Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.mft
File:                     04AD1F05D68B9B203EF5342540FC9B754E8F2B50.mft (raw, json)
Hash identifier:          84tmBzgS+f/5GHZK+IJjrmFMKIKMpnv2z3IL4UA8WnU=
Subject key identifier:   3D:A0:F3:A1:38:89:ED:58:17:87:22:FF:7A:2C:E6:0B:A1:17:7D:D5
Authority key identifier: 04:AD:1F:05:D6:8B:9B:20:3E:F5:34:25:40:FC:9B:75:4E:8F:2B:50
Certificate issuer:       /CN=04AD1F05D68B9B203EF5342540FC9B754E8F2B50
Certificate serial:       7F2E9C4C57BAB00666788F5D66619B01D45579DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.mft
Manifest number:          A2
Signing time:             Tue 26 Nov 2024 09:58:36 +0000
Manifest this update:     Tue 26 Nov 2024 09:53:36 +0000
Manifest next update:     Wed 27 Nov 2024 10:36:36 +0000
Files and hashes:         1: 34352e3138372e3134332e302f32342d3234203d3e20323639343637.roa (hash: J2e5rJaPc4uhX7yvEPr5dit8z6te7hJHOg4B/i4x3IY=)
                          2: 323830343a363531343a3a2f33322d313238203d3e20323639343637.roa (hash: uCb2LzEONL7pMAFRxDrUi6bRoixvjZfQDG3ykP0ZqmI=)
                          3: 34352e3138372e3134312e302f32342d3234203d3e20323639343637.roa (hash: 80iIf4nu3FBOUaEDHEdNeKHWltRz7iiT7cfsrsp2MFo=)
                          4: 34352e3138372e3134322e302f32342d3234203d3e20323639343637.roa (hash: hKLG3KIUj0/Xlv5UKepJfafi8Ej2cfgwx7NaqGkRKkM=)
                          5: 34352e3138372e3134302e302f32322d3232203d3e20323639343637.roa (hash: W2b4fysC67tvhLLeGudNKLms0gt9aqb63g3ZLJjXGys=)
                          6: 34352e3138372e3134302e302f32342d3234203d3e20323639343637.roa (hash: xfmEUI8j48KDYjLl10aAJVo9eUgqDpMmKfqEU+YbxwA=)
                          7: 04AD1F05D68B9B203EF5342540FC9B754E8F2B50.crl (hash: +haOD0q3umtI7OQDUrDAzZL2fXPwlwZPUln+Ny9plNc=)
                          8: 34352e3138372e3134302e302f32322d3332203d3e20323639343637.roa (hash: pjcdvt+FgUbeo3s8sUzyqHX2RcXf+2nCmDMQYi8Hd78=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.crl
                          rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:36:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:2e:9c:4c:57:ba:b0:06:66:78:8f:5d:66:61:9b:01:d4:55:79:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04AD1F05D68B9B203EF5342540FC9B754E8F2B50
        Validity
            Not Before: Nov 26 09:53:36 2024 GMT
            Not After : Nov 27 10:36:36 2024 GMT
        Subject: CN=3DA0F3A13889ED58178722FF7A2CE60BA1177DD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ed:0e:66:26:fb:86:bc:e1:8f:9d:6a:a8:08:
                    76:96:8e:4b:37:0e:0f:eb:6f:18:ec:83:87:82:67:
                    9f:00:82:8b:84:a5:12:82:f4:79:47:01:c7:27:b7:
                    e6:64:26:05:75:8d:99:9f:e0:28:4f:d2:9e:6c:46:
                    67:36:02:4d:a8:2c:78:5f:18:64:1a:d3:fd:45:ec:
                    a6:ff:0e:5d:73:f3:66:8a:36:0c:ac:91:db:dc:05:
                    9c:d4:99:69:2c:df:b6:b7:ac:c6:8c:d4:be:f2:cc:
                    1e:6f:cd:ec:18:58:ae:e2:18:09:e1:fd:31:09:6e:
                    33:d0:8f:60:43:24:c3:d7:2f:7f:20:35:8a:8d:51:
                    73:d8:8d:ec:bd:9d:3f:46:9b:9e:e5:32:98:b3:38:
                    e5:06:22:39:bf:fc:e6:eb:6b:07:b5:d5:9a:5d:23:
                    64:4e:46:64:cb:06:56:5e:90:66:a2:fe:f3:af:5b:
                    a2:5a:94:99:15:9b:71:55:94:10:93:6d:59:9f:b6:
                    8a:7f:78:cb:d6:d3:48:64:b5:07:21:20:3a:6f:64:
                    e1:e6:02:c6:bc:33:dd:04:9a:86:77:11:49:67:4c:
                    a8:d6:7b:c9:0e:f4:bd:fd:7f:88:4e:da:93:e1:e6:
                    34:f9:8e:81:c7:6a:bb:35:67:00:d4:1d:b7:77:6b:
                    45:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A0:F3:A1:38:89:ED:58:17:87:22:FF:7A:2C:E6:0B:A1:17:7D:D5
            X509v3 Authority Key Identifier:
                keyid:04:AD:1F:05:D6:8B:9B:20:3E:F5:34:25:40:FC:9B:75:4E:8F:2B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:b2:57:3d:4e:81:67:a1:64:24:33:5e:b7:1e:8e:3c:74:ff:
         55:c4:78:0f:91:f1:0f:33:e4:94:77:4b:5e:6b:ac:f7:29:4f:
         a1:51:45:d3:84:76:b9:0c:34:f3:86:30:88:d4:cd:2f:65:38:
         c2:94:59:29:ba:db:21:fa:d5:21:39:5a:f8:ca:6f:af:a8:de:
         19:d0:27:39:72:20:ad:55:13:ad:fe:97:b9:1b:c9:a5:4d:a3:
         2b:31:5f:26:bb:85:b9:af:59:04:21:94:64:e0:d8:f3:0c:c5:
         fd:86:13:b8:fc:ca:d9:47:69:61:02:48:db:fc:4d:b6:0f:7d:
         28:8a:b5:27:90:6f:e9:dd:fe:5c:a5:bb:ad:8b:3e:a9:e6:d7:
         22:f7:43:fc:d2:d1:e8:5d:45:ae:d6:10:e4:ca:08:34:aa:f5:
         fc:cc:65:d1:b2:2c:10:26:a3:e7:bc:b4:99:5a:97:49:84:dc:
         04:ab:d9:d0:c4:60:16:50:be:09:f5:ae:ec:32:66:12:da:ed:
         43:e6:ca:59:0f:a3:eb:8d:ba:7d:04:04:33:9a:46:fd:5b:81:
         93:7c:86:4f:3f:6e:78:66:82:5a:63:e1:92:65:cb:6a:5a:92:
         53:ef:e1:6e:42:75:80:01:30:97:e7:3f:1e:65:4b:4c:68:a2:
         a6:ab:71:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:30 2024 by rpki-client on console-ams.rpki-client.org