Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/1/CED535AAD1233C2161BDBD4439E62790A2F55012.mft
File:                     CED535AAD1233C2161BDBD4439E62790A2F55012.mft (raw, json)
Hash identifier:          RO7WgP3x3mlCAHO1h6hDKWpV9L0WbkDMaJFcKEc9zLg=
Subject key identifier:   76:C7:C2:D1:97:4B:DA:D4:5B:21:8C:8C:EE:85:C2:A2:31:FF:0F:68
Authority key identifier: CE:D5:35:AA:D1:23:3C:21:61:BD:BD:44:39:E6:27:90:A2:F5:50:12
Certificate issuer:       /CN=CED535AAD1233C2161BDBD4439E62790A2F55012
Certificate serial:       43F2880BC8F38C7523D3F8AD2C1479A475C2D694
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CED535AAD1233C2161BDBD4439E62790A2F55012.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/1/CED535AAD1233C2161BDBD4439E62790A2F55012.mft
Manifest number:          BC
Signing time:             Wed 21 Aug 2024 02:07:30 +0000
Manifest this update:     Wed 21 Aug 2024 02:02:30 +0000
Manifest next update:     Thu 22 Aug 2024 04:58:30 +0000
Files and hashes:         1: 3139322e3134352e3230362e302f32342d3234203d3e20323636323432.roa (hash: kCqaPTvDMmk9DsGs2Wr7JQkS5JDe1K0XT4YdQQtcYEM=)
                          2: 3139322e3134352e3230342e302f32342d3234203d3e20323636323432.roa (hash: GLXKs+1LNq4lkGQY6EyGOP+NFD0zA8DVIQBn6zMq9cQ=)
                          3: 323830343a336365633a3a2f33322d3332203d3e20323636323432.roa (hash: yh5xcQTxJ5Bjy1R78vS7tUtDH7AiKP3dNO8moShPdv0=)
                          4: 3139322e3134352e3230362e302f32332d3233203d3e20323636323432.roa (hash: TvkuPRYxJsua6U/KQsH5bQhr4QIkIKNTtK97l0p+/yw=)
                          5: 3139322e3134352e3230372e302f32342d3234203d3e20323636323432.roa (hash: 4PSnA6LdTGi2Ok3nTey98V57IbCSjERwn0kAX9p4BO8=)
                          6: 3139322e3134352e3230342e302f32322d3232203d3e20323636323432.roa (hash: Y2CCCxTcteADXq2f8OaGV2HPnaFkAGL+gzLdaDkogVE=)
                          7: CED535AAD1233C2161BDBD4439E62790A2F55012.crl (hash: h3skmWURBjIk/ORo8OMTiJ4zdjKcRGcyHwWy2DC/cow=)
                          8: 3139322e3134352e3230342e302f32332d3233203d3e20323636323432.roa (hash: sRFi+z9J6Z8HRcmO/E34KLzEhb9qNmhOG1X6hVAZ6Rc=)
                          9: 3139322e3134352e3230352e302f32342d3234203d3e20323636323432.roa (hash: ImeKkZ7wJRmphfBdtqcSONuThBr+qlA/DgMs2FHNHD4=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/1/CED535AAD1233C2161BDBD4439E62790A2F55012.crl
                          rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/1/CED535AAD1233C2161BDBD4439E62790A2F55012.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CED535AAD1233C2161BDBD4439E62790A2F55012.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 22 Aug 2024 03:29:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f2:88:0b:c8:f3:8c:75:23:d3:f8:ad:2c:14:79:a4:75:c2:d6:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CED535AAD1233C2161BDBD4439E62790A2F55012
        Validity
            Not Before: Aug 21 02:02:30 2024 GMT
            Not After : Aug 22 04:58:30 2024 GMT
        Subject: CN=76C7C2D1974BDAD45B218C8CEE85C2A231FF0F68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:66:64:78:c0:aa:e2:c2:60:c1:87:a2:1d:bb:
                    b7:28:68:32:c8:66:b3:29:7b:ae:ef:e7:2d:bf:8f:
                    74:ef:40:ea:ef:3f:6a:3b:90:e4:6d:b2:93:fd:81:
                    03:34:5e:ad:ac:6a:50:d9:2f:3a:45:32:47:d2:1c:
                    3b:08:1f:f3:3a:50:a5:b4:4f:ee:f1:29:51:2e:b4:
                    88:12:1a:8f:a3:00:66:bb:d8:30:2c:01:31:84:da:
                    e7:9f:4a:61:51:69:a3:d1:60:fb:20:06:e9:fc:20:
                    d8:c6:6e:62:1a:00:f6:6c:47:5c:ea:31:e7:25:01:
                    c1:8c:4e:f2:27:54:30:f7:14:99:c9:44:3d:26:8e:
                    86:39:30:bd:19:56:76:59:2d:8d:7c:c1:39:95:51:
