Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/8A9A31995D56C92279C59971190F9CDC7E94D924.mft
File:                     8A9A31995D56C92279C59971190F9CDC7E94D924.mft (raw, json)
Hash identifier:          caPsVh0fiztfmpFaDwjM5f0p3I8VAG8dF/y82oxkRrM=
Subject key identifier:   DA:03:3A:8B:FF:6B:04:DF:16:FE:4B:33:EE:F5:6B:10:BF:2E:36:6A
Authority key identifier: 8A:9A:31:99:5D:56:C9:22:79:C5:99:71:19:0F:9C:DC:7E:94:D9:24
Certificate issuer:       /CN=8A9A31995D56C92279C59971190F9CDC7E94D924
Certificate serial:       0656C528E81EFE6275DE0D794BA778A68C9F797D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9A31995D56C92279C59971190F9CDC7E94D924.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/8A9A31995D56C92279C59971190F9CDC7E94D924.mft
Manifest number:          72
Signing time:             Sun 30 Jun 2024 15:39:49 +0000
Manifest this update:     Sun 30 Jun 2024 15:34:49 +0000
Manifest next update:     Mon 01 Jul 2024 17:12:49 +0000
Files and hashes:         1: 34352e372e302e302f32322d3234203d3e20323637333838.roa (hash: DsxTCxrIeD2mhuCp9uRLtOPhynW0kbRwjKdIX7r1Qew=)
                          2: 8A9A31995D56C92279C59971190F9CDC7E94D924.crl (hash: 6YTP1FXkT2Xf7A3ysRMjh3GOP7r8y/ynfOM6P8vQ8XM=)
                          3: 34352e3233342e3234382e302f32322d3234203d3e20323637333838.roa (hash: PUaFjY2HmoDsbEtauZ/ZKGD1opYe6pEbRXzsWpAD3+o=)
                          4: 3133322e3235352e34342e302f32322d3232203d3e20323637333838.roa (hash: 2SkcsqT2wIufQiGDHxTuQj2vzX96amwBD/Ssc2F8aYQ=)
                          5: 34352e342e3135362e302f32322d3232203d3e20323637333838.roa (hash: JZaHVE5PQbt3f27GFoHSIycJRgwlMn9L9vE/GbFTk0c=)
                          6: 34352e3137342e3230382e302f32322d3234203d3e20323637333838.roa (hash: cSOTk3IRVQEl4R0xpxwVKr3QxZoTY7QMhaMUNeB4aqs=)
                          7: 3133312e3139362e34302e302f32322d3234203d3e20323637333838.roa (hash: 1uLqSNH4kZxfdUNdKv5elwcIRst6Xsdm+KCVpqsFgLc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/8A9A31995D56C92279C59971190F9CDC7E94D924.crl
                          rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/8A9A31995D56C92279C59971190F9CDC7E94D924.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9A31995D56C92279C59971190F9CDC7E94D924.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Jul 2024 17:12:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:56:c5:28:e8:1e:fe:62:75:de:0d:79:4b:a7:78:a6:8c:9f:79:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A9A31995D56C92279C59971190F9CDC7E94D924
        Validity
            Not Before: Jun 30 15:34:49 2024 GMT
            Not After : Jul  1 17:12:49 2024 GMT
        Subject: CN=DA033A8BFF6B04DF16FE4B33EEF56B10BF2E366A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:00:54:3f:28:5b:6f:7a:cc:97:f6:33:9a:4a:
                    10:90:dd:f4:f0:c0:47:cb:ba:a9:37:0e:bd:f4:d8:
                    2d:d9:30:9e:20:38:64:e0:2c:26:30:b0:ca:04:95:
                    2e:94:51:b9:98:11:34:a3:13:99:f9:8b:0c:b8:32:
                    be:a9:e9:7f:3a:95:18:0c:52:a6:f4:65:d0:7f:b0:
                    c3:e0:66:9d:a4:f1:c7:6a:f1:29:c9:22:11:e4:8c:
                    18:10:26:58:20:7c:6f:65:d0:f7:6a:f9:c0:5b:ac:
                    df:16:97:60:4a:22:6b:83:db:04:ff:4a:8f:53:ea:
                    07:50:77:26:08:9b:f4:28:bb:ee:0b:bb:88:87:90:
                    d1:12:04:df:ed:1d:77:02:95:97:09:d3:6c:ed:0a:
                    a8:86:28:08:5a:7f:1e:33:12:c9:f0:68:54:31:a8:
                    f7:f1:23:75:d4:17:7c:7a:db:e2:60:4b:32:94:82:
                    ea:8e:53:1a:8d:b4:49:a3:48:4b:4b:6e:ff:52:b4:
                    20:ba:c3:36:45:43:74:1d:44:6e:d9:2d:0d:60:64:
                    59:08:47:e3:a6:af:f9:04:9f:22:e9:d5:14:a4:da:
                    66:f4:c6:c3:a3:23:6a:99:fd:dd:9f:ea:45:9f:fe:
                    24:fc:78:84:65:0e:f4:e5:23:f0:97:be:c4:e4:72:
                    6d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:03:3A:8B:FF:6B:04:DF:16:FE:4B:33:EE:F5:6B:10:BF:2E:36:6A
            X509v3 Authority Key Identifier:
                keyid:8A:9A:31:99:5D:56:C9:22:79:C5:99:71:19:0F:9C:DC:7E:94:D9:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/8A9A31995D56C92279C59971190F9CDC7E94D924.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9A31995D56C92279C59971190F9CDC7E94D924.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/8A9A31995D56C92279C59971190F9CDC7E94D924.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:91:05:29:3f:4e:70:93:fa:87:f6:e4:f5:33:d9:d2:6f:a9:
         26:44:10:03:f8:0d:c9:33:a6:e8:a7:ef:db:7b:61:f4:1c:de:
         23:45:11:f0:12:cc:a6:45:4d:d8:53:65:01:1a:f6:07:d7:51:
         08:30:ea:f2:89:a3:2d:98:5c:f1:74:42:26:0a:87:14:c5:1c:
         f2:a3:bd:b1:dd:9e:62:91:75:00:75:a5:4d:c9:e6:02:69:26:
         ef:43:11:90:e3:79:d4:1a:d9:35:65:0b:e3:a8:e4:e3:a3:0e:
         75:83:64:3a:38:ce:df:f5:5d:94:de:b7:3a:16:f3:94:de:8f:
         44:db:ea:90:e5:e6:2c:f3:84:3f:18:a5:cb:85:8c:18:cb:16:
         b7:54:13:a1:67:88:4b:fc:4c:76:16:cf:89:98:21:d2:8e:eb:
         1f:01:ed:06:bc:5f:74:dd:62:ac:7f:1a:b5:e3:a9:fc:1b:83:
         18:c1:a8:f7:bf:f7:1f:94:2c:cc:75:6b:18:3b:32:9a:a8:d2:
         b1:59:f8:19:08:07:4c:c4:0c:b0:2e:94:91:6f:77:4c:94:2e:
         9c:7a:5b:60:1f:0d:47:76:23:45:fe:3e:81:f3:76:86:68:73:
         56:94:c5:d4:e6:cd:6f:2b:36:a9:85:5d:51:b2:9c:64:27:fc:
         1d:d6:20:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 18:30:55 2024 by rpki-client on console-fra.rpki-client.org