Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.mft
File:                     B32F1FCBEE4B489E658636E1B24545CA0E4EA820.mft (raw, json)
Hash identifier:          2OePJb9IMxYlV3/GDzrp7nBq4tzpl4e6IzkO8k7FOYY=
Subject key identifier:   E4:BC:BD:31:1F:96:3A:5D:7E:4D:E4:1B:69:52:B9:AC:DC:E1:12:83
Authority key identifier: B3:2F:1F:CB:EE:4B:48:9E:65:86:36:E1:B2:45:45:CA:0E:4E:A8:20
Certificate issuer:       /CN=B32F1FCBEE4B489E658636E1B24545CA0E4EA820
Certificate serial:       6EF718F4ABC5FD43F474DF732437EDE821C481B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.mft
Manifest number:          0138
Signing time:             Sat 23 Nov 2024 07:17:30 +0000
Manifest this update:     Sat 23 Nov 2024 07:12:30 +0000
Manifest next update:     Sun 24 Nov 2024 07:44:30 +0000
Files and hashes:         1: 34352e342e3131322e302f32322d3234203d3e20323636303730.roa (hash: XRQMHg34h2vJKN42GKAlQDoARz15v4ddy9yyRBZJUIo=)
                          2: B32F1FCBEE4B489E658636E1B24545CA0E4EA820.crl (hash: GV4CyDrCV87/vJfu2z1mxtHMjPuFzoTbjD3DRoa5RKs=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.crl
                          rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:44:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f7:18:f4:ab:c5:fd:43:f4:74:df:73:24:37:ed:e8:21:c4:81:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B32F1FCBEE4B489E658636E1B24545CA0E4EA820
        Validity
            Not Before: Nov 23 07:12:30 2024 GMT
            Not After : Nov 24 07:44:30 2024 GMT
        Subject: CN=E4BCBD311F963A5D7E4DE41B6952B9ACDCE11283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a8:95:51:4d:99:79:e5:1c:a7:b7:f4:78:ba:
                    03:46:7d:ff:0d:1a:c6:33:eb:f0:1b:72:3f:c3:d1:
                    36:1f:03:4e:a2:4b:9c:68:df:7c:64:29:fd:d6:87:
                    d7:b2:d6:7b:0a:bd:03:ce:5a:4e:56:6d:1b:08:ef:
                    54:40:a0:8e:12:43:64:f6:46:8f:83:a2:28:34:53:
                    2c:91:41:64:3f:62:53:8f:c1:2a:85:2d:58:fd:0e:
                    8d:87:45:f8:8a:5a:18:b9:f9:c0:19:29:fe:ed:9c:
                    cd:f5:a9:3d:38:96:94:41:39:4c:1b:fb:79:36:ec:
                    31:fa:f4:d3:ae:9e:29:25:02:2b:e9:df:4a:46:bc:
                    c7:bc:f9:04:5d:5e:81:2f:0b:b0:93:46:91:8d:46:
                    4b:3f:14:53:41:4b:06:54:c4:1f:31:aa:9a:20:f4:
                    33:bd:50:d9:de:05:dc:27:b0:5f:91:10:f2:89:26:
                    cd:76:05:e1:34:9b:de:c4:db:db:32:e8:5b:b4:37:
                    0b:33:e4:40:d7:ca:70:e9:0f:15:5f:fb:a2:b8:ee:
                    55:ad:c9:ec:13:8c:9c:11:fa:48:d8:ef:55:c1:20:
                    ec:9e:f7:65:f0:9b:2c:3f:ea:9f:23:09:81:e2:1c:
                    6a:47:0e:30:4a:fd:b2:41:9a:d6:8f:14:88:fb:9c:
                    ea:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:BC:BD:31:1F:96:3A:5D:7E:4D:E4:1B:69:52:B9:AC:DC:E1:12:83
            X509v3 Authority Key Identifier:
                keyid:B3:2F:1F:CB:EE:4B:48:9E:65:86:36:E1:B2:45:45:CA:0E:4E:A8:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:92:68:e0:03:1f:14:bc:ac:2b:50:87:76:0a:2a:d4:fd:96:
         59:71:e2:56:3b:ac:e9:fe:6b:7c:b7:32:58:99:5b:cb:12:e0:
         01:94:e0:87:17:81:d6:b1:a4:26:df:8d:d7:96:22:7c:e7:b1:
         bc:f4:c5:00:f5:fa:ad:f0:0c:ce:e7:ed:33:a4:79:65:35:00:
         c1:ad:83:a9:d5:c3:66:44:35:e0:d6:f6:3f:0a:db:e0:32:50:
         4d:1c:d1:c0:bb:26:b0:9d:a0:38:7d:69:e9:67:a9:cf:6d:0e:
         1e:3e:49:22:16:20:c3:ff:e6:5f:0d:3a:d9:91:a3:81:ad:e5:
         da:27:ed:cc:61:c5:5c:76:d0:86:81:f7:3a:11:17:ac:c1:43:
         c7:c4:32:f4:4a:07:d2:cc:19:19:e9:d8:c3:44:2e:f7:7e:bd:
         bc:d9:5a:11:2f:06:60:92:8f:df:71:c3:55:03:34:55:f1:e9:
         65:78:d3:82:e2:40:17:8b:f4:4a:f9:62:1c:95:6c:4b:0a:04:
         b5:53:58:72:ac:27:e9:20:04:77:80:26:8a:7a:32:46:e7:9e:
         dc:a9:e2:d3:87:c7:73:5a:ea:21:25:ce:71:dd:a5:6c:9d:9d:
         c0:6b:b7:46:e1:42:76:aa:a2:a6:b6:bb:a9:6e:0f:d6:68:67:
         1e:65:33:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:02 2024 by rpki-client on console-fra.rpki-client.org