Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.mft
File:                     F4CE893E9874372932D6054F7AFDD9FBBD021974.mft (raw, json)
Hash identifier:          YqIoozNmikvqpsb1rniy5MS3s1jcceLyilfteNo5AVQ=
Subject key identifier:   2C:91:66:23:B6:2A:CC:25:41:63:EF:0B:E1:F1:4A:DD:3C:E2:B8:24
Authority key identifier: F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74
Certificate issuer:       /CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
Certificate serial:       41C4496A19A2C9E4DE41A4BE784BEACDB269396F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.mft
Manifest number:          013E
Signing time:             Fri 22 Nov 2024 23:59:48 +0000
Manifest this update:     Fri 22 Nov 2024 23:54:48 +0000
Manifest next update:     Sun 24 Nov 2024 00:41:48 +0000
Files and hashes:         1: F4CE893E9874372932D6054F7AFDD9FBBD021974.crl (hash: Xo7tfAxiwg/Tar2pVWIQY/YXmCmMzq400GEUOZFbGwE=)
                          2: 34352e3138302e39392e302f32342d3234203d3e20323639313238.roa (hash: n6vxCdRZ1LdITLiYo0m/HXgZeyClol4IvelThILD1Vo=)
                          3: 323830343a356664633a313030303a3a2f33362d3336203d3e20323639313238.roa (hash: TSejIf5bQXQrS1l7LsyEwHZK29Nvib2jrDTXeqhMa+o=)
                          4: 34352e3138302e39382e302f32342d3234203d3e20323639313238.roa (hash: 2D6dNRmTzjfR70v9FAGAYnLoQV1iHR1bipe2uT+l9y4=)
                          5: 323830343a356664633a323030303a3a2f33362d3336203d3e20323639313238.roa (hash: KzIsZZXPV/bqw8sdB0VSHjGyD75SV0rn+O6gPPYsxxg=)
                          6: 34352e3138302e39362e302f32332d3233203d3e20323639313238.roa (hash: 2NPSs0HTwmgI0h8DimygZSEr3/fdmLB3WNos/tnsrpc=)
                          7: 323830343a356664633a3a2f33322d3332203d3e20323639313238.roa (hash: LwgP8H7rvFkiAdxlY/Ei25GjtA2GUxFmaY5tGuEEOFg=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.crl
                          rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c4:49:6a:19:a2:c9:e4:de:41:a4:be:78:4b:ea:cd:b2:69:39:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
        Validity
            Not Before: Nov 22 23:54:48 2024 GMT
            Not After : Nov 24 00:41:48 2024 GMT
        Subject: CN=2C916623B62ACC254163EF0BE1F14ADD3CE2B824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d2:db:96:63:e1:ce:0f:de:bb:dd:c2:62:62:
                    a8:1d:e1:29:49:c2:7d:9f:29:a0:6f:3d:1e:7a:47:
                    80:19:7e:1c:ac:68:a1:ec:42:f9:5b:67:1a:41:5d:
                    cc:30:fb:7f:bf:6c:bb:dd:c3:22:fc:b3:36:d7:2b:
                    b5:9d:df:80:bd:13:bc:9d:bf:eb:df:07:6d:ff:2f:
                    12:d3:40:71:d3:d1:12:21:9e:c4:a4:cf:70:95:01:
                    a9:b9:4c:77:90:3d:7b:68:a4:33:d9:7b:13:38:ba:
                    fb:e8:9f:fd:42:fa:ef:6b:c7:14:40:64:88:6d:50:
                    57:2c:ee:f8:9b:46:d4:b5:96:23:f7:e3:38:ad:ac:
                    c5:72:a4:1a:a1:31:0a:b9:31:00:30:b7:b7:5d:44:
                    1d:fa:74:eb:a1:e8:4f:3e:66:90:20:4a:a9:3a:0c:
                    f0:3b:38:09:87:a9:54:15:92:bc:aa:88:e8:f5:fb:
                    c5:c2:c2:12:c3:11:09:b1:32:d1:7f:61:f2:35:e4:
                    92:c2:ae:c3:56:50:f6:fc:0c:36:30:e8:31:0f:77:
                    d2:03:4c:f5:1d:51:ce:ae:1d:78:c4:d5:ed:d9:22:
                    c3:56:41:c3:b0:13:1f:87:b0:f3:86:0f:75:85:25:
                    05:07:fc:3f:7a:c0:c0:34:7a:70:b3:bc:a4:7a:0f:
                    9a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:91:66:23:B6:2A:CC:25:41:63:EF:0B:E1:F1:4A:DD:3C:E2:B8:24
            X509v3 Authority Key Identifier:
                keyid:F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:21:b7:c5:56:4e:a1:e2:c4:72:58:00:ac:fb:4b:cf:5e:2d:
         06:97:9c:07:4b:79:30:ac:07:e9:da:ed:6f:20:7b:68:24:c7:
         f6:ac:8d:a3:56:3b:1d:d9:f3:05:98:ec:9a:7b:0c:5d:58:2d:
         b6:78:6d:71:8a:74:51:cd:21:12:de:ed:92:45:a6:70:12:95:
         dd:2e:f6:ca:65:51:f1:ca:4f:f2:a0:64:e8:d9:e3:70:c5:88:
         e9:9a:ed:b6:84:52:50:3a:46:ef:e0:96:28:5e:58:57:58:99:
         7b:0d:d8:43:ea:1f:d1:ea:a2:63:83:80:90:17:b4:59:d3:a4:
         7d:ae:55:03:76:e9:9f:ad:f4:1a:f9:8d:88:e0:c4:32:e6:1f:
         b9:ee:ef:1d:88:ac:3b:68:3a:e1:37:d1:85:37:c9:e4:ec:39:
         97:17:e1:b3:2c:7f:67:9e:05:0a:37:f0:04:52:ae:d7:4b:e1:
         3f:39:ea:73:cf:ee:9e:69:be:b2:c6:5d:e5:f2:61:e3:3c:52:
         7f:2c:24:75:05:ff:26:17:2f:1c:d9:2c:c3:6a:19:c7:8c:03:
         73:cd:c5:b5:2b:1f:c3:aa:de:05:3f:ba:32:2d:07:87:fb:1e:
         75:a0:c5:a1:e4:4b:df:19:7f:8f:f2:b1:11:1f:21:e9:d7:c2:
         7a:3c:21:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:36 2024 by rpki-client on console-ams.rpki-client.org