Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
File:                     DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft (raw, json)
Hash identifier:          LCZPASOgwz+u5obRxgTcl0Xwgrx1TLEs0X0M0DM/bOc=
Subject key identifier:   CF:54:60:95:99:71:CB:E6:3B:EF:FE:BF:17:DD:B0:B3:05:CB:85:8F
Authority key identifier: DF:D4:20:BE:EE:86:65:8C:69:BF:7B:F0:25:AB:DE:B3:5F:72:3B:3D
Certificate issuer:       /CN=DFD420BEEE86658C69BF7BF025ABDEB35F723B3D
Certificate serial:       72C66E80D3A4A49F5C0CC1BC4629BF0A33559A37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
Manifest number:          013A
Signing time:             Mon 25 Nov 2024 18:55:59 +0000
Manifest this update:     Mon 25 Nov 2024 18:50:59 +0000
Manifest next update:     Tue 26 Nov 2024 19:22:59 +0000
Files and hashes:         1: DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl (hash: kSb4bjGh6b9QjPsNfj+MLHuV0TKci8M57HsbSvMwldQ=)
                          2: 323830343a386230303a3a2f33322d3335203d3e20323733373036.roa (hash: YpJsKIbgSlM586X3w92XjBFnpK04/TFblWmzqy6Hyj0=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl
                          rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 19:22:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c6:6e:80:d3:a4:a4:9f:5c:0c:c1:bc:46:29:bf:0a:33:55:9a:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFD420BEEE86658C69BF7BF025ABDEB35F723B3D
        Validity
            Not Before: Nov 25 18:50:59 2024 GMT
            Not After : Nov 26 19:22:59 2024 GMT
        Subject: CN=CF5460959971CBE63BEFFEBF17DDB0B305CB858F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0d:a5:49:06:c2:44:d9:c9:ad:6f:30:24:d7:
                    a9:9b:9f:a5:d5:20:70:da:af:41:f5:97:ba:4f:ed:
                    16:77:05:42:10:46:7b:c6:ea:fd:e0:fa:d2:0c:65:
                    f6:5b:e2:14:0d:8d:19:0e:a5:ae:0a:4a:34:e2:fd:
                    48:ec:d2:3a:c6:72:f4:d7:22:42:55:98:a0:56:2f:
                    7c:04:d1:51:40:f5:50:b1:74:16:fa:f7:59:3b:52:
                    3a:a4:ca:1f:49:74:cb:f4:15:5c:4c:28:e5:ff:43:
                    45:4d:48:a4:63:2e:b8:fd:40:c4:96:94:f9:7f:66:
                    cd:69:cd:7a:d6:74:a7:0f:a6:04:d0:6f:07:af:42:
                    a1:49:89:fb:26:68:40:f2:e5:1c:a9:3b:a8:68:5a:
                    4e:ab:bb:0f:34:f7:94:78:01:d6:11:81:bc:d3:f3:
                    9a:09:d6:15:e6:c5:c7:24:95:12:03:02:ad:39:b1:
                    b1:d6:e6:71:96:86:9b:c9:32:02:ff:0b:73:a5:9d:
                    a4:58:15:84:14:b8:b5:bf:3e:53:93:82:51:12:12:
                    05:d1:44:9a:98:1d:88:06:2d:38:35:88:99:11:af:
                    62:2d:26:62:a6:d2:68:65:d5:52:8e:1e:a9:6b:09:
                    0e:09:e7:99:64:4e:f7:ef:ac:e7:e8:cf:59:cc:2b:
                    43:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:54:60:95:99:71:CB:E6:3B:EF:FE:BF:17:DD:B0:B3:05:CB:85:8F
            X509v3 Authority Key Identifier:
                keyid:DF:D4:20:BE:EE:86:65:8C:69:BF:7B:F0:25:AB:DE:B3:5F:72:3B:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:94:c3:9e:5e:eb:40:8f:f0:13:15:62:96:49:26:77:aa:98:
         32:4a:f2:0a:cd:75:43:5c:28:e4:6e:15:3c:09:6f:72:d2:f4:
         9e:a8:6f:f4:55:57:68:3e:93:a4:84:87:01:d7:5a:4e:67:de:
         66:29:a4:16:71:01:87:02:bd:a7:81:03:bc:81:d2:db:90:03:
         9b:d6:6a:27:14:f6:1b:cc:b4:4d:bb:64:48:15:ac:8c:dc:76:
         a9:d0:e0:7a:09:a5:4a:e1:8c:15:38:6b:a3:da:f8:be:da:3d:
         d5:7b:eb:6e:eb:93:88:dc:9c:bc:a1:e0:06:95:de:ab:ca:ae:
         c6:31:05:bd:76:62:ba:23:d4:00:be:38:69:cf:c6:68:74:97:
         b8:82:51:58:c7:10:ea:6d:bd:17:ee:27:6a:74:69:30:87:c6:
         1b:f4:3a:07:0b:29:16:99:fb:b1:c6:9d:cc:6b:fc:9e:cd:13:
         51:82:8b:c8:18:06:e9:a0:a8:a6:f3:0a:91:1a:8b:45:91:38:
         cb:cc:25:64:50:3d:e4:44:b5:b5:ca:a9:c4:22:12:c0:72:fd:
         d7:43:cd:5a:09:d0:5e:11:51:3f:f1:ab:73:8e:c2:05:cf:83:
         3b:f0:4b:fa:82:eb:2b:0a:5d:7e:c9:ed:8d:99:07:88:2e:75:
         62:9c:75:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:35 2024 by rpki-client on console-fra.rpki-client.org