Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
File:                     D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft (raw, json)
Hash identifier:          BUf3JY5w2+p25zu1G7W/dGE+szLnajz699TPYaHJY7M=
Subject key identifier:   D0:6F:86:7B:BC:AE:0A:60:E9:F7:36:AC:49:BA:A8:DE:FA:AB:A6:C4
Authority key identifier: D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7
Certificate issuer:       /CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7
Certificate serial:       03FA37562ABF8BD68BBBBE5BBC194B955DF2F64A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
Manifest number:          0136
Signing time:             Fri 22 Nov 2024 16:43:25 +0000
Manifest this update:     Fri 22 Nov 2024 16:38:25 +0000
Manifest next update:     Sat 23 Nov 2024 19:11:25 +0000
Files and hashes:         1: 323830343a323232633a3330303a3a2f34302d3434203d3e20323634353936.roa (hash: rEiO5pll376/CUP5vC9XaOcpXFgt2tZBdE/3k1vPRsM=)
                          2: 323830343a323232633a3230303a3a2f34302d3434203d3e20323634353936.roa (hash: TV60F90sQodx2n6kQJsN8Ms9JLOP8hQUNbiowybKdGY=)
                          3: 3133382e35392e34302e302f32332d3234203d3e20323634353936.roa (hash: 2dRMWOgdkymGvJa0sOGjGRDSeDaBqxH3lWLSDJ6J2kI=)
                          4: 3133382e35392e34322e302f32332d3234203d3e20323634353936.roa (hash: aKY141EfAaA37XN03Q6CpU0qCMrX758xZHivfrKvhUA=)
                          5: 3133382e35392e34302e302f32322d3232203d3e20323634353936.roa (hash: eiw0eTzymdl+OlfR0nT8nXYGXnOGiiZX42fMdMhzxUY=)
                          6: 323830343a323232633a3a2f33322d3332203d3e20323634353936.roa (hash: WgLPUWbopOZUFs5oQLdKQnBgxB12YPbN0k2ECBWNoVc=)
                          7: 323830343a323232633a3130303a3a2f34302d3434203d3e20323634353936.roa (hash: dccJ0RTJgBkmoLXWoYtC/9gsEbtGwKwahHhDApG7+xY=)
                          8: D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl (hash: 04hgn4eF1FnjDqBh4jzL7NyO+oCgzYWToX91qL5cjJY=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl
                          rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:11:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:fa:37:56:2a:bf:8b:d6:8b:bb:be:5b:bc:19:4b:95:5d:f2:f6:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7
        Validity
            Not Before: Nov 22 16:38:25 2024 GMT
            Not After : Nov 23 19:11:25 2024 GMT
        Subject: CN=D06F867BBCAE0A60E9F736AC49BAA8DEFAABA6C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:22:cb:1d:20:0f:c4:02:91:00:4d:5c:79:94:
                    d0:12:d8:d4:b0:bc:7f:ae:58:26:e6:a5:03:ef:cb:
                    18:4d:a8:fe:d6:83:2a:c6:dd:bf:3a:3c:b4:6b:d8:
                    a6:04:7d:3b:37:26:d8:96:b4:e2:4c:26:96:e6:f5:
                    c2:eb:7d:7f:6a:e2:61:b0:ba:1c:4a:61:c4:eb:60:
                    4d:d1:df:df:4e:af:35:0d:3d:23:b7:57:81:b9:14:
                    77:9f:42:34:e9:60:87:16:db:cb:76:d4:6b:72:62:
                    95:07:38:37:39:85:65:b6:73:71:05:70:20:39:4b:
                    f7:6a:28:fc:5d:0e:18:3c:31:a3:0a:86:90:cd:dc:
                    db:55:df:fd:da:09:a1:08:d1:f3:c1:dc:05:74:ec:
                    cd:bc:45:cc:99:75:90:03:5d:4b:6e:9e:cb:64:cf:
                    15:cf:d1:61:60:0e:ab:cd:3d:dc:ef:89:88:1f:19:
                    46:6b:af:bb:34:be:e4:84:22:34:e1:ae:65:e1:54:
                    f1:67:86:a5:94:5d:15:a0:05:47:63:9d:c5:e5:27:
                    d8:27:98:a7:a7:51:2d:3a:9a:70:d9:09:e8:5b:41:
                    de:b8:f3:36:b6:de:1b:0a:01:4b:14:01:47:03:f8:
                    35:d2:8a:d5:61:c3:af:43:50:30:f7:d6:ff:4b:43:
                    4d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6F:86:7B:BC:AE:0A:60:E9:F7:36:AC:49:BA:A8:DE:FA:AB:A6:C4
            X509v3 Authority Key Identifier:
                keyid:D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:0c:af:9c:8c:5e:69:83:ce:99:0b:5f:64:91:04:5f:62:17:
         f0:03:38:c2:4e:18:a0:5f:5c:cb:cc:84:d3:a6:00:33:2c:7f:
         32:2d:eb:ea:73:b9:a0:3f:03:89:f2:6d:00:8e:e8:37:61:e2:
         f3:c8:1f:9d:ac:b8:d7:33:7c:04:c9:a9:ac:b7:05:e2:1d:e5:
         2b:72:09:4b:4e:bf:f4:eb:72:2a:9c:29:d6:dd:80:fa:a8:fa:
         13:01:36:1e:3b:d8:6d:27:81:47:ed:e0:d3:9a:f7:49:e6:1f:
         87:be:47:86:52:1e:04:25:49:62:1f:bf:6e:88:e0:30:5c:aa:
         0f:f0:0e:06:c2:a9:89:de:79:80:61:32:a8:6e:6a:4b:9b:f2:
         7f:a1:55:dd:b9:d4:92:c4:2f:e6:02:b6:e9:e8:ab:e8:2a:2f:
         f2:0a:5a:e0:61:6b:60:17:13:85:c3:a4:d5:9e:b6:a4:ee:c7:
         20:75:06:92:1c:22:f2:b1:42:0a:8b:76:74:eb:12:c6:83:ed:
         56:1e:bd:5a:5f:b7:35:0c:a1:10:98:0e:b1:f4:8a:32:ae:5d:
         6c:3e:0a:20:cf:25:bc:e9:c7:f1:3f:7b:d2:d8:de:48:9a:76:
         ad:97:11:0b:7e:c0:d9:86:e4:60:d0:13:31:5a:04:e9:fa:a1:
         8d:7e:fb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:23 2024 by rpki-client on console-ams.rpki-client.org