Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
File:                     2942F22000F3A7315703CF3B13100D76386FCAD1.mft (raw, json)
Hash identifier:          d3KSEBifb3rcy4hbX29IiYPZPeor8WQdt2FFoKBD7Mk=
Subject key identifier:   B5:4E:0C:77:56:14:E8:F3:C6:2F:E7:84:D4:56:92:C7:AD:0E:67:AD
Authority key identifier: 29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1
Certificate issuer:       /CN=2942F22000F3A7315703CF3B13100D76386FCAD1
Certificate serial:       6D596386047B9FF395867850DC6607E042E7D04E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
Manifest number:          5F
Signing time:             Fri 22 Nov 2024 00:31:31 +0000
Manifest this update:     Fri 22 Nov 2024 00:26:31 +0000
Manifest next update:     Sat 23 Nov 2024 03:07:31 +0000
Files and hashes:         1: 3138362e3235302e3137322e302f32322d3332203d3e203533323138.roa (hash: OKriB/xUYr/t83s3xfIf583Y0pz7ZlYiKUb4whzpbos=)
                          2: 2942F22000F3A7315703CF3B13100D76386FCAD1.crl (hash: /5MKy/fA8IU8EyE0FgSe9354/akZ/L1KdumA9NddLPk=)
                          3: 3133382e3138362e3230342e302f32322d3332203d3e203533323138.roa (hash: HzuIWR1exMvAD50uoakB8kXvJ8P6ZYrZrw6m+GKyIHU=)
                          4: 3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa (hash: VBr4jF3N4Wx9r0R0vor7T8MyPeBPPygT03dt8vmP4/E=)
                          5: 323830343a6666343a3a2f33322d313238203d3e203533323138.roa (hash: tnq1vBxIcrDoZjcoVFNhre3fHKZMaMm8oRp5pwoZIL4=)
                          6: 3136382e3138312e3131362e302f32322d3332203d3e203533323138.roa (hash: cMhOk1gqvGKJ43ZIN08FcrdbKk+2jpoPyVnj2SYGVQk=)
                          7: 3139312e352e3232302e302f32322d3332203d3e203533323138.roa (hash: 0wZwBdWsHnVkpxMrkgatFHVIycknH7b2NpcQFFf45JM=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl
                          rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:59:63:86:04:7b:9f:f3:95:86:78:50:dc:66:07:e0:42:e7:d0:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2942F22000F3A7315703CF3B13100D76386FCAD1
        Validity
            Not Before: Nov 22 00:26:31 2024 GMT
            Not After : Nov 23 03:07:31 2024 GMT
        Subject: CN=B54E0C775614E8F3C62FE784D45692C7AD0E67AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7a:de:05:0d:b3:8b:5d:56:80:43:32:08:eb:
                    7a:9b:a7:da:72:4a:36:02:57:e5:9d:45:c6:45:33:
                    c0:6a:41:3f:77:31:b0:48:67:27:9d:2d:be:4c:6c:
                    2c:db:b5:63:44:af:df:51:0f:e5:c4:61:6f:61:b6:
                    2e:f7:ba:7c:1d:2f:8f:fd:7e:e8:13:98:53:ac:a8:
                    08:39:ea:45:8e:bf:be:11:80:78:d8:78:7a:20:56:
                    e4:ea:7e:6d:52:ce:a4:20:b6:10:db:a9:30:8a:e6:
                    c0:45:8b:7c:a3:1c:2f:92:89:b8:04:7b:4d:f0:b8:
                    d7:03:0d:7e:19:20:72:c8:32:59:2a:7c:83:4b:5e:
                    4f:15:01:f7:35:e9:77:42:30:17:87:e8:ad:d4:62:
                    39:e5:9e:71:07:d6:19:8b:20:fc:79:b5:1b:f8:ae:
                    b4:f3:80:ae:f9:ba:6d:f3:1d:92:07:a5:e7:36:bc:
                    52:0c:b7:6f:96:27:04:a1:c5:35:35:09:ce:52:bd:
                    39:3d:58:c4:7d:df:b4:f4:f3:fb:03:fc:34:a3:6f:
                    bb:a6:eb:6f:cd:d5:fd:10:4b:5f:cf:ba:96:60:69:
                    4d:47:c7:a2:13:26:24:a7:49:71:bb:ee:47:4d:0e:
                    05:34:17:c3:d6:dd:96:09:dc:43:f8:03:74:0a:35:
                    69:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:4E:0C:77:56:14:E8:F3:C6:2F:E7:84:D4:56:92:C7:AD:0E:67:AD
            X509v3 Authority Key Identifier:
                keyid:29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:14:bb:76:a4:4a:d2:ce:5c:09:95:a1:a7:5f:68:6e:76:2a:
         e7:cd:d3:fe:ec:cc:e7:98:f9:eb:fc:c5:61:4a:c8:d8:58:aa:
         66:07:c5:6e:40:2b:05:99:a0:fd:5c:28:6a:0e:e3:5c:15:d8:
         73:1d:01:c0:ab:fc:9f:d5:6a:67:98:86:42:fe:64:28:4f:bd:
         f2:0f:bb:01:b1:66:d9:3a:23:c2:4b:84:89:2b:76:a1:43:21:
         cf:05:51:95:dc:46:2b:39:35:6e:2f:12:6f:be:a3:61:5e:04:
         e9:ab:40:48:6d:82:eb:15:c6:ac:0b:7c:81:aa:0d:af:3d:56:
         b3:d7:55:14:7e:5d:31:9a:b3:27:79:6f:66:2e:21:84:c3:57:
         14:26:c1:1c:d5:81:7d:8f:16:fa:9f:45:76:28:bf:9d:6a:b9:
         bd:9f:43:5e:c2:da:b6:67:9b:7c:71:e1:9c:20:89:71:4f:15:
         6d:53:45:bc:6f:71:6e:fe:b3:09:05:2d:ae:05:2a:68:6e:85:
         a2:b8:e6:14:bf:53:b2:ea:c4:f9:7c:e9:f0:b0:ff:5f:96:28:
         a1:01:da:c1:f3:93:e5:ca:5e:35:76:69:f7:c0:bb:7b:6d:f7:
         16:41:a9:3d:df:69:6f:db:2b:a1:3d:7a:2f:08:78:62:d2:d2:
         ed:d7:75:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:08 2024 by rpki-client on console-ams.rpki-client.org