Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/1/68E8FFC7C7187C981753E423319759DC084F69E3.mft
File:                     68E8FFC7C7187C981753E423319759DC084F69E3.mft (raw, json)
Hash identifier:          VN5xBgEWQ5n0HIpKbHcqfgGLtswbPlMBEPf21h3UORM=
Subject key identifier:   6F:09:FF:03:39:12:49:7D:49:0A:D4:9B:91:5E:30:AD:FB:54:3B:1A
Authority key identifier: 68:E8:FF:C7:C7:18:7C:98:17:53:E4:23:31:97:59:DC:08:4F:69:E3
Certificate issuer:       /CN=68E8FFC7C7187C981753E423319759DC084F69E3
Certificate serial:       4FB9088AD63CA55B4A3307D7F9439D4DA34E46A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E8FFC7C7187C981753E423319759DC084F69E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/1/68E8FFC7C7187C981753E423319759DC084F69E3.mft
Manifest number:          013D
Signing time:             Mon 25 Nov 2024 17:59:10 +0000
Manifest this update:     Mon 25 Nov 2024 17:54:10 +0000
Manifest next update:     Tue 26 Nov 2024 20:18:10 +0000
Files and hashes:         1: 323830343a343737343a3a2f33322d3438203d3e20323637303535.roa (hash: LjdMXOE/hZQ4ehW9seHLP3KjNXSVVX7/C/MzQCVbl64=)
                          2: 68E8FFC7C7187C981753E423319759DC084F69E3.crl (hash: fZmfktHdLUr5ATQJqTmrCyaOY4Hac2vvxKNhX+UmVto=)
                          3: 34352e3232372e37362e302f32322d3234203d3e20323637303535.roa (hash: +itvjxC1f5ZNp+FFasdyU8CNYZgOu/ohxVXXnXmSpBg=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/1/68E8FFC7C7187C981753E423319759DC084F69E3.crl
                          rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/1/68E8FFC7C7187C981753E423319759DC084F69E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E8FFC7C7187C981753E423319759DC084F69E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 20:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b9:08:8a:d6:3c:a5:5b:4a:33:07:d7:f9:43:9d:4d:a3:4e:46:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68E8FFC7C7187C981753E423319759DC084F69E3
        Validity
            Not Before: Nov 25 17:54:10 2024 GMT
            Not After : Nov 26 20:18:10 2024 GMT
        Subject: CN=6F09FF033912497D490AD49B915E30ADFB543B1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:db:2f:14:d9:0a:40:ed:25:73:f4:aa:56:6a:
                    74:83:8f:7d:34:3a:18:86:55:a3:2f:34:85:25:45:
                    6d:d0:d2:25:31:0f:79:f8:84:33:fc:ac:b4:24:56:
                    ac:7f:78:25:97:45:53:eb:87:e5:ee:eb:56:30:82:
                    9d:95:1e:0a:30:18:eb:f7:9e:0c:aa:df:b1:49:b9:
                    c5:5f:f0:dd:1d:c7:a5:c4:03:ed:1f:c5:42:be:2b:
                    a9:d4:49:42:f5:bc:27:8f:da:d5:4a:18:a4:13:59:
                    18:6e:86:39:92:55:a3:5b:c1:77:1c:9d:b8:57:08:
                    7e:79:6d:20:b9:b0:12:07:33:80:9d:49:97:58:ef:
                    34:69:f6:30:a9:91:b4:07:3e:db:07:97:43:8b:e1:
                    99:c0:9a:7c:9e:50:12:09:bf:74:a0:4c:5f:c3:87:
                    a2:e0:43:0f:77:87:b0:f0:fe:d6:5b:e6:0f:58:7c:
                    c6:bf:bd:f7:a3:cc:18:e9:93:5d:b6:02:23:ea:45:
                    28:f1:00:ce:a6:9a:56:c9:11:c0:f0:b1:0e:a1:38:
                    bd:5c:80:23:d5:d8:f5:40:8d:b0:03:e4:1a:1a:4b:
                    c9:29:94:fa:06:c2:05:f6:23:8d:0f:ea:ee:a7:cb:
                    bb:c1:73:ac:03:fc:3f:0d:1f:8c:2d:85:88:72:7c:
                    63:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:09:FF:03:39:12:49:7D:49:0A:D4:9B:91:5E:30:AD:FB:54:3B:1A
            X509v3 Authority Key Identifier:
                keyid:68:E8:FF:C7:C7:18:7C:98:17:53:E4:23:31:97:59:DC:08:4F:69:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/1/68E8FFC7C7187C981753E423319759DC084F69E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E8FFC7C7187C981753E423319759DC084F69E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/1/68E8FFC7C7187C981753E423319759DC084F69E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:e9:58:5b:1f:cf:c4:07:fc:b6:f1:b2:03:08:8f:11:b8:25:
         d4:78:e9:c4:c0:12:7a:39:48:4c:91:31:4f:30:e5:20:c8:26:
         73:a3:33:b3:3c:e3:84:0f:a5:8f:f2:2e:2b:27:e2:69:14:10:
         fb:71:1f:57:c0:a8:ea:9b:68:15:cc:09:e2:b9:57:37:c7:fa:
         a9:f2:e3:3c:3e:54:6c:2b:4c:d3:da:b8:ed:e9:59:e9:a4:02:
         60:e9:15:b5:4b:ae:e0:d2:20:e4:ac:87:fb:a2:b2:fa:df:28:
         bd:6a:0c:02:6a:26:7f:5a:37:0d:d5:3b:c3:2d:3b:db:cd:42:
         a5:9a:65:a2:47:79:84:69:1d:0f:82:f9:e1:ee:bf:80:b1:e3:
         d3:b9:30:ab:a0:03:54:a7:c0:a6:62:6b:f3:76:7e:b8:9f:72:
         61:c8:95:63:a9:ea:e7:da:fe:eb:6a:23:12:b8:84:2f:22:fc:
         b1:50:97:e6:d6:41:fd:d7:86:06:57:0f:be:60:38:49:ee:27:
         31:6b:7e:4a:9d:5f:00:04:13:54:c9:10:65:3f:5d:64:ae:f9:
         d8:ac:e6:2f:d1:ec:5b:6a:71:f4:59:2c:34:8b:03:ff:07:d7:
         b2:a1:8e:6d:08:ae:42:98:9b:2b:6f:90:73:21:78:fd:9b:eb:
         e2:9a:b6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:36 2024 by rpki-client on console-fra.rpki-client.org