Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/1/376466FC739A7E2E3F178C59A3A0C0CC08310BD8.mft
File:                     376466FC739A7E2E3F178C59A3A0C0CC08310BD8.mft (raw, json)
Hash identifier:          zpf2mA65tygfZCfLLvCzsragoi1uZivVCNj4X7J/NTI=
Subject key identifier:   0F:33:DA:7B:DC:37:ED:FA:45:95:E0:F7:E6:F2:8F:73:CB:10:45:F3
Authority key identifier: 37:64:66:FC:73:9A:7E:2E:3F:17:8C:59:A3:A0:C0:CC:08:31:0B:D8
Certificate issuer:       /CN=376466FC739A7E2E3F178C59A3A0C0CC08310BD8
Certificate serial:       4C26A2EDEDA8D1C4BA2773BDBE0CEB41189BB058
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/376466FC739A7E2E3F178C59A3A0C0CC08310BD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/1/376466FC739A7E2E3F178C59A3A0C0CC08310BD8.mft
Manifest number:          73
Signing time:             Fri 28 Jun 2024 07:00:05 +0000
Manifest this update:     Fri 28 Jun 2024 06:55:05 +0000
Manifest next update:     Sat 29 Jun 2024 08:47:05 +0000
Files and hashes:         1: 3230312e34362e3132382e302f31382d3332203d3e203238363135.roa (hash: LqNS8JNJJuRI7qRIZ8ofpvqnn50+6SnLb5miaQGa5uM=)
                          2: 3137372e3135352e302e302f31382d3332203d3e203238363135.roa (hash: YxzntdcqX+xSyAittkXCDi9H8BteQdUKZAc+t+cpgus=)
                          3: 376466FC739A7E2E3F178C59A3A0C0CC08310BD8.crl (hash: Qmk5gfYn2H+af36FrP/SAJ9OCwh3GqOylRA9wdcvqEg=)
                          4: 3230312e34362e3232342e302f32302d3332203d3e203238363135.roa (hash: Fc0vEks5TdpcJslY2z2cYkGS+nKw+PUU1DVEtKO9Gbs=)
                          5: 3137372e3133312e3139322e302f31382d3332203d3e203238363135.roa (hash: Lqf1sBnJ7Rj+qcqISdlpYSNfRj/YjW5/SCICXK4jNEc=)
                          6: 323830343a6261343a3a2f33312d313238203d3e203238363135.roa (hash: VyTu63/ga8FuAFXjs2okk3Gh7FVqAzp+qhHSnAux4l4=)
                          7: 3230312e34362e3139322e302f31392d3332203d3e203238363135.roa (hash: fKYkhxc0kCsk7kGREtrrgm1tW3cOl7n7kb0wp4052UI=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/1/376466FC739A7E2E3F178C59A3A0C0CC08310BD8.crl
                          rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/1/376466FC739A7E2E3F178C59A3A0C0CC08310BD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/376466FC739A7E2E3F178C59A3A0C0CC08310BD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:26:a2:ed:ed:a8:d1:c4:ba:27:73:bd:be:0c:eb:41:18:9b:b0:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=376466FC739A7E2E3F178C59A3A0C0CC08310BD8
        Validity
            Not Before: Jun 28 06:55:05 2024 GMT
            Not After : Jun 29 08:47:05 2024 GMT
        Subject: CN=0F33DA7BDC37EDFA4595E0F7E6F28F73CB1045F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:94:e8:41:e2:4a:69:64:ab:74:ed:7a:4a:19:
                    72:58:d8:13:ca:a4:82:f1:ae:83:f9:94:dc:4b:f8:
                    0e:68:1b:7f:44:95:28:ef:be:db:24:85:78:00:46:
                    05:7d:fe:02:34:19:8c:77:08:52:14:02:de:87:e7:
                    86:e0:9d:30:be:d6:73:9a:7d:5e:36:06:c0:2c:79:
                    ad:dd:b0:8c:6f:00:44:72:17:5f:31:87:ac:bd:dd:
                    00:c6:37:01:c8:3e:cc:28:fa:81:28:12:dc:ee:6e:
                    73:57:24:bf:be:73:76:09:1d:df:71:76:63:b9:0c:
                    62:fd:ae:c4:9f:dc:6d:94:59:93:15:f9:59:d4:0b:
                    3d:7f:43:7e:e2:0e:cc:ad:ca:09:07:cd:91:8c:4a:
                    74:3c:09:de:29:94:fd:50:03:ee:f7:0c:b2:9f:e3:
                    8f:86:05:cf:62:f3:06:48:32:ce:b2:30:c3:07:b9:
                    0e:df:7a:15:e2:19:f0:72:98:d3:65:17:3b:a8:17:
                    28:20:a2:ad:e2:12:4d:82:0d:38:4b:2e:b8:48:cc:
                    ce:fe:94:e8:4f:ed:4f:a1:eb:b3:ba:3c:66:75:a5:
                    47:9d:b6:60:a2:fc:b6:b9:35:fc:08:37:bc:ff:d8:
                    f1:3e:62:fb:82:b5:fa:a6:ef:39:dd:69:69:46:95:
                    5a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:33:DA:7B:DC:37:ED:FA:45:95:E0:F7:E6:F2:8F:73:CB:10:45:F3
            X509v3 Authority Key Identifier:
                keyid:37:64:66:FC:73:9A:7E:2E:3F:17:8C:59:A3:A0:C0:CC:08:31:0B:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/1/376466FC739A7E2E3F178C59A3A0C0CC08310BD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/376466FC739A7E2E3F178C59A3A0C0CC08310BD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/1/376466FC739A7E2E3F178C59A3A0C0CC08310BD8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:94:12:65:cf:90:1c:04:0f:10:f5:b2:77:34:14:f4:19:4d:
         e5:a5:08:05:1f:bb:9b:2d:4d:14:de:a6:e5:44:68:30:2d:9f:
         7f:84:7a:40:37:8f:cb:83:a7:be:21:62:a1:0c:69:42:ea:ce:
         9b:4a:92:d0:45:b3:a8:a1:03:e5:c4:f4:cb:d5:34:ab:08:f3:
         d5:a5:d1:e5:f0:d8:7e:5b:ed:49:7d:37:a0:73:78:99:a3:d0:
         86:7f:a6:99:45:5c:cf:44:94:e8:fa:65:20:f1:02:b3:aa:b5:
         ea:8d:fd:06:3d:93:9c:cc:9d:73:a7:5f:7a:9b:33:0d:3f:3e:
         bc:a0:42:d3:2e:86:73:ee:ad:9d:d0:de:b8:ef:69:ff:c4:b0:
         d6:41:0b:c1:39:d4:33:39:dc:5d:5a:ed:30:44:a0:57:59:64:
         ad:7a:47:3c:e5:54:73:51:a4:97:90:02:f7:39:25:cc:89:54:
         2d:43:65:82:6a:f7:55:e9:e5:a0:37:bc:0f:3d:b3:c6:e3:cb:
         46:fa:48:f8:1b:d1:e8:37:47:6b:0c:7d:02:0f:8d:05:c7:1c:
         76:3f:87:73:d8:bb:ac:90:ae:e4:7d:d8:b8:f5:ea:4e:19:8b:
         88:cd:44:db:de:e2:e2:96:d9:d6:4e:0f:da:c2:0a:58:3a:f1:
         da:3b:08:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:24 2024 by rpki-client on console-fra.rpki-client.org