Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.mft
File:                     7E09C85B0E5ACF758DAA966E4C1E2328D0322164.mft (raw, json)
Hash identifier:          bZ7m6QVkdbZ1ZtE0meOVAFj6tdmGVbE1GnwNGtHEKes=
Subject key identifier:   1A:BD:35:8D:3F:98:0B:99:B5:EB:EB:32:3C:56:19:99:C8:20:FC:8C
Authority key identifier: 7E:09:C8:5B:0E:5A:CF:75:8D:AA:96:6E:4C:1E:23:28:D0:32:21:64
Certificate issuer:       /CN=7E09C85B0E5ACF758DAA966E4C1E2328D0322164
Certificate serial:       5A7055709A88F45F8F219CA3B4D705B911946CEC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.mft
Manifest number:          2C
Signing time:             Tue 25 Jun 2024 20:37:30 +0000
Manifest this update:     Tue 25 Jun 2024 20:32:30 +0000
Manifest next update:     Wed 26 Jun 2024 20:37:30 +0000
Files and hashes:         1: 323830343a346631383a323030303a3a2f33362d3336203d3e20323638333033.roa (hash: t9vNXXo2YpJBgQBFqQUin72tMOkFGXUCvFP6crqAbR4=)
                          2: 7E09C85B0E5ACF758DAA966E4C1E2328D0322164.crl (hash: zGUjGkAFKAHv0BbZsDU7aWFUuVjRgTGdEU7Kh3UAhJ0=)
                          3: 34352e3233372e3231342e302f32342d3234203d3e20323638333033.roa (hash: NYW/bHlwlqPAyhVk8uPbhTZu+5Q+DhlXWgy6cwpDJpI=)
                          4: 34352e3233372e3231322e302f32342d3234203d3e20323638333033.roa (hash: spSAYLVunEd1fZUYpWJ2AEzeuW9QoYNk6WvpGr4A5nk=)
                          5: 34352e3233372e3231332e302f32342d3234203d3e20323638333033.roa (hash: aLTW5LZf8mfd21r9GqxhzLCjS4bw7JwDxxmIj2oeTEk=)
                          6: 34352e3233372e3231352e302f32342d3234203d3e20323638333033.roa (hash: R2ItJsB2oTgYQ8C0PQC+vfUHLFKZX9FqOUFUnzK4HK0=)
                          7: 323830343a346631383a3a2f33322d3332203d3e20323638333033.roa (hash: W/F1gNAa0a9EcNaZjz+AuxVHfwJcvR3ouwz0lNNt9L4=)
                          8: 34352e3233372e3231322e302f32332d3233203d3e20323638333033.roa (hash: Kg6jDTjqu+tn78Aqt9ato0uf+cbaWeFl3mf0rzFRtK8=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.crl
                          rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Jun 2024 20:37:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:70:55:70:9a:88:f4:5f:8f:21:9c:a3:b4:d7:05:b9:11:94:6c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E09C85B0E5ACF758DAA966E4C1E2328D0322164
        Validity
            Not Before: Jun 25 20:32:30 2024 GMT
            Not After : Jun 26 20:37:30 2024 GMT
        Subject: CN=1ABD358D3F980B99B5EBEB323C561999C820FC8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4e:8c:74:77:22:67:bf:a5:e8:84:76:38:5c:
                    f6:c5:eb:00:d9:ab:40:0d:da:58:3b:47:99:f1:88:
                    b1:89:35:08:c1:56:98:61:1b:82:65:78:73:5b:2b:
                    1f:44:2f:99:4e:1f:f8:7d:74:25:35:78:86:29:4a:
                    ba:ba:53:66:2e:14:b9:f2:17:88:e7:43:57:ba:c8:
                    9a:de:0e:c5:32:33:bb:c7:35:0a:df:8a:bc:7b:30:
                    10:aa:25:ad:63:1f:fe:3f:33:d3:fe:ec:aa:17:fa:
                    06:8b:73:0b:93:38:42:5d:02:c8:66:d3:9a:57:64:
                    e3:b9:76:3b:04:2a:9c:db:a7:7b:08:3a:91:10:a2:
                    b1:68:b5:94:27:e2:43:23:c9:72:b6:d7:bd:97:29:
                    fc:1a:c1:e7:b6:37:5c:d3:cf:ba:fe:85:dd:4e:73:
                    fc:f5:2d:71:4d:be:36:d5:ac:c7:6b:bf:6c:7a:91:
                    64:d1:fc:ca:72:bb:57:20:2b:93:92:ef:18:7d:27:
                    eb:c9:b7:6b:06:b8:db:5e:eb:4e:a9:1e:0f:6a:79:
                    46:74:cc:ce:54:37:61:ea:b9:c6:68:73:57:10:cd:
                    ec:4d:e6:03:1a:d0:0b:85:ea:6a:2e:7c:98:d7:22:
                    4d:2b:83:03:2d:82:36:09:27:e0:bf:50:cc:a5:e1:
                    8c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BD:35:8D:3F:98:0B:99:B5:EB:EB:32:3C:56:19:99:C8:20:FC:8C
            X509v3 Authority Key Identifier:
                keyid:7E:09:C8:5B:0E:5A:CF:75:8D:AA:96:6E:4C:1E:23:28:D0:32:21:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:f4:fa:07:10:02:8f:1d:1f:35:55:cb:c7:2e:9b:26:3b:81:
         80:2d:cd:f3:3a:e4:ee:3d:74:a0:66:cb:5a:a0:92:43:6c:85:
         14:04:e6:ed:c7:65:3c:cb:c7:12:9b:eb:cc:e2:a2:f8:ef:b6:
         d3:b0:07:21:14:a8:62:40:ec:ac:9f:ec:93:ac:b2:7d:a1:39:
         01:e1:4f:5e:80:f3:f9:fa:fd:59:f9:8a:5e:8e:fa:78:86:c5:
         8f:13:38:c2:cf:8e:3f:39:36:0d:10:33:07:82:bc:e3:86:44:
         c0:8e:05:d2:ed:71:74:41:8c:5c:18:c3:6f:b9:17:41:38:c0:
         46:2d:f1:74:d4:66:cc:58:d8:65:32:c7:3c:11:7e:d4:ff:fe:
         2a:06:0f:87:7b:e0:1b:5a:84:eb:07:c7:f4:f5:90:ab:91:20:
         e7:0c:0a:d1:10:5a:b1:f9:d4:97:aa:12:38:ea:07:1a:5a:35:
         28:07:b1:fd:e2:36:b3:b5:d3:45:9c:e2:8b:03:f1:17:39:55:
         21:64:56:03:2d:f9:71:a8:17:95:4c:83:ab:0f:3f:ae:25:30:
         12:3f:2c:e9:85:0c:c5:99:bd:4e:4c:ce:fd:ec:53:54:4d:41:
         ee:59:8b:9a:71:d7:99:f3:aa:c9:c0:f9:ab:67:c2:32:e7:89:
         fe:c2:0c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:04:34 2024 by rpki-client on console-fra.rpki-client.org