Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft
File:                     21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft (raw, json)
Hash identifier:          Ra4H5nH7whNHMI0lK05kj4klRf8i7Hu3R/uvi5urJjM=
Subject key identifier:   1F:58:A3:F7:E4:EE:9E:A3:E9:40:B4:68:5E:14:3D:7C:AB:BB:C3:CB
Authority key identifier: 21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC
Certificate issuer:       /CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC
Certificate serial:       338EC3340DFB409C1761077B0EC2845CB9284DD2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft
Manifest number:          78
Signing time:             Sat 23 Nov 2024 06:34:26 +0000
Manifest this update:     Sat 23 Nov 2024 06:29:26 +0000
Manifest next update:     Sun 24 Nov 2024 08:18:26 +0000
Files and hashes:         1: 34352e3139302e3131312e302f32342d3234203d3e20323639363236.roa (hash: SAky1VWNr2UCtf3FeLygZxRkgi9D1QSpDQX0Rj5TXxE=)
                          2: 323830343a363736383a3a2f33322d3332203d3e20323639363236.roa (hash: 9+BXd9CE8cBP2dnVN4diw0udiQDxt3oAPF1r9F/mvuE=)
                          3: 34352e3139302e3131302e302f32332d3233203d3e20323639363236.roa (hash: AFyjyb+e6fnJ7Elh0VjXOc/5/W2vV6E74x8Sqqp/QoY=)
                          4: 34352e3139302e3130392e302f32342d3234203d3e20323639363236.roa (hash: x5JOjRs6ZTVLYxKPkuAixjpHH0DLQFE7GDKo6WKU9jc=)
                          5: 34352e3139302e3131302e302f32342d3234203d3e20323639363236.roa (hash: wcfe7UJ64MCo0Q2488q5lzFxH8+r907X8WF8LDuykfs=)
                          6: 34352e3139302e3130382e302f32332d3233203d3e20323639363236.roa (hash: iLlF1ninPEmkNcjwElnerdmDN5HhpAeMQXWSgLfB1xs=)
                          7: 34352e3139302e3130382e302f32322d3232203d3e20323639363236.roa (hash: CD2iN89tbOF26Y17Dz9pqTL2C/4slIYiS6DwVquAa8A=)
                          8: 21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl (hash: My4XIXgfNgzbcpUdm6cdyfmhzNsHzwl91cQkOcMRC3s=)
                          9: 34352e3139302e3130382e302f32342d3234203d3e20323639363236.roa (hash: F78uA17kBDrRS5P8C6EqmdxljVPBA8gEfmlCnHugW+E=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl
                          rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:8e:c3:34:0d:fb:40:9c:17:61:07:7b:0e:c2:84:5c:b9:28:4d:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC
        Validity
            Not Before: Nov 23 06:29:26 2024 GMT
            Not After : Nov 24 08:18:26 2024 GMT
        Subject: CN=1F58A3F7E4EE9EA3E940B4685E143D7CABBBC3CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3d:94:54:71:b4:83:02:05:78:60:39:43:b2:
                    a4:3e:cb:4f:3d:0a:ad:3a:8e:f6:77:fb:58:7b:28:
                    7b:dc:8f:f1:36:1f:5b:c0:b0:75:15:b8:d6:3a:76:
                    76:66:f1:5f:d1:83:46:ab:39:fe:f9:96:37:b4:e3:
                    3f:d1:94:b7:8a:1f:8f:68:f7:30:4c:7f:18:94:c1:
                    13:03:61:06:56:b1:ce:3f:cc:a4:b2:2b:de:64:88:
                    87:d7:9e:88:15:a1:fa:72:94:d2:f3:0d:8a:86:20:
                    01:6f:25:4f:5d:b1:a7:f1:fb:c4:ab:72:5f:44:09:
                    a3:d4:51:52:8a:c3:cd:6b:56:10:ae:4e:ab:e7:15:
                    58:ea:cb:cb:56:8c:e0:ae:9b:63:36:10:98:86:13:
                    b8:6c:66:6e:1e:d8:c7:f1:82:c5:46:84:83:68:ae:
                    06:c8:b6:c8:c3:60:46:9a:f7:b2:d5:03:42:32:fe:
                    0a:e7:69:f8:1a:97:8b:f5:be:7e:84:50:e8:83:5f:
                    f3:0f:2f:f3:11:56:ca:b3:18:cb:a3:39:37:7f:ae:
                    0b:3f:85:4b:53:75:03:0d:3d:e1:ff:03:fc:51:af:
                    1c:ac:1f:43:9c:4b:a1:60:36:cd:cd:e9:e7:6b:d9:
                    c1:10:87:df:11:26:e5:35:33:73:22:e1:ce:47:fe:
                    2a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:58:A3:F7:E4:EE:9E:A3:E9:40:B4:68:5E:14:3D:7C:AB:BB:C3:CB
            X509v3 Authority Key Identifier:
                keyid:21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:71:a9:88:36:83:60:cf:67:2c:b1:01:2b:ca:89:b6:bf:4c:
         91:fa:ed:1e:2f:0b:3b:bc:1e:b0:18:8a:29:ef:99:5f:d7:17:
         95:94:aa:8c:bf:5d:76:85:3d:0b:18:e4:19:ae:0e:55:12:f7:
         6e:a6:47:0b:6e:ec:c2:96:b4:eb:d8:a0:c9:4f:a8:4c:aa:70:
         b3:e9:10:d8:f0:a9:f8:fe:9e:0d:c3:89:63:26:21:ee:d3:2c:
         2d:c0:e0:cb:66:58:e4:fa:1b:e7:c5:e6:81:08:61:f9:c8:30:
         c6:d0:99:90:05:a8:30:05:d0:68:01:c4:ae:d2:12:98:8b:22:
         29:f9:33:95:d4:7a:67:70:a5:ed:e8:4a:05:12:ea:12:46:f5:
         9d:2c:05:b2:c8:da:b7:ba:0d:2f:42:c0:b3:c2:52:04:48:b3:
         4d:5e:b5:c2:3a:a2:47:6b:30:61:e5:ec:0d:80:70:c1:43:ac:
         62:b6:fb:cf:61:c2:3c:42:dc:8c:47:7e:c6:3f:95:14:9f:13:
         bf:c6:1c:4f:01:cd:4c:08:ad:2a:d5:78:43:cb:13:61:25:b8:
         6d:dd:5f:ee:c0:55:e3:c2:68:cd:f2:6e:9e:2a:9c:a6:f7:37:
         9e:ba:05:9b:5f:a6:fa:0b:08:05:74:60:6e:6a:f1:4c:a2:3a:
         fe:bd:fe:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:01 2024 by rpki-client on console-fra.rpki-client.org