Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft
File:                     28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft (raw, json)
Hash identifier:          qwctVPNoxhoQBNrG6hG3QJqjPmqSEKPSeW2vPChMncI=
Subject key identifier:   74:4E:F2:B1:F9:6A:FD:83:0B:92:CE:C6:F8:A3:01:2E:56:7A:7B:CC
Authority key identifier: 28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8
Certificate issuer:       /CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
Certificate serial:       42A16737EC7DA8EF4DB4CBB2F84ED1EA42853244
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft
Manifest number:          78
Signing time:             Sun 30 Jun 2024 18:24:30 +0000
Manifest this update:     Sun 30 Jun 2024 18:19:30 +0000
Manifest next update:     Mon 01 Jul 2024 21:24:30 +0000
Files and hashes:         1: 3138312e3137342e3232302e302f32332d3233203d3e20323731353632.roa (hash: lCjfZ48w8YWdwoPga1AaIQ8EiRbZJOGM+gGtuFD7HaA=)
                          2: 28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl (hash: b8bXONhAfmmMecSr/gwyp80THYiU4q5ATlQlQOmj73k=)
                          3: 323830343a376437343a3a2f33322d3332203d3e20323731353632.roa (hash: X3MuaSrOzMGHqNg4efeK3TmaMEWpZY7eIqfkUxd5TCQ=)
                          4: 3138312e3137342e3232302e302f32342d3234203d3e20323731353632.roa (hash: XhK9qO60KIRfZSVzreVMlnmi8huEwtLDsriLlP0E9mM=)
                          5: 3138312e3137342e3232332e302f32342d3234203d3e20323731353632.roa (hash: mGH29Ytn6nJRbfFEhUEP/UcwnMRHokYIhG6qfEeerqQ=)
                          6: 323830343a376437343a383030303a3a2f33332d3333203d3e20323731353632.roa (hash: EGOQBC5GGiYsPhbD00LNPweKcy2BCLIgMrrpL3gEj8k=)
                          7: 3138312e3137342e3232312e302f32342d3234203d3e20323731353632.roa (hash: 0vGi7fGEZ8fzjsvFFNBRL3y06dNDms1sDp+PFqgO1KM=)
                          8: 3138312e3137342e3232322e302f32342d3234203d3e20323731353632.roa (hash: QQ/6wR1il6Q5HQgYeu0FLsS5MlwixETghqwE+w1C5ZQ=)
                          9: 3138312e3137342e3232302e302f32322d3232203d3e20323731353632.roa (hash: ct2m7A/bkHltV1eHaX/izGYJMwg0oC+KzfTwwzGcNM8=)
                          10: 323830343a376437343a3a2f33332d3333203d3e20323731353632.roa (hash: YNmTK7o/RYF6Yho8GXrDqjniIyqoIzX8cTNNHaaJ/Lw=)
                          11: 3138312e3137342e3232322e302f32332d3233203d3e20323731353632.roa (hash: FRg5wIFkYji4J4sYaiQWmLmzjwveKWGKj8/4AAg1pLA=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl
                          rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Jul 2024 20:04:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a1:67:37:ec:7d:a8:ef:4d:b4:cb:b2:f8:4e:d1:ea:42:85:32:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
        Validity
            Not Before: Jun 30 18:19:30 2024 GMT
            Not After : Jul  1 21:24:30 2024 GMT
        Subject: CN=744EF2B1F96AFD830B92CEC6F8A3012E567A7BCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:73:f8:d5:8e:2d:df:11:7f:3b:27:af:99:82:
                    b9:04:87:94:39:5a:12:d3:20:7a:24:63:27:20:a9:
                    0e:01:02:d3:57:6a:c7:ec:fe:dc:6a:38:ce:37:1e:
                    92:7e:29:02:6e:cc:9a:93:d0:99:f6:24:56:97:c3:
                    cf:a0:da:61:80:e8:f9:11:d5:68:3f:d8:96:7f:31:
                    7c:d4:93:04:07:f0:1b:4a:d7:3b:89:3c:83:b0:b3:
                    69:bd:1f:23:a8:da:04:f5:fc:1c:09:1c:ab:b0:24:
                    b6:ce:0c:f1:79:f7:3e:82:e1:a1:10:cf:34:7d:b3:
                    a5:90:b2:5b:dd:70:26:8b:f0:25:bf:37:f2:40:46:
                    9e:3d:1b:a4:10:4d:21:ab:6b:44:55:8c:2b:41:30:
                    74:3b:60:e3:6a:56:05:12:8f:4c:91:a6:4d:3c:7a:
                    e2:43:0b:bd:30:f6:97:74:86:d5:54:2a:cd:07:97:
                    d3:d8:50:2c:b2:c1:c8:56:1f:b0:85:5b:64:a4:f5:
                    17:47:36:78:2c:94:d3:f1:57:5c:b8:0c:c6:d3:a0:
                    8a:46:b5:c3:f3:da:f6:1f:4e:24:7f:82:32:61:cf:
                    8c:cb:dd:f1:95:cb:87:46:3b:fe:ff:87:6f:18:9f:
                    13:cc:dd:ea:aa:fd:f4:bd:51:03:65:d4:d2:5f:12:
                    5b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4E:F2:B1:F9:6A:FD:83:0B:92:CE:C6:F8:A3:01:2E:56:7A:7B:CC
            X509v3 Authority Key Identifier:
                keyid:28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:f7:38:b0:78:83:28:55:59:5b:dc:77:3a:23:9a:d7:6a:06:
         40:28:88:0c:eb:c2:3a:54:37:ee:49:77:ee:62:10:74:cb:62:
         a2:3c:2a:92:42:c6:a8:52:2a:1b:d0:2f:f9:1e:f5:b4:1a:9a:
         e5:68:8d:3e:08:92:5a:f1:7e:14:fa:3f:2b:a4:9d:b6:d2:81:
         c3:2f:72:06:e8:2e:f7:12:45:aa:e0:a2:08:6f:98:1a:07:4b:
         a2:9c:f1:d6:7c:3f:73:cf:e6:cd:ba:af:2a:fb:0d:9b:c2:98:
         87:82:36:64:d2:f4:b3:a8:99:e2:1f:22:c6:90:bb:27:1f:4f:
         71:9c:1e:a5:b5:48:8a:03:02:d1:ed:ea:04:f0:b9:55:d7:1f:
         31:d6:cb:3e:1b:33:a3:26:34:8b:e2:8c:a7:18:57:5e:7b:17:
         1e:af:d6:50:94:01:80:aa:77:2c:1f:5f:9d:67:de:4e:ec:93:
         0d:59:c0:3a:d0:97:1c:98:a2:b6:e2:ce:92:41:78:7b:cd:50:
         93:d5:49:67:d5:66:ed:03:dd:e4:9b:22:86:95:b2:d8:d1:2e:
         bd:a2:d2:60:77:e4:3b:a7:23:5f:69:1f:b1:e2:0b:dc:9f:c7:
         7d:28:a9:3b:73:5e:68:48:68:7a:07:86:b5:75:8e:bf:16:77:
         85:3e:05:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 21:36:11 2024 by rpki-client on console-fra.rpki-client.org