Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.mft
File:                     482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.mft (raw, json)
Hash identifier:          UpQdOGibcdRB3KtCuJVqOb/Sjp7MNG9HzhvTwA7riTw=
Subject key identifier:   15:87:47:15:A3:6B:9A:11:57:B1:64:65:0C:5F:D9:95:54:96:BD:7F
Authority key identifier: 48:2A:D4:03:43:E8:5C:6A:C8:8E:30:1F:C9:B0:A3:EF:73:A3:B8:1F
Certificate issuer:       /CN=482AD40343E85C6AC88E301FC9B0A3EF73A3B81F
Certificate serial:       208B2DDEA5043D694D2A979B8B7D10653415E3B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.mft
Manifest number:          012D
Signing time:             Fri 22 Nov 2024 11:32:18 +0000
Manifest this update:     Fri 22 Nov 2024 11:27:18 +0000
Manifest next update:     Sat 23 Nov 2024 15:07:18 +0000
Files and hashes:         1: 3138362e3233332e3130322e302f32342d3234203d3e20323733363937.roa (hash: q+78W1imY2oa6g+lC077RGcNopmbqhaPH2Zxo5ihBAA=)
                          2: 482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.crl (hash: vt2ODNcsE0KExlwewVjw31fffh2+pKYcEDAcqwzolcs=)
                          3: 3138362e3233332e3130322e302f32332d3233203d3e20323733363937.roa (hash: 8Qaua9dNdEWBhZXdu7x9TMMKEHS4krCt3mJ9pgT1uf8=)
                          4: 323830343a386164633a3a2f33342d3334203d3e20323733363937.roa (hash: K0C+Tw/qFFSyv7UaQME3ZA5pEClAWbe80oei02g32gc=)
                          5: 323830343a386164633a343030303a3a2f33342d3334203d3e20323733363937.roa (hash: VRkA82PnTW9x5rGQ63b0fZdrG7X/zfeogzUgW9Pfbk8=)
                          6: 323830343a386164633a3a2f33322d3332203d3e20323733363937.roa (hash: MFeJJKtbpJDre0n2NjYMRkBeX5HFo+rGrd4xk7cEA+Q=)
                          7: 3138362e3233332e3130332e302f32342d3234203d3e20323733363937.roa (hash: wApdpWAl8XUd46TklKFbbfY311EQqeQVLKLDV+ejRXs=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.crl
                          rsync://rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:07:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:8b:2d:de:a5:04:3d:69:4d:2a:97:9b:8b:7d:10:65:34:15:e3:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482AD40343E85C6AC88E301FC9B0A3EF73A3B81F
        Validity
            Not Before: Nov 22 11:27:18 2024 GMT
            Not After : Nov 23 15:07:18 2024 GMT
        Subject: CN=15874715A36B9A1157B164650C5FD9955496BD7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ee:b5:9a:52:25:98:20:4b:f5:a3:05:c6:2e:
                    a2:60:d2:cd:92:5f:73:75:39:b9:be:5d:4c:56:4b:
                    de:cc:fd:20:ca:f6:84:15:74:4d:d3:95:bd:4b:fd:
                    89:6d:05:1f:80:02:9f:f1:ce:71:55:a8:16:f4:54:
                    9f:b5:7f:17:f7:27:67:ea:21:0a:5a:d7:bd:45:12:
                    bb:84:e6:4b:81:3a:38:d0:46:ec:ad:35:8c:8b:06:
                    3a:5d:6c:0b:f2:b4:40:62:b9:75:f7:95:e7:92:ac:
                    56:5c:98:db:f5:46:35:a1:6a:fc:57:cc:66:3c:65:
                    06:36:e8:53:4e:0d:13:f9:3e:9b:a1:37:8a:5f:d0:
                    7e:96:02:3e:77:e4:1c:2a:ac:0c:ae:4e:4e:9d:83:
                    69:8f:23:fe:78:f2:ca:af:72:53:82:16:ef:88:e7:
                    c5:72:d5:3b:66:3f:a0:d8:12:98:73:ca:c6:f4:10:
                    e6:b7:f1:27:3b:97:7e:73:8b:1b:25:72:84:4f:04:
                    bd:d4:fd:b0:6d:7c:19:b7:5b:e3:97:c7:81:19:7c:
                    6e:0c:8d:b9:99:41:c9:2f:36:d0:d2:94:68:43:83:
                    7b:0a:88:34:9d:dc:d3:51:14:ad:f3:32:64:54:29:
                    0e:65:90:de:19:71:97:e9:38:d7:91:b8:23:28:24:
                    7f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:87:47:15:A3:6B:9A:11:57:B1:64:65:0C:5F:D9:95:54:96:BD:7F
            X509v3 Authority Key Identifier:
                keyid:48:2A:D4:03:43:E8:5C:6A:C8:8E:30:1F:C9:B0:A3:EF:73:A3:B8:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:46:41:18:7a:cc:08:83:00:89:00:14:96:40:0a:02:9b:b1:
         94:7f:13:bd:65:47:60:9f:2b:db:eb:cb:55:45:c6:bd:bd:3c:
         7a:b6:c5:b9:b9:f6:96:2d:2a:dc:65:68:21:bf:c2:af:ac:37:
         ae:39:7c:66:24:e4:e9:3f:a1:b8:f0:7e:32:04:ce:1f:64:bb:
         c7:f1:72:38:74:99:5d:07:b1:51:c3:1a:d2:c1:f8:77:11:43:
         97:03:33:ed:9a:aa:23:ff:58:65:69:91:77:77:10:84:89:53:
         ef:99:98:96:e4:a0:2c:57:19:66:1c:48:83:55:60:e1:a9:1e:
         9a:7c:46:44:23:af:4d:77:7f:c5:ab:f4:5a:e2:5b:3e:74:27:
         68:78:53:09:d0:d3:3e:af:e6:32:dd:75:ca:05:40:81:c2:24:
         6e:8c:a2:4b:c8:38:e1:0f:4c:e9:b7:d8:ae:fd:68:a9:9c:c2:
         ec:3c:d0:e8:4d:4f:b8:ce:92:09:50:8b:cf:6f:f0:b1:c8:ee:
         ed:29:dc:c9:5f:4b:93:bd:02:27:4b:d5:b7:df:76:84:8b:32:
         14:8d:93:9e:1b:86:a0:f2:2c:d5:bb:00:f8:90:21:d9:b3:55:
         cc:35:1b:b4:51:5e:0e:3c:65:30:c3:49:49:20:4e:43:b9:18:
         7b:8b:be:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:39 2024 by rpki-client on console-ams.rpki-client.org