Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.mft
File:                     3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.mft (raw, json)
Hash identifier:          TiaikW/yiQOs9g9jjKBgJW8YkITjG8PNxdEVOK2P0O0=
Subject key identifier:   C8:0A:4C:0C:6D:4A:43:28:AD:0F:00:B3:77:65:0B:99:08:A4:34:0A
Authority key identifier: 3E:F7:09:C8:F0:D0:D3:C6:A4:EE:47:57:C8:48:2F:4E:6D:52:5E:91
Certificate issuer:       /CN=3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91
Certificate serial:       2AD417BA5A5D2863A42DAA06ADCA60E388D3C01B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.mft
Manifest number:          015F
Signing time:             Fri 22 Nov 2024 10:40:00 +0000
Manifest this update:     Fri 22 Nov 2024 10:35:00 +0000
Manifest next update:     Sat 23 Nov 2024 10:40:00 +0000
Files and hashes:         1: 323830343a363534303a3a2f33322d3336203d3e20323639343738.roa (hash: NxjEmvLgwewSiS6yrJQpkEcTTCRbofgxJjL1q8pYISc=)
                          2: 34352e3138372e3132342e302f32322d3234203d3e20323639343738.roa (hash: 3MRnheIGILd7jYTRQOmd7vU6huHQTQUChSXl3mATRqo=)
                          3: 3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.crl (hash: bIvI4f/AqsgOiXo9hiRWj5ZCPhcVD6O0Bp5p6nzijA4=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.crl
                          rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d4:17:ba:5a:5d:28:63:a4:2d:aa:06:ad:ca:60:e3:88:d3:c0:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91
        Validity
            Not Before: Nov 22 10:35:00 2024 GMT
            Not After : Nov 23 10:40:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:88:51:7b:10:7e:c9:dd:dc:c8:ef:ea:9a:8f:
                    3f:e3:9e:00:a8:8b:73:96:ba:9f:46:c0:bf:c6:4b:
                    21:3b:87:db:1e:c3:29:fb:ec:d8:87:82:ee:49:82:
                    d7:45:44:39:2e:4a:48:e7:3d:95:1e:ba:99:e8:6c:
                    1a:d6:52:d2:a7:52:dd:62:dc:bd:f5:25:34:4d:07:
                    87:0c:97:c4:e3:de:6f:28:56:7f:db:d7:af:f2:0b:
                    20:2f:0f:14:67:aa:5c:b5:2a:54:69:2c:71:f1:02:
                    5b:43:e4:9a:d7:be:52:55:4d:32:68:a1:b1:40:1d:
                    ee:66:f9:0d:dc:25:9c:bc:af:01:1c:19:9c:7e:bd:
                    a4:e9:42:77:f8:19:24:58:2b:50:69:4b:5f:5c:a2:
                    30:2a:49:a1:33:e1:30:d0:c4:d9:0d:ab:90:e7:7b:
                    d8:da:1e:8a:b4:b6:ea:25:89:47:e1:3d:7a:ae:d0:
                    29:ca:94:b0:38:4f:fb:a4:67:46:92:ce:b2:21:f2:
                    54:07:a1:1b:7f:7d:21:e1:f8:59:4f:44:60:9b:5f:
                    47:ff:1e:5e:42:b8:9a:f7:ed:ce:26:6e:2f:89:ac:
                    90:77:31:94:df:6e:fe:be:e1:c8:a4:cc:97:b1:35:
                    52:15:19:0a:f7:61:16:66:ac:f2:91:88:28:ff:2b:
                    41:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:0A:4C:0C:6D:4A:43:28:AD:0F:00:B3:77:65:0B:99:08:A4:34:0A
            X509v3 Authority Key Identifier:
                keyid:3E:F7:09:C8:F0:D0:D3:C6:A4:EE:47:57:C8:48:2F:4E:6D:52:5E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:0f:b3:fa:b0:6f:63:41:e0:0e:11:fe:aa:06:33:71:b4:40:
         c2:55:46:d3:32:02:1a:07:b9:5e:31:5b:02:c6:fe:f3:44:3a:
         75:3d:59:b7:f3:2b:5b:e0:7a:42:8c:03:de:62:09:99:e6:a3:
         66:af:be:5c:8a:c6:07:92:6f:24:5e:e4:8d:a9:b2:6e:c4:06:
         fc:61:69:d1:00:98:16:f9:8b:c8:5d:5d:60:5d:9a:04:c7:a3:
         0a:b6:46:d4:27:65:a4:57:31:07:1a:53:cb:12:02:34:24:cb:
         cc:72:29:6e:38:10:4b:12:b4:4c:00:1c:f2:27:14:05:34:f4:
         e4:ab:56:5c:6f:c3:49:61:c3:53:33:31:3f:b0:82:92:ed:0f:
         d7:36:d9:92:4a:7e:73:f1:e3:be:6a:29:48:fa:18:be:4e:bd:
         9e:7e:6c:5f:62:84:8f:82:4c:e5:59:37:0c:f0:d0:b6:76:51:
         8a:a8:50:d2:b1:bf:69:b5:a3:ca:a9:bd:14:56:57:f7:b5:fa:
         51:fd:5d:ba:f0:81:a7:4e:97:22:e6:00:66:06:60:3c:15:f9:
         e9:f9:86:b3:3c:12:fe:3e:5e:4a:66:48:f5:1f:89:24:50:46:
         96:9c:63:0a:be:39:18:42:e7:50:9b:ff:1c:c8:3d:4f:d9:c8:
         46:bc:2d:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:13 2024 by rpki-client on console-ams.rpki-client.org