:b4:c2:f8:5f:38:e2:71:d8:f8:50:a7:37:
                    04:01:d8:32:72:b3:34:c9:4b:7a:bf:d9:aa:c6:31:
                    67:af:fd:9c:1f:bd:b9:97:59:6c:c7:b3:ba:54:f7:
                    76:85:0f:0d:05:fb:2d:1b:96:ae:2c:c9:23:ad:01:
                    6c:9c:a2:54:ff:37:b6:11:db:89:fd:2f:10:ed:60:
                    e5:26:14:01:a6:f3:77:b9:7e:7b:d0:23:9a:39:3e:
                    42:df:12:1d:5a:30:68:90:0c:2f:01:fc:d1:0b:e6:
                    f4:86:f8:2e:29:ea:80:ba:6b:83:31:ad:23:c7:6b:
                    93:55:e6:ab:6e:67:00:ea:c7:e5:fc:ea:e8:7a:f7:
                    ad:9e:f8:fc:50:51:03:3f:0d:75:6d:b9:5d:90:d3:
                    8d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:51:C5:2F:BF:DC:DF:34:0A:D7:48:B7:68:67:94:AA:7C:B7:EE:71
            X509v3 Authority Key Identifier:
                keyid:3A:FD:4B:A8:C1:0F:1B:3F:69:EC:68:42:28:D4:90:29:2C:C7:C7:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:59:28:00:12:25:4a:08:88:ef:df:54:5e:15:8d:6c:a9:2c:
         ca:b6:e8:c2:aa:a0:43:1f:02:c7:64:1b:6d:ab:0f:21:c9:7c:
         66:72:e8:f9:c5:ad:32:d7:30:37:9c:d9:d7:db:c7:c8:66:09:
         ec:8d:d4:26:61:3e:f0:57:fc:c8:73:a3:57:a0:d9:b6:e7:64:
         b8:4c:14:c9:e5:91:4e:43:89:e1:50:10:1b:96:00:6c:0d:64:
         e7:89:35:67:e4:8e:3d:24:94:ac:e0:2a:84:02:13:a3:15:1f:
         40:ad:56:76:31:8c:f2:9f:4e:09:dc:cc:ef:39:34:53:21:c2:
         1f:08:e0:d2:78:6d:27:5e:eb:12:b8:37:3e:ea:bd:21:a7:7b:
         22:30:f7:2c:37:03:ec:c8:ea:12:5e:d0:9f:1e:13:72:cc:8e:
         67:8f:88:6e:36:7d:c6:36:e2:36:74:90:44:77:a9:fe:7b:dd:
         25:5c:8d:a2:9e:83:b2:ba:36:87:2d:38:e9:c8:4e:b5:22:1b:
         de:09:2c:ee:3b:e3:3f:35:ce:b7:5f:5e:de:77:46:65:e9:9f:
         b2:1b:6f:05:44:06:8f:70:0c:40:bf:83:a3:7d:dd:91:34:4a:
         10:86:8b:ae:ee:f2:52:c1:63:c5:8a:0d:50:20:92:37:30:25:
         bf:01:14:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:03 2024 by rpki-client on console-ams.rpki-client.org