Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.mft
File:                     2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.mft (raw, json)
Hash identifier:          lKdYxyxu5aD+J5QD3cFodF7yGxhDeGFNF5rR/dSUP/Y=
Subject key identifier:   70:6B:8F:4E:3C:8F:FB:1C:D3:F8:D6:34:38:FA:BC:D4:46:C9:A4:6B
Authority key identifier: 2A:37:8F:3F:C3:AC:5A:FF:D2:AE:F5:89:39:89:56:7E:2D:C4:0D:B8
Certificate issuer:       /CN=2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8
Certificate serial:       3323ED4CAF6DB2F0704DA8F92711CAB3A65D4C87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.mft
Manifest number:          0135
Signing time:             Fri 22 Nov 2024 13:20:00 +0000
Manifest this update:     Fri 22 Nov 2024 13:15:00 +0000
Manifest next update:     Sat 23 Nov 2024 15:27:00 +0000
Files and hashes:         1: 2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.crl (hash: dx/qTXkN12rd3D3pnKZZMCIVd0wThF/7gxdfel8Q7A4=)
                          2: 323830343a316635343a666530303a3a2f34302d3430203d3e20323732323230.roa (hash: 7+iETrQ/kpk5w2Xdmy5XpePUO2Xq4juE3sEpHDYnaQk=)
                          3: 323830343a316635343a666630303a3a2f34302d3430203d3e20323732323230.roa (hash: E069lj0VBdqrFQBob6ykjI83QRMXowh9ae2+NwC4qAo=)
                          4: 323830343a316635343a383030303a3a2f33352d3335203d3e20323732323230.roa (hash: MeWzdPPSRBL9fuuAwq+Kw1PDN96S9qdvWeuYVbRkm/0=)
                          5: 323830343a316635343a613030303a3a2f33352d3335203d3e20323732323230.roa (hash: M3wJeDKs4Xe0k1RJm8uE6DHR0pQ1I0zt6WykDABEJLQ=)
                          6: 323830343a316635343a3a2f33322d3332203d3e20323732323230.roa (hash: 6XTJ+ssZ7CFPN0ESNbS6N8I7I01eEs4FF9bPiBWGWHM=)
                          7: 323830343a316635343a663030303a3a2f34302d3430203d3e20323732323230.roa (hash: +hGMlcsVChk55NVyWnPGkOOLExR9Tpm4EW8w4QQlXn4=)
                          8: 323830343a316635343a633030303a3a2f33352d3335203d3e20323732323230.roa (hash: /fFzmWbvrf5Kdeh82YQ+6O3HngSAApoDubWAPM0g8Ss=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.crl
                          rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:23:ed:4c:af:6d:b2:f0:70:4d:a8:f9:27:11:ca:b3:a6:5d:4c:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8
        Validity
            Not Before: Nov 22 13:15:00 2024 GMT
            Not After : Nov 23 15:27:00 2024 GMT
        Subject: CN=706B8F4E3C8FFB1CD3F8D63438FABCD446C9A46B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a9:c4:22:99:10:ec:59:08:3a:fd:f5:16:c8:
                    59:6d:06:97:d7:31:01:37:b4:c9:cd:93:71:73:00:
                    3f:8d:70:1b:9a:12:1e:67:a4:58:b8:15:3f:90:aa:
                    ab:70:1e:51:e3:85:52:c9:4c:a9:74:df:f0:7f:58:
                    1b:9b:2c:ef:7a:67:86:56:4e:8c:03:9c:43:b1:27:
                    90:b8:65:62:6a:99:ae:8b:6d:c2:4a:ea:5a:f5:54:
                    0f:b9:70:b2:eb:4c:07:c6:38:fa:eb:fa:8b:5b:06:
                    00:12:cc:5c:02:b5:1b:b8:3e:b2:60:4a:78:5f:de:
                    e3:51:94:dc:94:06:ab:a6:cd:f3:06:90:07:87:43:
                    1b:10:a8:a8:32:58:d6:04:94:3c:2c:80:c4:f9:e5:
                    e9:e3:d8:0b:ad:9c:88:fb:71:f9:65:4f:3f:ec:14:
                    df:ab:2f:9d:87:6c:d0:fa:d2:42:20:c9:6d:07:f4:
                    7f:ee:fb:58:e0:35:0e:5e:5a:88:a1:b6:c0:79:31:
                    fb:9a:ec:7b:5b:02:1d:ef:ed:c8:f4:de:f1:39:91:
                    34:23:ea:fd:f8:3c:eb:2c:a9:25:4f:dc:8d:ae:1a:
                    79:11:f7:94:bf:3d:0c:ee:2b:34:0d:39:bc:dd:ec:
                    0d:f9:56:c2:c7:5d:e1:8f:97:1a:6d:44:83:78:db:
                    ae:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6B:8F:4E:3C:8F:FB:1C:D3:F8:D6:34:38:FA:BC:D4:46:C9:A4:6B
            X509v3 Authority Key Identifier:
                keyid:2A:37:8F:3F:C3:AC:5A:FF:D2:AE:F5:89:39:89:56:7E:2D:C4:0D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:dd:5f:d8:5a:03:10:1b:dd:b3:6a:26:98:0e:ef:19:f5:b2:
         a9:f3:51:6e:d7:1a:ea:74:42:f2:c5:db:df:44:26:87:f2:52:
         ca:f4:29:f4:a9:c8:60:3b:e0:c8:90:52:6a:07:4b:3d:39:7a:
         cd:b7:47:69:6e:a2:67:6d:e0:ca:c3:7c:fe:dc:23:b7:53:dd:
         2a:02:c3:7f:fe:eb:28:3a:10:5e:5e:8e:71:d8:fc:07:62:7a:
         b4:94:f0:ca:fc:62:f5:7d:14:1b:46:4d:c7:5e:87:b1:58:34:
         c3:f1:12:72:bd:26:7e:71:14:7c:40:f6:7f:a1:b7:a9:40:48:
         a4:dc:39:4d:98:21:43:8f:97:67:02:a6:ed:d4:95:9c:81:5b:
         5f:30:d3:6a:90:ed:78:74:bf:ec:69:03:d7:95:06:7e:7e:f0:
         30:1d:96:c7:86:c9:32:11:17:60:8b:0c:e4:1c:ce:a2:59:f1:
         c6:d3:80:24:6f:4a:e7:61:86:88:7d:4d:3a:6d:80:99:51:b1:
         ad:3f:ce:a2:de:f5:ce:55:28:ed:8c:bb:85:ea:74:5f:a8:8a:
         a1:60:87:21:9c:e8:3f:cc:92:91:2a:74:ed:53:46:70:b6:ec:
         61:c0:47:83:18:ee:ca:57:f7:dd:7f:f6:d0:5e:2a:bb:77:4a:
         3d:bc:ef:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:41 2024 by rpki-client on console-fra.rpki-client.org