Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.mft
File:                     8EAA354A58DA25563FA50D71839B6A66106FB7D8.mft (raw, json)
Hash identifier:          NGGHdjT3OlrqCvXSL7pBBW1iYC560fOdJNrFSSef8LQ=
Subject key identifier:   47:82:E3:2B:01:E0:73:B7:2F:7F:A7:05:70:F2:80:04:0B:AB:7D:24
Authority key identifier: 8E:AA:35:4A:58:DA:25:56:3F:A5:0D:71:83:9B:6A:66:10:6F:B7:D8
Certificate issuer:       /CN=8EAA354A58DA25563FA50D71839B6A66106FB7D8
Certificate serial:       20CC5BA6B292C5B4A7B96A02AFB50B7F07233327
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.mft
Manifest number:          0137
Signing time:             Fri 22 Nov 2024 22:58:22 +0000
Manifest this update:     Fri 22 Nov 2024 22:53:22 +0000
Manifest next update:     Sun 24 Nov 2024 00:48:22 +0000
Files and hashes:         1: 3138312e3233332e3139302e302f32332d3233203d3e20323731353537.roa (hash: nO4fQvR5zcamhoz6sOGTcmhs7Tty5uh7IWmwBDcRDFM=)
                          2: 3138312e3233332e3138382e302f32342d3234203d3e20323731353537.roa (hash: G9XfQNyoYfLZJ+EOPaVKX1GC8NYoT4J9eehX9aoLUIw=)
                          3: 3138312e3233332e3138382e302f32322d3232203d3e20323731353537.roa (hash: /UjanSDHIb++L8X6xLF8te2/s6YqmjAoPrcIy0o2WYg=)
                          4: 323830343a376436303a3a2f33322d3332203d3e20323731353537.roa (hash: zPn+Zb/ZisSMWP+epPOj+oTL7NOTTFI2JzFSQQF/wgg=)
                          5: 3138312e3233332e3139302e302f32342d3234203d3e20323731353537.roa (hash: ZV+Gi67b9UzAgDbQDlMCT4OUuLlBVeEpGGo8OWFOjvM=)
                          6: 3138312e3233332e3138392e302f32342d3234203d3e20323731353537.roa (hash: PBGSjD/b0493uPvlqtajgrdd/5yOYiW+lT7CiEpv6/g=)
                          7: 8EAA354A58DA25563FA50D71839B6A66106FB7D8.crl (hash: +28hbzMbNsrWWKzviEsKQUun6IFeJ0HtKeCK4wgbQi4=)
                          8: 3138312e3233332e3139312e302f32342d3234203d3e20323731353537.roa (hash: wDiRE2wl4gD1xJEPk7PZJfGoEImGy+DemqBPSnHLiik=)
                          9: 3138312e3233332e3138382e302f32332d3233203d3e20323731353537.roa (hash: zcIJbABuwJ+9doapg9ZFZ8AjtIB5mx17fa/7PBcsPk4=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.crl
                          rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:cc:5b:a6:b2:92:c5:b4:a7:b9:6a:02:af:b5:0b:7f:07:23:33:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAA354A58DA25563FA50D71839B6A66106FB7D8
        Validity
            Not Before: Nov 22 22:53:22 2024 GMT
            Not After : Nov 24 00:48:22 2024 GMT
        Subject: CN=4782E32B01E073B72F7FA70570F280040BAB7D24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e9:a4:41:b2:c4:ac:a6:c8:ff:b8:b7:bc:88:
                    bc:53:e5:a4:3e:8f:7a:81:66:91:c3:92:af:14:73:
                    35:cf:e7:de:9b:9c:fd:f3:43:04:d5:74:b7:91:ca:
                    9e:e1:2d:cd:58:5c:ac:4c:cc:b2:f5:86:34:91:96:
                    3f:a4:95:30:c7:2d:3b:3c:e3:93:f1:c5:56:f6:b6:
                    81:d1:61:de:84:79:4f:7a:09:15:21:ab:c2:70:f0:
                    39:17:af:6d:3d:46:6c:3b:91:ce:cc:5b:bd:56:3f:
                    82:f0:98:d2:cd:7b:86:b8:fd:49:e2:e8:01:77:9c:
                    82:82:c1:d8:8f:96:ee:b7:7d:6a:f8:16:c1:02:e1:
                    32:90:5e:f0:2d:2d:c2:4f:07:34:9e:62:ab:e5:e6:
                    9b:83:37:67:fe:d9:bf:a8:31:df:6b:60:c9:85:b2:
                    97:03:83:92:94:da:85:5f:f4:27:88:10:35:c8:01:
