Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/01170BDC1377EB9F68890189149ACEBC035A036A.mft
File:                     01170BDC1377EB9F68890189149ACEBC035A036A.mft (raw, json)
Hash identifier:          atcGgaG46hQMUQvUPERYRORz1zzAgaxCCmN8hF+ScGc=
Subject key identifier:   3D:B5:B0:11:09:73:6A:D3:17:0D:3F:80:AD:F4:18:D2:66:FB:E9:ED
Authority key identifier: 01:17:0B:DC:13:77:EB:9F:68:89:01:89:14:9A:CE:BC:03:5A:03:6A
Certificate issuer:       /CN=01170BDC1377EB9F68890189149ACEBC035A036A
Certificate serial:       1AFC52C52B78E64798F7A663D57D1D9463667385
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01170BDC1377EB9F68890189149ACEBC035A036A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/01170BDC1377EB9F68890189149ACEBC035A036A.mft
Manifest number:          FA
Signing time:             Sat 23 Nov 2024 05:52:16 +0000
Manifest this update:     Sat 23 Nov 2024 05:47:16 +0000
Manifest next update:     Sun 24 Nov 2024 09:25:16 +0000
Files and hashes:         1: 323830343a323266383a3a2f33322d3332203d3e20323634313335.roa (hash: wIxoEncx2esoRYOwxFuJYUyjJSjj+GMbntY8T5YsgGY=)
                          2: 323830343a323266383a3a2f33332d3333203d3e20323634313335.roa (hash: 502MPXa8ifnwfUTXRwJfx01XKAefup1Y691+0FaASaI=)
                          3: 3133382e39342e36342e302f32322d3232203d3e20323634313335.roa (hash: mP8EdGFSlticSRzUCAE5U00HmeAtVPlw3i2GTWxlJ6o=)
                          4: 3133382e39342e36342e302f32332d3233203d3e20323634313335.roa (hash: GXfGi2bko1OxPBRttr3gm49PaV3HK11CL58IgGV1tUs=)
                          5: 01170BDC1377EB9F68890189149ACEBC035A036A.crl (hash: RTBcwE8v6fBZtlh9QmN+1/35KW1cSJq8dmcZ8hJFg9s=)
                          6: 3133382e39342e36362e302f32332d3233203d3e20323634313335.roa (hash: TU/8gMEviFt3iTnLmHv9y/YHy5xNPhxequjMzjgky1g=)
                          7: 323830343a323266383a383030303a3a2f33332d3333203d3e20323634313335.roa (hash: MYvmI9OOc2J7kkTImKqvREUHxgnf+NDRjR1g7Hzt+Cc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/01170BDC1377EB9F68890189149ACEBC035A036A.crl
                          rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/01170BDC1377EB9F68890189149ACEBC035A036A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01170BDC1377EB9F68890189149ACEBC035A036A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:fc:52:c5:2b:78:e6:47:98:f7:a6:63:d5:7d:1d:94:63:66:73:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01170BDC1377EB9F68890189149ACEBC035A036A
        Validity
            Not Before: Nov 23 05:47:16 2024 GMT
            Not After : Nov 24 09:25:16 2024 GMT
        Subject: CN=3DB5B01109736AD3170D3F80ADF418D266FBE9ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f7:0c:92:41:07:ed:84:fc:f4:b2:50:ca:24:
                    61:9c:bc:f4:48:8f:36:0d:ae:b2:b2:c8:19:34:72:
                    c3:6e:70:d3:e2:b4:b8:c9:bd:6c:0a:6d:f1:f9:07:
                    e4:dd:79:2d:08:db:55:d1:81:42:c0:89:4f:14:f9:
                    cd:32:dc:77:e1:83:03:d8:22:d3:ef:cc:13:7f:48:
                    ab:72:93:cf:d4:f0:87:1a:e0:48:95:45:2e:24:06:
                    74:37:5a:6c:9b:0e:e7:bf:76:d2:88:96:7b:a2:b8:
                    9c:30:67:ad:ba:14:c3:76:80:a5:ef:49:b0:d9:de:
                    87:e4:02:91:bf:3b:38:ad:a2:24:b5:ad:65:42:1f:
                    ee:1c:ca:aa:30:e5:4b:65:07:19:a7:9b:c2:30:c4:
                    5e:d9:9a:cd:fb:cb:90:14:fb:7e:25:b0:b5:5d:ab:
                    2c:dc:25:8b:ef:32:6c:04:0f:8f:89:53:e7:91:5f:
                    e0:22:62:3f:25:82:ed:41:f4:6e:c6:64:fb:5a:37:
                    83:47:fd:c0:02:cf:88:4d:63:b9:fe:db:9d:c1:ea:
                    32:ac:fe:00:6a:fd:92:7a:a3:76:6c:1a:7f:4d:d0:
                    eb:24:76:25:e9:60:82:db:ae:50:45:61:e3:70:94:
                    c6:0b:00:01:78:0c:60:86:e6:7d:89:9f:b9:1a:f7:
                    90:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B5:B0:11:09:73:6A:D3:17:0D:3F:80:AD:F4:18:D2:66:FB:E9:ED
            X509v3 Authority Key Identifier:
                keyid:01:17:0B:DC:13:77:EB:9F:68:89:01:89:14:9A:CE:BC:03:5A:03:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/01170BDC1377EB9F68890189149ACEBC035A036A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01170BDC1377EB9F68890189149ACEBC035A036A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/01170BDC1377EB9F68890189149ACEBC035A036A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b8:20:44:71:1f:d5:7f:d2:01:26:80:fb:de:7b:07:2a:c4:
         93:aa:d6:b9:17:d6:ee:7a:ff:30:0b:67:d0:71:f8:b4:77:6f:
         bb:a9:2f:2b:9b:bb:96:34:55:95:c9:5d:0b:c5:d1:66:b9:55:
         f6:08:7d:06:7a:f5:d2:05:f6:e9:c2:38:fd:b0:5b:b4:20:59:
         19:67:d8:ac:58:70:2c:82:45:c2:4a:90:26:75:4b:37:de:ec:
         cb:60:4d:5b:26:b0:21:90:55:7a:8e:df:bf:0c:e8:36:9e:3c:
         8a:28:2c:cb:e9:cc:ed:8d:d1:9b:4a:25:a7:c8:cb:23:5b:77:
         c2:70:07:85:fe:c3:fb:5c:d2:bf:c2:bb:0a:dd:a7:b1:ee:43:
         95:8f:30:37:25:70:29:cb:cb:da:27:32:fa:bf:d0:71:b7:3c:
         28:0d:99:db:f5:34:1b:57:29:aa:e6:cb:8c:ce:e1:55:98:c0:
         3f:a3:37:48:84:84:c3:88:92:b1:31:e7:cf:52:00:35:2b:16:
         db:18:ca:a7:fc:82:b4:ed:cd:7a:3c:f0:a7:69:31:8b:bc:80:
         ec:54:f7:a9:cf:3a:8a:0b:70:6e:76:f2:1b:ca:47:6b:0f:86:
         1b:7b:29:e1:61:97:e2:a6:d1:d4:51:9e:33:9b:6d:47:25:53:
         56:7f:75:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:31 2024 by rpki-client on console-ams.rpki-client.org