Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.mft
File:                     1FF4D84F5EA18738B398382BB8664840225008F9.mft (raw, json)
Hash identifier:          8Y2wQoDp1EOeo0IwVDqjSS2O4aJyfQN7DcmUnrqqseU=
Subject key identifier:   AE:13:56:D5:B2:71:4D:0A:1B:04:89:AE:DF:A7:46:33:10:D8:4A:DD
Authority key identifier: 1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9
Certificate issuer:       /CN=1FF4D84F5EA18738B398382BB8664840225008F9
Certificate serial:       34D627FB522BC82B055E84F4326D23620A45B969
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.mft
Manifest number:          15
Signing time:             Tue 26 Nov 2024 09:54:48 +0000
Manifest this update:     Tue 26 Nov 2024 09:49:48 +0000
Manifest next update:     Wed 27 Nov 2024 11:47:48 +0000
Files and hashes:         1: 3133382e39392e38382e302f32322d3234203d3e20323730383134.roa (hash: iJlG/3z5o4AbDt0z7iiy+sLZFpZ3Ce7eSIQJxajstiY=)
                          2: 3137372e3232332e39362e302f32302d3234203d3e20323730383134.roa (hash: /lcSbYreILEUSk0mEMgKJzECp2TeGwFqegRO/ox6hrY=)
                          3: 1FF4D84F5EA18738B398382BB8664840225008F9.crl (hash: nj8WeZPfvQUh3zL/Pz9BVo4z0NjBbjNvKnEb89frH6g=)
                          4: 3137372e35332e382e302f32312d3234203d3e20323730383134.roa (hash: VeS/Tu0Fo+4cH85d9U6YWlG7E1pL7tycYJfo/ZFe9dQ=)
                          5: 3138362e3233352e33322e302f32302d3234203d3e20323730383134.roa (hash: 1/nAvSGDIxnm0CMKgQdomTBZBT1J9vFHsAXo0tmNw8Y=)
                          6: 3139302e3132332e382e302f32332d3234203d3e20323730383134.roa (hash: 32DMzs+QTX3aC3wKblAq53W6E3iOjnqEewGr5nUQ4so=)
                          7: 3137372e3138352e3134342e302f32312d3234203d3e20323730383134.roa (hash: 3viJ8obYh+T2dYHH7CKw4xEUEjUsdi/C682tshci8tI=)
                          8: 3137372e32302e3136302e302f32302d3234203d3e20323730383134.roa (hash: /uo+xfeY7FzBK9a6s0azjZiz5DpxcgY39Ds6R3snRRk=)
                          9: 3139312e35322e3231362e302f32322d3234203d3e20323730383134.roa (hash: oPaEBvdlvl7hK8500ggrONvKFgPX85A/kaAUz4FJihI=)
                          10: 3138392e34352e3232342e302f32302d3234203d3e20323730383134.roa (hash: xwAhJslSZonyYM2XEVpcyJuPqnh1CGv/wtVhSkOWiwE=)
                          11: 323830343a373164343a3a2f33322d3438203d3e20323730383134.roa (hash: XG9IPs4Jg+yqGYCYJ01DutTxgJNRdSWG9EtQ6lLBzHs=)
                          12: 3137302e3234372e3132342e302f32322d3234203d3e20323730383134.roa (hash: o+XAEZ0iTk7+XrYc8u03MxUQ+1laASrFM559UsVdxE4=)
                          13: 3136382e39302e3232382e302f32322d3234203d3e20323730383134.roa (hash: WI8nemkbabz/ZucrhcWqjrtd7PXFAEwmjLmBcJiZGkc=)
                          14: 3138372e3132312e3136302e302f32302d3234203d3e20323730383134.roa (hash: RE5SjIj0s6sIsHcUuZego13ka2MLkubgMncY7ZwLkNI=)
                          15: 3137372e3132382e3134342e302f32302d3234203d3e20323730383134.roa (hash: STops7HD9zQrt2igW9kNgz+5rZLgJkceyWeJOST9ENs=)
                          16: 34352e362e33322e302f32322d3234203d3e20323730383134.roa (hash: XCPjS8fAz/FgOhcIca68SL9q63+ISNuKAkFHakksT6E=)
                          17: 34352e3137372e3131322e302f32322d3234203d3e20323730383134.roa (hash: aPrk8Ek58PvAEO6YkrmGsIyqqqRMNyrqDreVK+qjuAo=)
                          18: 3137372e35332e302e302f32312d3234203d3e20323730383134.roa (hash: Azbo2/9oy0XOGWbB2UHQitBo2yaeMmGlxeanyXn4Ht0=)
