Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/4F6E3A9EAA52D623EE5F5FC3609B1FF9961FA769.mft
File:                     4F6E3A9EAA52D623EE5F5FC3609B1FF9961FA769.mft (raw, json)
Hash identifier:          7tgZ7fpH6D5do+RpDTdwEdvxOvwpJFS7S3LziawG7LM=
Subject key identifier:   44:31:29:D6:AB:12:48:A1:C9:00:D2:24:0B:2D:44:CD:A2:A2:E1:E6
Authority key identifier: 4F:6E:3A:9E:AA:52:D6:23:EE:5F:5F:C3:60:9B:1F:F9:96:1F:A7:69
Certificate issuer:       /CN=4F6E3A9EAA52D623EE5F5FC3609B1FF9961FA769
Certificate serial:       07B8902E34585C579E6499973A6E1ABD02FCFCB2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F6E3A9EAA52D623EE5F5FC3609B1FF9961FA769.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/4F6E3A9EAA52D623EE5F5FC3609B1FF9961FA769.mft
Manifest number:          5A
Signing time:             Fri 29 Nov 2024 21:48:20 +0000
Manifest this update:     Fri 29 Nov 2024 21:43:20 +0000
Manifest next update:     Sun 01 Dec 2024 00:55:20 +0000
Files and hashes:         1: 323830343a366331343a383030303a3a2f33332d313238203d3e20323730343434.roa (hash: P4cV4+US9uQegi0GCBnI1ddsEjoWHMSVzueS3q4sFWM=)
                          2: 323830343a366331343a3a2f33332d313238203d3e20323730343434.roa (hash: Bu3quEx0DVoJ5GNkp+SLzz+9OjlPjaw9yJqCfxoqjx4=)
                          3: 4F6E3A9EAA52D623EE5F5FC3609B1FF9961FA769.crl (hash: oOwKwf3sJZrOXQKF61VyoOj8HXaJvc383RvGFex6w+M=)
                          4: 3230302e32362e3235342e302f32332d3332203d3e20323730343434.roa (hash: ksNb8dYwG6yfQSREXXwudX82xaDtDdRiJgYbE+BNBj4=)
                          5: 3230302e32362e3235322e302f32332d3332203d3e20323730343434.roa (hash: R4CpyvYDX5wlepwdpuINHs/O2telQMW0JPk5DM4r6U0=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/4F6E3A9EAA52D623EE5F5FC3609B1FF9961FA769.crl
                          rsync://rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/4F6E3A9EAA52D623EE5F5FC3609B1FF9961FA769.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F6E3A9EAA52D623EE5F5FC3609B1FF9961FA769.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Dec 2024 00:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b8:90:2e:34:58:5c:57:9e:64:99:97:3a:6e:1a:bd:02:fc:fc:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F6E3A9EAA52D623EE5F5FC3609B1FF9961FA769
        Validity
            Not Before: Nov 29 21:43:20 2024 GMT
            Not After : Dec  1 00:55:20 2024 GMT
        Subject: CN=443129D6AB1248A1C900D2240B2D44CDA2A2E1E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c6:16:39:99:a2:c0:ab:aa:99:f1:1d:72:a7:
                    d4:ff:77:71:16:f4:38:a5:9f:4a:d3:c8:84:09:29:
                    9b:e8:25:7f:a3:c8:19:20:c9:26:c9:0a:c9:c0:bb:
                    18:00:f4:ae:95:31:d9:f6:f9:74:b6:7d:e8:99:47:
                    b4:c8:1b:2e:25:38:ed:37:b5:72:b9:b7:b5:7e:a0:
                    b3:f3:71:50:49:24:3e:ee:32:bb:a3:58:e1:1c:d8:
                    1f:e8:63:ca:20:8b:b8:a7:ae:df:0d:be:cb:92:ea:
                    f5:a9:66:43:93:99:e3:5d:db:40:c5:ad:f3:8e:61:
                    ae:b0:14:1b:db:a1:cc:30:07:66:67:3f:60:9b:17:
                    27:b0:ab:07:42:8a:3a:0f:93:0b:e8:9a:4c:2a:41:
                    ec:9c:e4:46:e0:9a:ef:fc:f1:74:96:6a:27:d1:4c:
                    22:6c:8d:c8:83:f1:fa:8b:61:d9:3f:a0:be:53:0e:
                    32:9f:3e:6f:fa:95:a4:f2:f7:bc:5c:be:76:de:88:
                    34:1a:bc:fd:a7:81:60:f7:b1:4a:dc:46:26:bc:f9:
                    80:59:4f:80:97:7b:d2:03:d0:59:bc:4e:35:41:13:
                    8b:32:ab:9b:c4:38:c0:d6:d5:e1:12:ff:ea:bb:b5:
                    87:a2:7c:28:2d:16:b9:28:9d:c2:ed:22:ef:b3:04:
                    65:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:31:29:D6:AB:12:48:A1:C9:00:D2:24:0B:2D:44:CD:A2:A2:E1:E6
            X509v3 Authority Key Identifier:
                keyid:4F:6E:3A:9E:AA:52:D6:23:EE:5F:5F:C3:60:9B:1F:F9:96:1F:A7:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/4F6E3A9EAA52D623EE5F5FC3609B1FF9961FA769.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F6E3A9EAA52D623EE5F5FC3609B1FF9961FA769.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/4F6E3A9EAA52D623EE5F5FC3609B1FF9961FA769.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c5:ec:b0:8d:5c:e9:3e:14:46:20:3d:11:79:db:af:dc:88:
         67:9c:74:8d:d1:de:07:19:4b:c0:2c:ef:ad:b1:3f:94:d5:d4:
         89:ff:56:61:2e:94:8d:e1:c1:10:e1:86:f9:6d:cb:04:36:7f:
         7d:83:eb:67:f4:6f:99:de:7b:4d:95:a7:39:5c:3b:1d:89:5c:
         e8:3e:4f:48:e7:c3:31:60:55:c0:36:e6:f3:a5:c4:ed:29:ed:
         eb:23:53:ab:d6:21:3b:c2:2f:ab:d9:65:6d:63:83:86:a1:c8:
         dd:d0:e8:cd:ae:c7:70:dd:07:02:95:7b:cc:8f:f8:e5:01:11:
         21:35:fb:4a:27:78:51:53:4e:ac:11:1f:0e:f9:aa:ba:b7:33:
         77:cc:0d:27:f3:8b:e2:15:9c:c3:c3:67:ed:77:90:d0:f2:d0:
         94:57:fa:1c:f2:40:92:93:83:67:a1:b3:90:e2:b6:17:ac:e3:
         70:1c:d7:d1:bd:b5:af:55:3b:75:d4:08:cc:a7:70:54:a8:e4:
         fe:bf:db:62:23:d4:d4:67:af:99:e8:d3:06:d8:b6:5c:a4:55:
         f0:d5:88:57:b9:10:44:68:0d:60:39:2e:34:76:2c:e8:3c:cf:
         87:59:bc:cc:8b:bd:b1:d5:57:65:44:55:be:02:7f:54:49:f0:
         88:63:88:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 22:35:51 2024 by rpki-client on console-fra.rpki-client.org