Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.mft
File:                     8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.mft (raw, json)
Hash identifier:          IOa4Cxtcvvp6ZV+HWnmp8RfV+58UphgrnuNmY0f52GU=
Subject key identifier:   A1:AF:5C:F2:25:66:1A:FF:55:BD:20:00:51:FB:DF:32:E6:1E:50:60
Authority key identifier: 8D:1C:D5:C0:B8:C5:A3:A2:59:C7:1A:A2:93:76:6C:8C:F6:70:83:5E
Certificate issuer:       /CN=8D1CD5C0B8C5A3A259C71AA293766C8CF670835E
Certificate serial:       29585658CD63762FC43B41A3CFB1CD703083A14B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.mft
Manifest number:          0133
Signing time:             Fri 29 Nov 2024 19:32:39 +0000
Manifest this update:     Fri 29 Nov 2024 19:27:39 +0000
Manifest next update:     Sat 30 Nov 2024 19:48:39 +0000
Files and hashes:         1: 3230302e3231392e322e302f32342d3234203d3e20323731303137.roa (hash: NsMaZtT65W7dQjKs24Etyo7k1wtdIZt89juCwIkF+iQ=)
                          2: 3230302e3231392e312e302f32342d3234203d3e20323731303137.roa (hash: 2xFQTZD1CjvNpeqoHPGLs0FFH8ET68hR8KTBQU9IqNc=)
                          3: 8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.crl (hash: O9MzYZuPUf5UnOEIzPfcqe8UYDOagpMfNwzxvuPdUiA=)
                          4: 3230302e3231392e332e302f32342d3234203d3e20323731303137.roa (hash: lOY44O/XQeSJhJKrGdQopv5+98ciTfsyyirqHbPUunE=)
                          5: 3230302e3231392e302e302f32342d3234203d3e20323731303137.roa (hash: TyEyHG1YprRdwdeXj91BPRG9kPOqJ2bSEyfBZFvHO+0=)
                          6: 3230302e3231392e302e302f32332d3233203d3e20323731303137.roa (hash: C57CxEYtsQGAGhdxFv93vKbvfz5/0kHPc5XNeiYCOEA=)
                          7: 3230302e3231392e322e302f32332d3233203d3e20323731303137.roa (hash: DIc3udjbx0oJjO7Xl1zxATeUgCRQDZbEhBcLYkcWX2g=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.crl
                          rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 19:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:58:56:58:cd:63:76:2f:c4:3b:41:a3:cf:b1:cd:70:30:83:a1:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D1CD5C0B8C5A3A259C71AA293766C8CF670835E
        Validity
            Not Before: Nov 29 19:27:39 2024 GMT
            Not After : Nov 30 19:48:39 2024 GMT
        Subject: CN=A1AF5CF225661AFF55BD200051FBDF32E61E5060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fc:ab:70:0b:86:1a:9b:6f:fa:2d:a5:cc:e9:
                    0a:26:cd:2a:ed:c2:05:b5:a2:56:98:d0:fd:f4:c8:
                    9e:db:eb:8e:98:ef:dc:b8:ae:1c:2f:94:09:7a:84:
                    d6:6b:22:8c:af:f8:c7:52:24:c8:d2:72:8e:86:31:
                    b7:35:2a:75:f5:cb:ad:5e:71:9a:a8:eb:24:95:8b:
                    20:67:e2:4f:6a:4b:4e:c9:e9:83:e1:88:23:17:3b:
                    2f:48:4a:fb:5f:ac:ba:34:13:4a:da:6e:c1:9e:75:
                    01:2f:07:1d:41:cd:56:e1:a8:5e:e5:ef:00:3e:7b:
                    46:74:ee:84:02:ea:ed:f2:3c:34:79:18:de:5b:13:
                    b6:08:ea:63:19:40:7c:88:71:7c:94:58:b2:55:30:
                    8f:dc:b0:f1:4d:ea:c5:65:99:55:08:f0:a1:a5:3e:
                    f1:2f:13:d5:d0:7d:b5:7f:44:2c:ab:66:8b:40:23:
                    8f:7f:b3:48:48:ca:9b:cf:23:d6:b2:0b:56:f0:ab:
                    e6:cc:bd:40:e9:ad:ce:82:23:d0:28:36:b3:92:c2:
                    1e:83:76:15:d4:ff:94:0e:22:bb:a5:a8:a9:c3:6d:
                    08:39:26:c6:a6:32:5a:f5:3f:22:6a:e3:af:76:02:
                    59:12:55:31:7b:80:2e:57:a8:c0:eb:9b:40:0c:be:
                    88:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AF:5C:F2:25:66:1A:FF:55:BD:20:00:51:FB:DF:32:E6:1E:50:60
            X509v3 Authority Key Identifier:
                keyid:8D:1C:D5:C0:B8:C5:A3:A2:59:C7:1A:A2:93:76:6C:8C:F6:70:83:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:08:e3:96:17:94:f4:0f:ce:bd:bc:3a:0e:14:1f:ab:8d:9c:
         d2:5e:b1:b5:ad:b9:2d:c4:e3:1a:7c:e0:2f:1d:bd:27:6d:27:
         47:2c:8c:05:b2:6f:cf:48:ee:d7:67:90:e3:06:10:60:9c:3a:
         5f:6f:f1:24:8c:80:a4:17:0f:72:c1:87:ee:8d:c7:6f:51:85:
         95:79:66:73:12:f5:de:5f:e9:89:8e:9a:4f:87:d4:7d:c7:34:
         7f:5a:fe:b9:24:60:51:c2:6a:76:56:08:83:bf:e0:94:77:d7:
         24:c4:5d:3a:88:d4:8a:fb:f9:d9:57:23:17:37:fe:35:8f:b2:
         66:87:63:da:39:f1:e3:37:d4:9a:af:cc:23:c6:26:56:07:2c:
         5c:be:5f:42:61:ff:59:49:7b:be:a5:9a:78:c6:f9:d0:3b:8d:
         17:bb:b9:88:11:fa:de:51:87:cc:64:2d:7a:44:e6:85:27:28:
         8b:ed:c8:ba:76:1c:20:4c:c3:98:0c:80:56:03:2a:43:7c:9c:
         71:ce:a0:8b:ee:8c:f8:09:47:10:8c:62:b8:83:c3:10:62:71:
         8a:ba:66:7b:b8:db:40:76:4d:89:5e:ae:76:b1:9d:8b:de:90:
         54:a5:ac:0a:02:c9:f5:b6:2a:ee:ee:7e:83:32:9a:9d:dd:af:
         9c:7b:1e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 20:48:54 2024 by rpki-client on console-ams.rpki-client.org