Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft
File:                     3DDE2C96A736983C4145E6A74FA601EF275DE118.mft (raw, json)
Hash identifier:          xQLdppTkxpUT0XXXWtwntv0ZrLTei3bsXyt/qU/X5bQ=
Subject key identifier:   5D:C5:68:6A:AD:F7:89:40:A2:13:30:A3:8D:14:15:4B:03:69:E5:1C
Authority key identifier: 3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18
Certificate issuer:       /CN=3DDE2C96A736983C4145E6A74FA601EF275DE118
Certificate serial:       3BCFC6DE0A9CD0FF7298A359C78D5D2FB6DBDC0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft
Manifest number:          0137
Signing time:             Fri 22 Nov 2024 11:48:55 +0000
Manifest this update:     Fri 22 Nov 2024 11:43:55 +0000
Manifest next update:     Sat 23 Nov 2024 11:48:55 +0000
Files and hashes:         1: 3133312e3235352e3131362e302f32322d3332203d3e203532373833.roa (hash: SVG9cltBbo+/ewNWykzhwQ4nnJx5mu67nXLFGxC+cRI=)
                          2: 3133382e3132322e3133322e302f32322d3332203d3e203532373833.roa (hash: Ee6Z0vOqNY+GlhsQbhFAsIxYnamziK70Y87ELTvl9v4=)
                          3: 3137302e37382e3131362e302f32322d3332203d3e203532373833.roa (hash: K0pU9031fMm6Wm3leECAor5tgX0IqS351OTfJ/nwXrA=)
                          4: 3DDE2C96A736983C4145E6A74FA601EF275DE118.crl (hash: vKFRRBibmfAeU76UNV29xtCGE7QDs3aV0tcDbVb7Umo=)
                          5: 3137372e3230302e36342e302f32302d3332203d3e203532373833.roa (hash: apkAkl2OFpIvs7Cd/q7p792y9Zwv6QEFlQd1HS4i76Y=)
                          6: 323830343a313066383a3a2f33322d313238203d3e203532373833.roa (hash: jDf87o6AKGn8MnC0MVgAzCBb2Libw6IdyFs8dodk434=)
                          7: 3137372e37342e3138342e302f32312d3332203d3e203532373833.roa (hash: 7ZXfXg9BEzpilkUN4bswO04wMmcrWqagFVYcPkJnUHk=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.crl
                          rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:cf:c6:de:0a:9c:d0:ff:72:98:a3:59:c7:8d:5d:2f:b6:db:dc:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DDE2C96A736983C4145E6A74FA601EF275DE118
        Validity
            Not Before: Nov 22 11:43:55 2024 GMT
            Not After : Nov 23 11:48:55 2024 GMT
        Subject: CN=5DC5686AADF78940A21330A38D14154B0369E51C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c8:e5:bf:f7:09:f0:6f:2b:b8:86:a8:a8:6a:
                    85:18:cd:b9:58:4e:9b:a6:32:7b:a0:cc:05:a6:a7:
                    b0:1b:e9:4a:ca:06:f2:1c:40:a1:d5:f9:13:f2:99:
                    76:c2:5f:1c:81:df:99:b2:dc:29:f0:dd:43:58:15:
                    0a:69:93:91:5d:be:42:b6:57:85:f9:e1:e4:36:72:
                    2f:41:88:da:9d:bd:95:5b:d7:fa:02:0b:d4:ba:aa:
                    ad:9c:2b:a6:2b:cc:da:9e:70:ce:50:ee:84:33:7b:
                    79:1a:38:29:a3:ee:08:2b:86:49:f4:a2:cf:62:be:
                    4d:42:14:9a:34:fc:99:36:dc:16:17:60:bc:d0:d4:
                    ee:13:66:75:a1:99:d3:4c:ea:c1:10:09:61:fa:3a:
                    5e:63:83:6e:fd:1a:e0:6b:fb:ef:76:5d:fa:50:e3:
                    b6:6d:66:50:b0:02:1d:52:2f:26:40:27:7d:1a:fb:
                    bd:d3:91:85:9a:19:6d:d9:99:e6:78:3f:cd:71:11:
                    f7:5b:f9:49:c3:af:a1:a4:03:7c:ee:ba:26:f7:2c:
