Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
File:                     44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft (raw, json)
Hash identifier:          kTDfI2f3mZxQkcbCKCXKwg+yRlWCdo72sQVbF2hUeqc=
Subject key identifier:   36:9A:60:7D:62:6E:58:A3:71:37:07:1B:7B:09:D5:35:D4:80:6D:41
Authority key identifier: 44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7
Certificate issuer:       /CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
Certificate serial:       32B0C08661E0DFA0AAE95A64CE7AC9783CDBD403
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
Manifest number:          77
Signing time:             Sun 30 Jun 2024 14:08:16 +0000
Manifest this update:     Sun 30 Jun 2024 14:03:16 +0000
Manifest next update:     Mon 01 Jul 2024 17:46:16 +0000
Files and hashes:         1: 3230302e39352e3139322e302f31392d3332203d3e203631393337.roa (hash: Of+jzPuWQXXIxn+zzFCz07ZooE4Y6JmGZcYTBdvfNps=)
                          2: 34352e3232392e3132342e302f32322d3332203d3e203631393337.roa (hash: m1GVohJF0p68NiE5mcUpvdX4FassKLYnASxFsWAf9D4=)
                          3: 3138392e34352e3136302e302f32302d3332203d3e203631393337.roa (hash: cD/PwWCOaUOle8OFK94hIBqelONS7yuThafrKd6fCtQ=)
                          4: 323830343a313838343a3a2f33322d313238203d3e203631393337.roa (hash: vP2icQWvFWbesjCpkIkBW5Yvs6RLc6XZQc05EEqqVB4=)
                          5: 3136382e3139352e3231302e302f32342d3332203d3e203631393337.roa (hash: gkMRtdPyFCsOEajnNYfFjx6MyRBrmK6RRWwlefPOQa0=)
                          6: 34352e37302e3130342e302f32322d3332203d3e203631393337.roa (hash: E9BYzBNIUTrXqKsTm+DQW7RBYM1M5JmZferInwjgCXw=)
                          7: 44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl (hash: IKDFuZw4rf/1mpIODa2v2La7469kH7OU9oZ/kI7euoI=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl
                          rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Jul 2024 15:54:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b0:c0:86:61:e0:df:a0:aa:e9:5a:64:ce:7a:c9:78:3c:db:d4:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
        Validity
            Not Before: Jun 30 14:03:16 2024 GMT
            Not After : Jul  1 17:46:16 2024 GMT
        Subject: CN=369A607D626E58A37137071B7B09D535D4806D41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a4:62:f1:0a:8b:53:26:91:89:89:94:d2:1c:
                    7f:43:fe:b7:c0:7d:66:da:7f:f5:ac:30:23:d4:44:
                    fb:84:d0:bf:ac:e0:19:16:56:96:0a:cc:5c:67:87:
                    18:ab:7f:4c:ab:32:89:a5:7d:16:6b:8d:2c:61:5d:
                    32:76:23:26:ea:6e:66:6f:29:88:2e:2b:98:d5:19:
                    d5:e1:b2:33:0c:8b:da:b8:ed:97:2c:7d:b7:a7:75:
                    7e:17:de:90:13:3b:05:65:1b:31:1d:fa:ba:1b:68:
                    be:41:9b:0e:35:40:fc:b6:18:cc:47:b8:75:5d:03:
                    00:0b:81:7d:dd:69:e3:f4:db:6f:65:f0:b4:3a:8c:
                    66:9b:45:20:9f:db:66:3f:61:86:3e:d3:a3:7d:2d:
                    e4:68:33:50:48:dc:b6:6c:e8:c6:06:2e:68:d2:8f:
                    e7:17:e5:ac:8f:55:f4:99:5b:bf:c6:2a:76:c1:07:
                    68:f7:87:3b:e8:51:cf:6d:6d:b2:1e:64:ff:ca:63:
                    6a:d7:0f:1a:fd:8a:1d:38:2d:62:2a:ed:6f:d5:18:
                    90:b7:09:e4:44:47:fd:e7:7b:ad:89:f4:6f:a3:63:
                    3f:8d:02:8c:57:88:35:02:c3:cc:4e:fd:76:d6:b8:
                    9e:a9:b4:15:e2:74:96:c6:42:45:00:38:f1:bb:df:
                    07:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:9A:60:7D:62:6E:58:A3:71:37:07:1B:7B:09:D5:35:D4:80:6D:41
            X509v3 Authority Key Identifier:
                keyid:44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:77:4b:d9:4a:24:97:8d:c7:75:87:32:05:6c:e8:3a:63:27:
         3c:75:0a:2b:cf:5b:22:26:e8:66:ad:a3:4c:f0:f8:e7:14:1d:
         ed:7f:8c:9a:78:c3:12:69:3d:24:5e:b6:f9:5a:89:1a:35:13:
         b0:bb:79:8f:70:1d:dd:c2:9c:d7:39:14:90:b3:96:e4:1d:99:
         3a:d1:57:e7:02:03:39:98:23:3a:2f:94:2b:a3:e6:8e:43:ee:
         cc:7a:7d:94:60:50:34:b5:a8:9e:a2:81:4f:1c:fc:89:ed:58:
         28:09:f9:c6:10:fb:bf:90:cc:52:28:73:7b:62:8a:7a:c9:06:
         05:e3:81:60:8d:1d:ef:9f:de:84:ba:3e:e7:5d:97:db:c7:b9:
         61:ac:07:ee:34:a8:39:09:79:85:70:55:a9:0e:44:35:32:3c:
         cf:36:24:63:8c:95:d7:dd:ad:aa:5a:6f:1e:ca:a8:4c:9e:4d:
         e3:2e:69:a9:3c:36:b9:87:fe:6e:af:39:5a:80:56:5a:c2:a9:
         51:60:ea:92:c0:2f:1e:fd:45:db:80:ff:52:d1:b8:4e:6a:4b:
         30:ed:73:0e:6f:2c:79:88:19:2c:5c:03:33:e7:d0:64:38:09:
         fc:25:3a:ba:0f:c7:56:58:44:70:d7:42:aa:b9:68:60:14:92:
         2b:9a:8d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 15:02:27 2024 by rpki-client on console-fra.rpki-client.org