Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.mft
File:                     4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.mft (raw, json)
Hash identifier:          cKx2S2Q7826NGR+SF1+15kZGi1W1Kp7rrKI1eHG4Mdg=
Subject key identifier:   77:A3:F4:10:D7:77:EB:9E:87:CD:E8:F2:28:29:56:B1:7A:D4:34:03
Authority key identifier: 4D:E4:54:FF:1B:8B:F0:DF:2A:C7:FE:C8:E0:AD:68:78:2B:7D:85:19
Certificate issuer:       /CN=4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519
Certificate serial:       5CFA32C50A96479FF9216468D615C0D59A5E5B1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.mft
Manifest number:          0138
Signing time:             Fri 22 Nov 2024 16:23:25 +0000
Manifest this update:     Fri 22 Nov 2024 16:18:25 +0000
Manifest next update:     Sat 23 Nov 2024 17:36:25 +0000
Files and hashes:         1: 34352e3232352e3234362e302f32332d3234203d3e20323730343137.roa (hash: see2/0A31VrRKjZAr8ROsI6Q9MDEtczYqxSppcxbZNI=)
                          2: 3139302e3131312e3130382e302f32322d3232203d3e20323730343137.roa (hash: 1XsXwDx28VAdjHBRB8v/KRb1RmkbaTzWoW+4E0m7pdI=)
                          3: 323830343a366262303a3a2f33322d3332203d3e20323730343137.roa (hash: jwUfdlEW0dcFjoTFVwr00NrdGcqWximFWvVOqlWCARk=)
                          4: 34352e3232352e3234342e302f32322d3232203d3e20323730343137.roa (hash: +NuKwbRvvZPVVt+BCTFUO3IjzwATyjzl28xQIBJprmc=)
                          5: 34352e3232352e3234342e302f32332d3234203d3e20323730343137.roa (hash: tKYKBnmF4vOggRm0nx8nDjeg8qPPFbSxFd1mjWcJs7M=)
                          6: 3139302e3131312e3131302e302f32332d3233203d3e20323730343137.roa (hash: JCn5xP4XMxZeZSud6HxzlLMZkCQIhUsr7raoIHJB0gU=)
                          7: 3139302e3131312e3130382e302f32332d3234203d3e20323730343137.roa (hash: 2EYnHnVhjiZXCnI44SwO8bYc1WkvGfizvdbp/Wrb4jk=)
                          8: 3139302e3131312e3131302e302f32342d3234203d3e20323730343137.roa (hash: stsfif/euC8toTrFLKRfbJr/G4KlNzd4eTOoccFcTB8=)
                          9: 4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.crl (hash: ZTGynnhUKru9zVrhXVsv13sf8TP/MtV2Z6ceUVs5csg=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.crl
                          rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:fa:32:c5:0a:96:47:9f:f9:21:64:68:d6:15:c0:d5:9a:5e:5b:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519
        Validity
            Not Before: Nov 22 16:18:25 2024 GMT
            Not After : Nov 23 17:36:25 2024 GMT
        Subject: CN=77A3F410D777EB9E87CDE8F2282956B17AD43403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c7:6a:de:42:bd:44:97:db:f5:25:0e:5e:ef:
                    d6:05:e1:0e:9d:02:80:3f:86:b5:74:f2:24:e3:aa:
                    6a:c6:a6:5c:1a:c1:70:7b:75:93:be:37:03:ac:6c:
                    a5:f9:fe:d6:af:b9:83:9c:7a:da:75:58:39:55:f1:
                    8b:6d:5e:b5:04:1e:ef:5e:9e:2a:ab:c3:85:c9:90:
                    e7:dc:2e:84:c3:29:19:29:e5:78:cf:0b:0e:d9:b4:
                    71:76:6c:f1:bc:e6:21:87:70:39:0b:e6:73:c6:9c:
                    5e:1b:ee:79:9c:21:50:98:79:d0:65:95:47:df:db:
                    7e:73:9d:97:6e:b4:50:04:3a:81:c6:e6:c8:7c:8b:
                    39:56:08:35:d5:0a:39:28:71:98:bb:81:e5:87:84:
                    c4:93:07:5e:98:f1:b7:f4:ba:4c:ee:78:3a:0a:8e:
                    da:a9:54:60:9e:b8:04:f6:00:34:b4:17:aa:02:97:
