Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/D296532FA265171A7D36D3EE11F8CD3EE171103D.mft
File:                     D296532FA265171A7D36D3EE11F8CD3EE171103D.mft (raw, json)
Hash identifier:          QT0YcQ/35BiG/VHjeC+3qGJxwhYEg2CsG5vgJX0V0QU=
Subject key identifier:   BC:2A:85:86:FF:F0:39:24:29:63:75:EF:B0:D6:FF:00:47:22:6F:38
Authority key identifier: D2:96:53:2F:A2:65:17:1A:7D:36:D3:EE:11:F8:CD:3E:E1:71:10:3D
Certificate issuer:       /CN=D296532FA265171A7D36D3EE11F8CD3EE171103D
Certificate serial:       705CB61A517299BFBC4DB161673FF18CE93D74AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296532FA265171A7D36D3EE11F8CD3EE171103D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/D296532FA265171A7D36D3EE11F8CD3EE171103D.mft
Manifest number:          A8
Signing time:             Sat 23 Nov 2024 00:28:47 +0000
Manifest this update:     Sat 23 Nov 2024 00:23:47 +0000
Manifest next update:     Sun 24 Nov 2024 03:18:47 +0000
Files and hashes:         1: 323830343a393038303a633030303a3a2f33342d3334203d3e20323733353536.roa (hash: k0mwVIxiAhNrBAGvz4X+jLTqtF4Ex6+aIAENrxyv+G0=)
                          2: 323830343a393038303a3a2f33342d3334203d3e20323733353536.roa (hash: gVeAUeMN6S8RZd+NrwRJJiWgJo3aDiN3NwrO2FhZx2c=)
                          3: D296532FA265171A7D36D3EE11F8CD3EE171103D.crl (hash: 2G+Knlmopm553NLRdm3xTu8PwMAzZVfSUdhKhmJF4Ic=)
                          4: 323830343a393038303a343030303a3a2f33342d3334203d3e20323733353536.roa (hash: fjvU+WlqjoVTDMdEx2evBf0k6y4R5Blxmbp1wwBXsLQ=)
                          5: 323830343a393038303a383030303a3a2f33342d3334203d3e20323733353536.roa (hash: n32ne4MZwLZebbC5a5u2UEC0dXoN7vveRrmHoayKoLE=)
                          6: 323830343a393038303a3a2f33322d3332203d3e20323733353536.roa (hash: sInudCwnZ60yHByZlRPUJcQg6SaHwvHMaxcmX3ZCIzA=)
                          7: 323830343a393038303a3a2f33332d3333203d3e20323733353536.roa (hash: YOkS49VnIUaQjBNBSJN+WQnjVUb33K6lJU1hdvLRMbI=)
                          8: 323830343a393038303a383030303a3a2f33332d3333203d3e20323733353536.roa (hash: s53FebImhNMh9ohqAGnr0C8HEGoiZpT3xZrK0dpwxl4=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/D296532FA265171A7D36D3EE11F8CD3EE171103D.crl
                          rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/D296532FA265171A7D36D3EE11F8CD3EE171103D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296532FA265171A7D36D3EE11F8CD3EE171103D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:5c:b6:1a:51:72:99:bf:bc:4d:b1:61:67:3f:f1:8c:e9:3d:74:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D296532FA265171A7D36D3EE11F8CD3EE171103D
        Validity
            Not Before: Nov 23 00:23:47 2024 GMT
            Not After : Nov 24 03:18:47 2024 GMT
        Subject: CN=BC2A8586FFF03924296375EFB0D6FF0047226F38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:03:ce:13:9d:f7:ed:45:82:13:e4:b8:58:29:
                    59:d3:b7:b7:bc:cb:72:2d:cb:75:a2:c1:83:fd:b2:
                    05:10:65:4d:8c:f4:b2:38:ca:af:eb:d9:3c:a3:f6:
                    5e:ea:d0:3c:00:89:88:54:cb:91:b4:23:01:39:2e:
                    91:3b:5f:63:8d:e9:16:25:4f:2f:ec:23:7d:27:63:
                    d2:7d:09:19:a9:bc:8f:57:20:b4:b7:ba:4e:3e:e4:
                    d9:98:7b:db:c0:3b:c1:f2:5c:4d:53:a1:42:be:93:
                    47:74:bb:cf:5e:c9:65:75:ad:2f:eb:25:6d:16:78:
                    45:f6:ac:9b:6b:fa:fb:9d:b5:39:c3:2a:a7:2f:58:
                    6b:eb:49:2e:5b:d6:61:c8:0d:96:c5:fc:3f:99:8a:
                    bf:b8:50:df:26:cd:c2:4a:dc:0a:89:91:a2:43:66:
                    7f:6a:33:e3:9b:cb:f3:dc:d6:9e:d2:dd:94:fc:d4:
                    67:9d:04:45:e5:bc:9b:a3:fb:28:d3:94:bf:4c:84:
                    cd:17:b2:96:57:a1:d3:ec:a7:86:2a:e7:8f:11:e1:
                    c6:f6:ef:84:f1:5d:e6:11:8d:8e:9f:63:b5:d5:08:
                    ae:2a:a3:b3:dd:cd:1b:0c:a9:b6:3d:f6:22:25:48:
                    5f:5f:59:43:2e:3a:88:5c:7f:86:68:9b:72:7d:ad:
                    2c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:2A:85:86:FF:F0:39:24:29:63:75:EF:B0:D6:FF:00:47:22:6F:38
            X509v3 Authority Key Identifier:
                keyid:D2:96:53:2F:A2:65:17:1A:7D:36:D3:EE:11:F8:CD:3E:E1:71:10:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/D296532FA265171A7D36D3EE11F8CD3EE171103D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296532FA265171A7D36D3EE11F8CD3EE171103D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/D296532FA265171A7D36D3EE11F8CD3EE171103D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:29:a6:be:fe:f2:73:8d:30:ed:a0:73:01:8d:55:25:c6:7d:
         83:d0:b3:d9:51:68:f2:a2:04:26:ca:08:c4:8d:4e:ac:32:a8:
         3b:07:03:f1:be:64:63:91:e6:56:5e:28:4c:fa:6b:8e:e8:fa:
         c8:df:63:36:ac:e5:6d:70:7c:8b:7b:b1:f1:00:b2:f9:0c:98:
         34:86:52:9f:ce:8c:1a:fb:96:8e:c2:59:67:c0:d4:b3:1e:79:
         32:7c:c7:1d:50:de:dd:04:71:b9:32:f7:57:2d:1c:1d:ed:a7:
         b8:81:50:0e:72:ea:91:a7:d3:ff:57:9f:e5:7a:77:67:92:de:
         a8:4d:53:ce:71:65:50:ce:5b:40:51:01:52:84:c3:49:3a:56:
         a3:24:7c:77:5d:82:2f:7e:0d:61:df:dc:05:69:db:bc:e7:8b:
         ff:09:b4:2c:1c:f3:e0:0d:f7:14:eb:10:4d:da:59:1e:c6:f1:
         b3:e2:70:5d:1c:c8:fe:98:b4:43:75:38:42:51:00:7c:27:4f:
         7d:76:3b:97:71:3b:f4:1e:e0:67:79:57:99:21:9c:4a:b5:23:
         49:af:74:25:73:60:09:69:3b:53:1e:2b:53:b0:3c:7a:8a:e8:
         a4:73:08:13:b8:51:d9:e5:7f:5c:d1:c1:63:30:b7:7a:2a:35:
         7f:8e:76:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:06 2024 by rpki-client on console-fra.rpki-client.org