Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft
File:                     A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft (raw, json)
Hash identifier:          AghR9R5qeYIwURf5U6C1JndctDF0MJp05t1FPEAwwXw=
Subject key identifier:   81:1C:B7:82:E2:C3:AB:52:19:D0:73:21:64:2E:C9:4E:36:62:96:13
Authority key identifier: A4:7E:65:FD:C3:D0:52:38:EF:E2:B4:D8:DC:22:C5:B7:DE:FE:7D:01
Certificate issuer:       /CN=A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01
Certificate serial:       70977971D3216943D38B2D27B9FB1E6E380FBCFA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft
Manifest number:          0136
Signing time:             Sat 23 Nov 2024 01:20:00 +0000
Manifest this update:     Sat 23 Nov 2024 01:15:00 +0000
Manifest next update:     Sun 24 Nov 2024 02:51:00 +0000
Files and hashes:         1: 323830343a346162303a3a2f33322d3438203d3e20323637323537.roa (hash: D0/VUaAFHtdAcNQdhuU4czfRGVOo/WHc6nmZtHwPWJ8=)
                          2: A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.crl (hash: 8oq2OHiyrsNCtThIpZBB3LEzacNu9R05fcrbCfZ2O8I=)
                          3: 34352e3233322e38302e302f32322d3234203d3e20323637323537.roa (hash: Z4/mxNVIpLXYlsz+vfQD4i3VlaKlfQ6rP1yV7MdNr4s=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.crl
                          rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:97:79:71:d3:21:69:43:d3:8b:2d:27:b9:fb:1e:6e:38:0f:bc:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01
        Validity
            Not Before: Nov 23 01:15:00 2024 GMT
            Not After : Nov 24 02:51:00 2024 GMT
        Subject: CN=811CB782E2C3AB5219D07321642EC94E36629613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:51:ac:90:09:4b:98:cb:78:42:17:51:21:50:
                    f4:c4:80:48:92:a3:2a:b4:15:36:ad:20:4d:9f:53:
                    4a:cd:94:53:ff:cf:38:cc:94:ec:a3:e0:0a:40:3e:
                    60:e1:9f:58:34:60:1b:06:fe:f2:20:5d:a3:f7:8d:
                    a2:79:54:7a:7b:5e:38:d7:24:90:c9:bc:74:94:27:
                    80:b9:2f:55:63:33:b8:af:4a:b7:30:04:ef:9c:dd:
                    f7:12:ef:7b:60:90:47:59:54:51:c4:cc:dd:11:20:
                    7f:0f:a7:8f:dd:ab:1f:6e:42:01:8c:ac:49:64:a8:
                    a1:3f:7f:78:94:09:48:9e:d4:5e:e4:e6:0c:bf:38:
                    c0:30:26:32:f0:bb:9a:2e:a4:30:b0:55:c6:f7:04:
                    a2:77:5e:58:b7:0c:b8:33:9f:e7:13:03:47:33:49:
                    c1:c2:bb:38:a4:65:dc:41:f5:ab:67:22:84:ac:fc:
                    c1:19:86:28:b4:09:ab:bc:2f:ed:be:e3:e0:b2:b7:
                    2c:26:76:3d:e1:b5:db:59:1d:ec:88:d6:21:f4:25:
                    44:01:67:a1:e2:de:84:0e:14:a3:fe:58:5a:15:48:
                    96:b6:c9:6f:71:25:b3:98:4f:b2:97:9f:5c:90:c3:
                    44:71:b9:06:c7:54:2d:d5:c1:0e:11:6d:97:e7:d4:
                    c5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1C:B7:82:E2:C3:AB:52:19:D0:73:21:64:2E:C9:4E:36:62:96:13
