Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.mft
File:                     4FEB85108E86A307A90034950C74C7A6630768F6.mft (raw, json)
Hash identifier:          RFYAzdtkfIGRImVvSKL2tYely1XcZT5E2gPQqyzoB0Q=
Subject key identifier:   D3:64:48:70:EC:03:D0:A9:AB:A2:A3:85:C8:63:3B:EF:67:5A:AD:91
Authority key identifier: 4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6
Certificate issuer:       /CN=4FEB85108E86A307A90034950C74C7A6630768F6
Certificate serial:       6B37DC8047740B4019B27199F9404FEE5AB9BE44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.mft
Manifest number:          0135
Signing time:             Fri 22 Nov 2024 18:13:25 +0000
Manifest this update:     Fri 22 Nov 2024 18:08:25 +0000
Manifest next update:     Sat 23 Nov 2024 19:19:25 +0000
Files and hashes:         1: 3139312e352e37312e302f32342d3234203d3e203631393031.roa (hash: 5VRxIQGAHxBPfnr8R/ZzYE8od12gUkVB4vx6n6bEAdg=)
                          2: 3137302e3235342e35322e302f32332d3234203d3e203631393031.roa (hash: vhbKQpiIhE5AbuxxkLWfQa0jAZ2LRLxGhA6X3FBzg84=)
                          3: 3139312e352e36342e302f32312d3234203d3e203631393031.roa (hash: lBzoM0nCMEXoOjOJF4emHgeKRUI3u+00Sfr0JBnZjEM=)
                          4: 3139312e352e36342e302f32322d3234203d3e203631393031.roa (hash: JDc8nksjLKnGadBAmRtB8X8w0gf2cKOKM6P66kkKYCE=)
                          5: 3137302e3235342e35342e302f32342d3234203d3e203631393031.roa (hash: SlhKdE/2gDQfwFhw2x6SWE+27xTPZKHNfQ3iNzmYOwA=)
                          6: 3137302e3235342e35342e302f32332d3234203d3e203631393031.roa (hash: YIiU2KAAgx818sNEGkt8nqcjTUAr2J5c4ZGHgBHtc+Y=)
                          7: 4FEB85108E86A307A90034950C74C7A6630768F6.crl (hash: NZUmYKB0n5pyZQ+FyH/qNDcclKn+B+PAFk0P6ZQ4vXY=)
                          8: 323830343a313337303a3a2f33322d3438203d3e203631393031.roa (hash: apa2nKiHG/m4tD0VZrBO6TZFjZAgUoUtyoPLq0b2SRg=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.crl
                          rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:37:dc:80:47:74:0b:40:19:b2:71:99:f9:40:4f:ee:5a:b9:be:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FEB85108E86A307A90034950C74C7A6630768F6
        Validity
            Not Before: Nov 22 18:08:25 2024 GMT
            Not After : Nov 23 19:19:25 2024 GMT
        Subject: CN=D3644870EC03D0A9ABA2A385C8633BEF675AAD91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:38:9f:ed:86:86:36:6a:d2:ea:2f:f5:84:9f:
                    78:af:2d:49:dd:df:f9:21:21:9a:4b:47:e6:b9:0a:
                    02:40:44:cf:96:c4:2f:65:9d:df:45:c7:71:a1:22:
                    a9:5d:08:33:e6:0d:35:97:66:dc:91:d6:1a:6e:bb:
                    13:23:ab:47:73:cf:47:5f:53:72:1c:f3:c4:36:50:
                    84:43:56:cc:55:7b:53:ce:70:4f:b4:bf:26:cf:c1:
                    6a:d7:2f:16:34:54:be:8c:12:53:4c:a3:07:77:3c:
                    89:41:a6:17:8b:41:c7:f8:bc:44:26:f8:25:29:e9:
                    73:54:dc:e7:9e:8b:f1:df:f3:6b:5b:7f:8a:54:b9:
                    9b:32:68:b2:9d:3b:24:85:03:14:a5:a3:0b:8d:37:
                    cd:4b:67:72:b9:01:2b:a6:3d:4d:0a:d0:3c:35:b6:
                    b5:cc:f3:0a:3a:42:5f:ec:18:1a:45:dd:d9:af:8b:
                    78:a0:3c:63:71:27:b3:70:d3:b8:b6:e1:3b:35:75:
                    62:fc:c4:a1:79:43:b6:b6:6e:83:aa:29:85:e6:b4:
                    f0:46:62:b1:cc:eb:0c:a1:4c:e0:c7:d9:ab:0a:a6:
                    4c:83:66:e5:f3:d9:24:52:4d:e8:b5:a0:e8:3a:3a:
                    21:c5:77:e5:65:a1:41:f5:f9:3e:58:17:52:d1:3c:
                    ff:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:64:48:70:EC:03:D0:A9:AB:A2:A3:85:C8:63:3B:EF:67:5A:AD:91
            X509v3 Authority Key Identifier:
                keyid:4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:7e:c9:21:8f:8a:66:4a:b7:87:f9:e5:61:86:25:c5:54:f0:
         49:ad:9e:98:ae:5b:05:3f:6c:32:31:e8:db:2d:c0:e9:9a:65:
         5c:11:d7:a5:6f:89:e9:06:f5:ec:df:ed:ad:f7:67:43:3e:f4:
         d3:51:bf:7d:e3:b8:bc:1b:62:85:7a:bd:cc:75:ed:15:de:f6:
         b4:d2:3c:c1:12:c8:5f:9e:a4:ef:80:7a:85:41:f0:0b:8b:23:
         df:fc:cd:8e:7b:d3:ad:58:f3:c2:c0:f2:59:0c:e7:6e:60:79:
         57:47:b3:c0:74:06:dd:5e:3e:a2:71:70:e7:d3:75:7a:f2:4b:
         65:9f:3f:03:8a:e3:ca:db:1d:fd:42:7b:c6:3f:30:a2:ec:8f:
         67:92:dd:57:b8:c3:ad:ca:21:37:1a:1e:0f:ed:ae:77:ea:18:
         b0:29:58:54:5b:62:94:53:34:08:f5:3d:ef:61:78:a9:b6:cf:
         a2:34:b1:ca:0b:31:55:a6:19:d9:74:85:60:29:0b:0a:86:97:
         dc:15:17:3b:59:14:58:d6:c9:f0:a5:8d:29:5d:91:f4:64:89:
         bf:c0:8a:7b:3c:dd:8c:d0:4a:4a:ea:df:83:cc:37:70:c0:2b:
         48:47:c9:29:0d:7b:b9:5c:86:90:6c:9d:2c:9b:66:96:fd:1a:
         c6:35:0a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:20 2024 by rpki-client on console-ams.rpki-client.org