Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
File:                     BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft (raw, json)
Hash identifier:          PDb2s1kEUWw6bIxdBd/QvIp3pyOtYrEI+b6T8l8kWvY=
Subject key identifier:   6F:3F:0C:50:F3:5D:BF:C7:88:1E:73:74:FD:16:88:01:1F:9F:23:AE
Authority key identifier: BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B
Certificate issuer:       /CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
Certificate serial:       59AB1425B8388DE9FFDEB0B5898E457C91DEDE4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
Manifest number:          0116
Signing time:             Sat 23 Nov 2024 07:43:14 +0000
Manifest this update:     Sat 23 Nov 2024 07:38:14 +0000
Manifest next update:     Sun 24 Nov 2024 09:27:14 +0000
Files and hashes:         1: BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl (hash: xyJWqcmMfRrMOz4qI1uyiVkneZeIkCT+aQkxgn9IDTE=)
                          2: 3138362e3234392e32332e302f32342d3234203d3e20323633303232.roa (hash: 9jACaeaVwnX2qYBJbTg3KEqNa0HZPDO/VulSkEcmFnA=)
                          3: 3138362e3234392e32302e302f32332d3233203d3e20323633303232.roa (hash: MZrIkZ4yOa3j1Y/4Ssqj7CFPeOOhg51yB+qdu8fLrIY=)
                          4: 3138362e3234392e31362e302f32332d3233203d3e20323633303232.roa (hash: 13xbZlPPrc37T73p03YsbhNRwz3s6hgRg8R6wKGVKyU=)
                          5: 323830343a6131383a3a2f33322d3332203d3e20323633303232.roa (hash: GwKw3Fk6ZW5JU5P+3J72OpyfN/+3PwFUS/Dpz9xFeU8=)
                          6: 3138362e3234392e32302e302f32342d3234203d3e20323633303232.roa (hash: dhBrzFHPRT+uUI4pjVhwobUYKPbiAWsAO3er9Bm/SYo=)
                          7: 3138362e3234392e32312e302f32342d3234203d3e20323633303232.roa (hash: k/3jP5croUjARXdRc062K/lrXL/JOS705o2Zeoy0Q8g=)
                          8: 3138362e3234392e31392e302f32342d3234203d3e20323633303232.roa (hash: eKWBc6DwgRAVhuSg+MLm539u77FJYvmfGicWgvwBBCw=)
                          9: 3138362e3234392e31362e302f32342d3234203d3e20323633303232.roa (hash: yxg8JrLFrw36xFcCmZVzuogdkzywtW3CpyQGTQRhNOA=)
                          10: 3138362e3234392e31372e302f32342d3234203d3e20323633303232.roa (hash: CXvWX4zByqobS4lNQNnW7qNeQaN/4lpuvfbUQpi/LOU=)
                          11: 3138362e3234392e32322e302f32332d3233203d3e20323633303232.roa (hash: TVIsp7msjVaA5/vW7mRXbBvDjo7kJVR/gXsXDZAA3sc=)
                          12: 3138362e3234392e31362e302f32312d3231203d3e20323633303232.roa (hash: 68r6IPemCaYD7QJtNH9ACyKI86qAUiv5lvnjQIum+ts=)
                          13: 3138362e3234392e32322e302f32342d3234203d3e20323633303232.roa (hash: 4vfhC+TpD6bW7kGAJnPxlGSI3Ad2N3or0RvAeIl0K8U=)
                          14: 3138362e3234392e31382e302f32342d3234203d3e20323633303232.roa (hash: hvLVCu85jTQbG7JqWNSsVFaXHidV3z2Va+q0kFvTxEQ=)