            X509v3 Authority Key Identifier:
                keyid:A4:7E:65:FD:C3:D0:52:38:EF:E2:B4:D8:DC:22:C5:B7:DE:FE:7D:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:f7:ec:2a:b6:1a:1a:39:17:0c:9d:ff:4e:b8:eb:77:ed:6b:
         b3:99:c8:86:85:3c:ec:de:f0:94:1e:d4:36:f4:a3:6c:e2:9c:
         73:d4:f9:8d:34:77:22:c7:e1:74:27:80:7b:6e:b1:cd:77:e7:
         4b:4a:06:ba:eb:60:8a:e3:4e:91:3c:fc:1b:20:db:4c:ca:00:
         f9:a9:87:b6:45:46:0a:ee:aa:df:85:1c:32:e6:a8:de:0e:57:
         41:cd:76:a9:f7:07:fc:86:bc:f5:06:90:e1:56:9c:ad:68:0e:
         e3:cb:96:f5:8a:b8:ab:6f:1c:18:97:18:cb:34:b7:70:f0:9e:
         18:3b:aa:8e:f6:42:4d:a1:d4:cb:17:69:87:a1:76:06:93:c6:
         c9:a9:54:9a:3b:eb:3a:27:44:2d:c8:95:ba:66:29:24:35:7a:
         0c:42:46:62:ec:a9:7d:68:45:90:09:11:e2:01:1a:cc:32:07:
         49:09:64:0e:9b:1d:cd:b3:38:c7:fc:21:73:4d:69:e3:81:fb:
         fd:ec:1e:45:13:3d:3d:24:37:39:88:39:7d:dc:3a:34:0c:63:
         a1:81:26:4e:48:de:8b:1d:0d:46:34:87:5a:b8:aa:20:30:49:
         2a:db:af:3e:20:7a:b0:66:ce:09:ca:b0:39:e7:bf:2a:f4:5f:
         77:1a:6f:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcJd5cdMhaUPTiy0nufsebjgPvPowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQ3RTY1RkRDM0QwNTIzOEVGRTJCNEQ4REMyMkM1QjdE
RUZFN0QwMTAeFw0yNDExMjMwMTE1MDBaFw0yNDExMjQwMjUxMDBaMDMxMTAvBgNV
BAMTKDgxMUNCNzgyRTJDM0FCNTIxOUQwNzMyMTY0MkVDOTRFMzY2Mjk2MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2UayQCUuYy3hCF1EhUPTEgEiS
oyq0FTatIE2fU0rNlFP/zzjMlOyj4ApAPmDhn1g0YBsG/vIgXaP3jaJ5VHp7XjjX
JJDJvHSUJ4C5L1VjM7ivSrcwBO+c3fcS73tgkEdZVFHEzN0RIH8Pp4/dqx9uQgGM
rElkqKE/f3iUCUie1F7k5gy/OMAwJjLwu5oupDCwVcb3BKJ3Xli3DLgzn+cTA0cz
ScHCuzikZdxB9atnIoSs/MEZhii0Cau8L+2+4+Cytywmdj3htdtZHeyI1iH0JUQB
Z6Hi3oQOFKP+WFoVSJa2yW9xJbOYT7KXn1yQw0RxuQbHVC3VwQ4RbZfn1MVFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUgRy3guLDq1IZ0HMhZC7JTjZilhMwHwYDVR0j
BBgwFoAUpH5l/cPQUjjv4rTY3CLFt97+fQEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFhpc3Y0MXpUV1hmYlNpZkJFdkVVUVIxRzJkNGRZNlRzTFlRcXp1UUp2
RXMvMi9BNDdFNjVGREMzRDA1MjM4RUZFMkI0RDhEQzIyQzVCN0RFRkU3RDAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E0N0U2NUZEQzNEMDUyMzhF
RkUyQjREOERDMjJDNUI3REVGRTdEMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OFhpc3Y0MXpUV1hmYlNpZkJFdkVVUVIxRzJkNGRZNlRzTFlRcXp1UUp2RXMvMi9B
NDdFNjVGREMzRDA1MjM4RUZFMkI0RDhEQzIyQzVCN0RFRkU3RDAxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjPfsKrYaGjkXDJ3/Trjrd+1rs5nIhoU87N7wlB7UNvSjbOKcc9T5jTR3Isfh
dCeAe26xzXfnS0oGuutgiuNOkTz8GyDbTMoA+amHtkVGCu6q34UcMuao3g5XQc12
qfcH/Ia89QaQ4VacrWgO48uW9Yq4q28cGJcYyzS3cPCeGDuqjvZCTaHUyxdph6F2
BpPGyalUmjvrOidELciVumYpJDV6DEJGYuypfWhFkAkR4gEazDIHSQlkDpsdzbM4
x/whc01p44H7/eweRRM9PSQ3OYg5fdw6NAxjoYEmTkjeix0NRjSHWriqIDBJKtuv
PiB6sGbOCcqwOee/KvRfdxpvYQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:36 2024 by rpki-client on console-ams.rpki-client.org