Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
File:                     44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft (raw, json)
Hash identifier:          sDghQKnkO15HKbC3mN/8K7yq5TNNjUXL1TDojssK8UQ=
Subject key identifier:   5E:83:42:2F:4B:3E:E5:16:F9:25:80:E9:DE:9A:DD:EB:9A:EA:51:8C
Authority key identifier: 44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7
Certificate issuer:       /CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
Certificate serial:       3E12CD58957A074BBB0D1F7919B042977FCC33D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
Manifest number:          0137
Signing time:             Fri 22 Nov 2024 16:33:45 +0000
Manifest this update:     Fri 22 Nov 2024 16:28:45 +0000
Manifest next update:     Sat 23 Nov 2024 19:59:45 +0000
Files and hashes:         1: 34352e37302e3130342e302f32322d3332203d3e203631393337.roa (hash: E9BYzBNIUTrXqKsTm+DQW7RBYM1M5JmZferInwjgCXw=)
                          2: 44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl (hash: 5W5fGDaQTQyz3SSXyF/uQqeOE1azU6eXNc61IcK44Us=)
                          3: 323830343a313838343a3a2f33322d313238203d3e203631393337.roa (hash: vP2icQWvFWbesjCpkIkBW5Yvs6RLc6XZQc05EEqqVB4=)
                          4: 3138392e34352e3136302e302f32302d3332203d3e203631393337.roa (hash: cD/PwWCOaUOle8OFK94hIBqelONS7yuThafrKd6fCtQ=)
                          5: 3136382e3139352e3231302e302f32342d3332203d3e203631393337.roa (hash: gkMRtdPyFCsOEajnNYfFjx6MyRBrmK6RRWwlefPOQa0=)
                          6: 3230302e39352e3139322e302f31392d3332203d3e203631393337.roa (hash: Of+jzPuWQXXIxn+zzFCz07ZooE4Y6JmGZcYTBdvfNps=)
                          7: 34352e3232392e3132342e302f32322d3332203d3e203631393337.roa (hash: m1GVohJF0p68NiE5mcUpvdX4FassKLYnASxFsWAf9D4=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl
                          rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:12:cd:58:95:7a:07:4b:bb:0d:1f:79:19:b0:42:97:7f:cc:33:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
        Validity
            Not Before: Nov 22 16:28:45 2024 GMT
            Not After : Nov 23 19:59:45 2024 GMT
        Subject: CN=5E83422F4B3EE516F92580E9DE9ADDEB9AEA518C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:98:ea:f9:d9:bf:56:f4:9e:33:21:56:f0:cc:
                    20:ee:73:66:78:08:63:b7:d8:cb:e6:44:37:26:7b:
                    d6:1c:af:b3:74:fe:94:8c:fc:bc:d7:05:21:a5:14:
                    dd:ba:3f:a9:c0:43:1e:dd:39:d5:00:c6:a2:6d:54:
                    82:39:cb:14:a7:db:7c:56:74:c5:eb:b8:2d:ad:ca:
                    85:a5:15:47:92:75:b7:5f:27:96:29:d0:26:9c:75:
                    49:ed:f3:15:2e:80:ae:60:df:49:c0:0e:f7:7d:51:
                    d0:bb:e6:b8:c1:d4:77:dd:7b:bc:aa:12:b7:e6:25:
                    2a:c9:94:ed:97:02:5d:96:e2:ce:4e:ca:e1:9f:27:
                    07:c2:70:ef:5d:2d:7d:16:5f:e4:6a:e3:b0:a3:ad:
                    75:ec:a9:67:b5:03:6f:8e:2a:36:e5:8c:90:9b:32:
                    c7:84:ee:a0:33:a8:2a:16:26:8d:72:ba:84:6b:6c:
                    db:5e:dc:be:5c:1d:9a:1a:9e:f9:56:74:62:6f:f9:
                    f0:aa:55:57:a4:f6:87:60:2f:97:3b:06:d6:d7:f1:
                    af:6c:1b:73:2a:49:52:72:4e:c3:7d:32:a7:fc:7e:
                    ba:b8:cb:70:da:a7:c2:80:34:3e:5e:16:d6:a1:7e:
                    d9:7f:53:58:90:1f:16:79:5e:c5:bd:fd:05:2f:76:
                    22:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:83:42:2F:4B:3E:E5:16:F9:25:80:E9:DE:9A:DD:EB:9A:EA:51:8C
            X509v3 Authority Key Identifier:
                keyid:44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:a6:98:91:73:83:83:f3:af:76:d9:2b:74:ac:22:24:5c:6b:
         1d:17:31:46:5e:e1:dd:fe:13:f2:05:f7:5f:f9:77:26:00:2f:
         45:78:68:79:48:40:8d:80:f8:e3:dc:0a:c3:8b:b3:70:c7:63:
         f3:49:fb:1a:08:72:81:35:16:ca:71:2c:75:cc:9b:15:9d:d3:
         05:73:f1:48:47:77:5c:d1:03:7a:fb:36:9b:2d:31:31:79:b4:
         80:81:bd:d0:36:1f:36:47:6d:4d:a4:b7:63:e9:6f:7a:71:e5:
         44:b4:7f:ef:9c:3e:b9:b2:41:a2:b9:01:fa:c7:f4:26:8f:04:
         73:fa:11:08:3a:c6:80:8f:f4:85:42:62:16:25:6c:64:48:70:
         5e:7e:e6:21:fe:0b:a8:a1:77:c9:2f:96:0f:54:78:d5:8f:e5:
         d2:71:ee:5f:41:bb:eb:bb:b9:f1:33:06:e6:ef:a4:2b:0c:ae:
         ed:84:05:64:22:e9:3f:47:f5:b2:63:c0:d3:cf:bf:7e:19:77:
         66:51:3e:33:8e:52:48:68:0a:2f:b0:26:6a:e7:04:dc:dd:d7:
         83:df:a4:65:dc:ce:28:56:69:76:6d:5f:f9:fb:5c:0d:c9:51:
         74:00:aa:ec:3b:8b:3d:94:c5:e9:31:78:e5:71:31:b2:54:88:
         a3:ef:35:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:27 2024 by rpki-client on console-fra.rpki-client.org