Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.mft
File:                     0D544ED42C6259C03F729BAE35330B8BC76BC251.mft (raw, json)
Hash identifier:          jKPXfrMOz080GIDTkMbS00234qPzdV8Ld1synJyZLTw=
Subject key identifier:   11:30:80:54:21:B8:A4:29:99:D3:FC:EE:20:95:FB:B5:F6:7F:8A:D9
Authority key identifier: 0D:54:4E:D4:2C:62:59:C0:3F:72:9B:AE:35:33:0B:8B:C7:6B:C2:51
Certificate issuer:       /CN=0D544ED42C6259C03F729BAE35330B8BC76BC251
Certificate serial:       7B29BC6B837F0682431212443AFF915397794072
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D544ED42C6259C03F729BAE35330B8BC76BC251.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.mft
Manifest number:          1B
Signing time:             Sat 23 Nov 2024 01:29:57 +0000
Manifest this update:     Sat 23 Nov 2024 01:24:57 +0000
Manifest next update:     Sun 24 Nov 2024 01:51:57 +0000
Files and hashes:         1: 0D544ED42C6259C03F729BAE35330B8BC76BC251.crl (hash: PVzyM+PpgwVo4Uwj1k5iusO6RDr9adURJWizZIBakTM=)
                          2: 3137372e3132392e36362e302f32332d3234203d3e20323632333839.roa (hash: YGWYRLXvPbJzdz3kczKSlvd2VxATHHwmN+1PRF0Sufk=)
                          3: 3137372e3132392e36342e302f32342d3234203d3e20323732373133.roa (hash: 2dSYpLYj9Mflx61uTSpV65NnL7a/axLr9CKw9Y65WKI=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.crl
                          rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D544ED42C6259C03F729BAE35330B8BC76BC251.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:29:bc:6b:83:7f:06:82:43:12:12:44:3a:ff:91:53:97:79:40:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D544ED42C6259C03F729BAE35330B8BC76BC251
        Validity
            Not Before: Nov 23 01:24:57 2024 GMT
            Not After : Nov 24 01:51:57 2024 GMT
        Subject: CN=1130805421B8A42999D3FCEE2095FBB5F67F8AD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9e:2c:c7:73:b4:82:36:d9:b3:6c:0d:1f:54:
                    61:b4:19:d3:d8:7c:30:60:cf:17:b2:38:dc:a2:2a:
                    c9:32:f7:9e:2f:29:bc:e1:44:5f:75:e8:b5:8f:86:
                    7b:28:e0:c0:9a:f7:0d:7b:67:18:d7:e4:91:96:e4:
                    5b:26:25:94:b8:fd:cc:bd:c1:1d:81:c1:37:09:e3:
                    2c:6d:d7:59:20:a3:42:3d:53:f8:25:db:a5:73:ce:
                    68:a9:f7:8c:22:cd:00:ad:10:94:cc:bc:03:7c:d1:
                    6c:2e:0d:10:b9:96:09:43:86:36:58:37:9f:88:a4:
                    6c:b6:ff:ba:8f:a9:a5:44:52:83:42:4f:70:9a:25:
                    11:3a:f5:d4:dc:a6:92:59:6a:f8:85:b6:f1:b5:ed:
                    f5:eb:25:bb:45:ac:7a:6b:e0:2b:97:85:3a:44:65:
                    ed:59:70:ba:1f:7e:3b:3c:67:06:8e:e8:d6:0d:c1:
                    56:c2:97:04:7d:b8:d7:cc:14:67:30:38:63:9a:ab:
                    65:30:12:fd:a5:01:dd:c1:9d:01:7e:73:24:e2:12:
                    b8:d1:fe:c6:70:71:b2:43:29:62:01:f5:d6:c1:e5:
                    fc:3f:d1:88:50:d9:77:63:d6:5c:f7:39:5c:56:9d:
                    f1:2b:15:4c:2f:f5:10:35:a0:6b:ca:43:52:fd:76:
                    c5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:30:80:54:21:B8:A4:29:99:D3:FC:EE:20:95:FB:B5:F6:7F:8A:D9
            X509v3 Authority Key Identifier:
                keyid:0D:54:4E:D4:2C:62:59:C0:3F:72:9B:AE:35:33:0B:8B:C7:6B:C2:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D544ED42C6259C03F729BAE35330B8BC76BC251.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:10:37:17:4d:94:58:3e:d0:fa:7b:53:e4:73:ac:90:65:be:
         57:f4:89:6d:4e:49:8c:db:e8:a7:16:6d:b4:3d:89:ae:8c:c4:
         89:05:75:36:2d:e6:6c:d3:51:eb:1f:dd:2a:8c:5a:97:60:c2:
         0b:8e:ce:c5:cc:c4:65:fe:92:db:84:ca:ed:68:8a:ba:f8:98:
         16:cb:2b:fe:98:05:57:bb:55:1c:90:a8:3f:f8:ff:28:dc:19:
         7f:96:29:83:cb:c3:6d:01:a2:2e:90:4e:b4:3f:a9:b6:ff:4f:
         6a:00:5f:8b:fb:11:bb:c7:46:0b:b5:88:e5:d7:ed:75:4d:ac:
         53:ac:65:60:f7:06:57:01:9b:ac:57:10:74:cc:72:54:c1:cd:
         55:10:8a:35:61:be:1e:5e:cd:62:66:eb:55:35:69:1f:7c:09:
         b6:07:a9:18:52:76:67:8a:ce:c2:20:85:3a:7b:70:00:da:0c:
         63:5e:41:be:09:68:90:3d:95:b6:98:cf:9d:e1:43:11:d5:34:
         e5:53:4f:02:77:f6:7c:f7:17:43:73:a8:06:79:dc:ff:6f:4b:
         d4:7e:fd:4f:48:94:67:b9:7c:57:b4:6b:6b:e7:5c:0c:e2:57:
         d1:97:df:99:5b:3b:7e:3d:07:fa:1b:99:8b:b7:7e:30:63:73:
         b3:92:78:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:06 2024 by rpki-client on console-fra.rpki-client.org