Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/1/8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.mft
File:                     8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.mft (raw, json)
Hash identifier:          UUqAoWQpylFopIogd3ZGA6/S3TWi3bUW7Rjl0+BKcWQ=
Subject key identifier:   3E:AC:46:1C:50:FE:B1:07:8C:07:7E:B4:69:1D:76:4F:A0:25:94:2B
Authority key identifier: 8B:A6:99:C4:70:16:69:EC:E8:E7:D3:F4:A8:60:C4:F6:D5:C7:64:D0
Certificate issuer:       /CN=8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0
Certificate serial:       5D722DC83A9D01D1A1FF8F8D995D02C16AB3BEEA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/1/8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.mft
Manifest number:          7D
Signing time:             Fri 28 Jun 2024 20:00:00 +0000
Manifest this update:     Fri 28 Jun 2024 19:55:00 +0000
Manifest next update:     Sat 29 Jun 2024 20:00:00 +0000
Files and hashes:         1: 3137392e3130372e3132382e302f31392d3234203d3e203238313731.roa (hash: U4vo3WFMb7GWE7i/Zo/jnF/YrbM3n8+KnXmpoKB98Os=)
                          2: 3137372e3133372e3234302e302f32312d3234203d3e203238313731.roa (hash: 2Y7K8f7Lrt9ZJtpPcxLXfKjjxWDBOtCenJgEuG3KAJc=)
                          3: 8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.crl (hash: 57Cjf838k2nq2rbaO5KqymZqh6+mnsWtUf3KYyhMgzQ=)
                          4: 3138392e38342e3137362e302f32302d3234203d3e203238313731.roa (hash: zwR6jkHzW/3WLjDsfO1j9Ixey0swRaP5C87IS4vZrAQ=)
                          5: 323830343a6438343a3a2f33322d3438203d3e203238313731.roa (hash: BU5S2CsjRrcuUY4GbMW8CTFH+iT54YG17Du2G3TBhwA=)
                          6: 3138392e38342e3136302e302f32302d3234203d3e203238313731.roa (hash: Utnl5VeWFTPgO4YYyfF3uRMhUcbjbt1XgB1NAOMrsLI=)
                          7: 3137372e38342e36342e302f32312d3234203d3e203238313731.roa (hash: zlJ2ytxxoktss2e0XgjAW0MXdNu5/5lajkh1g3DQ/Ck=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/1/8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.crl
                          rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/1/8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:72:2d:c8:3a:9d:01:d1:a1:ff:8f:8d:99:5d:02:c1:6a:b3:be:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0
        Validity
            Not Before: Jun 28 19:55:00 2024 GMT
            Not After : Jul  5 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e1:bf:e4:c1:ee:45:1f:f5:ca:0a:f4:3a:8e:
                    ed:a1:69:cc:1b:13:b2:21:3e:16:a2:f1:a0:ac:3d:
                    1a:f0:d6:c3:59:1e:e5:a4:01:ad:dc:9c:87:e9:e2:
                    dc:99:b0:dc:84:42:e4:65:9d:74:58:49:9b:4b:4f:
                    03:27:98:8f:f9:7c:6b:8e:38:d2:74:24:ed:bb:90:
                    ba:c4:43:18:7b:25:5a:20:9c:fb:02:c4:1e:bb:8f:
                    c5:ff:bb:8f:16:b1:ad:30:36:c9:3f:4b:1e:8a:21:
                    10:0c:2a:aa:23:42:d0:7c:f1:8b:22:47:9b:15:9a:
                    41:1e:8e:a0:8c:64:c7:c1:98:c3:39:c8:51:8e:08:
                    1f:3c:b2:17:6d:a7:fe:c6:6d:a8:65:5f:bf:a3:e0:
                    55:e4:04:29:89:e1:ed:0e:d3:fa:25:c0:51:d3:7d:
                    67:e1:70:f9:33:25:0f:27:b0:3d:aa:99:18:a1:dd:
                    0c:94:7d:86:77:15:97:25:b8:45:a6:50:10:7f:13:
                    5e:86:50:62:db:10:f4:ff:e4:4d:c8:62:dc:87:b5:
                    2c:05:40:2c:d7:39:41:4e:d0:ef:a6:00:b8:7a:b5:
                    cd:7e:95:1e:11:71:35:0a:f2:72:79:90:62:0a:3e:
                    9e:e8:16:cd:ca:c3:72:b9:10:7a:64:6f:55:cd:b2:
                    d4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AC:46:1C:50:FE:B1:07:8C:07:7E:B4:69:1D:76:4F:A0:25:94:2B
            X509v3 Authority Key Identifier:
                keyid:8B:A6:99:C4:70:16:69:EC:E8:E7:D3:F4:A8:60:C4:F6:D5:C7:64:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/1/8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/1/8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ab:1e:f7:2f:90:41:f0:d6:89:97:14:c1:7b:9f:ce:11:0d:
         eb:0e:c0:2c:a9:56:a4:a8:a0:f7:8f:77:68:32:98:25:89:37:
         7c:7e:07:eb:72:56:ee:1d:18:1f:9d:fc:50:48:8a:7c:e8:38:
         e6:c9:f9:65:78:75:ff:c5:74:2f:8b:d2:f8:5a:2e:fd:36:de:
         95:7b:42:f5:12:1f:19:8b:4c:3a:7f:6c:8d:98:92:5c:db:68:
         68:4b:a9:65:94:1a:2f:b9:ff:01:a8:1e:0a:c2:96:9d:7a:7c:
         92:24:05:1e:f4:86:eb:d3:45:0a:0e:a1:6d:cb:a2:2c:19:fc:
         93:2f:4e:6f:33:69:d6:27:86:82:64:14:44:f0:f1:51:cf:9a:
         1f:a6:38:8f:43:68:07:b3:4a:a5:c3:0a:84:c7:4f:d0:c2:7f:
         5e:54:be:6d:02:3c:67:9f:08:98:c0:9f:a2:8f:87:ab:18:6f:
         82:2e:cf:f5:f7:ea:85:1e:c7:dc:40:5e:8f:29:08:23:2f:b7:
         94:9d:4c:51:d1:ef:fc:3a:7a:3c:33:44:c0:b6:c6:e6:6d:da:
         a3:1c:bf:76:32:5b:f4:08:e0:e7:ae:7f:61:34:a2:30:53:c0:
         d9:5c:09:55:d3:ed:e4:61:d3:85:06:53:86:f8:90:9c:4d:c6:
         8d:1b:0e:4a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:42 2024 by rpki-client on console-fra.rpki-client.org