Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft
File:                     406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft (raw, json)
Hash identifier:          boD3A2zMXAz+gAIYzv0wVLJWQ0LO+oCIQqKIYyFxRNU=
Subject key identifier:   3F:11:C8:B8:BB:FE:01:BC:40:69:1D:2A:2F:80:96:0F:C8:98:DE:41
Authority key identifier: 40:6B:00:D5:B6:60:F6:EE:C5:C8:41:4F:A0:F0:B7:FF:3E:C5:76:A3
Certificate issuer:       /CN=406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3
Certificate serial:       3A894F9F3728B4F7DDB748939659D65557A66742
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft
Manifest number:          0137
Signing time:             Sat 23 Nov 2024 09:02:10 +0000
Manifest this update:     Sat 23 Nov 2024 08:57:10 +0000
Manifest next update:     Sun 24 Nov 2024 12:50:10 +0000
Files and hashes:         1: 406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.crl (hash: Ve0/ZhKiwYyOkmYSO23p2d3lObPu09RQT7qKle8aPz0=)
                          2: 323830343a386566303a3a2f33322d3430203d3e20323733343537.roa (hash: Xncr9xp+DObMtYE7sJuueNeAvyVjLBKQKWtbND4qYkE=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.crl
                          rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:89:4f:9f:37:28:b4:f7:dd:b7:48:93:96:59:d6:55:57:a6:67:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3
        Validity
            Not Before: Nov 23 08:57:10 2024 GMT
            Not After : Nov 24 12:50:10 2024 GMT
        Subject: CN=3F11C8B8BBFE01BC40691D2A2F80960FC898DE41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8f:e6:68:46:4d:67:fd:1c:db:72:c9:dc:33:
                    fa:d9:ff:6e:80:0e:08:b9:bc:51:4b:f2:7c:5a:83:
                    2b:ba:a7:33:3d:7b:18:77:39:42:a0:9d:ae:92:14:
                    19:f1:26:65:b7:8e:97:97:98:05:50:c9:e2:be:4a:
                    81:82:ef:9a:40:31:b5:3c:79:eb:04:0c:3e:2f:29:
                    5b:a7:f6:27:5b:99:14:a1:4f:42:b4:aa:26:31:8f:
                    08:4a:09:d1:a6:35:ff:92:37:96:d9:d1:ae:30:f9:
                    5f:f0:b3:e5:2b:e9:43:9a:80:62:11:8a:30:25:2f:
                    ff:aa:bf:75:32:0d:79:b4:52:8d:a5:ca:da:a9:7a:
                    4d:59:16:23:25:4d:2b:4a:38:a0:d8:ab:4b:02:04:
                    70:15:69:cf:45:0f:41:db:8c:1f:51:67:b2:38:58:
                    0e:42:02:24:50:6a:05:0e:32:36:8f:7e:e6:62:80:
                    e5:2f:ea:e1:f1:6e:6e:90:f7:60:89:fc:3a:bf:26:
                    02:6e:21:fe:b4:7b:2c:75:65:ab:79:0a:9c:c8:6b:
                    f0:92:c0:31:f9:0b:2e:5e:1b:00:1c:9f:2f:87:74:
                    17:0b:f5:d0:72:03:cd:53:67:42:ea:b0:2c:ad:7c:
                    27:4d:bf:c0:3d:2a:cd:66:01:35:fb:18:8a:c1:7d:
                    a5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:11:C8:B8:BB:FE:01:BC:40:69:1D:2A:2F:80:96:0F:C8:98:DE:41
            X509v3 Authority Key Identifier:
                keyid:40:6B:00:D5:B6:60:F6:EE:C5:C8:41:4F:A0:F0:B7:FF:3E:C5:76:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:cd:7a:c4:8b:a3:e1:9c:0e:aa:86:1a:53:8a:e3:d3:c0:8e:
         80:f2:36:3e:b1:65:42:cc:7d:f8:05:a1:42:7f:90:57:03:7d:
         a0:a9:9d:0b:0e:9e:85:f3:5f:c7:a6:83:bf:fe:b6:0a:67:ff:
         68:d4:70:21:f7:5d:65:33:b4:6d:23:2f:7e:33:e9:ca:d1:b3:
         4c:ff:02:ac:8e:8c:76:26:b7:84:64:ea:25:6e:62:b9:1a:9c:
         27:27:80:66:41:cd:d5:42:46:f5:26:5d:28:ed:37:7f:51:46:
         7d:f9:20:60:df:97:01:b9:ef:4c:57:7e:06:c6:5d:97:a0:48:
         c2:1e:ac:76:be:40:3c:35:ad:09:82:b7:42:6f:bb:92:af:3a:
         3d:d8:f3:71:ea:95:6a:09:97:ae:fc:d7:56:9f:eb:41:34:80:
         af:27:91:58:88:55:c5:5a:36:c7:ec:61:48:82:1d:3a:ca:d0:
         0c:1a:f7:8e:da:85:72:5e:64:26:60:15:40:c2:40:35:f2:c3:
         01:ff:1a:53:49:67:cf:11:eb:dc:40:40:a8:10:34:58:9a:87:
         da:4e:13:9f:6d:0a:b0:34:55:12:64:2b:9d:b0:f2:2a:c4:cc:
         28:de:6a:fb:61:50:40:8c:2c:be:1c:45:4e:9f:25:2e:1e:0f:
         50:be:9c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:32:40 2024 by rpki-client on console-ams.rpki-client.org