Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
File:                     85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft (raw, json)
Hash identifier:          YAzr1oS+4JOrjBL5e5Y8b7vO9si9iej85iTdVLrlB7I=
Subject key identifier:   C1:2B:47:D7:0E:00:58:D4:D3:FD:D7:42:D9:51:48:88:01:B5:6C:06
Authority key identifier: 85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB
Certificate issuer:       /CN=85EE0CD661887CC88F64F6B4BE9D420426E200DB
Certificate serial:       2181DD1B04B5A2CC19BFB8E1A0F4B1E77E365DD1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
Manifest number:          0138
Signing time:             Fri 22 Nov 2024 13:23:13 +0000
Manifest this update:     Fri 22 Nov 2024 13:18:13 +0000
Manifest next update:     Sat 23 Nov 2024 16:03:13 +0000
Files and hashes:         1: 85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl (hash: Hx24H4bTyueOiqJCmtYakqVaQvXwsc0nqrJstfsTRuE=)
                          2: 323830343a383532303a3a2f33322d3438203d3e20323732353539.roa (hash: UOtqdN5mrg6nNbXC0LBNfGhgvFnyKl4WCMnDtWPkSkE=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl
                          rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:81:dd:1b:04:b5:a2:cc:19:bf:b8:e1:a0:f4:b1:e7:7e:36:5d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85EE0CD661887CC88F64F6B4BE9D420426E200DB
        Validity
            Not Before: Nov 22 13:18:13 2024 GMT
            Not After : Nov 23 16:03:13 2024 GMT
        Subject: CN=C12B47D70E0058D4D3FDD742D951488801B56C06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8f:1f:66:a3:43:b1:15:b0:92:7e:f2:16:8b:
                    6d:cd:82:57:83:ce:7b:1b:b0:16:fb:c3:63:12:18:
                    d5:1f:e7:87:b5:90:e0:8a:0b:d4:21:54:d5:4b:6c:
                    10:09:c3:8a:2d:83:9b:3f:d8:0d:81:10:40:b1:a5:
                    bd:99:23:18:80:04:50:31:22:91:99:24:1f:c1:05:
                    d9:e6:51:35:45:89:4f:2c:d1:7e:37:bd:9a:db:5b:
                    ad:43:ab:a2:bf:3a:1f:d0:36:b1:84:f6:a7:80:c7:
                    99:e6:f1:d4:a4:b0:1d:ab:19:92:ae:4d:a8:93:05:
                    de:06:82:f3:98:0b:a4:c3:17:e9:31:0f:48:29:d4:
                    0b:85:62:f7:fb:ae:0d:eb:de:8f:bc:c1:d9:a9:6d:
                    6f:b4:a0:22:22:73:ce:81:43:99:51:91:32:3b:3d:
                    30:0c:11:46:be:cb:34:ca:4e:b0:90:40:65:6c:ac:
                    16:86:98:b7:f2:f9:cc:8b:a7:cf:ed:1e:6d:be:ea:
                    fc:2e:fd:b2:40:93:bd:61:a5:0d:d7:d5:f7:e3:9a:
                    a4:44:c7:f2:f8:83:37:b7:3e:81:89:eb:11:ab:d8:
                    80:31:de:22:d5:92:ab:95:a4:8f:49:94:d9:2f:7a:
                    ee:12:06:e8:6b:70:8b:57:22:15:ab:b9:70:48:03:
                    0a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2B:47:D7:0E:00:58:D4:D3:FD:D7:42:D9:51:48:88:01:B5:6C:06
