Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.mft
File:                     67B531125B42B4898E018F1D5F2837CCA874EB8B.mft (raw, json)
Hash identifier:          hEKL59JOScSrPkLkew+X0yIyW3GWOJQTufYAoc9PlD8=
Subject key identifier:   49:DD:F7:4A:46:3B:D3:51:B7:B3:E0:E8:6B:B7:14:79:A0:C6:47:7F
Authority key identifier: 67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B
Certificate issuer:       /CN=67B531125B42B4898E018F1D5F2837CCA874EB8B
Certificate serial:       528ECB4A4EF551041E09B7F3F5CC388440AE177D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.mft
Manifest number:          0137
Signing time:             Sat 23 Nov 2024 04:10:00 +0000
Manifest this update:     Sat 23 Nov 2024 04:05:00 +0000
Manifest next update:     Sun 24 Nov 2024 04:32:00 +0000
Files and hashes:         1: 3138392e31342e3131342e302f32342d3234203d3e20323730383336.roa (hash: K/Fp0rdlNdIYP2eJS8Aiw7G8P8HSyCkn3E+5tmicOnE=)
                          2: 323830343a373232383a3a2f33332d3333203d3e20323730383336.roa (hash: tXjwWLfm8MvYBdb0MF7hhG66t/rksYeN91I4NkEroO4=)
                          3: 323830343a373232383a383030303a3a2f33332d3333203d3e20323730383336.roa (hash: IJg24mR+cjwIRSCJkxeLzrizajuRPYFMImr7S42E91Q=)
                          4: 323830343a373232383a3a2f33322d3332203d3e20323730383336.roa (hash: /aFWsqEbmaHUZJK2z6obMDcuSXKS3xNzU3mhZTeouzY=)
                          5: 3138392e31342e3131352e302f32342d3234203d3e20323730383336.roa (hash: NXZSKtHKepcjApl9zBoZD4iboaTsL2ZN+3qvLPUQcrE=)
                          6: 67B531125B42B4898E018F1D5F2837CCA874EB8B.crl (hash: 3WLMJ30ese1pUf3HhngVSM+zfjBOM8B3z1UdVs2VP3w=)
                          7: 3138392e31342e3131332e302f32342d3234203d3e20323730383336.roa (hash: M9Rnnme7cEQiJXPMtlJELCkUonNNfcT+h5r/gEEwHJs=)
                          8: 3138392e31342e3131322e302f32332d3233203d3e20323730383336.roa (hash: RLaNAm/jKw1DeS5cSprJe6Mamor3Qgx+RA9GogC/DSQ=)
                          9: 3138392e31342e3131342e302f32332d3233203d3e20323730383336.roa (hash: a2gK54CLxukgupaCPaQR+7+o7J8NYZtk3BuS16Rngd8=)
                          10: 3138392e31342e3131322e302f32322d3232203d3e20323730383336.roa (hash: 94hPDRdnJL9iaagokmudI0JZXPtmPAes57kPN41PGvc=)
                          11: 3138392e31342e3131322e302f32342d3234203d3e20323730383336.roa (hash: laBUQGWzck4Iup0XS1fbKpm0tgIVUG/fHbf6y7wjMsU=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.crl
                          rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:8e:cb:4a:4e:f5:51:04:1e:09:b7:f3:f5:cc:38:84:40:ae:17:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67B531125B42B4898E018F1D5F2837CCA874EB8B
        Validity
            Not Before: Nov 23 04:05:00 2024 GMT
            Not After : Nov 24 04:32:00 2024 GMT
        Subject: CN=49DDF74A463BD351B7B3E0E86BB71479A0C6477F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4f:88:07:31:46:11:dc:b2:2d:15:c6:66:6f:
                    9d:d7:55:88:19:a5:20:1e:e6:80:6f:b5:1c:28:0e:
                    f8:9b:4e:70:10:e9:74:68:c5:d2:92:05:cb:3a:a5:
                    d3:1e:25:95:c4:8e:5b:30:51:97:cf:98:cb:3e:a1:
                    83:af:76:d5:e0:a4:4a:7b:bc:e4:ec:bf:e4:a8:43:
                    f5:8c:d4:8f:85:02:4a:f0:3c:2e:e4:97:28:a3:67:
                    78:ae:e9:4c:80:49:c9:c6:63:4f:85:09:06:e2:e0:
                    73:49:9e:2e:7d:13:b4:8e:29:ba:55:73:c5:80:ee:
                    8c:6a:4f:2f:7a:64:cc:9f:77:51:70:6e:0b:e2:01:
                    aa:d9:1a:bb:ec:79:3b:9e:34:0d:93:f8:dd:0d:ab:
                    58:fc:9c:7f:57:ce:b4:f1:3c:1b:26:d3:17:c9:e8:
                    42:24:df:d9:7b:8e:85:c7:39:92:18:ab:3d:15:77:
                    bc:ba:2b:67:df:d0:6c:7c:55:26:ae:d0:13:c5:10:
                    c4:0c:00:e7:8d:7a:1b:18:4b:4d:f5:3d:20:38:cb:
                    96:e2:b5:03:f1:b0:c6:d5:f9:36:52:3d:a3:5c:39:
                    64:54:c8:d1:53:da:6b:c2:d3:4e:82:70:04:47:9e:
                    6d:ac:ba:ae:8b:d0:32:19:6e:fb:b6:c3:49:62:0d:
                    98:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DD:F7:4A:46:3B:D3:51:B7:B3:E0:E8:6B:B7:14:79:A0:C6:47:7F
            X509v3 Authority Key Identifier:
                keyid:67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:cf:ee:14:79:06:55:9d:f9:8e:02:a2:c6:c6:97:e2:89:cb:
         9d:f5:3e:64:9e:5c:35:c4:5e:2d:b3:d5:7d:f1:f9:c5:5b:93:
         b8:da:bd:84:09:53:86:f4:d1:ac:6f:03:fa:11:17:9a:91:7f:
         6e:f4:51:c0:7d:2a:a2:ba:07:35:00:99:d8:0e:d1:fa:9e:45:
         7d:b2:a3:99:ca:11:12:18:99:40:c7:88:80:28:73:89:d1:55:
         a1:fc:0b:d1:58:a3:06:f6:59:b5:c9:e7:e0:3f:e0:5c:07:4f:
         6c:a1:91:e3:a1:f7:f1:69:3c:52:dd:09:13:69:55:de:98:6c:
         cd:a6:f6:7c:c9:9a:c7:92:26:53:26:8e:d4:85:ef:d5:9e:fb:
         e9:55:18:a0:9a:0f:f5:3b:c6:ee:de:f4:c2:06:61:f7:e7:46:
         ee:51:df:b2:89:79:ea:3c:46:57:05:84:8d:7a:19:1e:4b:27:
         48:ee:27:4c:95:fe:1c:5e:71:7d:d9:b6:95:8b:2b:a3:a0:51:
         89:e4:28:04:f4:e5:68:f8:18:5a:d1:af:79:4c:89:22:99:19:
         90:c8:c3:f0:fc:45:cd:3f:13:f4:04:b4:30:5f:a7:c4:de:82:
         45:89:aa:c0:b0:eb:38:df:48:64:7a:54:b3:68:38:6b:9c:e6:
         df:c3:b0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:01 2024 by rpki-client on console-fra.rpki-client.org