                    11:a8:25:cf:10:00:e6:06:0a:9b:b1:66:b9:6d:84:
                    52:bd:fa:3e:f8:b4:1f:e1:fc:31:7e:24:dc:86:98:
                    bf:97:b8:8e:8f:c0:1b:52:d7:97:7c:d0:d8:59:50:
                    a1:c2:a1:69:d8:29:0e:38:61:f5:fb:2f:cf:2d:ad:
                    2b:e8:bf:12:f8:5c:fb:58:0c:25:80:3d:00:b2:dc:
                    04:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:82:E3:2B:01:E0:73:B7:2F:7F:A7:05:70:F2:80:04:0B:AB:7D:24
            X509v3 Authority Key Identifier:
                keyid:8E:AA:35:4A:58:DA:25:56:3F:A5:0D:71:83:9B:6A:66:10:6F:B7:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ad:cf:65:c8:5a:d4:ca:b0:39:4e:02:d7:00:72:b1:9e:27:
         67:a6:f6:b4:8b:3f:69:87:d0:0c:23:79:82:25:b4:cf:3e:d7:
         d3:e2:10:33:1d:83:79:60:fe:3e:2b:fc:a2:85:08:dc:6b:de:
         cb:46:81:ff:77:76:f7:e2:56:d8:d2:0a:3a:2c:c1:23:b2:9e:
         95:40:18:95:ea:51:a0:91:a1:01:78:ea:a1:cd:e4:e2:cd:92:
         81:de:e8:b5:91:15:cc:ec:33:1e:b6:34:71:1a:96:8d:51:c9:
         dd:a5:4d:17:69:bd:67:83:92:93:82:53:a3:d3:a7:c5:88:48:
         a4:01:2f:07:0c:2a:7b:11:28:d7:35:11:a8:13:c5:a1:6c:66:
         13:c9:5c:b6:82:46:f6:a6:04:6e:59:12:cb:d9:7a:15:6b:e0:
         87:1c:d3:d2:fe:13:c3:e4:68:57:03:7b:11:be:21:82:c3:bb:
         c9:4b:52:5b:b9:6b:5b:37:c8:b9:89:3c:7b:c2:82:63:36:39:
         33:23:0a:f4:bd:ca:6e:60:9f:b2:36:b4:53:5d:da:2b:a8:cc:
         97:a3:fd:ad:2f:7f:02:d0:6f:41:53:97:c4:81:fc:87:21:97:
         a2:6c:a7:01:43:48:dc:af:43:d0:54:08:9c:f6:e8:8e:04:90:
         e3:73:9f:9e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIMxbprKSxbSnuWoCr7ULfwcjMycwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVBQTM1NEE1OERBMjU1NjNGQTUwRDcxODM5QjZBNjYx
MDZGQjdEODAeFw0yNDExMjIyMjUzMjJaFw0yNDExMjQwMDQ4MjJaMDMxMTAvBgNV
BAMTKDQ3ODJFMzJCMDFFMDczQjcyRjdGQTcwNTcwRjI4MDA0MEJBQjdEMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm6aRBssSspsj/uLe8iLxT5aQ+
j3qBZpHDkq8UczXP596bnP3zQwTVdLeRyp7hLc1YXKxMzLL1hjSRlj+klTDHLTs8
45PxxVb2toHRYd6EeU96CRUhq8Jw8DkXr209Rmw7kc7MW71WP4LwmNLNe4a4/Uni
6AF3nIKCwdiPlu63fWr4FsEC4TKQXvAtLcJPBzSeYqvl5puDN2f+2b+oMd9rYMmF
spcDg5KU2oVf9CeIEDXIARGoJc8QAOYGCpuxZrlthFK9+j74tB/h/DF+JNyGmL+X
uI6PwBtS15d80NhZUKHCoWnYKQ44YfX7L88trSvovxL4XPtYDCWAPQCy3ATNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUR4LjKwHgc7cvf6cFcPKABAurfSQwHwYDVR0j
BBgwFoAUjqo1SljaJVY/pQ1xg5tqZhBvt9gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQk1FUER2bXFXOXhKS0Y4aVNXaGNqZWROdjlhTk5YV3ZNVDIzSkpnQlYx
S1IvMS84RUFBMzU0QTU4REEyNTU2M0ZBNTBENzE4MzlCNkE2NjEwNkZCN0Q4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFQUEzNTRBNThEQTI1NTYz
RkE1MEQ3MTgzOUI2QTY2MTA2RkI3RDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Qk1FUER2bXFXOXhKS0Y4aVNXaGNqZWROdjlhTk5YV3ZNVDIzSkpnQlYxS1IvMS84
RUFBMzU0QTU4REEyNTU2M0ZBNTBENzE4MzlCNkE2NjEwNkZCN0Q4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOq3PZcha1MqwOU4C1wBysZ4nZ6b2tIs/aYfQDCN5giW0zz7X0+IQMx2DeWD+
Piv8ooUI3Gvey0aB/3d29+JW2NIKOizBI7KelUAYlepRoJGhAXjqoc3k4s2Sgd7o
tZEVzOwzHrY0cRqWjVHJ3aVNF2m9Z4OSk4JTo9OnxYhIpAEvBwwqexEo1zURqBPF
oWxmE8lctoJG9qYEblkSy9l6FWvghxzT0v4Tw+RoVwN7Eb4hgsO7yUtSW7lrWzfI
uYk8e8KCYzY5MyMK9L3KbmCfsja0U13aK6jMl6P9rS9/AtBvQVOXxIH8hyGXomyn
AUNI3K9D0FQInPbojgSQ43Ofng==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:40 2024 by rpki-client on console-ams.rpki-client.org