Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.mft
File:                     217AAC1E0D7B6D92662F103316D5D4E67033B9F7.mft (raw, json)
Hash identifier:          5JymPdBB9EjVHdaGPT7phdbBe7GjzHBzKoqKZDYRr5M=
Subject key identifier:   DC:CF:28:2D:26:8D:05:51:15:89:93:44:C2:B3:08:48:FB:66:FE:B9
Authority key identifier: 21:7A:AC:1E:0D:7B:6D:92:66:2F:10:33:16:D5:D4:E6:70:33:B9:F7
Certificate issuer:       /CN=217AAC1E0D7B6D92662F103316D5D4E67033B9F7
Certificate serial:       0A66B4FA99F3E4C983B755730F82381BB5D72401
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.mft
Manifest number:          0136
Signing time:             Sat 23 Nov 2024 00:57:45 +0000
Manifest this update:     Sat 23 Nov 2024 00:52:45 +0000
Manifest next update:     Sun 24 Nov 2024 03:57:45 +0000
Files and hashes:         1: 323830343a3832383a633133303a3a2f34372d3437203d3e20323632333534.roa (hash: 6ijO507+sZ2ZrTQwqf6pSQ5IHJAfvoS1SWDnC9yuqOc=)
                          2: 323830343a3832383a663133323a3a2f34372d3437203d3e20323632333534.roa (hash: 25QPrTkTyNE4sNMg2xDohq4lBz+JtRxRK30AErcrbu4=)
                          3: 323830343a3832383a39303a3a2f34382d3438203d3e20323632333534.roa (hash: 8KTUOKxuKiKp/+H9v7IDsliWhhbAynHP/nYvwLKCszc=)
                          4: 217AAC1E0D7B6D92662F103316D5D4E67033B9F7.crl (hash: 1CnsZD5PTqmxZ7t/3aeE/RGsiAo3Lvi1Z+0IDXWEUeI=)
                          5: 323830343a3832383a3a2f33322d3332203d3e20323632333534.roa (hash: bAVsxOfZGqR6LGB/Zg3ylGzJq5odkLzSQVsLNkI8rUQ=)
                          6: 323830343a3832383a633233303a3a2f34372d3437203d3e20323632333534.roa (hash: usDqXKuA4N7nTleFhs4PLMd6o3/twWN9u6BUGKHD154=)
                          7: 323830343a3832383a663233323a3a2f34372d3437203d3e20323632333534.roa (hash: KgWQZXSa90YMdnv/EBiPZk+1bK+mOhqQu9nQaiG6nX8=)
                          8: 3136382e3233322e36382e302f32322d3234203d3e20323632333534.roa (hash: XZFyHxZ+I38AufSVNiyewYIwYCcOxTARs8536PGhmPg=)
                          9: 323830343a3832383a663233303a3a2f34372d3437203d3e20323632333534.roa (hash: /y8lDtYQAXwZFSAWGrDtQYVY7Ak16Aw9EiD34iAhS0A=)
                          10: 3133312e3130302e36302e302f32322d3234203d3e20323632333534.roa (hash: b1RuoYEk3sJ1OjNblTOxTdsbnD5FkWON7RyLieYNfoA=)
                          11: 3133382e3138362e3130382e302f32322d3234203d3e20323632333534.roa (hash: LwMkcQ8w2W96Jyw0ubwwiitYL/4/45JwsJ0dkiC+TwU=)
                          12: 3137372e3132352e3231322e302f32322d3234203d3e20323632333534.roa (hash: KM42Ko20QbYP5BP7nM7V0D3Wu4OSYLIyBtxrEk/qlMU=)
                          13: 323830343a3832383a663133303a3a2f34372d3437203d3e20323632333534.roa (hash: 5hBeOWPRkWepzgusJcKSTKRHdmIwf4tbUFohQi2474I=)
                          14: 3137372e3132352e3230382e302f32322d3234203d3e20323632333534.roa (hash: lHXFsQFU/dH5ZkgwlOlPYyQwqVEdQJf51MPB5hCnefo=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.crl
