Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft
File:                     D2991FF0EF094685597EA5146C4730F0270A9201.mft (raw, json)
Hash identifier:          fGKE1HcLAPRlIJN7PK0zZt5Kh4fbjl7Mk547p9HWtRg=
Subject key identifier:   86:86:73:08:4C:82:04:0C:60:85:AC:FD:C8:38:6C:BA:12:AA:7F:BC
Authority key identifier: D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01
Certificate issuer:       /CN=D2991FF0EF094685597EA5146C4730F0270A9201
Certificate serial:       1F25B37CF0D7A10F0D9A125021D6C441715D3B01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft
Manifest number:          0F
Signing time:             Sat 23 Nov 2024 05:22:19 +0000
Manifest this update:     Sat 23 Nov 2024 05:17:19 +0000
Manifest next update:     Sun 24 Nov 2024 07:06:19 +0000
Files and hashes:         1: 3137372e38342e32342e302f32322d3332203d3e20323632353737.roa (hash: KTNEcC6Y2VHqLL+qb3kt3ywe3wmftinMc6r4trZIlnw=)
                          2: D2991FF0EF094685597EA5146C4730F0270A9201.crl (hash: 4ibIAhpGu/TcQJjSunP6OnylBHjNbCm1SDlB6sodTjY=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl
                          rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:25:b3:7c:f0:d7:a1:0f:0d:9a:12:50:21:d6:c4:41:71:5d:3b:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2991FF0EF094685597EA5146C4730F0270A9201
        Validity
            Not Before: Nov 23 05:17:19 2024 GMT
            Not After : Nov 24 07:06:19 2024 GMT
        Subject: CN=868673084C82040C6085ACFDC8386CBA12AA7FBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6d:da:e3:7e:26:8d:f4:30:c5:2b:ac:bd:ed:
                    29:3d:21:41:0f:58:88:49:81:f3:a3:af:fb:f6:57:
                    ba:a1:ad:b6:dd:ed:34:c1:1d:32:9e:f8:3e:5f:21:
                    aa:97:da:6c:ce:31:56:b7:c4:62:c5:71:5f:52:cc:
                    5c:9e:b3:ea:92:37:6d:6c:6c:92:7c:89:c9:ea:88:
                    74:89:8c:c0:92:4f:0e:54:63:f0:a5:74:4b:03:da:
                    19:43:fe:53:56:36:54:15:3d:b3:85:83:75:23:fb:
                    71:88:98:f3:2e:39:2d:0b:4e:51:01:d6:17:78:42:
                    31:a8:cb:e9:b5:99:21:71:8d:00:fb:8e:72:b6:e1:
                    92:f7:49:ce:a0:ed:72:6f:be:ec:18:84:6c:2b:31:
                    cf:81:f9:bf:f6:4d:48:08:44:96:e0:df:91:ae:17:
                    86:1a:a1:5f:5a:a9:10:69:83:78:8c:77:9c:ab:bc:
                    f1:99:55:1c:2a:de:18:54:ff:5a:b2:69:04:fd:a8:
                    64:28:b4:2f:65:b4:55:ce:b8:98:b9:c6:d4:c8:b2:
                    95:ac:70:02:cf:97:e0:d1:60:13:28:94:cd:21:9d:
                    e0:4b:bd:7a:b1:9d:52:7d:44:c4:43:85:91:d7:bb:
                    80:f8:78:6e:90:bb:27:3a:d7:11:db:23:e9:0f:0c:
                    c0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:86:73:08:4C:82:04:0C:60:85:AC:FD:C8:38:6C:BA:12:AA:7F:BC
            X509v3 Authority Key Identifier:
                keyid:D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:01:9f:c2:a4:95:66:86:56:8a:4c:d4:9b:7b:7e:7f:db:6f:
         1b:0d:5d:f3:42:e1:c0:a2:a2:43:58:47:3d:28:2c:47:d9:a2:
         06:f2:56:02:23:e1:ce:c8:e6:14:33:d4:9c:ec:36:9a:bf:c8:
         1c:81:da:25:41:c1:d1:f8:7f:4e:db:e8:9c:e5:5d:4d:2e:d1:
         98:ee:76:74:7e:10:2d:ee:3f:81:6c:5e:25:27:10:4e:21:d0:
         41:c5:4a:fc:01:0b:8a:d8:eb:e4:83:ec:db:3c:8f:d4:4a:7c:
         6e:68:f4:94:f7:df:9f:0d:55:b2:c6:26:99:4b:6d:06:0c:0d:
         7c:69:31:b0:d9:ce:c9:bc:31:eb:1d:86:e3:87:34:d5:a5:fa:
         fe:e4:41:63:29:fa:65:cd:c6:72:ab:83:c1:4a:29:29:5b:14:
         93:d6:05:00:d3:bc:72:bf:e4:15:4a:4a:4a:3c:05:d0:e0:cf:
         ad:90:b0:a1:52:21:b1:a5:8f:2b:af:9d:37:b6:f0:b4:d0:c9:
         8c:04:48:40:db:7f:4d:7a:e3:70:fa:ae:a2:1c:05:34:19:4b:
         b9:a6:bb:74:00:e3:7f:1d:00:99:8e:05:be:47:8a:9d:32:ce:
         46:3c:b7:27:ee:fe:b5:13:94:53:e1:4b:1e:15:93:e9:c3:7e:
         b6:8d:84:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:14 2024 by rpki-client on console-ams.rpki-client.org