Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.mft
File:                     3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.mft (raw, json)
Hash identifier:          TiC9pScmTefgcg//+RRdg62f1V0vfna14LecKVIg5So=
Subject key identifier:   C7:19:D4:D3:AF:A8:26:DC:47:25:D4:CB:38:74:32:1A:78:6E:BB:EB
Authority key identifier: 3E:F7:09:C8:F0:D0:D3:C6:A4:EE:47:57:C8:48:2F:4E:6D:52:5E:91
Certificate issuer:       /CN=3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91
Certificate serial:       1AD91093A497818AAC1E8E7A80355DC2F900FD28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.mft
Manifest number:          010B
Signing time:             Fri 27 Sep 2024 10:40:00 +0000
Manifest this update:     Fri 27 Sep 2024 10:35:00 +0000
Manifest next update:     Sat 28 Sep 2024 10:40:00 +0000
Files and hashes:         1: 3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.crl (hash: hkCtksvnnbeXLzV+biv3pfrt8DKZkdqhoxCbs+WwZVM=)
                          2: 34352e3138372e3132342e302f32322d3234203d3e20323639343738.roa (hash: 3MRnheIGILd7jYTRQOmd7vU6huHQTQUChSXl3mATRqo=)
                          3: 323830343a363534303a3a2f33322d3336203d3e20323639343738.roa (hash: NxjEmvLgwewSiS6yrJQpkEcTTCRbofgxJjL1q8pYISc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.crl
                          rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d9:10:93:a4:97:81:8a:ac:1e:8e:7a:80:35:5d:c2:f9:00:fd:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91
        Validity
            Not Before: Sep 27 10:35:00 2024 GMT
            Not After : Sep 28 10:40:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:85:60:2b:59:ad:ab:86:77:24:cc:08:81:2d:
                    16:49:27:db:84:f6:76:1c:94:bf:67:43:b9:9a:d4:
                    ed:80:29:98:5e:d0:d7:ff:d3:31:89:0d:74:a1:56:
                    cc:47:52:f1:1f:ee:03:16:07:f9:ee:73:e3:d2:0a:
                    0d:a0:aa:4b:36:e1:28:c9:46:27:61:af:70:03:ea:
                    17:d1:81:ae:a1:b8:a5:13:de:ba:16:7a:69:37:39:
                    47:d0:46:5e:9c:6e:0b:52:f4:41:05:79:a4:96:bb:
                    92:e8:64:15:e9:5d:a0:a0:2e:ff:57:4e:05:5a:2c:
                    a3:16:3b:21:6b:d3:83:86:13:e1:99:84:3d:c3:08:
                    b9:58:16:f9:b6:c4:f0:d2:f6:93:70:c5:2b:7e:bb:
                    00:a7:c4:f4:5c:51:43:57:c8:c5:09:6d:7a:d5:48:
                    3d:5d:0a:8e:6c:36:40:b9:15:a7:58:a0:d0:38:b0:
                    0c:c4:9f:d0:a8:eb:88:1f:28:94:1d:26:a7:b2:c8:
                    bb:d1:b7:4b:d8:e2:a5:8a:f1:ec:e1:39:71:00:72:
                    10:07:0f:c4:89:d9:2f:16:7b:99:3a:58:fc:06:ee:
                    e4:3d:9e:24:1a:4d:5e:dd:91:5b:65:94:ba:4b:1e:
                    c4:aa:20:4f:17:e2:af:2f:82:69:4a:5d:1a:c5:4b:
                    f7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:19:D4:D3:AF:A8:26:DC:47:25:D4:CB:38:74:32:1A:78:6E:BB:EB
            X509v3 Authority Key Identifier:
                keyid:3E:F7:09:C8:F0:D0:D3:C6:A4:EE:47:57:C8:48:2F:4E:6D:52:5E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:0f:30:af:24:1b:02:18:a4:6b:57:58:13:94:0d:22:a0:dd:
         5a:1b:0b:49:0b:c8:4f:ca:e8:59:b5:2c:81:0b:82:94:7c:03:
         1e:82:96:62:06:72:99:2b:3c:35:bd:cc:ed:04:73:ff:c3:f4:
         36:4d:60:0d:ac:ba:03:a6:ee:02:eb:71:50:4c:64:ad:2f:f8:
         b8:85:38:1d:fa:6e:6a:a9:22:be:d6:85:79:51:6b:d4:f6:c3:
         8b:f1:4b:7c:cf:e5:d8:77:b1:93:a5:c9:82:41:3d:74:4c:89:
         86:4b:36:0b:2f:7e:77:33:2c:43:92:bb:40:ca:d6:50:38:59:
         c0:ee:0c:c3:03:63:a6:dc:69:4e:32:ff:d1:15:8b:d3:86:b4:
         b1:d1:ab:ad:a0:02:6d:59:21:95:cc:a1:71:4f:0c:b5:6d:1b:
         1f:78:57:05:59:51:88:1b:a7:b5:61:16:71:a0:70:10:81:82:
         bf:80:34:02:b3:8a:9d:93:f7:da:36:49:e0:46:50:14:8a:e4:
         de:10:7e:70:a2:8d:52:c4:88:e4:68:67:78:bd:53:09:27:2c:
         35:69:38:af:eb:62:97:b5:26:6d:20:d1:76:20:bc:13:aa:74:
         69:5d:67:cc:f8:64:18:c5:59:24:97:e2:e2:45:75:ff:29:7c:
         64:fe:99:cb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 27 12:53:00 2024 by rpki-client on console-ams.rpki-client.org