Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
File:                     B8BF0367B559121777A21A84D953A717D6E82AEA.mft (raw, json)
Hash identifier:          sM1iv0Dvl7m/8jgZQyLjZLK825amGqIprAbcSsVB2OA=
Subject key identifier:   EF:73:94:F1:88:DF:84:57:AC:8F:B9:BF:71:92:9F:CE:CE:02:21:8D
Authority key identifier: B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA
Certificate issuer:       /CN=B8BF0367B559121777A21A84D953A717D6E82AEA
Certificate serial:       6D11A08A5FC1903E92E6D21A9E9ADBDEFC7C63A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
Manifest number:          0147
Signing time:             Fri 22 Nov 2024 11:17:23 +0000
Manifest this update:     Fri 22 Nov 2024 11:12:23 +0000
Manifest next update:     Sat 23 Nov 2024 13:43:23 +0000
Files and hashes:         1: 3133382e3131372e32342e302f32322d3234203d3e20323633333231.roa (hash: HGdBSKiFk/DeL8vH+MszMy1P4lWK9jQ4lctnfCkuvr0=)
                          2: B8BF0367B559121777A21A84D953A717D6E82AEA.crl (hash: mdRtSRoaZk7doDbhayvoup++QbVfEBB+/huFg1UGzkI=)
                          3: 323830343a313434303a3a2f33322d3430203d3e20323633333231.roa (hash: 4zy1wfhCDfCEc1joqTfUw3AH6G7CAwgUFDHcwplid3k=)
                          4: 323830343a313434303a3a2f33322d3334203d3e20323633333231.roa (hash: gV21JBpo/fSSaPRkm+QCicq7+j/ayTR9teHldqaPhYc=)
                          5: 3137302e3233332e3230342e302f32322d3234203d3e20323633333231.roa (hash: UeHadeVJurQ6ENd9ZAl6ibI/ZSyvYXfgwwd/iHAfyI0=)
                          6: 3139312e372e3133362e302f32312d3234203d3e20323633333231.roa (hash: 8ET9ORcZBS0FKh0FoaKXCUb59aLqg3cC0E9To6mTtTc=)
                          7: 3136382e39302e32342e302f32322d3234203d3e20323633333231.roa (hash: 3m6deiNIWH8marGu+EF5nE3sSOyMxJnVZnTqukdEVaI=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl
                          rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:43:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:11:a0:8a:5f:c1:90:3e:92:e6:d2:1a:9e:9a:db:de:fc:7c:63:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8BF0367B559121777A21A84D953A717D6E82AEA
        Validity
            Not Before: Nov 22 11:12:23 2024 GMT
            Not After : Nov 23 13:43:23 2024 GMT
        Subject: CN=EF7394F188DF8457AC8FB9BF71929FCECE02218D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:dc:a9:af:f9:95:fe:26:de:d8:25:fd:b4:3a:
                    69:a9:75:7a:c3:6a:5a:77:00:b5:2b:93:3c:46:64:
                    93:df:5f:b4:0a:50:91:65:9f:b7:f5:fa:9c:62:72:
                    d1:3f:f8:3b:d1:47:53:b5:ec:db:21:d4:72:91:72:
                    38:40:50:2e:61:99:cd:11:58:9f:6b:93:c5:0e:7b:
                    fd:5b:06:9e:6a:41:b9:5f:98:de:fc:8a:ae:58:4b:
                    de:fc:15:d9:b0:84:33:37:83:7d:7f:30:08:0c:89:
                    86:8d:b4:c8:60:60:b5:5d:33:8a:5f:51:73:2a:60:
                    68:8d:af:2c:71:1e:cc:e8:2b:3f:5a:46:71:ba:ca:
                    48:6a:0b:37:ff:c5:56:e5:88:5f:a9:39:00:e6:99:
                    b2:87:c0:a8:44:67:80:64:43:e4:25:45:67:87:66:
                    65:bc:e6:77:f9:a6:85:51:96:95:11:b7:97:7e:92:
                    ba:96:b6:75:5f:c5:b1:38:19:ad:5f:dc:8c:a4:02:
                    a8:59:9a:1e:59:45:67:f1:5b:6f:b1:78:9e:23:65:
                    ad:f4:d0:2f:6c:42:91:17:fe:e2:73:7b:84:61:21:
                    66:92:2f:d5:6a:d8:4e:3f:2e:a8:96:13:c0:0a:33:
                    26:0a:15:43:e0:ee:2e:b8:cf:42:32:02:22:f9:a2:
                    33:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:73:94:F1:88:DF:84:57:AC:8F:B9:BF:71:92:9F:CE:CE:02:21:8D
            X509v3 Authority Key Identifier:
                keyid:B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:5e:01:5d:ca:fb:32:b1:63:19:f5:bd:7b:06:04:39:23:0a:
         c3:01:77:6c:76:20:85:77:70:77:ec:be:04:6e:56:67:01:14:
         e0:21:3a:ed:95:fd:4c:1e:2e:55:bb:e9:fe:e3:81:54:41:0e:
         7b:e3:ba:38:c1:67:dc:f0:c8:60:e6:fd:08:44:86:36:a9:77:
         9e:03:bb:bd:2d:7d:94:5e:49:84:d9:53:a5:6a:cc:1f:f1:dd:
         ac:89:6f:ab:f1:45:2a:eb:6f:8e:b1:78:d0:0a:e9:14:24:22:
         e7:35:2b:c1:c0:44:24:fd:9d:50:1b:43:8f:b1:66:4d:c8:d9:
         df:65:48:d2:a9:dc:c2:41:00:c3:5f:b7:a0:1a:4c:1f:66:ec:
         ae:b0:de:7a:85:37:79:3f:ae:58:8e:83:bd:e9:32:52:60:cf:
         de:5f:29:4c:11:40:91:7a:a3:be:cd:37:a6:c0:8c:17:b1:94:
         e5:70:6a:dc:be:e8:00:f8:26:8c:af:6a:6b:c8:07:d5:92:e1:
         59:38:ec:17:3d:15:41:c7:7d:54:b1:aa:c6:0e:0b:5b:b9:0a:
         86:06:97:ca:a2:a0:2f:b4:0d:ca:16:92:ba:3c:8d:70:7f:d1:
         7b:da:70:f1:80:9a:73:7b:a2:ee:8d:97:b0:72:25:2b:3e:40:
         4d:a5:18:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:52 2024 by rpki-client on console-fra.rpki-client.org