Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft
File:                     0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft (raw, json)
Hash identifier:          jgwW/Afiq7VDRJv4XDBDE5Vb1/5lhnwvYjORwefM284=
Subject key identifier:   EA:65:08:72:6B:82:1C:6A:4D:E7:74:5B:EB:02:26:0D:2A:57:50:CF
Authority key identifier: 0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9
Certificate issuer:       /CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
Certificate serial:       427F25330273311861A0B9A8366DEBB158F143BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft
Manifest number:          0137
Signing time:             Fri 22 Nov 2024 13:40:00 +0000
Manifest this update:     Fri 22 Nov 2024 13:35:00 +0000
Manifest next update:     Sat 23 Nov 2024 13:53:00 +0000
Files and hashes:         1: 323830343a333365633a3a2f33322d3332203d3e20323635343235.roa (hash: L9r+HjAP1DPde/qtrGNSZkTeLON9LEGucH6eekb8+vQ=)
                          2: 3136382e3139352e32382e302f32332d3233203d3e20323635343235.roa (hash: g3xCeLXWmAtgHHuuzyoe1SCvqvS1cUZO0RIruZNP0O8=)
                          3: 0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl (hash: QQqTFK36ybBlD0w3bXcZDWL3SD2LX38/LRMOUGT6W8Q=)
                          4: 3136382e3139352e33312e302f32342d3234203d3e20323635343235.roa (hash: MfsRSn5CC527tcDzjQR02pnRO0vKQOGnCI4OQ8JH1pI=)
                          5: 323830343a333365633a383030303a3a2f33332d3333203d3e20323635343235.roa (hash: Gie+D4mWzeF5sSFoVq6glqXPoBXmdmbcBNua7xAsoXs=)
                          6: 3136382e3139352e32382e302f32342d3234203d3e20323635343235.roa (hash: cGxUyYk9wSba8q1umnYkTdKq0yAE52m2NmixXpxmc6Y=)
                          7: 323830343a333365633a3a2f33332d3333203d3e20323635343235.roa (hash: PR9MOUElEd3c2IZHezOJUeFmakb/jNOJrStDK5SgHhw=)
                          8: 3136382e3139352e33302e302f32332d3233203d3e20323635343235.roa (hash: OWA2DI/lE4Nx5/JNov3fpL8MncJhQwD4iLMrZCagcIc=)
                          9: 3136382e3139352e33302e302f32342d3234203d3e20323635343235.roa (hash: fzViHOTPMxUjOkR8Q+BdII1nEFRlY3ZtIZYs3zp6Ma8=)
                          10: 3136382e3139352e32392e302f32342d3234203d3e20323635343235.roa (hash: HeD+GleOsxdwgP1Fe8fs6BTZKNIkuo4GdyVd8oH8b/0=)
                          11: 3136382e3139352e32382e302f32322d3232203d3e20323635343235.roa (hash: 70Mlg8Uv0wsOGVrsWb0qYWAtT0z9b1C6rtMcEW0cj24=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl
                          rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:7f:25:33:02:73:31:18:61:a0:b9:a8:36:6d:eb:b1:58:f1:43:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
        Validity
            Not Before: Nov 22 13:35:00 2024 GMT
            Not After : Nov 23 13:53:00 2024 GMT
        Subject: CN=EA6508726B821C6A4DE7745BEB02260D2A5750CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:58:96:91:c9:f4:ea:7a:01:45:51:f4:56:7a:
                    5e:3a:c5:a8:4d:5a:30:4c:f5:7b:b5:ff:f3:0e:be:
                    39:ae:04:c4:de:c1:08:fc:23:7e:67:d7:94:4e:f4:
                    d0:59:19:f1:a1:24:14:13:10:35:e4:a1:47:4a:94:
                    f0:39:e6:9f:72:31:92:5c:6c:a7:42:c7:35:fd:88:
                    46:a7:70:99:30:af:ba:47:8a:57:9f:da:c6:04:ce:
                    bf:65:53:3d:dd:aa:0a:5f:31:1b:10:f1:a4:a2:f6:
                    8d:d3:9a:c9:93:ea:2e:2a:8d:ab:3e:dc:23:33:c3:
                    1c:20:c8:f2:59:63:07:28:c8:36:68:8f:b9:5d:cd:
                    53:33:41:f6:c8:fa:88:1a:32:62:a3:e9:ab:81:a3:
                    3c:eb:0d:69:ac:be:ad:b5:d8:2a:c4:0b:f3:f8:ab:
                    75:79:c1:33:a3:11:6b:8d:9c:36:9b:ba:ec:a6:a1:
                    20:9b:ff:5f:24:ee:38:fb:5b:a3:bd:90:3f:6b:d7:
                    41:e9:74:41:8c:26:da:ac:f3:5a:a1:e0:a2:76:03:
                    84:79:6d:3d:0e:89:08:73:d4:ba:68:03:37:05:c5:
                    b3:42:49:24:63:b6:92:fd:e1:8f:8a:fb:3b:2c:c9:
                    00:01:31:98:d8:7f:8e:d8:1c:a0:67:cb:a1:15:d1:
                    a1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:65:08:72:6B:82:1C:6A:4D:E7:74:5B:EB:02:26:0D:2A:57:50:CF
            X509v3 Authority Key Identifier:
                keyid:0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:8a:ed:24:10:4e:7c:b8:a6:9e:5c:b3:14:13:b6:fd:39:78:
         d3:9a:26:6a:c5:1c:ab:ec:89:a6:d3:35:c5:c5:e6:13:c3:9b:
         b4:72:c2:d6:f2:45:de:4f:d7:88:65:31:cc:5b:5e:57:ba:cc:
         3b:bd:29:09:2c:58:a5:9c:a8:d9:24:91:28:23:3d:a3:e5:af:
         2b:2d:84:20:cc:dd:07:21:fc:d5:29:35:64:cc:28:8c:f2:91:
         04:b2:66:a5:16:f4:3f:60:9e:85:8f:41:40:bc:21:b2:51:9d:
         f2:68:7b:5b:67:d4:2a:5c:e2:d2:cf:a0:b8:ba:2c:78:05:ad:
         4a:c5:e7:24:51:67:76:58:58:15:fb:38:54:02:95:3f:df:0a:
         2a:de:f9:41:55:ad:a0:ec:50:3c:07:7e:65:79:b7:1b:12:1f:
         e6:0a:78:83:ef:a0:5b:e0:0e:50:30:6d:bd:ff:f6:0d:d9:e7:
         f9:10:29:c8:8d:86:66:0c:45:f9:a4:1a:e5:de:e3:4f:ef:2b:
         75:fe:a3:0f:6d:d6:a8:49:88:af:a4:fd:b9:98:05:af:d0:15:
         ae:74:b2:73:03:c5:84:50:94:26:62:27:73:73:4f:b4:5f:db:
         7c:d2:13:9a:87:65:5e:16:96:0c:41:c9:97:d4:65:b0:6e:46:
         f6:1f:a5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:37 2024 by rpki-client on console-fra.rpki-client.org