Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.mft
File:                     D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.mft (raw, json)
Hash identifier:          RKDuBKxp2MOyX03k9BUqOKuCxF212A9XGnEV5FzWzgk=
Subject key identifier:   9A:01:A9:C9:53:E9:5E:FB:3C:5D:7E:9E:62:AE:FB:61:FC:57:EC:A2
Authority key identifier: D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73
Certificate issuer:       /CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
Certificate serial:       2CA0A21ADD945F11BB70534D2C2FDEDFC99CA599
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.mft
Manifest number:          0129
Signing time:             Mon 25 Nov 2024 08:12:44 +0000
Manifest this update:     Mon 25 Nov 2024 08:07:44 +0000
Manifest next update:     Tue 26 Nov 2024 12:03:44 +0000
Files and hashes:         1: 3136382e3232382e3136392e302f32342d3234203d3e20323632363131.roa (hash: bYwJKu3QlG6KNdi+t0S7w8NDDnNSNdIwDnvVLMVK3Cs=)
                          2: 3137372e38352e3137362e302f32332d3233203d3e20323632363131.roa (hash: j3WM3M0gd8M/5i0h1jNILx3pFLfsmfnj5ADvNwsLINw=)
                          3: 3137372e38352e3137382e302f32332d3233203d3e20323632363131.roa (hash: gGGqnL3ngWHNC8MtVY2sclbPhvpiyUNf0naVnsM0puc=)
                          4: 3136382e3232382e3137302e302f32332d3233203d3e20323632363131.roa (hash: DeTjksZEWNpvvOqLetwxKxmP3807ljVgyUuQyLZ5iao=)
                          5: 3136382e3232382e3137302e302f32342d3234203d3e20323632363131.roa (hash: tLJaGLHV1g33QrcgIN1yFx+iu+cj56dpk0KhP8yK7Ic=)
                          6: 3137372e38352e3138302e302f32342d3234203d3e20323632363131.roa (hash: m7I89NRT/iXzRaOHTf+hYqIuO0lvfTmI86Pqpg69IOg=)
                          7: 3137372e38352e3137382e302f32342d3234203d3e20323632363131.roa (hash: u3apwI4HTf7tqQKKS2DGC6q5kBnfIwQz0aoFZFUnA9w=)
                          8: 3137372e38352e3138322e302f32332d3233203d3e20323632363131.roa (hash: MqKlKf9NIbhAqqQZpvL37fM4BFGRbB6IE46pYwU2q7Q=)
                          9: 323830343a326663383a383030303a3a2f33332d3333203d3e20323632363131.roa (hash: QT/CZS6ceCUSieS6KZ3dZqsEutwnyeCAvVa6PoK4ens=)
                          10: 3136382e3232382e3137312e302f32342d3234203d3e20323632363131.roa (hash: YF0jeSObg8Mz0zdpJMnT9Hq7kYPx7SCR128aFmCMVH8=)
                          11: 3137372e38352e3137372e302f32342d3234203d3e20323632363131.roa (hash: a8f8I4YGqRMKMtFNlmxk/mHZx//WjXWYslzejH93qS0=)
                          12: 3137372e38352e3138302e302f32332d3233203d3e20323632363131.roa (hash: rXOUK+fDhI8NpFATqpYMrctUJyaKsCvxweSKzWl7eMI=)
                          13: 3136382e3232382e3136382e302f32332d3233203d3e20323632363131.roa (hash: jh7uSQJpyRKmSBAEYwGH402uEAID6zGeKOY6MM+V7f0=)
                          14: 3137372e38352e3137362e302f32322d3232203d3e20323632363131.roa (hash: uYU6jAUQ6Ye97BUX1rXdA5+AFJI57/Jy/+BU+ccQ6m0=)
                          15: 3137372e38352e3138322e302f32342d3234203d3e20323632363131.roa (hash: l0HKbAydSjJhykp7aBCz8RkHXzA0ehRKcBRAlZd4JxA=)
                          16: 3136382e3232382e3136382e302f32342d3234203d3e20323632363131.roa (hash: OeopXlWkx0YWrDKG37i5OlMJ3YM+wR8unH6SCZBRBrs=)
                          17: 3136382e3232382e3136382e302f32322d3232203d3e20323632363131.roa (hash: nMUeooC01+qlIydVYDWc1G0dYj5G7og+lFhoD9s/VPc=)
                          18: 3137372e38352e3138302e302f32322d3232203d3e20323632363131.roa (hash: 5jdjSZlQjsWhnMyVnn2WwWa3OIRrAnuEnOiyvOdxSts=)
                          19: 3137372e38352e3137362e302f32342d3234203d3e20323632363131.roa (hash: j0Nodm9IYfIyW6WuNLY2Eu4aTs5gDhtN909fmaASpP8=)
                          20: 323830343a326663383a3a2f33322d3332203d3e20323632363131.roa (hash: mWnOg5+pzj/N3nV9/ORsH1pHFWsF2Mp1SH77FXVzUrk=)
