Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.mft
File:                     5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.mft (raw, json)
Hash identifier:          7zkV23+syMNM4VWqkDqj08aIuOD3g0CX449CYJ1iG00=
Subject key identifier:   82:FC:6B:9B:26:76:B5:F9:C8:0C:03:06:69:DC:2C:03:B4:95:7A:14
Authority key identifier: 5D:6F:D7:EE:DF:45:A6:BB:5F:1B:66:DD:D4:44:94:64:FE:18:BC:AE
Certificate issuer:       /CN=5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE
Certificate serial:       1E1845A75B69645FE3C564506C0EAC544ED1BBF7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.mft
Manifest number:          0137
Signing time:             Fri 22 Nov 2024 19:38:25 +0000
Manifest this update:     Fri 22 Nov 2024 19:33:25 +0000
Manifest next update:     Sat 23 Nov 2024 23:16:25 +0000
Files and hashes:         1: 3137302e3234372e3235322e302f32322d3234203d3e20323634343931.roa (hash: Qs4dPQ4zU0kJvBlMvX4PvOM4GHrHOpC71bUP8hI6+XI=)
                          2: 323830343a323764343a3a2f33322d3438203d3e20323633393234.roa (hash: /1zEQo9c4qsXHJjJTyIg1u3ldSen27sAL0G3pwMVR2s=)
                          3: 3133382e3231392e35322e302f32322d3234203d3e20323633393234.roa (hash: jsrpx9tOjJKv3AJUr3/vboXXivlYO/jQIqq/qt8T2FA=)
                          4: 3133312e3235352e3137362e302f32322d3234203d3e20323634343931.roa (hash: wbOoRwQzc53S/hGAU0FxO8tK7GHY+3Q8gOOyc1jcVqQ=)
                          5: 5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.crl (hash: ttqgMAD/0E6HPjXFLFoFkETiYRg0MtTCAjCUtuNVWiI=)
                          6: 323830343a323037343a3a2f33322d3438203d3e20323634343931.roa (hash: 9j8RAiL4wf6o/PV88jrbdburhMJjkxSnpluGE1HjVcQ=)
                          7: 3136382e3233322e3137322e302f32322d3234203d3e20323633393234.roa (hash: VO7aFi21DOKt43dFYlSkNzcEtvX+/F+Zu4EE8r658ZQ=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.crl
                          rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:18:45:a7:5b:69:64:5f:e3:c5:64:50:6c:0e:ac:54:4e:d1:bb:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE
        Validity
            Not Before: Nov 22 19:33:25 2024 GMT
            Not After : Nov 23 23:16:25 2024 GMT
        Subject: CN=82FC6B9B2676B5F9C80C030669DC2C03B4957A14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:85:be:6d:1e:6b:33:93:c3:86:75:d1:95:ae:
                    1c:e4:ce:8a:1d:07:b5:72:3d:0d:f1:f3:63:0c:6d:
                    62:b5:85:c7:0e:02:b3:55:60:a6:07:56:ad:3a:fe:
                    18:93:e0:46:34:12:0d:7a:6c:06:f1:2e:26:ba:8b:
                    e8:60:bf:91:67:ff:e7:fe:07:34:ab:7e:65:19:0f:
                    21:bb:f2:cd:73:9d:de:6d:eb:88:e4:dd:65:99:d8:
                    69:11:37:e8:cc:96:5a:3d:24:c6:3c:1c:27:9b:bc:
                    f8:5a:63:76:c5:d1:e9:33:fc:b8:65:0b:92:1e:dd:
                    d8:9a:bc:7b:86:a9:92:68:f9:16:78:f8:d6:f7:86:
                    79:c5:98:59:f2:6c:f0:3b:82:a3:81:b2:ac:c1:a8:
                    a1:df:ce:8d:49:ea:29:c8:80:62:a4:5c:50:ca:ae:
                    da:a5:4b:04:67:78:a0:e8:bc:65:42:bc:0f:dc:68:
                    b0:ba:b2:a4:a0:27:be:b5:3a:72:b0:dc:94:72:69:
                    df:ef:62:0c:42:59:2b:cb:5a:70:38:ba:8c:57:d9:
                    a5:18:e9:07:ee:85:df:f3:1a:28:44:4d:12:74:5e:
                    dd:32:d4:5a:f7:03:f6:a7:03:63:7d:f5:64:27:d9:
                    63:53:30:58:3b:04:54:c2:d0:84:47:c1:10:91:c9:
                    4e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:FC:6B:9B:26:76:B5:F9:C8:0C:03:06:69:DC:2C:03:B4:95:7A:14
            X509v3 Authority Key Identifier:
                keyid:5D:6F:D7:EE:DF:45:A6:BB:5F:1B:66:DD:D4:44:94:64:FE:18:BC:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:33:af:9e:75:e7:f2:36:75:74:32:5d:0c:37:38:b7:81:61:
         fb:aa:a6:f4:8e:37:0d:e0:f2:25:8e:72:24:45:84:7c:bd:1a:
         f3:86:2b:f1:fb:54:a2:fa:64:45:a3:3b:f9:0a:93:a7:9e:38:
         36:fd:30:34:a9:79:26:14:11:6b:96:e2:91:7b:08:22:99:33:
         47:76:2e:ba:13:a6:5b:3c:86:45:88:79:d9:a4:1b:3f:eb:d1:
         f2:97:46:21:a9:5e:de:86:96:25:07:c3:83:08:13:37:e2:4d:
         05:25:a8:ba:bf:ed:00:39:83:a3:01:5e:30:28:4f:87:8f:c6:
         cf:d5:76:4a:9c:ed:69:a0:e8:06:b1:0d:0d:a8:ed:65:0e:af:
         a6:d8:68:4a:ac:94:87:9d:d2:2b:bd:dc:e6:88:49:6e:77:b2:
         8d:3e:63:f0:09:39:32:64:47:13:07:fa:ee:85:22:6f:9a:91:
         b9:21:0d:73:04:0c:34:a0:4a:af:ba:49:5a:f7:3f:d9:6a:8b:
         fe:d3:ba:ab:a0:7c:7f:aa:c0:ea:00:43:67:aa:14:b1:3c:8e:
         92:96:c2:67:c0:e0:3f:3f:63:a7:b4:b9:60:b7:ba:bb:4d:a5:
         71:85:2b:1d:a6:4e:d6:44:ab:02:28:46:8a:2c:a7:e6:7d:3c:
         00:82:dc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:07 2024 by rpki-client on console-ams.rpki-client.org