Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.mft
File:                     D93228E088FC63E499DDCF6E203558BDFBA33FC4.mft (raw, json)
Hash identifier:          FtXc2x/WU2TjXJWRpQfArMTfECXr91dAv2QVM9icK2Y=
Subject key identifier:   EB:60:DF:86:DA:2A:AF:14:DB:76:94:37:EC:21:E1:B9:B8:DC:0F:F2
Authority key identifier: D9:32:28:E0:88:FC:63:E4:99:DD:CF:6E:20:35:58:BD:FB:A3:3F:C4
Certificate issuer:       /CN=D93228E088FC63E499DDCF6E203558BDFBA33FC4
Certificate serial:       1D75F3959F34584998BA89296EB42DD20F728085
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.mft
Manifest number:          0136
Signing time:             Fri 22 Nov 2024 19:20:44 +0000
Manifest this update:     Fri 22 Nov 2024 19:15:44 +0000
Manifest next update:     Sat 23 Nov 2024 20:45:44 +0000
Files and hashes:         1: 3136382e3232372e3132342e302f32342d3234203d3e20323634383739.roa (hash: +e9Da+/dbwXjOF9yJHKlXMucmP5g1hTV8Zh9Qb1Z3UA=)
                          2: 323830343a326633633a3a2f33322d3332203d3e20323634383739.roa (hash: +K/ndRdoGgm8mRyNf1aC+CvQeO+xcIcgam+jP9TfY/w=)
                          3: 3136382e3232372e3132352e302f32342d3234203d3e20323634383739.roa (hash: +d3NA5G1iqegobcLNRw+Pxpn9jIh326cw1JnM2zko2g=)
                          4: 3136382e3232372e3132362e302f32342d3234203d3e20323634383739.roa (hash: Fz70+R9zWRg3sC69nMiCQppIpgcSDxQzFgkiaj4qEjc=)
                          5: 323830343a326633633a383030303a3a2f33332d3333203d3e20323634383739.roa (hash: iHug0qe7vqxx38yNIVt9X/nvWofgidw3ZxkftlarQ/8=)
                          6: 3136382e3232372e3132342e302f32332d3233203d3e20323634383739.roa (hash: 4mtygxOS9HswZU60ILOJ9lzSqjDs0dafso00qsju5ac=)
                          7: 3136382e3232372e3132372e302f32342d3234203d3e20323634383739.roa (hash: YTzuwXmHQJMhg+fG7QDTOq1msB/Mx4nY8bsqbMIXiG8=)
                          8: 323830343a326633633a3a2f33332d3333203d3e20323634383739.roa (hash: tUjChIiC1wZGtReCYFBKHG5r0uGoOhlgXYQfRc56qcQ=)
                          9: D93228E088FC63E499DDCF6E203558BDFBA33FC4.crl (hash: Fpm5H7+JiEZpKmgSJMlXgY7hqub9Hs0cydzw5KSvfw0=)
                          10: 3136382e3232372e3132342e302f32322d3232203d3e20323634383739.roa (hash: B7SxNm5JJEVIhUbE+W7RwMGWia0auTwA01Ble/cpt9g=)
                          11: 3136382e3232372e3132362e302f32332d3233203d3e20323634383739.roa (hash: q+5EhYzQJ64AQuYyR15jRQxKl1lMNhBcjvDXJLantYs=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.crl
                          rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:75:f3:95:9f:34:58:49:98:ba:89:29:6e:b4:2d:d2:0f:72:80:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D93228E088FC63E499DDCF6E203558BDFBA33FC4
        Validity
            Not Before: Nov 22 19:15:44 2024 GMT
            Not After : Nov 23 20:45:44 2024 GMT
        Subject: CN=EB60DF86DA2AAF14DB769437EC21E1B9B8DC0FF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:15:bb:d1:d1:74:f9:7a:61:d0:82:ea:83:23:
                    95:42:c1:89:ee:40:99:87:d2:33:05:56:12:11:dc:
                    9c:e5:94:b2:23:93:9b:42:d8:dc:3a:30:38:76:e4:
                    b0:58:2d:26:5a:60:66:b0:3f:c4:ec:22:ff:85:47:
                    6f:b4:7e:70:b8:15:43:37:6a:19:b8:ff:35:a6:46:
                    16:99:61:cd:48:4d:ad:06:1a:c1:db:26:56:39:1f:
                    34:1c:26:fa:ac:bb:d3:61:54:82:be:1a:a1:dc:78:
                    98:bb:66:a5:44:3e:bf:5a:92:c5:83:ee:2b:58:82:
                    0b:c4:6b:e0:26:ab:07:d3:a1:72:48:f4:f5:3c:47:
                    5c:c1:3f:5d:75:f4:72:d6:9a:39:34:2a:87:eb:73:
