Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AuSjmBqn9y87h6Gibd5zz3kfXNKWed9dqww769tPU8QU/0/651BB908DC925893C10634A004650501D017E848.mft
File:                     651BB908DC925893C10634A004650501D017E848.mft (raw, json)
Hash identifier:          gzbU30I1Br6mAbjmm9ywBi2N+LbdgNJDD7xdGZwQyoU=
Subject key identifier:   9C:04:64:BA:99:9A:89:09:E5:EE:61:81:88:83:82:57:E6:75:9F:38
Authority key identifier: 65:1B:B9:08:DC:92:58:93:C1:06:34:A0:04:65:05:01:D0:17:E8:48
Certificate issuer:       /CN=651BB908DC925893C10634A004650501D017E848
Certificate serial:       2E4D324B0392498BA1897BD8B386D66C1ABF2864
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/651BB908DC925893C10634A004650501D017E848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AuSjmBqn9y87h6Gibd5zz3kfXNKWed9dqww769tPU8QU/0/651BB908DC925893C10634A004650501D017E848.mft
Manifest number:          2A
Signing time:             Sat 01 Jun 2024 14:34:10 +0000
Manifest this update:     Sat 01 Jun 2024 14:29:10 +0000
Manifest next update:     Sun 02 Jun 2024 15:06:10 +0000
Files and hashes:         1: 323830343a383161343a3a2f33322d3332203d3e20323732343637.roa (hash: OTU4xat4wVOD01PdwrNqvxpO36+VOSy0WeuBabp/V6s=)
                          2: 651BB908DC925893C10634A004650501D017E848.crl (hash: dRVtZo7jAvp9LdGcQgUcYvptbh9eU4x5nN5pqF7LatI=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AuSjmBqn9y87h6Gibd5zz3kfXNKWed9dqww769tPU8QU/0/651BB908DC925893C10634A004650501D017E848.crl
                          rsync://rpki-repo.registro.br/repo/AuSjmBqn9y87h6Gibd5zz3kfXNKWed9dqww769tPU8QU/0/651BB908DC925893C10634A004650501D017E848.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/651BB908DC925893C10634A004650501D017E848.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 15:06:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:4d:32:4b:03:92:49:8b:a1:89:7b:d8:b3:86:d6:6c:1a:bf:28:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=651BB908DC925893C10634A004650501D017E848
        Validity
            Not Before: Jun  1 14:29:10 2024 GMT
            Not After : Jun  2 15:06:10 2024 GMT
        Subject: CN=9C0464BA999A8909E5EE618188838257E6759F38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9c:dd:40:2f:8d:6e:01:fc:51:ef:62:44:99:
                    00:d0:51:c2:95:37:d4:ac:1c:aa:0a:7a:5b:54:4c:
                    42:14:01:b7:72:66:02:7f:3d:c0:fc:7f:8d:0b:76:
                    ea:74:37:32:3b:56:4e:ab:f2:d0:a2:d6:00:17:22:
                    84:b8:4a:5e:b1:96:49:36:2d:56:17:1f:74:40:78:
                    ac:a8:76:ef:44:58:7b:fa:9e:30:fb:b2:70:ae:e6:
                    10:44:07:2a:ad:cc:19:72:c8:11:eb:e7:07:d1:90:
                    24:b6:68:29:b2:30:f9:35:a3:c9:ea:ac:46:bc:f7:
                    d6:6f:80:55:e1:23:c9:27:da:80:1b:a8:55:a6:d1:
                    ba:03:43:fc:e5:89:0b:69:bf:1a:56:c7:97:80:56:
                    67:24:55:69:65:7e:4a:30:18:12:72:32:69:08:83:
                    e0:ff:2c:89:7b:1a:cb:1f:e4:20:af:7f:2c:92:a1:
                    12:0c:2f:52:bf:a9:37:96:fd:44:ce:0f:05:fb:d6:
                    4f:30:89:ee:1b:38:68:2a:c3:53:60:0f:cb:43:45:
                    6e:81:7f:15:99:28:f3:6b:d1:05:91:43:e9:45:13:
                    9d:5b:86:7f:84:d8:a4:8f:75:9b:53:aa:09:09:e4:
                    47:cb:4e:95:cf:c8:fc:8b:5b:d2:89:2e:fe:db:b5:
                    a3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:04:64:BA:99:9A:89:09:E5:EE:61:81:88:83:82:57:E6:75:9F:38
            X509v3 Authority Key Identifier:
                keyid:65:1B:B9:08:DC:92:58:93:C1:06:34:A0:04:65:05:01:D0:17:E8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AuSjmBqn9y87h6Gibd5zz3kfXNKWed9dqww769tPU8QU/0/651BB908DC925893C10634A004650501D017E848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/651BB908DC925893C10634A004650501D017E848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AuSjmBqn9y87h6Gibd5zz3kfXNKWed9dqww769tPU8QU/0/651BB908DC925893C10634A004650501D017E848.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:f3:b3:62:33:f6:b6:6f:eb:ae:54:2e:f5:4d:01:07:c3:5a:
         a1:c0:78:a9:9a:c4:d8:fc:21:d6:b7:27:30:1d:75:6e:0b:25:
         54:32:da:07:a2:51:4d:34:00:9a:1c:c1:f7:13:80:94:8b:8f:
         c5:5d:36:e7:62:ce:91:dd:75:71:1d:4e:b7:5d:7d:49:f4:57:
         f7:4a:59:4b:51:21:48:a9:ad:e7:3b:6c:af:c5:e2:d9:73:99:
         f7:2d:8c:26:c6:b7:a8:9b:0c:b2:1c:65:e4:06:24:be:8b:c6:
         2b:5f:c5:66:2e:e7:56:d6:ec:04:4b:31:16:54:f4:4b:f5:ae:
         45:55:21:b2:08:17:90:34:59:67:08:7e:07:71:ab:18:10:d2:
         ef:10:a1:21:d5:7d:83:51:60:52:dc:17:36:14:60:39:6a:bb:
         95:4d:ff:de:a6:4f:b8:6e:b3:9a:4f:56:00:b2:00:ae:eb:e3:
         8b:63:a4:41:53:b5:09:21:36:ca:04:4d:97:66:a8:64:ca:df:
         98:1a:da:9f:83:8e:70:56:e2:0a:33:26:d2:b1:9b:d0:c2:7d:
         b6:52:55:07:ad:26:3c:07:21:68:76:f4:58:ca:9b:bd:2d:b8:
         0e:7e:04:46:ac:e6:09:81:c3:7b:02:db:03:e1:00:b4:94:47:
         e5:6b:60:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:53:22 2024 by rpki-client on console-ams.rpki-client.org