Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.mft
File:                     8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.mft (raw, json)
Hash identifier:          Y3mCcSIF8tEH8y8eOwRlp/yxqJRB6CgN+MkE0Cy5X+A=
Subject key identifier:   83:A1:7A:66:96:90:2A:17:60:52:86:DE:F6:B8:FD:00:E0:7C:EF:44
Authority key identifier: 8D:1C:D5:C0:B8:C5:A3:A2:59:C7:1A:A2:93:76:6C:8C:F6:70:83:5E
Certificate issuer:       /CN=8D1CD5C0B8C5A3A259C71AA293766C8CF670835E
Certificate serial:       52508197529D543F147996B7EE27E734C6CBD7F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.mft
Manifest number:          77
Signing time:             Sun 30 Jun 2024 18:48:25 +0000
Manifest this update:     Sun 30 Jun 2024 18:43:25 +0000
Manifest next update:     Mon 01 Jul 2024 22:39:25 +0000
Files and hashes:         1: 3230302e3231392e302e302f32332d3233203d3e20323731303137.roa (hash: C57CxEYtsQGAGhdxFv93vKbvfz5/0kHPc5XNeiYCOEA=)
                          2: 8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.crl (hash: nn2v5nqUO+2uPCSr2YHGBIf7B5BILGdtby5SfPBsFpY=)
                          3: 3230302e3231392e302e302f32342d3234203d3e20323731303137.roa (hash: TyEyHG1YprRdwdeXj91BPRG9kPOqJ2bSEyfBZFvHO+0=)
                          4: 3230302e3231392e322e302f32332d3233203d3e20323731303137.roa (hash: DIc3udjbx0oJjO7Xl1zxATeUgCRQDZbEhBcLYkcWX2g=)
                          5: 3230302e3231392e332e302f32342d3234203d3e20323731303137.roa (hash: lOY44O/XQeSJhJKrGdQopv5+98ciTfsyyirqHbPUunE=)
                          6: 3230302e3231392e322e302f32342d3234203d3e20323731303137.roa (hash: NsMaZtT65W7dQjKs24Etyo7k1wtdIZt89juCwIkF+iQ=)
                          7: 3230302e3231392e312e302f32342d3234203d3e20323731303137.roa (hash: 2xFQTZD1CjvNpeqoHPGLs0FFH8ET68hR8KTBQU9IqNc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.crl
                          rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Jul 2024 20:04:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:50:81:97:52:9d:54:3f:14:79:96:b7:ee:27:e7:34:c6:cb:d7:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D1CD5C0B8C5A3A259C71AA293766C8CF670835E
        Validity
            Not Before: Jun 30 18:43:25 2024 GMT
            Not After : Jul  1 22:39:25 2024 GMT
        Subject: CN=83A17A6696902A17605286DEF6B8FD00E07CEF44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:20:f2:aa:a8:e1:26:f6:d1:0a:37:89:77:1e:
                    ed:b8:1e:54:12:c4:3e:60:c6:6f:da:c8:06:97:98:
                    f1:39:dd:87:f7:de:0e:8d:8d:42:46:7a:82:28:76:
                    a5:6f:04:a4:c3:0a:53:21:fb:6e:79:7a:ee:8d:cf:
                    31:70:50:14:62:96:cb:cd:c0:06:c8:c4:60:74:ac:
                    bf:ee:93:17:c7:dd:44:ab:bc:19:dd:02:ce:6f:9d:
                    78:05:46:db:78:8e:89:a0:1c:9a:66:3e:59:cf:91:
                    77:90:48:e8:f1:2e:79:9c:22:7e:b3:68:e0:5e:f6:
                    c8:62:20:b0:f9:99:63:95:1b:49:69:c4:25:cb:42:
                    e3:5f:34:47:ca:e0:89:8b:8d:26:da:29:38:c7:d2:
                    54:21:5c:4e:95:76:d3:72:8d:88:c0:20:4a:ab:ff:
                    29:1b:d0:e2:77:0e:ef:6f:54:cb:67:4a:ee:9a:ca:
                    71:3b:5a:1a:6f:a2:de:c2:5c:b8:59:13:50:94:a7:
                    47:7a:52:6e:24:a3:97:fd:74:80:87:7a:1e:c9:31:
                    ba:7b:0f:57:91:7a:fc:32:7f:be:9e:2b:af:88:9e:
                    bf:0d:30:be:51:8a:f8:f3:78:19:d4:f6:23:bd:1e:
                    16:e3:43:71:c4:f3:2f:bf:82:8d:1e:0e:99:a6:a9:
                    06:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A1:7A:66:96:90:2A:17:60:52:86:DE:F6:B8:FD:00:E0:7C:EF:44
            X509v3 Authority Key Identifier:
                keyid:8D:1C:D5:C0:B8:C5:A3:A2:59:C7:1A:A2:93:76:6C:8C:F6:70:83:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:72:67:98:7f:15:5f:96:22:03:a7:22:29:0e:05:6b:a6:3e:
         88:4f:10:38:3d:5a:06:53:29:f4:b4:ae:c6:5d:03:d5:92:a2:
         93:7d:8d:c3:dd:76:5c:40:a5:58:13:db:92:24:8b:d6:46:32:
         e2:6e:bf:5f:fa:44:a9:5f:de:5b:39:58:38:ce:9c:24:de:94:
         8d:95:88:39:3f:3a:cf:a9:63:a8:ac:d1:32:52:76:6b:80:8a:
         80:13:ba:89:2e:72:1b:60:de:0d:c4:93:b3:41:7a:f4:7e:fa:
         84:6a:ba:d7:83:73:4e:7e:8c:88:79:7a:e0:87:6d:ec:05:27:
         2c:20:aa:3a:61:42:59:0d:39:22:87:30:ed:66:30:f1:cc:da:
         e1:17:aa:78:dc:36:62:00:36:a8:d2:6c:db:9b:65:75:01:3f:
         20:84:3d:27:80:dd:6c:d1:d1:58:77:6d:79:d9:2a:52:e9:72:
         b3:af:b0:9b:c0:47:8b:1d:d5:98:a5:56:06:c2:04:6e:8f:60:
         e8:ea:e2:46:4c:76:5c:e1:61:8b:4e:72:79:f1:c7:67:18:b7:
         69:bd:45:96:e9:b1:c8:82:09:4d:43:9d:cd:5b:8d:ce:be:73:
         83:b8:4f:95:83:62:91:5f:3d:4c:6a:8e:0d:25:de:15:a9:dc:
         07:cb:43:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 21:36:06 2024 by rpki-client on console-fra.rpki-client.org