                    1a:04:e8:d3:5b:90:5e:80:16:30:4f:bf:2f:c2:bb:
                    3b:0d:10:8b:38:5c:a4:e2:c0:45:3c:1e:71:37:91:
                    12:a8:64:a2:84:3d:78:0c:ce:79:f7:20:c9:c7:82:
                    51:67:4e:92:30:b0:a0:67:c4:1b:02:bf:55:ec:3e:
                    27:9a:07:88:0e:46:9f:2a:63:4d:a1:fe:8e:32:10:
                    52:89:b7:80:18:e9:77:fc:59:69:d7:59:24:35:b0:
                    a5:1a:ab:32:f4:90:5e:5a:af:97:60:ff:94:77:de:
                    03:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C7:C2:D1:97:4B:DA:D4:5B:21:8C:8C:EE:85:C2:A2:31:FF:0F:68
            X509v3 Authority Key Identifier:
                keyid:CE:D5:35:AA:D1:23:3C:21:61:BD:BD:44:39:E6:27:90:A2:F5:50:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/1/CED535AAD1233C2161BDBD4439E62790A2F55012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CED535AAD1233C2161BDBD4439E62790A2F55012.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/1/CED535AAD1233C2161BDBD4439E62790A2F55012.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:79:f7:b7:f1:8c:21:b7:2d:5a:5d:4d:be:58:3a:43:31:aa:
         ba:df:27:39:26:be:67:b4:ab:e7:31:34:a0:58:c3:01:04:92:
         fa:28:9a:d4:70:17:a2:94:bc:3c:74:cf:a6:6f:c1:5a:b6:4c:
         24:0e:f9:1b:d7:17:66:35:8f:5d:93:f4:45:32:13:d2:ff:b4:
         7b:77:22:97:77:14:59:df:32:3d:1d:fd:ee:5c:e8:6a:b9:cb:
         ac:b7:e6:02:39:e7:81:f7:b3:3a:8b:ea:f1:0b:e7:c2:75:88:
         c9:ae:9e:8d:f8:43:12:da:ac:70:27:7d:5b:b6:4b:28:f5:f3:
         36:71:c6:8d:c2:8b:e4:93:c3:ae:6a:ff:eb:ee:84:79:5a:ac:
         5b:1d:75:e1:b2:fd:0d:aa:a7:fe:0e:2c:0b:9c:f4:ef:c2:fb:
         b8:ae:b9:61:4c:f8:37:9b:1f:1c:a5:83:c7:53:ea:f0:18:f8:
         f1:f6:92:99:e1:58:b1:9c:64:ba:78:14:1d:8e:95:fc:e2:f9:
         7c:33:2f:01:16:9e:91:b2:0b:18:70:af:53:61:0e:5d:b1:9a:
         b1:eb:ee:8f:4d:34:09:9e:65:d7:6d:40:f1:92:e9:33:32:1a:
         f0:fc:49:ec:53:ba:59:eb:a5:bd:2c:55:3b:a3:1b:94:24:cf:
         3b:c7:15:bd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQ/KIC8jzjHUj0/itLBR5pHXC1pQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VENTM1QUFEMTIzM0MyMTYxQkRCRDQ0MzlFNjI3OTBB
MkY1NTAxMjAeFw0yNDA4MjEwMjAyMzBaFw0yNDA4MjIwNDU4MzBaMDMxMTAvBgNV
BAMTKDc2QzdDMkQxOTc0QkRBRDQ1QjIxOEM4Q0VFODVDMkEyMzFGRjBGNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCZmR4wKriwmDBh6Idu7coaDLI
ZrMpe67v5y2/j3TvQOrvP2o7kORtspP9gQM0Xq2salDZLzpFMkfSHDsIH/M6UKW0
T+7xKVEutIgSGo+jAGa72DAsATGE2uefSmFRaaPRYPsgBun8INjGbmIaAPZsR1zq
MeclAcGMTvInVDD3FJnJRD0mjoY5ML0ZVnZZLY18wTmVURoE6NNbkF6AFjBPvy/C
uzsNEIs4XKTiwEU8HnE3kRKoZKKEPXgMznn3IMnHglFnTpIwsKBnxBsCv1XsPiea
B4gORp8qY02h/o4yEFKJt4AY6Xf8WWnXWSQ1sKUaqzL0kF5ar5dg/5R33gPRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUdsfC0ZdL2tRbIYyM7oXCojH/D2gwHwYDVR0j
BBgwFoAUztU1qtEjPCFhvb1EOeYnkKL1UBIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXZQbnNKcW4yMnZhd2RFUFVRUUhKdXVGVDZIM0hETTg5allFdWg5YU55
N0gvMS9DRUQ1MzVBQUQxMjMzQzIxNjFCREJENDQzOUU2Mjc5MEEyRjU1MDEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFRDUzNUFBRDEyMzNDMjE2
MUJEQkQ0NDM5RTYyNzkwQTJGNTUwMTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QXZQbnNKcW4yMnZhd2RFUFVRUUhKdXVGVDZIM0hETTg5allFdWg5YU55N0gvMS9D
RUQ1MzVBQUQxMjMzQzIxNjFCREJENDQzOUU2Mjc5MEEyRjU1MDEyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeXn3t/GMIbctWl1Nvlg6QzGqut8nOSa+Z7Sr5zE0oFjDAQSS+iia1HAXopS8
PHTPpm/BWrZMJA75G9cXZjWPXZP0RTIT0v+0e3cil3cUWd8yPR397lzoarnLrLfm
AjnngfezOovq8QvnwnWIya6ejfhDEtqscCd9W7ZLKPXzNnHGjcKL5JPDrmr/6+6E
eVqsWx114bL9Daqn/g4sC5z078L7uK65YUz4N5sfHKWDx1Pq8Bj48faSmeFYsZxk
ungUHY6V/OL5fDMvARaekbILGHCvU2EOXbGasevuj000CZ5l121A8ZLpMzIa8PxJ
7FO6WeulvSxVO6MblCTPO8cVvQ==
-----END CERTIFICATE-----
Generated at Wed Aug 21 04:01:27 2024 by rpki-client on console-fra.rpki-client.org