Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.mft
File:                     F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.mft (raw, json)
Hash identifier:          v3qZUXJ4gGHNNes/3u8Fron82lZ8NfXq+OC9MTAKO1o=
Subject key identifier:   9C:A5:87:9C:D8:C9:C7:CB:1E:DC:FC:51:CA:41:F0:DA:FF:87:08:84
Authority key identifier: F8:40:F3:A0:7A:5B:A8:A1:B8:C8:95:C5:96:26:D4:B9:07:A8:8F:7E
Certificate issuer:       /CN=F840F3A07A5BA8A1B8C895C59626D4B907A88F7E
Certificate serial:       227D303A0C57662F559E7008F097377D87F90C73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.mft
Manifest number:          0137
Signing time:             Fri 22 Nov 2024 14:57:32 +0000
Manifest this update:     Fri 22 Nov 2024 14:52:32 +0000
Manifest next update:     Sat 23 Nov 2024 16:04:32 +0000
Files and hashes:         1: F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.crl (hash: Mf29bascFmMTMmfgSYxQ1sRBxMFeAam61Ap34Ve9qxM=)
                          2: 3138392e33392e3138362e302f32342d3234203d3e20323730373932.roa (hash: 9GThwYclFCqjc8KOr3QXemdVmjZFE5DnRcUa07Tcf/s=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.crl
                          rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:04:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:7d:30:3a:0c:57:66:2f:55:9e:70:08:f0:97:37:7d:87:f9:0c:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F840F3A07A5BA8A1B8C895C59626D4B907A88F7E
        Validity
            Not Before: Nov 22 14:52:32 2024 GMT
            Not After : Nov 23 16:04:32 2024 GMT
        Subject: CN=9CA5879CD8C9C7CB1EDCFC51CA41F0DAFF870884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:98:9e:9b:d8:0f:1c:e5:06:b6:aa:a1:1c:8a:
                    38:28:57:e5:70:39:72:38:7b:a2:9a:fc:52:fe:02:
                    9d:c0:cd:c9:07:de:87:23:4a:5d:e5:0a:34:44:e8:
                    69:6d:3a:6d:00:dc:61:75:62:60:61:b3:80:28:59:
                    38:d1:45:cd:60:92:25:81:2b:3c:a7:57:6e:8d:4e:
                    51:1a:66:3c:a9:74:ea:62:c3:94:cb:e5:20:c4:14:
                    5c:42:90:1e:b7:dc:ff:4a:60:1a:71:a7:89:48:66:
                    14:c9:50:80:d4:f6:7e:16:0c:0d:68:d6:b5:0b:5f:
                    c2:eb:1e:da:c8:5d:7e:96:d4:bd:f3:fb:e9:c3:d4:
                    7f:71:bc:42:ea:6b:63:74:0a:d7:28:b7:2d:ac:f5:
                    1e:cb:fe:af:ac:f2:5a:e1:f0:ce:e5:fa:6c:9b:c8:
                    32:58:69:1b:30:27:66:82:97:72:63:89:42:e3:b1:
                    2f:62:6f:8e:78:0f:1e:fd:67:0f:69:e4:d9:05:24:
                    72:44:82:81:89:f5:77:d2:55:d3:b0:9d:b3:38:0a:
                    70:1d:67:72:e1:06:75:ec:ec:9d:5c:17:6b:e1:09:
                    bd:57:d7:43:e2:47:12:1e:19:e7:ba:35:02:d4:fe:
                    a3:2e:b5:9c:08:9f:2c:a2:69:94:9a:15:0f:94:33:
                    38:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A5:87:9C:D8:C9:C7:CB:1E:DC:FC:51:CA:41:F0:DA:FF:87:08:84
            X509v3 Authority Key Identifier:
                keyid:F8:40:F3:A0:7A:5B:A8:A1:B8:C8:95:C5:96:26:D4:B9:07:A8:8F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:45:12:15:91:68:4e:ec:66:b7:06:a1:a7:5d:f1:39:68:d7:
         72:7b:ca:0a:10:2f:7a:a6:bf:ed:42:0f:b0:29:dd:9f:78:c4:
         84:55:81:17:2f:ef:ef:ed:8f:e1:f8:aa:22:72:d3:ff:f9:8b:
         35:fe:f9:4d:a2:95:5d:46:3f:35:17:ee:56:5b:11:76:cb:22:
         d9:33:93:4a:28:b9:72:d6:7c:58:89:ba:66:27:61:96:68:71:
         4d:0a:3b:b5:23:e1:23:eb:89:02:06:73:8b:2e:77:67:16:48:
         18:91:f4:c4:b7:99:7d:cf:20:b4:7d:0a:3b:bb:47:62:62:33:
         ab:dc:6e:cf:e6:e8:63:94:96:0a:ea:f9:9f:f0:db:88:61:0e:
         fa:f1:38:0d:5a:92:73:8a:2d:a7:59:f4:2d:0d:d5:f0:38:b1:
         98:d9:70:d3:2f:3e:aa:aa:9a:92:70:40:cc:97:dd:b1:96:f5:
         9b:87:93:56:0c:c6:8c:aa:1e:5e:db:0b:39:02:96:b6:0e:22:
         5e:ec:ba:89:68:ac:74:14:07:35:5d:25:be:ed:c5:8d:af:9a:
         d3:d4:0b:8a:c7:6d:8e:c5:77:48:44:8e:7a:a7:05:46:6c:cf:
         b8:cc:4a:56:81:e3:a0:da:a3:c1:e4:09:73:38:62:30:57:da:
         2b:87:5a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:00 2024 by rpki-client on console-ams.rpki-client.org