                          19: 3133382e302e3232342e302f32322d3234203d3e20323730383134.roa (hash: 0XpheV/T6bmgITFYBo8SW8aHCfqo0doUN9m+6mpFPVk=)
                          20: 323830343a6637303a3a2f33322d3438203d3e20323730383134.roa (hash: toG2HEE5QtzzPcUE2bHHW/ZGlVtJ58me2W7d6qUWjSY=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl
                          rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 11:47:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d6:27:fb:52:2b:c8:2b:05:5e:84:f4:32:6d:23:62:0a:45:b9:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FF4D84F5EA18738B398382BB8664840225008F9
        Validity
            Not Before: Nov 26 09:49:48 2024 GMT
            Not After : Nov 27 11:47:48 2024 GMT
        Subject: CN=AE1356D5B2714D0A1B0489AEDFA7463310D84ADD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:a3:fe:89:ba:6f:f6:c2:22:ac:4b:2a:fd:ef:
                    36:62:f2:29:6d:ca:1b:58:88:2e:e1:66:7c:ae:c3:
                    c4:de:88:1c:0b:ba:f9:fa:c6:be:75:9a:d7:15:39:
                    83:b2:f2:3a:b4:de:1d:50:e3:32:73:82:a8:17:11:
                    5c:c1:1d:7d:54:f9:91:61:e1:7a:b8:01:5d:60:14:
                    8c:de:95:11:fb:b7:bd:b3:0a:ef:2e:c4:d5:dd:04:
                    28:f7:c4:4b:95:b2:d5:9c:f8:27:52:f8:d9:b6:71:
                    a0:a8:b6:06:af:10:fe:e3:12:ef:31:2a:b1:ec:a0:
                    f7:7b:6e:78:39:80:6d:49:30:4b:41:84:16:29:99:
                    50:30:fc:0c:b3:a5:59:7c:37:b5:13:3f:a5:63:f2:
                    77:54:4a:52:01:ab:c0:3b:1b:54:a6:b1:47:a9:6c:
                    4e:e5:10:6f:9f:29:7d:2f:96:4a:4a:c9:ce:15:52:
                    25:ed:2a:7e:87:e3:76:8a:8b:d5:14:a8:13:d4:0b:
                    6c:da:0c:f5:2f:48:8d:f6:eb:67:44:60:61:87:62:
                    3c:99:08:ff:fb:4b:91:de:79:03:cc:71:dc:71:83:
                    0b:73:b3:08:29:fe:bb:bb:64:24:a1:5d:39:6a:8d:
                    ed:2c:4d:8d:dc:7d:cb:39:21:85:ef:2b:bc:d0:8f:
                    31:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:13:56:D5:B2:71:4D:0A:1B:04:89:AE:DF:A7:46:33:10:D8:4A:DD
            X509v3 Authority Key Identifier:
                keyid:1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:36:43:2b:d1:fd:91:51:54:cb:36:48:d8:06:ab:fc:89:a9:
         ef:35:5e:a4:77:41:8c:c6:90:bd:8a:2a:e4:d3:87:3f:54:34:
         5f:66:4d:af:54:97:5e:d5:0f:9d:ed:10:24:81:24:88:4e:27:
         6c:dc:72:70:05:8f:a8:a0:62:38:95:31:42:0f:d8:8e:4d:0c:
         ab:fa:93:18:2d:78:f5:66:25:e1:b5:87:d2:89:20:cd:5d:26:
         95:38:35:7d:4d:d2:00:22:70:2e:72:ea:cf:a7:63:09:05:82:
         1f:44:e8:f8:e9:78:7b:50:28:9c:08:58:a1:4e:3e:9a:3f:5d:
         30:be:ac:13:ba:e0:40:79:25:49:ad:29:75:ec:44:d7:58:7b:
         f4:c9:00:bf:5d:00:d8:09:91:fa:49:bc:34:82:28:6c:3a:50:
         14:ac:1d:5b:65:8d:a1:a3:a5:a5:29:f9:1c:81:5c:55:24:d1:
         3f:e4:35:28:58:ce:89:bd:70:cc:a9:2a:8a:41:83:39:47:4a:
         ce:8c:21:e2:fc:01:a8:63:aa:68:97:64:14:bf:40:d9:58:9a:
         0d:be:c3:41:0c:20:86:9e:f7:a5:8b:62:07:f5:b6:a0:ac:82:
         76:0d:18:c9:47:aa:46:00:e7:75:d7:d6:fc:a8:ff:87:4c:a7:
         d7:83:3d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:38 2024 by rpki-client on console-ams.rpki-client.org