                          15: 3138362e3234392e31382e302f32332d3233203d3e20323633303232.roa (hash: ITF5gnc06umZurt990pa1EEUxUmVJ+eYkNyBvnF2Khg=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl
                          rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ab:14:25:b8:38:8d:e9:ff:de:b0:b5:89:8e:45:7c:91:de:de:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
        Validity
            Not Before: Nov 23 07:38:14 2024 GMT
            Not After : Nov 24 09:27:14 2024 GMT
        Subject: CN=6F3F0C50F35DBFC7881E7374FD1688011F9F23AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:7f:ab:8e:0f:90:98:a2:c2:55:09:78:cd:c1:
                    96:65:81:c3:ea:0f:da:24:a6:1c:ad:0c:73:85:82:
                    54:4b:25:59:c6:4c:aa:18:d5:f9:09:3c:c4:d6:02:
                    10:1e:1a:61:3e:da:3f:ac:16:12:7e:0f:7a:ae:77:
                    ad:23:b1:8d:90:86:ae:51:21:d1:f5:6f:ef:d7:bf:
                    67:21:5a:d4:c1:a1:e4:d9:f9:fb:a6:71:e3:6f:24:
                    00:a6:d3:45:88:fe:88:01:5c:05:40:4c:70:7c:85:
                    de:04:aa:78:9b:b9:40:9b:30:11:fc:31:10:13:41:
                    f8:a5:12:18:b1:37:f9:59:e4:4e:2d:f1:9a:ca:d3:
                    5e:85:f4:59:81:ae:e9:49:b5:57:68:15:a2:d9:03:
                    62:6d:01:c7:d2:f8:9f:ab:3e:f1:00:21:ce:78:12:
                    9c:35:f1:30:a6:b8:8e:51:20:96:c9:17:3b:7d:59:
                    c8:dd:6a:6f:18:92:d9:bf:f9:c6:11:bf:a4:b5:f0:
                    2d:e6:b5:3d:6f:88:56:bf:67:79:6f:50:82:6c:84:
                    f0:6d:d2:8f:40:2d:23:b9:02:12:9a:33:8b:f8:35:
                    07:b2:75:44:b0:60:47:d4:18:ae:ac:d2:23:55:79:
                    92:db:4b:89:9d:df:92:f2:a4:09:69:82:6a:1f:67:
                    1a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:3F:0C:50:F3:5D:BF:C7:88:1E:73:74:FD:16:88:01:1F:9F:23:AE
            X509v3 Authority Key Identifier:
                keyid:BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:08:0b:5a:8b:7f:e4:cb:d4:7e:95:69:bd:01:fc:b0:ab:63:
         c9:07:6d:f5:0b:54:3d:27:48:1c:b6:b4:a5:67:e2:bd:00:db:
         aa:ce:8e:fb:ce:fd:93:4f:9c:38:3b:24:f9:c1:ed:55:cc:f3:
         00:5d:dc:86:be:6a:36:68:18:ec:ec:b1:44:09:f4:60:4c:2a:
         93:42:87:70:27:f8:61:90:d9:b2:b0:99:6a:19:a0:8f:ed:a7:
         89:ef:b3:c8:09:59:f9:03:d4:a7:a6:86:a9:24:89:7f:fb:4e:
         ac:eb:e4:78:00:08:ff:b4:26:d2:4a:5f:14:fd:74:90:f9:eb:
         47:06:42:f5:f1:64:70:4e:22:a4:8b:d1:72:81:be:e0:f1:95:
         aa:09:a9:3e:62:ce:97:b9:09:b1:ae:59:56:be:9e:ba:64:90:
         2b:43:d8:6f:0d:cd:8f:42:98:c8:e8:0a:78:b1:ff:5c:86:37:
         54:81:3e:ab:e0:76:56:b1:ce:11:06:7a:09:3b:16:98:c7:25:
         e8:1d:59:c3:7e:98:3d:5a:fd:03:d4:01:7c:3e:e3:a8:4c:db:
         80:c1:ae:f8:ee:f5:3c:82:d6:a5:c7:05:c5:fd:78:23:42:3e:
         ed:3b:42:e1:3a:77:68:39:11:fc:5d:da:d6:3d:c8:fa:e8:86:
         36:6d:42:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:02 2024 by rpki-client on console-fra.rpki-client.org