Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft
File:                     DD880B71129737798123EE9EDC1423C3E8280892.mft (raw, json)
Hash identifier:          kJOmEyzr0eEZTf/KsitcLLbeXUuu/YvXqToTAVP7iGs=
Subject key identifier:   7E:9E:4A:B2:9D:79:9B:F5:7E:68:15:A5:CC:AC:D8:3C:A8:A4:5D:37
Authority key identifier: DD:88:0B:71:12:97:37:79:81:23:EE:9E:DC:14:23:C3:E8:28:08:92
Certificate issuer:       /CN=DD880B71129737798123EE9EDC1423C3E8280892
Certificate serial:       095E1ACA378217531651BFA1BCEC08E5B0DFCF75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft
Manifest number:          0154
Signing time:             Tue 26 Nov 2024 05:00:00 +0000
Manifest this update:     Tue 26 Nov 2024 04:55:00 +0000
Manifest next update:     Wed 27 Nov 2024 05:00:00 +0000
Files and hashes:         1: 34352e3137352e33322e302f32322d3234203d3e20323638383831.roa (hash: 0UPIU5ASWuju+073sJJrT/AIV8KYzpRsHNMBJdzHWf4=)
                          2: DD880B71129737798123EE9EDC1423C3E8280892.crl (hash: KVrqKGcyollcOX5f0ZuX4/G8nap/M4enOB1gF7j+0qI=)
                          3: 323830343a356266633a3a2f33322d3438203d3e20323638383831.roa (hash: z9hTSEyIb5Bh7pNE7rmcEHcOHdmt7IjRSKpBxsnepoA=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.crl
                          rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5e:1a:ca:37:82:17:53:16:51:bf:a1:bc:ec:08:e5:b0:df:cf:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD880B71129737798123EE9EDC1423C3E8280892
        Validity
            Not Before: Nov 26 04:55:00 2024 GMT
            Not After : Dec  3 05:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cf:68:c5:07:95:73:50:e9:d0:1c:bb:df:e8:
                    cf:24:3c:b6:1d:81:7c:f9:73:02:85:45:52:f4:b4:
                    0a:be:31:c9:5f:5b:73:09:f8:28:45:5d:e9:af:a5:
                    44:75:cc:10:d8:53:d0:31:7a:04:ac:99:9f:64:cd:
                    a3:50:45:c9:d3:12:a8:8d:98:be:77:16:2c:3d:e8:
                    d9:e5:12:d6:40:70:97:b4:7d:08:4a:28:bb:f6:8c:
                    75:02:d2:d0:25:21:65:8e:2a:c1:14:8c:8a:50:dd:
                    c2:cf:68:21:92:e4:28:86:26:88:5a:c0:0c:8c:95:
                    7f:e6:de:fb:dd:ff:6e:68:01:03:8c:df:f7:2a:69:
                    aa:6c:e4:ac:f7:28:90:b8:eb:b2:07:70:30:90:99:
                    69:ad:6a:4e:e9:dd:4b:1f:7d:27:dc:30:4f:b7:30:
                    d6:e9:58:ec:17:ac:00:97:87:8f:3f:ac:e3:17:55:
                    9b:cd:62:e0:32:f3:39:93:30:eb:b4:5c:48:4f:08:
                    63:90:0b:74:17:b5:6b:84:d6:44:2a:7c:14:cf:0e:
                    37:7e:75:05:8a:3a:18:c2:18:17:01:00:7f:b7:8f:
                    2f:c4:6a:a2:c4:ac:06:2e:fd:6c:89:6b:10:91:1a:
                    c4:cf:98:1e:30:c1:94:21:0c:8f:59:27:f9:d9:c2:
                    c5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9E:4A:B2:9D:79:9B:F5:7E:68:15:A5:CC:AC:D8:3C:A8:A4:5D:37
            X509v3 Authority Key Identifier:
                keyid:DD:88:0B:71:12:97:37:79:81:23:EE:9E:DC:14:23:C3:E8:28:08:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:a4:eb:46:24:f0:72:df:c4:1b:8b:20:d4:4f:8d:ab:f6:10:
         ca:bf:e1:98:e0:cf:ed:d9:e3:c3:fd:89:bd:25:d6:e4:31:b2:
         0a:ce:9f:1e:ae:e2:eb:6f:1a:5b:76:e1:b6:c9:91:d7:8c:38:
         65:c5:f6:6c:49:be:5f:41:26:25:47:5c:e3:4c:27:ce:8f:a1:
         2e:9f:cd:b4:10:9a:15:e1:35:d5:02:e0:ca:af:8e:60:03:54:
         e0:70:c2:d9:73:ad:ee:93:8e:3a:28:15:40:4d:69:a8:6f:22:
         89:11:fb:d4:3e:ec:6c:a7:0f:a9:8d:d9:00:aa:5a:1c:ac:82:
         1a:57:e7:cb:b5:d1:08:be:e7:a3:6f:df:a6:fe:36:91:dd:8b:
         33:76:df:70:b5:0d:6e:34:2a:fb:39:62:10:c4:ea:f5:c1:1b:
         ea:8b:da:be:ea:16:13:52:74:c6:dc:10:66:82:26:4b:cb:d4:
         7f:24:c8:a2:d1:0d:3d:ff:31:89:15:ee:2f:55:26:1b:05:54:
         cb:2b:38:8f:78:30:6c:8a:bb:c5:22:01:39:19:29:2d:7d:5a:
         a0:de:7f:3c:e2:d6:df:55:28:95:a7:9b:17:79:26:4a:c2:df:
         c7:5b:72:5e:55:f2:ef:5a:f4:37:71:44:4d:4f:85:89:d4:be:
         c1:47:67:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:08 2024 by rpki-client on console-fra.rpki-client.org