                    d1:cf:32:29:d2:8d:a0:fc:b3:c3:16:02:29:f2:83:
                    5d:a7:7a:8a:39:b6:7e:33:33:4b:e0:5d:78:1c:39:
                    de:9f:59:91:3a:ca:dc:ed:64:91:08:55:29:b3:66:
                    a0:e5:48:1a:e5:7a:cf:c9:40:12:56:a6:99:09:b6:
                    5a:d4:2e:2d:f1:03:58:37:95:d1:9b:98:2a:3b:fc:
                    6e:68:63:79:9e:0e:eb:46:30:e3:bf:0c:eb:fa:1a:
                    85:91:c6:53:73:27:d5:8d:bd:e4:5b:5e:1f:de:f9:
                    a8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:60:DF:86:DA:2A:AF:14:DB:76:94:37:EC:21:E1:B9:B8:DC:0F:F2
            X509v3 Authority Key Identifier:
                keyid:D9:32:28:E0:88:FC:63:E4:99:DD:CF:6E:20:35:58:BD:FB:A3:3F:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:c1:03:c4:31:ce:bc:86:e5:e0:a9:52:8e:ba:cd:18:ea:eb:
         f0:d2:12:6b:14:d7:0a:3a:e7:47:d0:d2:a1:90:d5:04:c8:0b:
         3e:12:76:12:9c:a5:4f:82:ba:bb:ec:36:36:83:99:fe:e0:01:
         50:e7:fd:5e:9f:06:94:df:f7:5a:64:f7:ae:ec:f0:10:02:6c:
         a9:0a:30:20:c9:0b:a7:9c:8b:b7:61:7e:05:da:79:a2:50:d9:
         a7:76:0b:51:25:53:f8:41:89:f0:65:74:2b:94:01:4f:ba:ef:
         5a:1d:e0:4c:9c:15:6e:e1:39:cf:64:7b:f2:49:f6:28:b6:8b:
         2b:a8:32:b6:21:99:9e:d5:78:82:66:d7:db:eb:2b:6b:64:21:
         92:3f:20:9b:48:1d:72:e2:e1:08:b6:c2:ec:b4:e5:7f:c9:c6:
         39:f6:f2:58:af:10:af:f9:3f:67:d2:05:66:a8:5c:a3:17:d5:
         62:a0:c2:0f:d0:08:a9:cb:a6:a7:6c:16:df:c5:42:0d:b1:ff:
         af:b1:81:d5:fd:1f:26:3a:3b:50:58:a2:9b:97:1d:b0:07:a0:
         5d:5b:4e:39:82:f7:06:21:8b:fb:4f:da:82:66:4f:54:37:48:
         cb:55:b8:c9:9f:1f:7d:da:8e:40:1a:fc:f5:ba:ad:c7:79:a4:
         b6:46:87:a8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHXXzlZ80WEmYuokpbrQt0g9ygIUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDkzMjI4RTA4OEZDNjNFNDk5RERDRjZFMjAzNTU4QkRG
QkEzM0ZDNDAeFw0yNDExMjIxOTE1NDRaFw0yNDExMjMyMDQ1NDRaMDMxMTAvBgNV
BAMTKEVCNjBERjg2REEyQUFGMTREQjc2OTQzN0VDMjFFMUI5QjhEQzBGRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWFbvR0XT5emHQguqDI5VCwYnu
QJmH0jMFVhIR3JzllLIjk5tC2Nw6MDh25LBYLSZaYGawP8TsIv+FR2+0fnC4FUM3
ahm4/zWmRhaZYc1ITa0GGsHbJlY5HzQcJvqsu9NhVIK+GqHceJi7ZqVEPr9aksWD
7itYggvEa+AmqwfToXJI9PU8R1zBP1119HLWmjk0Kofrc9HPMinSjaD8s8MWAiny
g12neoo5tn4zM0vgXXgcOd6fWZE6ytztZJEIVSmzZqDlSBrles/JQBJWppkJtlrU
Li3xA1g3ldGbmCo7/G5oY3meDutGMOO/DOv6GoWRxlNzJ9WNveRbXh/e+aihAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU62DfhtoqrxTbdpQ37CHhubjcD/IwHwYDVR0j
BBgwFoAU2TIo4Ij8Y+SZ3c9uIDVYvfujP8QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnRrd0VYbUtQamhzM2UzWjk3WHMyOTRudXk2QzRkUGViNjRRdWlIVllE
MTkvMS9EOTMyMjhFMDg4RkM2M0U0OTlERENGNkUyMDM1NThCREZCQTMzRkM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5MzIyOEUwODhGQzYzRTQ5
OUREQ0Y2RTIwMzU1OEJERkJBMzNGQzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NnRrd0VYbUtQamhzM2UzWjk3WHMyOTRudXk2QzRkUGViNjRRdWlIVllEMTkvMS9E
OTMyMjhFMDg4RkM2M0U0OTlERENGNkUyMDM1NThCREZCQTMzRkM0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKMEDxDHOvIbl4KlSjrrNGOrr8NISaxTXCjrnR9DSoZDVBMgLPhJ2EpylT4K6
u+w2NoOZ/uABUOf9Xp8GlN/3WmT3ruzwEAJsqQowIMkLp5yLt2F+Bdp5olDZp3YL
USVT+EGJ8GV0K5QBT7rvWh3gTJwVbuE5z2R78kn2KLaLK6gytiGZntV4gmbX2+sr
a2Qhkj8gm0gdcuLhCLbC7LTlf8nGOfbyWK8Qr/k/Z9IFZqhcoxfVYqDCD9AIqcum
p2wW38VCDbH/r7GB1f0fJjo7UFiim5cdsAegXVtOOYL3BiGL+0/agmZPVDdIy1W4
yZ8ffdqOQBr89bqtx3mktkaHqA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:00 2024 by rpki-client on console-ams.rpki-client.org