Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.mft
File:                     2A6676986C812A17B00635484B147B51B75ADD4B.mft (raw, json)
Hash identifier:          QOuaE9pAJAOQzfZE03zv/gGeVw8kCEQNfa+qgI/ADms=
Subject key identifier:   3B:9F:08:AC:5C:B6:3E:29:6F:32:04:BD:67:A2:05:03:53:A8:85:20
Authority key identifier: 2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B
Certificate issuer:       /CN=2A6676986C812A17B00635484B147B51B75ADD4B
Certificate serial:       6B7E1F745FFDF40CEDB6E6878D22C12E69021846
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.mft
Manifest number:          2C
Signing time:             Sat 23 Nov 2024 10:51:16 +0000
Manifest this update:     Sat 23 Nov 2024 10:46:16 +0000
Manifest next update:     Sun 24 Nov 2024 11:16:16 +0000
Files and hashes:         1: 2A6676986C812A17B00635484B147B51B75ADD4B.crl (hash: 509BH3eWMWLUp6PolT41aPsquBrDbOmjU1A78ET7Kl0=)
                          2: 3133322e3235352e3130372e302f32342d3234203d3e20323633333535.roa (hash: 7WpstbRo58aRh+FluKcCikfoZLl+g00+gQaph9GbICY=)
                          3: 3133322e3235352e3130342e302f32332d3233203d3e20323633333535.roa (hash: QyYG8IkdLZWosDJag8HGtcCyLvVX1bQdmElFXOUQcZI=)
                          4: 323830343a313464633a3a2f33322d3332203d3e20323633333535.roa (hash: 5s52OaFEgazax6yMn7i2mDqy/eHI9svQrg5vRzUsags=)
                          5: 3139312e33372e37302e302f32332d3233203d3e20323633333535.roa (hash: MqBU95asRiWja4RALl2bWhD41ONbLNSNR97w8BEP3fw=)
                          6: 3133322e3235352e3130352e302f32342d3234203d3e20323633333535.roa (hash: VLTxU1CwDLwpVIx/VdE1aTMkMR0xMmf2oEwVsf6QK8Q=)
                          7: 3133322e3235352e3130362e302f32332d3233203d3e20323633333535.roa (hash: Kbq8D3XwveBTQVDnYhw2sQdvck26QoKsPGtqSDAqTUY=)
                          8: 3133322e3235352e3130342e302f32342d3234203d3e20323633333535.roa (hash: rxA+eJSO9rDkXGci0YFpWTg+pGHphg/3S7Izfvx1W8s=)
                          9: 3139312e33372e36382e302f32342d3234203d3e20323633333535.roa (hash: IIGnqYNi4QXQSnh9oXhPRsZk7/X/CQRDn8iUMVKltK4=)
                          10: 3139312e33372e37302e302f32342d3234203d3e20323633333535.roa (hash: LuHqE50fm91ddl74wzBm2grZHD8SJ6HWw/qSrxN21LY=)
                          11: 3139312e33372e36392e302f32342d3234203d3e20323633333535.roa (hash: SmMebKRcyHa6p9eKioGhEwyWFJq3G3pcpnUWxzfwuLY=)
                          12: 3133322e3235352e3130342e302f32322d3232203d3e20323633333535.roa (hash: RMe4as9gA3zOlZjwDvjwwWXCQ8iXDbVRXjhJqGV4w7Y=)
                          13: 3139312e33372e36382e302f32322d3232203d3e20323633333535.roa (hash: RcjsR+Z6W7jbF2mc90at7cYnSeS2rxpPaJj/pXApKdk=)
                          14: 3139312e33372e36382e302f32332d3233203d3e20323633333535.roa (hash: vAVTxpNiEi6dQUpYKPJ6ARRNzg5nTpXepuGhqJM6s8E=)
                          15: 3133322e3235352e3130362e302f32342d3234203d3e20323633333535.roa (hash: eOy27mVR3hhmdWCQwgBfbYqnvVSeErqWHMxo72SHorg=)