                    a2:4a:e4:92:15:6c:1f:92:84:f9:d6:da:3e:1b:cd:
                    3a:e8:5f:c9:5f:b6:48:c7:c0:82:40:16:6f:e3:d2:
                    50:88:6a:76:21:4b:45:41:96:3f:9d:93:6b:30:a0:
                    fd:eb:60:9b:f1:42:bb:ed:ba:ee:39:ab:f0:93:15:
                    dd:d5:f2:10:21:94:0f:60:47:ae:6f:7d:bc:80:b6:
                    92:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A3:F4:10:D7:77:EB:9E:87:CD:E8:F2:28:29:56:B1:7A:D4:34:03
            X509v3 Authority Key Identifier:
                keyid:4D:E4:54:FF:1B:8B:F0:DF:2A:C7:FE:C8:E0:AD:68:78:2B:7D:85:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ee:8d:c7:0c:cf:51:a6:36:3f:dc:20:4c:68:32:ee:5e:90:
         6f:30:25:55:f3:ad:4b:d4:87:e6:8a:52:d0:b9:f4:08:2d:d4:
         54:4e:31:de:c4:a3:e7:8e:1d:4f:79:85:00:6f:63:98:94:f8:
         d3:63:c8:e6:02:5b:ff:fb:3b:d0:2b:0b:4b:fd:b9:a7:30:1b:
         bc:8c:ec:ba:3e:e9:dd:f3:35:ab:89:7b:40:bf:d1:c9:dc:31:
         2d:6d:26:99:35:b4:82:d8:fe:33:b5:d2:bc:7f:9e:e2:9e:83:
         a5:df:47:fb:c3:be:9d:64:74:bb:52:f6:1b:b1:15:81:f3:58:
         7c:62:ef:a8:c1:6f:ea:15:1a:95:b3:f3:7d:55:f7:e5:6d:63:
         52:07:b4:a2:16:cc:b0:cd:a4:e5:8c:eb:72:d4:b3:12:6b:7e:
         4c:a5:a5:c8:8b:21:f2:18:30:51:36:b4:eb:80:f1:9e:c0:86:
         9c:4b:af:14:dc:e9:c7:56:d1:09:e1:a7:bb:96:5c:84:86:39:
         76:eb:c7:19:0e:0e:eb:91:18:fd:ee:c9:a9:3f:97:05:e0:33:
         19:83:66:fc:b2:17:bc:9e:df:48:da:44:e4:59:d3:11:ca:20:
         f1:8f:17:07:3d:c2:d0:df:a4:18:93:7b:96:be:6b:ca:98:16:
         e2:82:05:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXPoyxQqWR5/5IWRo1hXA1ZpeWxswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERFNDU0RkYxQjhCRjBERjJBQzdGRUM4RTBBRDY4Nzgy
QjdEODUxOTAeFw0yNDExMjIxNjE4MjVaFw0yNDExMjMxNzM2MjVaMDMxMTAvBgNV
BAMTKDc3QTNGNDEwRDc3N0VCOUU4N0NERThGMjI4Mjk1NkIxN0FENDM0MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYx2reQr1El9v1JQ5e79YF4Q6d
AoA/hrV08iTjqmrGplwawXB7dZO+NwOsbKX5/tavuYOcetp1WDlV8YttXrUEHu9e
niqrw4XJkOfcLoTDKRkp5XjPCw7ZtHF2bPG85iGHcDkL5nPGnF4b7nmcIVCYedBl
lUff235znZdutFAEOoHG5sh8izlWCDXVCjkocZi7geWHhMSTB16Y8bf0ukzueDoK
jtqpVGCeuAT2ADS0F6oCl6JK5JIVbB+ShPnW2j4bzTroX8lftkjHwIJAFm/j0lCI
anYhS0VBlj+dk2swoP3rYJvxQrvtuu45q/CTFd3V8hAhlA9gR65vfbyAtpJdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUd6P0ENd3656HzejyKClWsXrUNAMwHwYDVR0j
BBgwFoAUTeRU/xuL8N8qx/7I4K1oeCt9hRkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmEzaWRmQWZjTGdnRE1DcXc5QUdMS0o4ZnhEamFUbm1Qb3EzeGlzVTMz
VXMvMS80REU0NTRGRjFCOEJGMERGMkFDN0ZFQzhFMEFENjg3ODJCN0Q4NTE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRERTQ1NEZGMUI4QkYwREYy
QUM3RkVDOEUwQUQ2ODc4MkI3RDg1MTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QmEzaWRmQWZjTGdnRE1DcXc5QUdMS0o4ZnhEamFUbm1Qb3EzeGlzVTMzVXMvMS80
REU0NTRGRjFCOEJGMERGMkFDN0ZFQzhFMEFENjg3ODJCN0Q4NTE5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAh+6NxwzPUaY2P9wgTGgy7l6QbzAlVfOtS9SH5opS0Ln0CC3UVE4x3sSj544d
T3mFAG9jmJT402PI5gJb//s70CsLS/25pzAbvIzsuj7p3fM1q4l7QL/RydwxLW0m
mTW0gtj+M7XSvH+e4p6Dpd9H+8O+nWR0u1L2G7EVgfNYfGLvqMFv6hUalbPzfVX3
5W1jUge0ohbMsM2k5YzrctSzEmt+TKWlyIsh8hgwUTa064DxnsCGnEuvFNzpx1bR
CeGnu5ZchIY5duvHGQ4O65EY/e7JqT+XBeAzGYNm/LIXvJ7fSNpE5FnTEcog8Y8X
Bz3C0N+kGJN7lr5rypgW4oIF4Q==
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:29 2024 by rpki-client on console-fra.rpki-client.org