                          rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:66:b4:fa:99:f3:e4:c9:83:b7:55:73:0f:82:38:1b:b5:d7:24:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=217AAC1E0D7B6D92662F103316D5D4E67033B9F7
        Validity
            Not Before: Nov 23 00:52:45 2024 GMT
            Not After : Nov 24 03:57:45 2024 GMT
        Subject: CN=DCCF282D268D055115899344C2B30848FB66FEB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5c:ab:00:c0:db:7e:b3:87:3c:0d:41:ee:d3:
                    c6:84:da:94:90:c9:6d:f7:70:6d:e1:f6:33:f1:4a:
                    85:cb:a7:6e:58:20:06:06:ce:97:34:ac:bb:8e:b0:
                    4e:45:f5:2b:74:c4:10:aa:30:e9:e2:f4:a9:5d:11:
                    6f:29:2a:d4:b2:11:cb:cc:38:4c:94:5a:3c:cd:45:
                    07:73:47:26:47:e6:21:50:7a:b4:44:46:d3:1a:d1:
                    f7:3b:16:c4:e9:d1:4c:51:42:f1:5d:f4:f5:0c:b7:
                    59:be:70:ce:ce:20:09:61:f6:ab:fd:00:35:cb:ed:
                    bd:13:28:06:16:d3:52:04:2e:11:1c:bb:b2:1b:74:
                    95:a2:ef:e9:dc:5f:1f:ef:43:09:2f:d9:45:98:01:
                    bb:22:95:be:2b:ea:06:08:1f:f1:e8:2e:85:47:30:
                    e1:e3:ae:66:89:a7:01:a9:a3:9a:bc:41:37:ed:07:
                    bc:e2:7a:82:46:22:c8:89:db:f8:e8:af:74:07:13:
                    42:4d:49:a4:92:e0:4e:eb:a6:75:74:de:9d:28:c8:
                    09:0a:37:cd:c9:8a:b4:7f:7b:87:e0:b1:5b:b3:8b:
                    4b:3a:a9:94:7b:68:3f:a3:64:dc:a0:6d:37:86:25:
                    ce:79:37:90:76:ff:1d:7f:7d:56:d3:47:2c:fd:29:
                    7a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CF:28:2D:26:8D:05:51:15:89:93:44:C2:B3:08:48:FB:66:FE:B9
            X509v3 Authority Key Identifier:
                keyid:21:7A:AC:1E:0D:7B:6D:92:66:2F:10:33:16:D5:D4:E6:70:33:B9:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:ae:9a:bc:26:5f:ac:41:1d:bd:c6:dc:5b:4d:7b:cd:2c:30:
         c9:ce:df:32:03:ed:30:ba:88:ce:b7:6e:20:43:e6:96:b6:46:
         00:f3:81:39:9d:ed:a3:1b:a7:dd:e4:db:49:a1:06:4d:a9:2f:
         12:24:ca:bc:47:e4:20:36:f3:e4:5f:93:57:b3:7d:2d:12:9f:
         68:de:5e:9b:62:ac:15:9a:72:5d:9b:f8:b1:52:85:ef:7f:c4:
         92:23:72:b5:df:d1:6a:51:d5:7d:54:f8:15:52:13:50:a8:f5:
         e5:6c:8c:ea:79:a1:0b:72:b8:05:c1:e9:5c:f7:b8:91:c5:e7:
         b2:71:dd:9a:38:04:86:98:e0:21:29:ec:8f:a1:4f:c0:b0:ac:
         2d:e1:15:18:6d:aa:a3:80:82:3d:3f:2e:86:31:8d:ab:fe:52:
         af:05:df:fe:19:05:44:94:2e:79:16:d9:d3:00:08:e2:5f:b9:
         96:87:46:61:3d:5e:7a:d0:3a:c2:b7:ae:be:51:6e:02:dc:0e:
         88:3c:7c:1f:41:75:08:13:47:84:b6:11:e6:54:ea:f9:bb:e6:
         b0:6a:b5:20:17:8a:94:a8:fa:a5:6a:11:57:1c:69:b6:bd:f8:
         85:51:9b:12:f6:c4:fd:07:04:2f:da:67:23:42:42:1b:6b:57:
         a3:0e:bc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:04 2024 by rpki-client on console-fra.rpki-client.org