                          21: 3137372e38352e3138332e302f32342d3234203d3e20323632363131.roa (hash: TLPAUDzU26a/DBLO/QkAu0htOc/JDAySm5zjLlB9riA=)
                          22: 3137372e38352e3137362e302f32312d3231203d3e20323632363131.roa (hash: QPN4cSxIgiE01eD952npX0E5rjHTQdw08SIXGRAcuM0=)
                          23: 3137372e38352e3138312e302f32342d3234203d3e20323632363131.roa (hash: oHgQToGiRkVLTJUQfAbi2SV4ceWfwIvl6Nae5B7qa6E=)
                          24: 323830343a326663383a3a2f33332d3333203d3e20323632363131.roa (hash: TLe+yKonubt6B1Kasm+riIk3XQ79CI4NkcJMXLsLV6Y=)
                          25: 3137372e38352e3137392e302f32342d3234203d3e20323632363131.roa (hash: PgOYRfGeAQLFrUbH81Xmy7GLdACk7ZW1RHZUtEDmbiw=)
                          26: D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl (hash: 53AjmV/uc2WVTyReJtCMG8ph5j0UCxsmXFFUGUc5GFQ=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl
                          rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a0:a2:1a:dd:94:5f:11:bb:70:53:4d:2c:2f:de:df:c9:9c:a5:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
        Validity
            Not Before: Nov 25 08:07:44 2024 GMT
            Not After : Nov 26 12:03:44 2024 GMT
        Subject: CN=9A01A9C953E95EFB3C5D7E9E62AEFB61FC57ECA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:73:95:61:2c:c8:af:21:d6:12:15:0a:a7:6c:
                    24:9e:91:75:88:fd:42:9e:ee:c2:ce:cb:8d:2a:ec:
                    80:f3:90:e4:ac:dc:8b:ef:73:a5:6a:bb:e3:eb:72:
                    ec:eb:81:ce:a7:d0:68:55:84:41:ed:9f:57:a4:0a:
                    d6:2b:fa:f9:9f:2e:43:60:c5:2d:3a:80:e4:63:46:
                    2e:11:22:0c:f4:b8:42:7b:73:6e:63:60:c1:6d:5a:
                    ea:62:22:22:99:be:7f:d2:09:e7:9e:d9:c7:4e:19:
                    83:cf:15:57:4e:42:96:b4:32:5f:15:74:78:42:8a:
                    ca:58:16:a4:a5:6e:33:5c:54:86:75:78:61:fd:70:
                    b5:77:8e:12:37:7a:25:d8:69:18:98:c8:fd:6b:d9:
                    e6:e9:32:fd:77:e9:3e:6b:0d:fe:4d:08:80:69:18:
                    91:86:05:79:3d:7a:97:bd:71:1a:1d:03:28:e7:7a:
                    73:7c:7f:08:a2:ad:cf:15:23:b4:98:93:66:57:e7:
                    6d:7d:13:dc:77:33:99:05:ad:b9:94:4a:7d:e8:6a:
                    68:b6:e0:dd:bf:de:7b:4b:cb:51:b5:4f:c1:e3:1b:
                    16:c4:b2:b7:d0:8e:5f:66:bf:c7:17:0b:10:d3:ce:
                    0a:3f:11:fa:8c:88:c4:90:7d:30:7e:08:4d:fd:3c:
                    38:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:01:A9:C9:53:E9:5E:FB:3C:5D:7E:9E:62:AE:FB:61:FC:57:EC:A2
            X509v3 Authority Key Identifier:
                keyid:D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:93:d2:e1:c1:5a:43:f3:af:21:31:ed:6c:c5:4d:9c:a0:98:
         d0:fc:1e:e8:91:9f:1a:cc:42:0a:75:00:02:a6:c1:06:46:b7:
         40:89:15:3e:1f:b5:c2:d2:56:de:61:4a:b9:02:8c:9e:00:2b:
         4f:42:4e:29:b1:b0:d1:7d:3d:90:d5:b5:9d:66:78:0c:f7:0b:
         8a:ec:f1:28:99:7f:ad:20:52:91:ca:c4:eb:ca:a9:64:04:4e:
         83:84:20:6e:0a:fc:d1:33:b6:fd:29:00:69:a8:62:82:7b:54:
         13:1b:65:61:11:a4:78:48:51:89:6d:c1:58:38:df:63:79:fd:
         16:f4:9c:4f:9b:03:b8:1e:ad:16:f1:29:98:95:27:b8:72:fa:
         c3:7f:f1:e4:fd:1e:ea:8c:f0:71:2e:6e:59:a8:ca:29:39:d8:
         0f:5b:9e:f1:a7:2e:56:da:ba:26:f9:20:14:7e:e6:a2:5e:a8:
         a2:df:96:98:7b:83:bf:ba:e6:1a:6f:d1:04:34:d5:38:ff:f8:
         7c:0b:b8:21:8f:17:70:48:8f:8f:0f:e6:0a:16:dd:35:13:35:
         ac:fe:4d:cf:07:20:fe:b9:03:0b:cd:7e:0f:ac:ff:32:11:81:
         50:65:64:c6:9d:5d:af:47:90:32:80:89:1d:da:78:48:ab:1f:
         2d:cc:a4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:02:16 2024 by rpki-client on console-ams.rpki-client.org