                    00:b7:34:aa:cf:29:46:3b:cf:77:fc:c1:e7:9a:c2:
                    0d:30:16:a8:48:45:3d:50:56:3a:d5:90:ad:a2:58:
                    c6:bb:ad:c1:b4:84:b2:3f:5b:52:e3:c0:bd:7b:8e:
                    c2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C5:68:6A:AD:F7:89:40:A2:13:30:A3:8D:14:15:4B:03:69:E5:1C
            X509v3 Authority Key Identifier:
                keyid:3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:6f:6a:88:e9:3a:cf:ca:75:70:58:c6:51:c8:a3:3f:22:0a:
         74:3d:df:82:ba:e4:e6:91:d0:1a:69:e2:d8:f6:fb:8a:f7:64:
         c6:da:c4:04:e7:17:3d:21:e9:ce:ad:3e:ed:bc:17:f4:c6:35:
         85:5e:dc:d3:dc:60:34:cc:df:9c:2c:8f:0d:41:07:98:13:ad:
         b5:50:ca:0f:70:e9:a7:41:61:54:25:38:79:99:1f:d0:a4:c9:
         8b:06:ae:0b:97:2d:72:5b:b7:a2:fc:a1:0e:d9:57:ba:24:b3:
         e6:3a:55:7d:10:2c:fb:20:6a:eb:dd:4c:7e:a7:76:06:21:3b:
         d6:2c:f1:c0:48:ca:40:ae:31:3a:b9:34:be:e3:11:b3:6c:56:
         51:2b:14:db:93:3d:27:4a:49:e0:fd:60:73:c8:a7:1e:c0:29:
         e8:f8:fc:7a:57:eb:4b:e3:30:1b:a2:8e:1c:88:dc:1f:1b:06:
         f2:7e:de:2b:25:4c:53:5d:7f:66:ba:4c:5a:b3:20:ce:c8:fc:
         8f:bd:9f:87:cf:db:26:7e:2a:12:ef:0f:b7:18:85:b7:6d:8d:
         ef:b7:e0:90:ea:26:0d:ff:c1:f4:2e:61:a6:c0:80:6d:65:82:
         f1:24:28:05:e4:e4:d3:3e:e3:1a:1e:37:a7:a2:03:95:dc:6d:
         b9:07:5e:7a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUO8/G3gqc0P9ymKNZx41dL7bb3A8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0RERTJDOTZBNzM2OTgzQzQxNDVFNkE3NEZBNjAxRUYy
NzVERTExODAeFw0yNDExMjIxMTQzNTVaFw0yNDExMjMxMTQ4NTVaMDMxMTAvBgNV
BAMTKDVEQzU2ODZBQURGNzg5NDBBMjEzMzBBMzhEMTQxNTRCMDM2OUU1MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0yOW/9wnwbyu4hqioaoUYzblY
TpumMnugzAWmp7Ab6UrKBvIcQKHV+RPymXbCXxyB35my3Cnw3UNYFQppk5FdvkK2
V4X54eQ2ci9BiNqdvZVb1/oCC9S6qq2cK6YrzNqecM5Q7oQze3kaOCmj7ggrhkn0
os9ivk1CFJo0/Jk23BYXYLzQ1O4TZnWhmdNM6sEQCWH6Ol5jg279GuBr++92XfpQ
47ZtZlCwAh1SLyZAJ30a+73TkYWaGW3ZmeZ4P81xEfdb+UnDr6GkA3zuuib3LAC3
NKrPKUY7z3f8weeawg0wFqhIRT1QVjrVkK2iWMa7rcG0hLI/W1LjwL17jsK9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUXcVoaq33iUCiEzCjjRQVSwNp5RwwHwYDVR0j
BBgwFoAUPd4slqc2mDxBReanT6YB7ydd4RgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjRNd2U4ZHhwdWZLdXJTZjJCeG5TS3ZZZTNoOFJzc2l2NTU3eEI5TjlY
WUEvMS8zRERFMkM5NkE3MzY5ODNDNDE0NUU2QTc0RkE2MDFFRjI3NURFMTE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEREUyQzk2QTczNjk4M0M0
MTQ1RTZBNzRGQTYwMUVGMjc1REUxMTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QjRNd2U4ZHhwdWZLdXJTZjJCeG5TS3ZZZTNoOFJzc2l2NTU3eEI5TjlYWUEvMS8z
RERFMkM5NkE3MzY5ODNDNDE0NUU2QTc0RkE2MDFFRjI3NURFMTE4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARW9qiOk6z8p1cFjGUcijPyIKdD3fgrrk5pHQGmni2Pb7ivdkxtrEBOcXPSHp
zq0+7bwX9MY1hV7c09xgNMzfnCyPDUEHmBOttVDKD3Dpp0FhVCU4eZkf0KTJiwau
C5ctclu3ovyhDtlXuiSz5jpVfRAs+yBq691Mfqd2BiE71izxwEjKQK4xOrk0vuMR
s2xWUSsU25M9J0pJ4P1gc8inHsAp6Pj8elfrS+MwG6KOHIjcHxsG8n7eKyVMU11/
ZrpMWrMgzsj8j72fh8/bJn4qEu8PtxiFt22N77fgkOomDf/B9C5hpsCAbWWC8SQo
BeTk0z7jGh43p6IDldxtuQdeeg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:42 2024 by rpki-client on console-ams.rpki-client.org