            X509v3 Authority Key Identifier:
                keyid:85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:6c:2b:c7:37:c8:29:c0:9d:8a:83:55:e5:15:72:07:bf:85:
         62:2a:bb:e0:5c:5a:ad:d7:bc:2f:a7:fb:52:46:62:9b:ad:d3:
         e0:c0:ff:2d:ef:a6:63:d9:4b:ef:1e:2a:45:23:d2:a8:d2:44:
         9d:5a:13:c2:94:fd:9c:16:26:d7:fb:75:fc:33:e6:45:65:ce:
         36:97:ef:c5:87:9c:19:1c:03:b3:90:2d:d0:9e:cc:29:43:a8:
         f0:fe:f6:43:76:9d:47:dc:7c:e4:1b:ad:34:5e:5a:be:4f:b8:
         1b:91:d9:a6:e9:a1:30:70:8f:97:d0:50:19:30:f1:ea:d7:1e:
         d0:ea:72:15:ee:17:2b:70:fa:ed:22:fd:3d:17:a7:1c:b7:2b:
         f2:a2:eb:ab:fe:d3:5b:7d:b9:ad:f2:44:26:45:b3:cc:78:c6:
         f6:78:c0:57:fe:03:ee:ec:1e:10:24:ac:56:45:f5:2b:cf:93:
         20:de:28:5f:81:08:b2:9f:27:1b:5e:b8:1e:1a:fd:78:4d:8b:
         d2:c2:ec:26:a5:9a:b3:a6:b8:2b:f6:3a:90:88:e8:dc:fa:d7:
         3b:74:ef:2a:48:85:1c:76:7c:d0:5b:35:c4:bb:02:4e:8a:3f:
         f1:22:74:81:77:45:ac:cb:f7:c7:04:24:d5:47:0f:d8:2d:c4:
         ea:a7:08:c5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIYHdGwS1oswZv7jhoPSx5342XdEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVFRTBDRDY2MTg4N0NDODhGNjRGNkI0QkU5RDQyMDQy
NkUyMDBEQjAeFw0yNDExMjIxMzE4MTNaFw0yNDExMjMxNjAzMTNaMDMxMTAvBgNV
BAMTKEMxMkI0N0Q3MEUwMDU4RDREM0ZERDc0MkQ5NTE0ODg4MDFCNTZDMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjjx9mo0OxFbCSfvIWi23NgleD
znsbsBb7w2MSGNUf54e1kOCKC9QhVNVLbBAJw4otg5s/2A2BEECxpb2ZIxiABFAx
IpGZJB/BBdnmUTVFiU8s0X43vZrbW61Dq6K/Oh/QNrGE9qeAx5nm8dSksB2rGZKu
TaiTBd4GgvOYC6TDF+kxD0gp1AuFYvf7rg3r3o+8wdmpbW+0oCIic86BQ5lRkTI7
PTAMEUa+yzTKTrCQQGVsrBaGmLfy+cyLp8/tHm2+6vwu/bJAk71hpQ3X1ffjmqRE
x/L4gze3PoGJ6xGr2IAx3iLVkquVpI9JlNkveu4SBuhrcItXIhWruXBIAwrXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUwStH1w4AWNTT/ddC2VFIiAG1bAYwHwYDVR0j
BBgwFoAUhe4M1mGIfMiPZPa0vp1CBCbiANswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTdzd2gzOHBUQ3pTZzh4NWJMcHM3WUI2QUF4eUhyNW93YVZIRnNSYjJM
RHAvMS84NUVFMENENjYxODg3Q0M4OEY2NEY2QjRCRTlENDIwNDI2RTIwMERCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1RUUwQ0Q2NjE4ODdDQzg4
RjY0RjZCNEJFOUQ0MjA0MjZFMjAwREIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OTdzd2gzOHBUQ3pTZzh4NWJMcHM3WUI2QUF4eUhyNW93YVZIRnNSYjJMRHAvMS84
NUVFMENENjYxODg3Q0M4OEY2NEY2QjRCRTlENDIwNDI2RTIwMERCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQ2wrxzfIKcCdioNV5RVyB7+FYiq74Fxarde8L6f7UkZim63T4MD/Le+mY9lL
7x4qRSPSqNJEnVoTwpT9nBYm1/t1/DPmRWXONpfvxYecGRwDs5At0J7MKUOo8P72
Q3adR9x85ButNF5avk+4G5HZpumhMHCPl9BQGTDx6tce0OpyFe4XK3D67SL9PRen
HLcr8qLrq/7TW325rfJEJkWzzHjG9njAV/4D7uweECSsVkX1K8+TIN4oX4EIsp8n
G164Hhr9eE2L0sLsJqWas6a4K/Y6kIjo3PrXO3TvKkiFHHZ80Fs1xLsCToo/8SJ0
gXdFrMv3xwQk1UcP2C3E6qcIxQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:40 2024 by rpki-client on console-fra.rpki-client.org