Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
File:                     85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft (raw, json)
Hash identifier:          LeyWbOerb1JXsdyd2EDLUnHaNZTcN6l/U3pKC7RDzEQ=
Subject key identifier:   97:21:4F:94:00:9A:1E:AF:60:23:7D:0C:3D:5D:5D:95:06:3D:8B:EC
Authority key identifier: 85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB
Certificate issuer:       /CN=85EE0CD661887CC88F64F6B4BE9D420426E200DB
Certificate serial:       3A95765D4CCB6DA0B4F09BD06370D01C9B89BD2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
Manifest number:          76
Signing time:             Sun 30 Jun 2024 07:52:09 +0000
Manifest this update:     Sun 30 Jun 2024 07:47:09 +0000
Manifest next update:     Mon 01 Jul 2024 11:32:09 +0000
Files and hashes:         1: 323830343a383532303a3a2f33322d3438203d3e20323732353539.roa (hash: UOtqdN5mrg6nNbXC0LBNfGhgvFnyKl4WCMnDtWPkSkE=)
                          2: 85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl (hash: +dTLFR/fUlgM6LMPM+OrTR7MT3nJSfZ0ryDDyHgThsE=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl
                          rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Jul 2024 09:05:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:95:76:5d:4c:cb:6d:a0:b4:f0:9b:d0:63:70:d0:1c:9b:89:bd:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85EE0CD661887CC88F64F6B4BE9D420426E200DB
        Validity
            Not Before: Jun 30 07:47:09 2024 GMT
            Not After : Jul  1 11:32:09 2024 GMT
        Subject: CN=97214F94009A1EAF60237D0C3D5D5D95063D8BEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1a:e0:6d:d8:1d:3f:84:a2:72:df:93:49:74:
                    0b:43:19:e1:e7:9f:b9:1c:0d:d1:28:63:6c:d6:a4:
                    58:1f:00:a8:33:17:bb:49:31:08:3d:4c:47:d0:e7:
                    89:2c:53:7e:b8:63:b0:cd:2f:cd:92:1b:63:ab:e0:
                    b3:68:ba:91:2f:a0:6a:a8:3d:3b:1e:41:9b:0b:09:
                    fe:f3:d6:3b:d1:ac:04:88:b0:7c:6c:aa:89:c0:14:
                    7c:15:df:95:c7:8b:47:49:29:d0:29:7e:36:86:a1:
                    74:83:3f:f3:45:c8:ca:aa:29:bd:00:f4:4e:f2:e0:
                    74:9a:2a:a3:2f:51:16:c3:79:15:64:0a:ab:57:a5:
                    16:3b:3a:11:36:23:38:4b:6d:64:0c:b9:81:e1:45:
                    6f:7f:ef:22:39:72:68:0f:d4:31:e7:e3:18:43:ae:
                    40:ed:71:6b:00:76:4e:0d:8c:67:a8:44:38:a1:48:
                    b6:e6:fc:22:28:bd:63:eb:c1:08:4e:a4:a2:24:e8:
                    93:ba:b6:fa:53:7f:af:fa:df:7a:a5:43:a1:25:0d:
                    01:f2:7f:99:43:77:77:b9:7a:26:d1:0d:68:0e:b0:
                    3d:de:c7:23:01:56:b9:1f:82:f1:20:62:2d:44:36:
                    4a:69:32:26:7d:1f:e3:77:5f:1d:e3:ef:9e:9f:cb:
                    81:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:21:4F:94:00:9A:1E:AF:60:23:7D:0C:3D:5D:5D:95:06:3D:8B:EC
            X509v3 Authority Key Identifier:
                keyid:85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:94:46:18:e8:55:e2:29:52:1d:04:b6:88:5f:f3:e7:21:76:
         c0:cd:0e:d4:74:6f:b1:3a:2e:fe:32:ae:32:85:f9:5c:33:48:
         2f:30:78:92:33:68:81:12:c6:8b:4a:a1:46:47:0f:a1:6e:a6:
         d0:a7:a6:f1:52:f0:ee:0f:15:52:65:78:34:80:91:44:2e:23:
         18:59:08:c3:f8:86:19:e8:bb:85:72:85:bc:e0:7b:2e:45:0a:
         43:1a:f6:08:f2:4f:52:a0:0c:d3:37:9f:e0:f9:8d:f7:ab:ae:
         e7:e9:e0:c2:14:d2:67:21:92:20:6f:09:c5:f7:00:67:70:fe:
         01:f8:b3:0f:a8:3a:7b:6f:9b:59:c1:a7:1b:24:1b:5d:5f:f4:
         f4:0a:fb:4c:55:cf:d4:08:e5:f8:40:1a:b0:d1:76:35:c2:8e:
         a1:c1:f9:d3:d5:10:ce:3d:21:1f:83:1e:62:e2:13:75:af:d0:
         b1:b8:3c:1b:60:87:55:4a:93:c1:63:45:08:b7:f0:c8:99:4d:
         3a:1c:86:18:ae:2d:c5:b6:a9:93:87:40:55:f1:d8:5b:86:08:
         e9:ed:87:58:3f:56:b3:a4:44:d0:e1:60:b9:64:2e:77:ec:7b:
         19:67:4b:c6:86:56:d3:88:b6:ad:7e:de:12:14:ce:4d:8b:75:
         a0:70:f5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 08:42:30 2024 by rpki-client on console-fra.rpki-client.org