Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.mft
File:                     D0E128DF8234DC596D5CC92381FB1A2F9DF99876.mft (raw, json)
Hash identifier:          QwIkZFHuiM2UgIRecjnbQDtq0I3pHHiU4NS4FxxtVnc=
Subject key identifier:   D8:08:86:1B:B3:8C:71:7B:22:59:67:BB:0B:19:B4:78:DE:CE:C3:D2
Authority key identifier: D0:E1:28:DF:82:34:DC:59:6D:5C:C9:23:81:FB:1A:2F:9D:F9:98:76
Certificate issuer:       /CN=D0E128DF8234DC596D5CC92381FB1A2F9DF99876
Certificate serial:       5ADBC9C4656A7BCDE460A65A8E6384641F5BFA5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.mft
Manifest number:          57
Signing time:             Mon 17 Jun 2024 22:57:39 +0000
Manifest this update:     Mon 17 Jun 2024 22:52:39 +0000
Manifest next update:     Wed 19 Jun 2024 01:25:39 +0000
Files and hashes:         1: 3138392e3132372e302e302f32302d3234203d3e203237363933.roa (hash: VFh19ClX8yuKNQGDLlA7J9bAggjmQyN4VbKD6KIqSAU=)
                          2: 323830343a36343a3a2f33322d3438203d3e203237363933.roa (hash: cMEo8EsEpvPVUjteg8B5N2K8Hb5YSSM1+FOtAdDCIkc=)
                          3: D0E128DF8234DC596D5CC92381FB1A2F9DF99876.crl (hash: jA1t1pN8yNCy96ese0r4Lfe4xJj0YUHY9GEQgtzAmho=)
                          4: 3230302e3232302e3132382e302f32302d3234203d3e203237363933.roa (hash: bMXMqqOe6NYXGqVOsQIVzsN7NUK5Bv/nifDSoNRNd2M=)
                          5: 3138362e3233362e38302e302f32302d3234203d3e203237363933.roa (hash: 8tCMYcUKo9fCVpK2+l4bri4+s+kEymjfjaUuyP0LHVw=)
                          6: 3133312e3235352e32342e302f32322d3234203d3e203237363933.roa (hash: IGKKN2wWEIE6m2u4Mul2n2YAJezUxB4fr1eYBJZChY4=)
                          7: 3138362e3233362e36342e302f32302d3234203d3e203237363933.roa (hash: 7If2e62te2XZwTfBSV2yfegD4f76T7lTntPQz9Vp4A8=)
                          8: 3137392e3130392e31362e302f32302d3234203d3e203237363933.roa (hash: APhaXheNJb7bi0HAcOpgCtLPoTq0uwpTwAV5i/8L0YQ=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.crl
                          rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 01:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:db:c9:c4:65:6a:7b:cd:e4:60:a6:5a:8e:63:84:64:1f:5b:fa:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0E128DF8234DC596D5CC92381FB1A2F9DF99876
        Validity
            Not Before: Jun 17 22:52:39 2024 GMT
            Not After : Jun 19 01:25:39 2024 GMT
        Subject: CN=D808861BB38C717B225967BB0B19B478DECEC3D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d3:0f:33:2d:0f:fc:d6:32:18:30:57:92:81:
                    a9:30:44:8f:89:9c:46:ee:07:2b:99:f4:bf:86:c4:
                    2d:a6:59:b9:26:d8:d0:30:f7:c3:9d:65:30:1a:36:
                    ac:28:95:51:a3:9b:cd:2e:61:b4:a7:4e:32:af:da:
                    3d:27:0a:6d:3f:64:99:7b:01:63:80:d8:2f:28:30:
                    92:6b:96:ef:5c:8a:28:72:ea:ef:d2:0a:e5:43:7b:
                    eb:22:f4:55:17:47:3b:cb:39:20:d6:21:aa:1d:74:
                    ff:10:f0:84:12:77:8a:ba:62:c6:e3:53:f7:f3:39:
                    ed:3b:c3:60:48:2e:df:bd:55:99:0f:ec:db:c0:86:
                    12:97:e3:52:46:94:b8:eb:db:66:be:ba:7d:39:72:
                    01:c7:48:df:ef:96:3c:f3:ac:ff:7f:2f:67:24:df:
                    37:6e:2f:e0:3e:95:32:53:17:c1:a6:38:ae:bc:5f:
                    a8:be:db:4a:63:70:b2:f8:2b:df:6c:28:43:33:2c:
                    8d:8a:b9:01:0d:9b:da:62:27:62:cf:7d:a1:d0:b6:
                    f9:42:73:3f:be:91:4f:66:27:90:d5:b1:ab:a1:9e:
                    20:f1:9b:99:a8:3b:63:bd:93:9d:43:56:9b:5b:ad:
                    a0:f9:03:ee:cd:d3:e8:0b:24:61:de:0e:35:42:16:
                    29:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:08:86:1B:B3:8C:71:7B:22:59:67:BB:0B:19:B4:78:DE:CE:C3:D2
            X509v3 Authority Key Identifier:
                keyid:D0:E1:28:DF:82:34:DC:59:6D:5C:C9:23:81:FB:1A:2F:9D:F9:98:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:fc:a3:07:1d:d3:67:f2:a3:4e:8a:bf:1a:b1:28:d9:b5:c9:
         a2:f2:62:91:37:82:6f:3e:02:97:99:5b:fc:46:c3:c2:3f:76:
         6d:dd:1d:b3:64:7f:ad:7f:09:ea:fa:a7:09:d1:62:be:eb:a5:
         c9:1a:34:37:cb:2e:f8:eb:a3:29:6e:71:c8:19:b0:b1:0c:1a:
         84:37:8e:02:88:f6:63:0a:f8:da:33:20:34:b5:48:4d:90:fb:
         bd:32:d3:0e:8d:04:ef:22:47:d9:c2:49:13:19:ce:df:e7:de:
         6a:fd:d5:58:d3:58:f9:55:22:09:e7:87:99:33:68:11:77:2a:
         b5:24:12:7b:80:30:42:d3:6f:6f:41:76:06:6d:d7:08:2d:de:
         1a:3d:87:b5:95:50:92:93:16:64:5e:af:9a:14:48:7a:53:de:
         b4:17:41:a1:1b:45:8b:00:b7:cf:35:76:fb:82:9b:12:29:1a:
         ec:05:c6:4f:57:24:47:55:c1:77:e9:dc:8f:81:a5:e1:9e:05:
         b0:eb:3c:79:f4:44:0a:2c:45:38:12:fe:25:d0:a7:2b:4a:92:
         11:ce:90:60:18:b7:67:76:b9:eb:2a:b2:20:c6:05:8c:c1:45:
         d6:1f:e3:e5:0c:ef:08:53:c1:d1:a8:56:0c:ce:99:1d:f0:bc:
         c9:24:cd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 00:26:41 2024 by rpki-client on console-ams.rpki-client.org