Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D297690F68F4535C1EEA34AA4421792C2944DF34.mft
File:                     D297690F68F4535C1EEA34AA4421792C2944DF34.mft (raw, json)
Hash identifier:          MgVjb16IVF0TmSarXw38A/8y1gRzjdeVMuCxQIWMH2c=
Subject key identifier:   14:88:71:F6:D4:21:6C:61:52:B9:77:C9:9D:0B:CC:57:10:C0:59:95
Authority key identifier: D2:97:69:0F:68:F4:53:5C:1E:EA:34:AA:44:21:79:2C:29:44:DF:34
Certificate issuer:       /CN=D297690F68F4535C1EEA34AA4421792C2944DF34
Certificate serial:       09E987EEBEDBDEA9A4C7AA704439FABEF4D3CBA5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D297690F68F4535C1EEA34AA4421792C2944DF34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D297690F68F4535C1EEA34AA4421792C2944DF34.mft
Manifest number:          73
Signing time:             Sun 30 Jun 2024 16:31:28 +0000
Manifest this update:     Sun 30 Jun 2024 16:26:28 +0000
Manifest next update:     Mon 01 Jul 2024 19:28:28 +0000
Files and hashes:         1: 323830343a3133383a3a2f33322d3337203d3e203131343332.roa (hash: iLjiZiG3ddzgl7bWD6ble9YgFY4gbegKJ20qhD5O1jA=)
                          2: D297690F68F4535C1EEA34AA4421792C2944DF34.crl (hash: lHhEzTXo3w4DqoXeMUvMW+hQ0UMILWtNrQoz/YGto4E=)
                          3: 3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa (hash: IOCGH0H2ZR3ksxhaNESnH6zhq3TpZuhVy7aQBfjQrPg=)
                          4: 3230302e3135352e3132382e302f31382d3234203d3e203131343332.roa (hash: 9Z6/eDQ8mtxGrHhvwWmiPQMrlsn8gURBt4/KKy244AQ=)
                          5: 3230302e3137302e3139322e302f31382d3234203d3e203131343332.roa (hash: AeLBaNeZHq7+hmFcDaA7bBi5XfBhBNvc92qxpbcP8No=)
                          6: 3230302e3230312e3132382e302f31392d3234203d3e203131343332.roa (hash: JAhfrLwww1xAyrWBRWSKRosD8QOE8aDL1q3U0NU32ao=)
                          7: 323830343a3133383a613030303a3a2f34372d3437203d3e203131343332.roa (hash: owJN/6NNL7NFL+XKlc7t7W28nKfaSgNWegitPA55y2E=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D297690F68F4535C1EEA34AA4421792C2944DF34.crl
                          rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D297690F68F4535C1EEA34AA4421792C2944DF34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D297690F68F4535C1EEA34AA4421792C2944DF34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Jul 2024 19:28:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e9:87:ee:be:db:de:a9:a4:c7:aa:70:44:39:fa:be:f4:d3:cb:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D297690F68F4535C1EEA34AA4421792C2944DF34
        Validity
            Not Before: Jun 30 16:26:28 2024 GMT
            Not After : Jul  1 19:28:28 2024 GMT
        Subject: CN=148871F6D4216C6152B977C99D0BCC5710C05995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:11:fb:a8:5f:0c:c8:8a:52:0e:ef:55:99:7e:
                    f1:43:81:a6:e0:51:6c:d7:f8:31:a1:98:b9:0a:35:
                    77:d5:9e:e9:16:22:73:e9:52:7b:ad:fe:d0:a2:85:
                    c1:73:17:c6:5d:d7:e4:79:2d:ff:dd:3b:3a:a7:cd:
                    a9:03:48:15:c6:dc:ab:0f:29:08:2e:b8:fd:a0:36:
                    4e:10:9e:4c:7b:c8:85:a4:51:b9:80:eb:83:80:dc:
                    b3:f2:0d:5d:6c:57:40:83:72:90:ba:9d:54:a1:22:
                    19:69:39:2c:9b:f3:ca:87:ae:b1:79:12:7d:8f:0e:
                    04:fd:8e:86:c9:f9:1d:8e:68:18:b2:54:cf:a0:d3:
                    5d:c9:64:b2:f4:31:03:07:9d:5f:87:8b:54:be:17:
                    f9:5a:60:36:03:6c:fb:4b:07:53:26:b9:f9:ed:a1:
                    64:ea:58:2a:29:2a:03:9b:26:9a:6b:0a:2e:2c:c2:
                    42:25:18:20:9f:f6:f5:16:61:dd:63:67:61:6e:7b:
                    7c:5d:82:0a:1a:6d:f2:d2:89:29:e2:14:3a:10:fd:
                    0c:5a:17:60:e2:03:88:8d:9a:28:d8:f0:bf:79:2c:
                    0c:19:ea:bc:0a:6c:bd:dc:fd:c2:b8:d0:ab:30:b6:
                    ea:1f:78:23:bb:8f:b0:14:15:0b:2f:ac:c8:48:b5:
                    7f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:88:71:F6:D4:21:6C:61:52:B9:77:C9:9D:0B:CC:57:10:C0:59:95
            X509v3 Authority Key Identifier:
                keyid:D2:97:69:0F:68:F4:53:5C:1E:EA:34:AA:44:21:79:2C:29:44:DF:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D297690F68F4535C1EEA34AA4421792C2944DF34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D297690F68F4535C1EEA34AA4421792C2944DF34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D297690F68F4535C1EEA34AA4421792C2944DF34.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:d8:06:d5:94:d5:2e:2d:39:5b:3e:86:82:43:b8:c3:a0:ba:
         4f:b9:6b:71:e1:e7:e1:c6:6e:19:06:4a:57:de:ec:eb:98:f3:
         2b:ed:67:99:75:ea:3d:49:ae:c3:e1:6f:2e:8c:b7:23:3e:e6:
         f6:e0:75:fd:4e:ab:b7:f2:18:99:61:9b:bf:92:31:01:58:b2:
         51:5c:94:ba:66:bd:1d:2d:cf:62:5d:43:51:fc:1a:7e:a6:6e:
         0c:03:f7:f2:25:dc:e1:94:af:34:3c:3f:c1:d5:70:81:ed:34:
         0e:ad:12:86:f2:6d:29:08:04:81:81:aa:01:cd:0b:67:9c:19:
         dc:bc:f6:9b:80:f3:e7:40:77:f2:13:f3:57:2b:3d:53:76:16:
         80:38:47:1f:29:96:2a:1e:10:68:59:21:67:0a:58:92:f6:b0:
         fe:c3:7b:5d:e3:35:a6:8b:2b:43:ef:a7:aa:db:d6:35:18:57:
         62:ef:73:d6:82:ef:c2:2f:44:93:d2:54:6c:eb:bb:4e:9a:d4:
         c5:b7:b8:32:af:b2:28:7b:5c:e0:b7:9c:7f:63:b2:1a:68:61:
         63:b9:d7:bc:34:5f:2e:ab:04:dd:e0:9e:13:90:1b:f0:18:ba:
         ac:14:ea:b7:4b:f5:df:e7:43:79:b0:40:16:69:e4:cf:e1:d3:
         7e:53:53:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 18:30:54 2024 by rpki-client on console-fra.rpki-client.org