Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.mft
File:                     54204F38B6BA00E08F89389BEA820C255D02514C.mft (raw, json)
Hash identifier:          Se/w1CypkG0MTlzfOrdRJwmSy4wmk6IfDsQ+dbkv50E=
Subject key identifier:   A8:3F:18:FB:A9:B4:6B:03:C5:A8:30:15:0A:B3:C0:CF:54:85:F9:B1
Authority key identifier: 54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C
Certificate issuer:       /CN=54204F38B6BA00E08F89389BEA820C255D02514C
Certificate serial:       537B9811F60E2BEB057339A79FD449EEAB3D5C23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.mft
Manifest number:          0137
Signing time:             Fri 22 Nov 2024 14:50:01 +0000
Manifest this update:     Fri 22 Nov 2024 14:45:01 +0000
Manifest next update:     Sat 23 Nov 2024 16:38:01 +0000
Files and hashes:         1: 3136382e3139342e36372e302f32342d3234203d3e20323635333739.roa (hash: Ti8z2b7bbE8kaazYaZlOGnr2YlHziopFHnodTxWfWRc=)
                          2: 3136382e3139342e36362e302f32342d3234203d3e20323635333739.roa (hash: CgM5RHTl786Pz/cDPoujxZNwMBcRZlL/9uQNlUAehwc=)
                          3: 3136382e3139342e36362e302f32332d3233203d3e20323635333739.roa (hash: SIJAYQ8Ef4j9en+w0rpZWpWD9Y0Xtm+iv36L8xmRl0w=)
                          4: 3136382e3139342e36352e302f32342d3234203d3e20323635333739.roa (hash: 2kmYAmenPltnbSj/VtzCQYJQVgqlVU538jnTsoaJzkM=)
                          5: 3136382e3139342e36342e302f32332d3233203d3e20323635333739.roa (hash: un6T8V8ULFIwM2y5y30Po1VgVRD7+q7LVhleZGfd3w0=)
                          6: 3136382e3139342e36342e302f32342d3234203d3e20323635333739.roa (hash: aNdCLUll+YgJBJ/0nkKVzvRLSVQjsLzcGdyLOIIEShk=)
                          7: 54204F38B6BA00E08F89389BEA820C255D02514C.crl (hash: BA4aarnAKQ0Ajvl8ND0hhvFB5lKildt4qXvooS5Ft7M=)
                          8: 323830343a333332633a3a2f33322d3332203d3e20323635333739.roa (hash: 49tfRxwlWRzBC55WnhPOfxV5F64oV/OkB3K9PYULAUE=)
                          9: 323830343a333332633a383030303a3a2f33332d3333203d3e20323635333739.roa (hash: IR/A6fEMzcSjjDaPPPqXdpaTuAxkTrIrnzKEVek4KVM=)
                          10: 323830343a333332633a3a2f33332d3333203d3e20323635333739.roa (hash: brSrUgQ4Mn795Q97YgmRGSii5oBxp6E1/VM9ntNE+D0=)
                          11: 3136382e3139342e36342e302f32322d3232203d3e20323635333739.roa (hash: lv4suCfQ1EgmQOIOVuZ1s0TCiQv9pJDX7hiM5elrRXk=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl
                          rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:7b:98:11:f6:0e:2b:eb:05:73:39:a7:9f:d4:49:ee:ab:3d:5c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54204F38B6BA00E08F89389BEA820C255D02514C
        Validity
            Not Before: Nov 22 14:45:01 2024 GMT
            Not After : Nov 23 16:38:01 2024 GMT
        Subject: CN=A83F18FBA9B46B03C5A830150AB3C0CF5485F9B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0c:f4:9a:da:17:6e:65:fc:24:9b:d5:4e:03:
                    2a:21:f2:34:76:0d:fe:d7:bf:64:b0:d6:b3:43:47:
                    96:00:b1:dd:fe:e5:49:69:52:92:d9:48:86:69:a1:
                    56:cb:2f:ba:5f:fb:dc:f0:ee:8d:f1:ab:86:79:ed:
                    36:ae:c4:9f:c0:c4:98:13:d6:2f:2d:40:22:64:e6:
                    2f:f0:48:cd:c7:a2:eb:43:cd:03:70:30:fc:fb:fb:
                    fa:c6:8e:63:37:47:c4:87:06:9e:da:90:f4:db:0e:
                    69:96:7d:f0:a7:3f:4c:fa:25:22:ed:22:d3:bd:f2:
                    f2:bc:85:83:5d:9b:c2:5e:56:c7:4d:85:d5:df:ec:
                    d5:9a:b3:4a:09:82:8f:83:a2:3c:47:13:e1:d9:6f:
                    fd:1f:ef:a2:4f:4f:0a:f2:a1:32:f4:b8:94:35:63:
                    d8:28:33:aa:ed:53:0f:9e:4c:2c:ff:d2:3b:b9:25:
                    7d:c4:f2:3c:74:5d:b4:77:d0:4c:3c:c1:7e:51:b4:
                    a3:ce:ee:d9:f5:dc:5a:0a:b7:1a:9f:54:ad:f1:97:
                    d4:18:b6:8d:f8:9f:c5:b2:0e:6e:84:68:4d:e4:49:
                    f5:5d:82:0b:f8:b0:6c:95:7c:7c:5a:0f:88:2b:dd:
                    41:d3:5f:26:30:08:44:88:f2:5c:bf:c5:48:fb:ee:
                    24:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:3F:18:FB:A9:B4:6B:03:C5:A8:30:15:0A:B3:C0:CF:54:85:F9:B1
            X509v3 Authority Key Identifier:
                keyid:54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:a4:fc:34:d5:50:43:76:76:56:fc:ab:9d:5f:93:20:c7:6f:
         8d:71:ca:0f:77:11:dd:24:b3:e4:a2:8b:79:ec:93:16:b7:ad:
         5b:2e:b8:a2:2b:28:dd:2e:58:d8:2d:98:16:5c:89:ae:3e:04:
         8f:bc:e6:34:68:da:4b:ac:af:40:30:b6:b7:d3:ed:16:9c:2a:
         5a:ea:2f:d0:a1:cf:9c:5d:ef:d3:5f:84:9e:90:cd:3a:ac:ff:
         c0:ff:11:0b:fd:60:11:e5:7a:b9:30:9e:88:13:ef:61:13:e2:
         f6:3a:e8:ec:ea:09:a1:5e:35:7e:96:fa:88:41:09:1f:d4:8e:
         e5:1a:91:58:e0:66:5b:29:a0:37:1e:d1:c5:e2:64:72:25:d1:
         af:a9:02:1b:aa:24:fc:b1:31:1c:c0:3d:1b:d5:ad:bf:5e:a7:
         33:75:72:cb:96:14:e7:00:69:fb:94:a7:85:32:4d:f2:14:4c:
         dc:21:2a:7c:80:cc:46:31:04:3d:6d:04:67:d3:9d:d4:ba:06:
         59:0c:c2:b2:c1:7f:ef:96:ab:8f:e2:3f:9e:f2:07:de:2b:3f:
         ac:39:8a:32:69:d6:05:32:6d:f0:ae:e7:41:96:24:6f:9d:88:
         d2:b2:12:cd:11:6a:20:0d:19:8f:8d:a1:c5:ce:c2:9b:b8:1d:
         c0:57:95:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:59 2024 by rpki-client on console-ams.rpki-client.org