Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.mft
File:                     563F220F1BE7F8A083408CCA243F8EDE091EA8DC.mft (raw, json)
Hash identifier:          NJMHfRzvuieWE5ANlF989aOCBut++cSS/LMI2IxKphI=
Subject key identifier:   D1:D3:CB:43:E5:58:A2:C9:83:24:1F:0F:52:BC:B8:83:DF:73:11:A3
Authority key identifier: 56:3F:22:0F:1B:E7:F8:A0:83:40:8C:CA:24:3F:8E:DE:09:1E:A8:DC
Certificate issuer:       /CN=563F220F1BE7F8A083408CCA243F8EDE091EA8DC
Certificate serial:       6438D3B7A7456926053BA72D9122B3EA5854CD96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.mft
Manifest number:          AD
Signing time:             Fri 22 Nov 2024 20:46:46 +0000
Manifest this update:     Fri 22 Nov 2024 20:41:46 +0000
Manifest next update:     Sat 23 Nov 2024 21:56:46 +0000
Files and hashes:         1: 3133312e3232312e3138342e302f32332d3233203d3e20323634343235.roa (hash: X0P+KuaOTN7WQiOS3caE1Edk+ng7myBLBrAG/M55nXU=)
                          2: 3133312e3232312e3138362e302f32332d3233203d3e20323634343235.roa (hash: pJ4nWekGwMCbS/2owhzZBU/qIa6Gg6cyUIJu8mdn5NA=)
                          3: 3133312e3232312e3138342e302f32342d3234203d3e20323634343235.roa (hash: m/CFLGHTH2TQlgtfAka0Fq79KKZFY8RQ1YsZuY89cRA=)
                          4: 3133312e3232312e3138342e302f32322d3232203d3e20323634343235.roa (hash: acjd7e6x/Z3Swhrn9NmeR6BUyzAPPlBriXxu31IUTfQ=)
                          5: 3133312e3232312e3138372e302f32342d3234203d3e20323634343235.roa (hash: sFTzFUQRHOP1XJc4s+ALaXkXVLJmH6lyUdGcpTdaUA0=)
                          6: 323830343a316536303a3a2f33322d313238203d3e20323634343235.roa (hash: eEQHxRLKV2A6Zror70pjAZ1vLqAprFfaKZBwXJ9ibBo=)
                          7: 3133312e3232312e3138352e302f32342d3234203d3e20323634343235.roa (hash: 1hpM+bzfJlyFAP6DyB4JioZV2vAZh90BMRKPvyjzgdA=)
                          8: 3133312e3232312e3138362e302f32342d3234203d3e20323634343235.roa (hash: kjr+2F/0RdWNSajnrEi/iOKKQTL8v0K5toc9rpa3zOo=)
                          9: 563F220F1BE7F8A083408CCA243F8EDE091EA8DC.crl (hash: 5G+q/wnW9rgpA+gGILxQcFSYnw+Z8mX7n97+SWvzuQg=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.crl
                          rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:56:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:38:d3:b7:a7:45:69:26:05:3b:a7:2d:91:22:b3:ea:58:54:cd:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=563F220F1BE7F8A083408CCA243F8EDE091EA8DC
        Validity
            Not Before: Nov 22 20:41:46 2024 GMT
            Not After : Nov 23 21:56:46 2024 GMT
        Subject: CN=D1D3CB43E558A2C983241F0F52BCB883DF7311A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:45:32:b2:ff:69:c8:6d:a4:f8:aa:b8:5d:a9:
                    70:46:f4:e5:aa:25:a8:43:61:4d:0b:25:34:dc:a6:
                    53:7b:24:4d:d8:b7:3a:52:2b:fc:f9:de:3d:1e:7a:
                    7f:a7:77:b6:58:68:40:6b:5a:a0:57:46:e6:8b:39:
                    1e:a5:2a:94:b1:79:06:1c:05:d0:36:e6:22:88:da:
                    96:f4:2a:01:58:0f:b8:43:61:0a:a3:93:d5:76:0b:
                    5f:ce:35:bf:e1:92:93:2d:7c:14:ff:4f:63:2f:26:
                    4d:f8:78:0e:05:31:2d:23:b2:67:ec:d2:01:fb:a7:
                    34:20:87:28:f5:55:ab:04:54:96:90:81:ba:c9:52:
                    e0:9d:44:ec:5e:2e:e3:78:b1:a9:cd:85:7e:8c:d6:
                    66:78:95:45:8c:ae:7f:3f:a6:11:f9:56:1b:bd:41:
                    8d:9b:a8:65:f0:f0:47:1f:f0:5b:1c:21:6f:c4:ce:
                    e3:c4:4f:f1:85:7f:65:de:c6:66:00:9a:e3:6f:da:
                    8e:c1:41:7c:e7:c4:df:2c:9a:50:5a:84:0a:78:61:
                    6f:40:eb:02:88:bc:97:1d:9f:81:4c:fe:ca:5b:8b:
                    51:20:79:ac:94:92:75:56:ec:b7:45:25:da:8d:ce:
                    41:f4:16:77:8a:19:ff:fd:0f:41:68:45:06:d7:9d:
                    4f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D3:CB:43:E5:58:A2:C9:83:24:1F:0F:52:BC:B8:83:DF:73:11:A3
            X509v3 Authority Key Identifier:
                keyid:56:3F:22:0F:1B:E7:F8:A0:83:40:8C:CA:24:3F:8E:DE:09:1E:A8:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:2b:57:10:c3:22:8c:55:54:7b:ad:b2:e3:d4:85:00:67:66:
         20:6d:52:49:54:f8:c1:7d:b6:47:5b:ed:ca:00:b4:54:a4:59:
         6a:b3:87:e8:e0:ea:5f:a2:b6:5d:64:82:0c:ce:fc:8c:ab:e3:
         54:58:15:fc:c2:60:fa:d5:87:4a:4b:b7:49:f7:0f:c9:b8:81:
         0a:53:d3:f0:fc:21:01:19:b1:7c:54:99:df:f1:09:fe:b1:44:
         2c:ff:15:7b:83:45:1d:0f:cf:6c:60:be:9a:e6:1d:fb:f0:dd:
         79:fc:45:3c:e1:4a:fa:fc:1b:64:87:e7:1b:a0:90:99:7a:18:
         11:62:d4:8a:ff:2d:98:49:00:c6:8a:8a:30:c0:83:32:59:68:
         a2:38:af:8f:19:d7:22:4b:55:6f:62:7b:4d:b4:ed:93:33:3d:
         5b:0e:0c:79:6b:15:0e:a0:39:d4:ba:a6:33:66:2d:d7:f8:87:
         ac:63:fb:2f:c3:f8:ba:28:bb:10:d1:e8:78:95:3e:54:78:6e:
         44:26:7b:da:de:48:be:e6:d1:49:a0:82:d0:d4:1b:50:aa:35:
         f8:07:81:b3:3b:c0:e6:86:24:7b:ca:c0:a3:ca:7d:1e:99:79:
         25:66:1e:37:dd:08:4f:4f:e0:c2:23:bb:d3:8e:94:e7:52:87:
         1b:04:1e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:10 2024 by rpki-client on console-fra.rpki-client.org