Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft
File:                     28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft (raw, json)
Hash identifier:          T4uzFxiFHoZr/CDe1LCM/auY5sFhsZ3sEFr0RYR3Fq4=
Subject key identifier:   20:F5:5C:F4:19:49:6C:86:7E:1E:C0:DB:68:79:01:33:EE:8F:CE:B0
Authority key identifier: 28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8
Certificate issuer:       /CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
Certificate serial:       6E0DBEDA1D4C8408D2A300B4883B9BDF7A50B749
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft
Manifest number:          013B
Signing time:             Fri 22 Nov 2024 17:56:11 +0000
Manifest this update:     Fri 22 Nov 2024 17:51:11 +0000
Manifest next update:     Sat 23 Nov 2024 18:01:11 +0000
Files and hashes:         1: 3138312e3137342e3232322e302f32342d3234203d3e20323731353632.roa (hash: QQ/6wR1il6Q5HQgYeu0FLsS5MlwixETghqwE+w1C5ZQ=)
                          2: 3138312e3137342e3232322e302f32332d3233203d3e20323731353632.roa (hash: FRg5wIFkYji4J4sYaiQWmLmzjwveKWGKj8/4AAg1pLA=)
                          3: 3138312e3137342e3232302e302f32332d3233203d3e20323731353632.roa (hash: lCjfZ48w8YWdwoPga1AaIQ8EiRbZJOGM+gGtuFD7HaA=)
                          4: 3138312e3137342e3232302e302f32322d3232203d3e20323731353632.roa (hash: ct2m7A/bkHltV1eHaX/izGYJMwg0oC+KzfTwwzGcNM8=)
                          5: 3138312e3137342e3232332e302f32342d3234203d3e20323731353632.roa (hash: mGH29Ytn6nJRbfFEhUEP/UcwnMRHokYIhG6qfEeerqQ=)
                          6: 323830343a376437343a383030303a3a2f33332d3333203d3e20323731353632.roa (hash: EGOQBC5GGiYsPhbD00LNPweKcy2BCLIgMrrpL3gEj8k=)
                          7: 28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl (hash: 2yNdAX+20pSe9genqueoGtSfnQ0JzrZWAm4RIbNBI0M=)
                          8: 323830343a376437343a3a2f33322d3332203d3e20323731353632.roa (hash: X3MuaSrOzMGHqNg4efeK3TmaMEWpZY7eIqfkUxd5TCQ=)
                          9: 3138312e3137342e3232312e302f32342d3234203d3e20323731353632.roa (hash: 0vGi7fGEZ8fzjsvFFNBRL3y06dNDms1sDp+PFqgO1KM=)
                          10: 323830343a376437343a3a2f33332d3333203d3e20323731353632.roa (hash: YNmTK7o/RYF6Yho8GXrDqjniIyqoIzX8cTNNHaaJ/Lw=)
                          11: 3138312e3137342e3232302e302f32342d3234203d3e20323731353632.roa (hash: XhK9qO60KIRfZSVzreVMlnmi8huEwtLDsriLlP0E9mM=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl
                          rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:0d:be:da:1d:4c:84:08:d2:a3:00:b4:88:3b:9b:df:7a:50:b7:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
        Validity
            Not Before: Nov 22 17:51:11 2024 GMT
            Not After : Nov 23 18:01:11 2024 GMT
        Subject: CN=20F55CF419496C867E1EC0DB68790133EE8FCEB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:61:4d:af:83:75:e7:8c:61:f3:03:69:bf:7d:
                    1b:ad:f2:4f:1d:25:1b:e3:89:2f:68:0e:25:7f:4c:
                    30:e1:49:2d:eb:03:39:76:7a:27:2a:b0:8c:39:a6:
                    2d:39:f3:79:d4:44:48:65:52:81:00:99:78:39:95:
                    77:17:6e:dc:a1:34:6a:07:26:2c:ad:d4:b9:68:2c:
                    e2:f8:cd:96:ca:9c:8e:47:6c:1f:7e:f6:2c:fc:54:
                    2f:48:9e:e1:24:f4:73:79:3f:26:44:dd:91:d2:5b:
                    a4:5e:11:b8:9f:e0:36:e4:e0:0c:c4:73:c8:0d:0e:
                    8b:f8:67:6a:c9:fb:a1:bd:4e:32:ee:32:7a:03:08:
                    b2:29:1a:6d:d0:8a:6e:61:51:ac:9c:79:67:23:96:
                    26:ba:7a:a2:11:13:c0:c2:df:26:d7:3d:1b:17:7c:
                    67:a4:6e:dc:96:72:ac:5e:a5:ef:16:99:0b:79:09:
                    48:98:48:7e:97:7c:3f:33:ed:40:ec:4a:b9:c6:20:
                    ac:c5:85:93:9f:8a:ed:dd:47:5d:a3:40:c2:bd:8a:
                    a1:65:a3:a1:ad:21:f1:4a:bd:29:fa:4b:2f:3d:b4:
                    ba:8e:3c:ae:93:96:2a:1f:dd:0e:d4:90:68:3a:df:
                    f4:e1:4b:fc:33:df:13:36:25:aa:69:8e:05:8d:db:
                    68:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F5:5C:F4:19:49:6C:86:7E:1E:C0:DB:68:79:01:33:EE:8F:CE:B0
            X509v3 Authority Key Identifier:
                keyid:28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ec:53:65:2a:4e:ae:2c:34:28:96:2b:ab:b2:a4:c7:76:fe:
         17:45:8e:24:9b:43:98:9e:93:83:7f:ef:06:62:b2:85:29:27:
         81:e6:45:27:0a:27:ec:e0:3b:4d:33:41:19:f8:64:61:16:36:
         ca:43:07:36:d8:63:cf:e3:b9:b6:42:cc:0b:4b:b2:ef:c8:f7:
         cf:95:60:d1:8f:e4:c5:b2:d5:71:84:e3:bc:8f:e5:07:6e:04:
         f8:9f:ba:a0:98:3c:cf:55:e5:6f:ff:b4:0c:88:36:db:66:cc:
         3e:05:69:28:45:01:54:e9:32:84:ad:f6:80:88:7e:53:b4:e7:
         3b:fc:0d:e1:d6:4d:3d:d3:25:13:b7:00:f9:6d:d3:92:9f:ca:
         06:cf:47:f5:7d:44:2c:a5:e9:e3:fb:92:5a:6f:57:6a:02:39:
         2d:0f:8d:ad:26:f2:92:da:e2:f9:c3:c8:7b:a6:0f:3e:b2:d1:
         0f:e6:f5:85:e5:d2:dd:e8:29:90:64:62:e6:30:1c:2d:9e:e0:
         6d:01:1d:a9:de:a3:90:48:7d:45:f4:ca:0e:da:0b:43:c1:fc:
         51:84:ec:d6:77:9a:f2:c4:1b:1d:fa:42:07:ce:e4:39:1a:74:
         55:23:59:7b:c2:a3:68:66:b3:2c:11:8b:fa:67:dd:86:b5:63:
         b2:ee:46:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:24 2024 by rpki-client on console-ams.rpki-client.org