Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.mft
File:                     BA54A47E5F910AE921EAEE9B9BE5109C32501446.mft (raw, json)
Hash identifier:          8lAIUN01JrQr6BakvKyIH5CoKC6onztUUhbg3dWbl4I=
Subject key identifier:   EE:F4:A4:D4:54:1C:3E:EF:1D:CD:C0:BC:12:3F:93:14:82:0E:13:52
Authority key identifier: BA:54:A4:7E:5F:91:0A:E9:21:EA:EE:9B:9B:E5:10:9C:32:50:14:46
Certificate issuer:       /CN=BA54A47E5F910AE921EAEE9B9BE5109C32501446
Certificate serial:       358DABF73B748600A9F699107B9DFF83E404EACD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.mft
Manifest number:          0134
Signing time:             Fri 22 Nov 2024 08:03:25 +0000
Manifest this update:     Fri 22 Nov 2024 07:58:25 +0000
Manifest next update:     Sat 23 Nov 2024 11:59:25 +0000
Files and hashes:         1: 34352e3233392e302e302f32322d3232203d3e203532383538.roa (hash: f0HMBp5mjhDRQ0JE3JIQ25Cd3bjmEofm/lhLKW8DGho=)
                          2: BA54A47E5F910AE921EAEE9B9BE5109C32501446.crl (hash: Ft1Ieysk/Nuo3+Vp1pOPBaOygJpeFtXuQAm7CDH6T5g=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.crl
                          rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:8d:ab:f7:3b:74:86:00:a9:f6:99:10:7b:9d:ff:83:e4:04:ea:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA54A47E5F910AE921EAEE9B9BE5109C32501446
        Validity
            Not Before: Nov 22 07:58:25 2024 GMT
            Not After : Nov 23 11:59:25 2024 GMT
        Subject: CN=EEF4A4D4541C3EEF1DCDC0BC123F9314820E1352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:74:65:a2:37:1d:fe:76:16:e9:4a:14:71:70:
                    17:07:29:f8:71:fa:e6:74:5e:4a:0c:28:6f:7e:89:
                    13:8b:1b:16:3a:07:ce:da:4f:1f:5e:0b:eb:ae:1d:
                    f5:8d:21:7d:72:45:cc:a2:0d:6f:92:ab:63:8b:1f:
                    a1:ba:16:d4:7b:95:86:6f:83:cd:a7:18:ca:08:17:
                    a4:32:72:1f:c8:8b:6c:65:98:19:26:e6:5e:9e:67:
                    6e:9a:69:f4:af:ed:10:6d:cf:70:f8:dc:f3:74:5d:
                    49:f7:2e:fe:66:07:0e:18:86:b2:5d:dc:89:b6:86:
                    f4:e4:68:bf:0d:0d:76:ab:60:8e:f4:b6:36:4e:c9:
                    ae:9f:e7:79:c7:c1:a1:ed:91:6e:22:95:57:08:46:
                    1d:45:47:f1:5d:29:f6:e9:e8:da:4f:3a:53:b8:58:
                    57:a3:07:5b:6b:29:00:66:a5:bf:dd:25:e9:65:ed:
                    6d:24:8a:70:52:e5:9d:07:e8:17:54:64:2d:40:a0:
                    f3:1a:9e:94:46:4a:a9:ce:84:e5:f9:d8:2a:2b:93:
                    76:9e:81:86:db:b8:6e:b3:82:14:ee:c4:89:b6:79:
                    af:68:14:09:18:06:7f:58:4d:91:67:92:af:d3:cd:
                    8f:db:57:af:e1:1d:55:27:01:77:aa:43:e9:2c:2b:
                    97:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F4:A4:D4:54:1C:3E:EF:1D:CD:C0:BC:12:3F:93:14:82:0E:13:52
            X509v3 Authority Key Identifier:
                keyid:BA:54:A4:7E:5F:91:0A:E9:21:EA:EE:9B:9B:E5:10:9C:32:50:14:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:fa:13:8f:6d:87:9b:46:5f:4c:aa:8b:39:df:b7:6b:fd:14:
         67:45:49:22:dd:3b:70:fb:17:c7:7c:a3:cd:57:06:16:a3:2f:
         af:80:1c:d6:98:0d:fc:52:e3:47:e9:a8:41:41:16:8f:dd:39:
         08:6d:82:3a:7e:0b:a1:2c:52:7d:05:36:6b:8a:6c:ba:e0:a3:
         ff:1a:ab:0a:89:65:30:8d:08:34:2c:1d:02:0b:09:9f:c6:9b:
         dd:1a:24:e6:be:8d:25:77:d0:ea:c2:d4:a9:b0:16:80:ae:c3:
         83:93:da:b8:32:67:54:90:13:5e:9d:b1:e9:78:aa:17:ad:9a:
         8b:f0:0d:0d:2a:f6:c0:c6:70:a5:b6:eb:01:82:9b:bb:1e:1f:
         ed:f2:3d:5d:1b:96:61:88:32:c7:aa:3d:11:52:6c:93:ef:3d:
         5e:3e:09:d6:0c:78:01:4d:f2:6a:e7:74:2e:6a:15:24:86:02:
         4b:a8:71:30:5d:8e:36:bb:7d:45:d4:d9:ce:13:8b:2e:19:12:
         c2:50:b2:1b:38:47:c6:d1:46:e1:ae:0c:64:df:20:17:40:e8:
         d8:ee:12:16:2d:0a:e4:2a:21:67:d8:65:20:b5:9c:13:7d:ed:
         56:14:80:f8:9e:6b:9f:ff:0f:8a:97:09:e3:f7:40:2b:be:1f:
         95:46:27:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:09 2024 by rpki-client on console-fra.rpki-client.org