Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/1/586B4257D2355E33CF9FAB48A3574677286D3B92.mft
File:                     586B4257D2355E33CF9FAB48A3574677286D3B92.mft (raw, json)
Hash identifier:          VbNc0sqRIoyMZbwrxlNBbc+tAWTobqSI337MJVoUD+8=
Subject key identifier:   3A:3A:E1:4E:0D:AA:AE:DB:83:3B:3F:61:B2:A1:15:A5:F9:22:C4:5F
Authority key identifier: 58:6B:42:57:D2:35:5E:33:CF:9F:AB:48:A3:57:46:77:28:6D:3B:92
Certificate issuer:       /CN=586B4257D2355E33CF9FAB48A3574677286D3B92
Certificate serial:       79B32BED12C0AEBAB03FE45BC6160F83BB1D72DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/586B4257D2355E33CF9FAB48A3574677286D3B92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/1/586B4257D2355E33CF9FAB48A3574677286D3B92.mft
Manifest number:          74
Signing time:             Mon 01 Jul 2024 04:30:32 +0000
Manifest this update:     Mon 01 Jul 2024 04:25:32 +0000
Manifest next update:     Tue 02 Jul 2024 04:51:32 +0000
Files and hashes:         1: 3137372e33382e32342e302f32322d3234203d3e20323632393038.roa (hash: TP1n9I3+xg036gZi5jA/x8VH67kkTtHbe/zy0E+dwtc=)
                          2: 3137372e35322e35362e302f32322d3234203d3e20323632393038.roa (hash: L8Xjfg1ltiNFpCZEFHgK9qe33rifbwZLM8EW8gR+sCw=)
                          3: 3136382e3139362e35362e302f32322d3234203d3e20323632393038.roa (hash: BTjKYlA/XNwrnycg/9se/RwI/eYne/v94U0XieTtziY=)
                          4: 3137372e33382e32382e302f32322d3234203d3e20323632393038.roa (hash: /rK5XG2fFhZtq0piOD+Dbvas/C+M/G5l+7FzJS0gcIY=)
                          5: 586B4257D2355E33CF9FAB48A3574677286D3B92.crl (hash: YmWGlzLhY9rajqDLm7BnDoEnqaQiULq3/r4PQK7prEM=)
                          6: 323830343a3363383a3a2f33322d3438203d3e20323632393038.roa (hash: ngyx/A2CmvYwzpcTt0anV+zTEpS9LrOqRp64yoUCHl0=)
                          7: 3137372e39312e3133362e302f32322d3234203d3e20323632393038.roa (hash: jqdspEBp0f9G43rAA0mDqcg1sc31n1qTcCoaUwTNh2c=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/1/586B4257D2355E33CF9FAB48A3574677286D3B92.crl
                          rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/1/586B4257D2355E33CF9FAB48A3574677286D3B92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/586B4257D2355E33CF9FAB48A3574677286D3B92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 04:51:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b3:2b:ed:12:c0:ae:ba:b0:3f:e4:5b:c6:16:0f:83:bb:1d:72:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=586B4257D2355E33CF9FAB48A3574677286D3B92
        Validity
            Not Before: Jul  1 04:25:32 2024 GMT
            Not After : Jul  2 04:51:32 2024 GMT
        Subject: CN=3A3AE14E0DAAAEDB833B3F61B2A115A5F922C45F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:be:cd:c4:2b:4c:d8:1f:b5:86:33:ea:5e:7c:
                    2e:bc:ae:31:2c:71:ac:1c:06:b7:85:23:2c:59:6e:
                    65:f8:c9:44:c9:45:5d:00:e5:af:de:a4:ac:66:65:
                    8b:e6:88:69:0f:2d:bc:88:5b:07:b3:71:cc:77:01:
                    d9:4c:66:4e:95:1a:51:d1:4d:e8:34:6f:ec:d6:a0:
                    3b:7b:4f:03:86:dd:f2:a8:f2:fa:66:af:75:7b:c3:
                    16:3d:5f:f5:97:79:ad:44:53:23:3a:e5:22:17:9d:
                    8a:5c:a2:be:e8:7e:95:5c:7b:67:72:03:51:30:cc:
                    70:45:4d:83:ab:60:62:86:a6:c7:bd:16:97:98:79:
                    9d:ca:48:ca:77:7b:1d:b6:3c:94:d8:b9:44:27:79:
                    c0:30:18:00:46:f7:70:ab:cc:9f:a1:bf:a4:3c:a7:
                    d3:c9:82:2b:c6:2a:8f:28:4c:67:ca:72:61:6e:a0:
                    34:50:ee:9f:ce:bb:ed:07:5c:6b:cf:34:f8:8e:84:
                    17:13:db:08:26:fd:80:9c:d0:0d:0c:5f:15:1e:11:
                    fa:85:7f:c8:97:23:1e:18:92:91:08:11:20:07:e7:
                    1e:2f:25:e4:7f:5d:0d:cc:ee:d7:1f:b0:b5:9f:7d:
                    10:60:4f:95:b6:99:40:5b:89:5e:a8:fb:86:29:1a:
                    18:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:3A:E1:4E:0D:AA:AE:DB:83:3B:3F:61:B2:A1:15:A5:F9:22:C4:5F
            X509v3 Authority Key Identifier:
                keyid:58:6B:42:57:D2:35:5E:33:CF:9F:AB:48:A3:57:46:77:28:6D:3B:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/1/586B4257D2355E33CF9FAB48A3574677286D3B92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/586B4257D2355E33CF9FAB48A3574677286D3B92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/1/586B4257D2355E33CF9FAB48A3574677286D3B92.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:a1:d2:dd:bb:80:79:1e:80:70:77:d1:d2:4b:b2:d9:db:8a:
         cc:37:7c:d4:32:6f:9e:68:4e:c7:11:1c:9a:50:f7:b5:87:eb:
         2b:7a:5d:a2:12:19:18:c5:ae:29:35:88:18:46:44:de:1f:f0:
         59:4f:5a:58:d4:59:6d:19:72:c6:8b:1f:a0:3e:85:b2:28:5f:
         8f:14:3f:a5:ea:c5:51:84:76:a3:4c:bd:80:37:e2:a3:65:cf:
         70:af:8e:91:ea:86:a8:b7:df:d9:51:f7:e7:ef:85:5c:3f:72:
         72:39:d1:12:30:f6:8e:37:a8:d3:d5:9e:64:bc:fc:04:ed:99:
         82:79:e1:93:95:81:17:f3:eb:a1:33:54:4e:3e:17:83:41:13:
         27:d7:8b:12:ba:85:dd:5d:db:71:ab:29:70:7b:f0:8c:08:21:
         0a:84:b9:a1:7c:bd:77:d4:b6:27:b4:af:70:b5:e0:a6:be:c0:
         e9:a7:62:ed:b3:f3:08:c1:82:0f:7c:09:07:3d:3d:d6:a8:b7:
         53:06:e6:58:df:c6:07:66:ef:64:21:09:be:85:1a:3d:13:8c:
         9d:be:b5:40:b5:16:3c:db:a6:c5:ec:47:50:14:79:d1:82:7e:
         4d:c8:9d:9c:e9:02:e4:dd:77:4a:7c:ec:64:3b:f5:fc:e5:14:
         68:ba:f1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 05:06:11 2024 by rpki-client on console-ams.rpki-client.org