                          16: 3139312e33372e37312e302f32342d3234203d3e20323633333535.roa (hash: Qx1io1IG7j5EVr38I4fnOHV/B2KbQMY2C+T414bYQwQ=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl
                          rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:7e:1f:74:5f:fd:f4:0c:ed:b6:e6:87:8d:22:c1:2e:69:02:18:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A6676986C812A17B00635484B147B51B75ADD4B
        Validity
            Not Before: Nov 23 10:46:16 2024 GMT
            Not After : Nov 24 11:16:16 2024 GMT
        Subject: CN=3B9F08AC5CB63E296F3204BD67A2050353A88520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6a:86:2b:23:87:b9:39:16:9c:0c:6f:41:3e:
                    fc:1f:76:bd:e0:29:0b:01:1d:6a:08:3e:ae:77:62:
                    4b:69:7e:a2:73:06:3c:92:35:ba:13:5c:bd:31:47:
                    05:23:e1:e0:89:8b:34:e0:62:3b:74:d5:07:ec:ce:
                    37:02:1e:3c:5d:3c:76:42:42:96:42:06:0b:18:d3:
                    28:8f:15:13:12:c0:9e:c3:48:02:1d:84:28:ab:9e:
                    9a:b9:98:38:d5:7a:ca:37:5a:4c:d3:4b:66:44:4d:
                    07:b3:46:b4:03:3a:49:21:34:94:d4:7c:31:da:91:
                    62:f3:d3:ff:b6:b6:26:bf:ad:49:0e:fa:cf:d1:74:
                    0b:55:44:a4:be:f7:1d:75:88:55:ec:fb:9a:90:d6:
                    a7:ba:f4:c3:db:8a:57:53:81:d4:96:53:f9:6d:23:
                    0b:43:47:2e:38:76:4d:92:20:10:ae:39:e9:ec:14:
                    8d:f7:f3:b8:66:fa:48:db:95:98:5e:72:51:48:a8:
                    52:f8:8a:83:fd:e7:78:82:3a:90:df:31:ba:e3:1d:
                    58:66:95:b4:f0:35:eb:e6:88:10:23:d6:56:00:fc:
                    56:c3:8a:06:62:00:27:0b:b6:ca:93:a8:91:23:06:
                    04:87:86:10:ae:69:36:57:1a:cc:03:3a:3f:6f:a7:
                    df:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:9F:08:AC:5C:B6:3E:29:6F:32:04:BD:67:A2:05:03:53:A8:85:20
            X509v3 Authority Key Identifier:
                keyid:2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:20:52:bc:ef:4a:4c:51:ab:b1:ee:52:63:da:8f:41:31:2d:
         57:af:1b:97:d2:c8:4d:d4:c5:9d:6c:18:29:32:eb:7a:46:04:
         eb:bc:34:5b:94:16:30:a3:be:37:30:82:34:57:6c:17:2e:17:
         4c:a8:b4:7f:a8:ed:f9:4e:44:2b:bc:9f:34:70:63:12:72:a8:
         35:dd:e6:9d:45:5f:ed:f8:86:fb:c7:34:07:69:4d:97:9d:73:
         5b:b2:4f:47:c7:a7:75:4e:0e:f2:08:e9:da:a9:8f:d0:a9:c1:
         6d:62:24:ea:b6:da:5a:28:15:da:73:2f:1e:ef:f5:cc:82:a5:
         3b:6c:5e:b2:98:d4:66:6a:57:d3:12:49:ed:62:20:cd:63:fb:
         af:d0:9f:b1:e8:b0:91:46:c6:bd:6c:d7:9a:92:35:4b:7f:fc:
         86:80:e5:3a:87:1f:b3:e8:cc:b2:06:3c:12:9a:ca:24:d3:46:
         63:de:80:04:24:ea:59:dd:f9:8c:a8:77:14:55:c3:74:4a:14:
         a1:db:b2:e3:4a:1d:dd:fd:4e:0d:dc:ed:4f:26:db:c3:96:5c:
         37:c7:24:64:d2:20:cd:28:ad:27:5e:08:cf:b6:27:9b:19:4a:
         66:52:76:d6:f1:e9:ff:ee:37:99:2c:da:74:81:4f:48:15:f6:
         02:ce:bb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:49 2024 by rpki-client on console-fra.rpki-client.org