Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft
File:                     A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft (raw, json)
Hash identifier:          KaSJUrGIjaNThOeeYl4iA+ynxxD3RfKFZTdOx3gBfWs=
Subject key identifier:   A9:EE:25:92:84:9B:8F:05:9A:0D:48:64:07:10:6F:48:52:FE:99:82
Authority key identifier: A3:F1:68:F0:E5:0A:90:E4:1A:73:6F:E0:D5:FA:91:97:65:E1:B5:E6
Certificate issuer:       /CN=A3F168F0E50A90E41A736FE0D5FA919765E1B5E6
Certificate serial:       2BD24C865AF17B11319F82C21577D79894A14B64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft
Manifest number:          0138
Signing time:             Fri 22 Nov 2024 11:19:55 +0000
Manifest this update:     Fri 22 Nov 2024 11:14:55 +0000
Manifest next update:     Sat 23 Nov 2024 15:18:55 +0000
Files and hashes:         1: A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl (hash: P104qa3xw0zyUs8RZm0o7JQCuZoVp5Zs4Tl4Hihkk8U=)
                          2: 323830343a313634633a3a2f33322d3332203d3e20323633323830.roa (hash: 6QHWyxhucWmbVKZkZrTvKbnDcFohnYSh1QyJpmmnpX4=)
                          3: 323830343a313634633a6661633a3a2f34382d3438203d3e20323633323830.roa (hash: eW6rCFEmso0Az7hT1sdqD54rbXh4xhhfibqwIXCwOxk=)
                          4: 323830343a313634633a66613a3a2f34382d3438203d3e20323633323830.roa (hash: MQTI7hY8NoBfpXSB8cHEi6gJcU4q0KXACrcrmt6URyk=)
                          5: 323830343a313634633a616263623a3a2f34382d3438203d3e20323633323830.roa (hash: crMW9rz9qv9GGTShURhjMRWeUD/ri6pFIHUuhRsgAdA=)
                          6: 323830343a313634633a63623a3a2f34382d3438203d3e20323633323830.roa (hash: E8sU/NCx5/8U/Qi0Dw5w8wEhWNgcMsQQhndipiLj8n0=)
                          7: 3137392e3130392e38382e302f32312d3234203d3e20323633323830.roa (hash: RLeUBlsKVuFPiXo4WGKbhkC403lFtQ8sabnQi0ciVbc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl
                          rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:18:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d2:4c:86:5a:f1:7b:11:31:9f:82:c2:15:77:d7:98:94:a1:4b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3F168F0E50A90E41A736FE0D5FA919765E1B5E6
        Validity
            Not Before: Nov 22 11:14:55 2024 GMT
            Not After : Nov 23 15:18:55 2024 GMT
        Subject: CN=A9EE2592849B8F059A0D486407106F4852FE9982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:bd:42:78:c7:81:b0:95:d6:47:81:d6:c1:3a:
                    d8:0d:2d:74:08:38:f8:78:ca:53:db:ce:05:69:ed:
                    0c:3f:ce:27:80:b2:4b:80:84:cb:81:98:3c:e4:d4:
                    7f:10:a4:b1:13:7d:2f:c9:99:07:5c:22:77:c4:a0:
                    fe:b8:f2:a9:56:74:ed:65:fd:db:10:0a:05:b5:1b:
                    9a:03:1e:c2:6e:e3:4b:32:ba:97:01:bd:f5:ba:db:
                    92:bf:46:9b:b3:fe:f6:51:f3:3b:5a:10:64:18:da:
                    91:f7:f0:43:ed:19:45:48:c0:ff:aa:3e:71:7c:2e:
                    9c:06:11:33:3c:2b:c4:5b:d8:e5:93:b9:b9:f0:5a:
                    c8:f6:07:68:3e:73:b2:a8:40:94:00:da:61:f0:ff:
                    26:37:85:69:f3:6c:00:07:b8:15:9f:cf:37:33:fc:
                    67:1b:c0:6b:c0:e9:fe:c1:0d:c6:de:89:08:bd:bb:
                    91:7d:a8:dd:45:61:85:75:a9:f0:5b:02:15:01:80:
                    e8:52:7f:c4:7b:f5:83:84:b0:75:14:63:40:d6:7c:
                    96:fa:a4:cd:78:24:e0:d1:dc:f4:a1:84:85:8f:3c:
                    b3:3e:cb:37:38:0f:4b:15:63:91:b4:89:e5:02:0d:
                    21:2b:9c:20:f0:37:2a:51:aa:34:2a:70:9b:f2:40:
                    1a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EE:25:92:84:9B:8F:05:9A:0D:48:64:07:10:6F:48:52:FE:99:82
            X509v3 Authority Key Identifier:
                keyid:A3:F1:68:F0:E5:0A:90:E4:1A:73:6F:E0:D5:FA:91:97:65:E1:B5:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:b8:99:0a:e2:8c:f5:5e:e1:87:09:27:42:97:8f:30:72:a0:
         36:39:23:a4:f2:36:c0:85:a0:31:d0:27:66:d4:e8:62:fd:31:
         dc:c0:7b:f5:ba:93:0d:3c:2f:bd:71:a6:b4:ec:77:30:76:f9:
         01:ff:98:4e:c1:8b:e8:a7:24:e0:6e:5a:8f:7c:66:ae:71:59:
         ec:0a:2d:0a:17:4b:d0:85:6f:12:67:86:15:4f:f5:a8:cc:d9:
         4d:a5:73:d6:40:b2:b0:32:de:01:58:c0:7b:1c:c7:f9:52:f6:
         35:fe:6c:ec:5e:8a:19:6f:42:8b:43:f8:e1:33:f4:c3:0e:e4:
         32:d3:69:33:d9:28:ae:86:79:1d:cb:c8:77:cd:21:8f:f9:53:
         6c:12:15:a2:c3:4b:95:30:bf:f5:23:5e:3a:bc:6e:50:fa:e0:
         91:d5:4f:b5:60:b9:ca:df:a8:6f:f7:70:ca:82:a3:3f:ea:0f:
         c3:db:c9:a0:fa:71:0c:90:e4:2f:99:b1:99:8a:57:a9:c3:9d:
         ae:34:90:4d:e7:5d:2a:ef:01:9e:ce:56:0a:21:69:54:f5:85:
         8d:a5:88:f5:e5:eb:ed:e9:9c:98:89:0f:1c:b9:af:91:8a:5f:
         89:f4:1f:8e:7d:af:98:d6:65:b8:42:d3:78:ef:2f:83:00:90:
         25:9f:ba:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:36 2024 by rpki-client on console-ams.rpki-client.org