Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.mft
File:                     C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.mft (raw, json)
Hash identifier:          Sg1uq3XmZ2pPrQE6Et0K9kn3yYOBUq7xTepeWPc27UU=
Subject key identifier:   9E:D7:9B:6E:7C:03:B2:EB:86:AA:C1:A1:E1:69:F5:D9:19:BD:B1:8F
Authority key identifier: C7:CE:BD:AC:74:51:29:6E:CA:EF:C5:1D:E2:EA:53:1B:5A:10:50:86
Certificate issuer:       /CN=C7CEBDAC7451296ECAEFC51DE2EA531B5A105086
Certificate serial:       0F3275409A3D50B38D6BBF8039F52011E68F4113
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.mft
Manifest number:          0137
Signing time:             Fri 22 Nov 2024 06:19:00 +0000
Manifest this update:     Fri 22 Nov 2024 06:14:00 +0000
Manifest next update:     Sat 23 Nov 2024 09:15:00 +0000
Files and hashes:         1: 323830343a343237343a3a2f33322d3438203d3e20323637353031.roa (hash: 7RKMs0cmFIj2mq++gS41g89CXPtm7pwJJ+pSmW1EoDQ=)
                          2: 3230312e3138322e36342e302f32322d3232203d3e20323637353031.roa (hash: 6YF49RmNR16bvBfoxrlqEvTfP6nX3rJbTwkdoSjAp60=)
                          3: 3230312e3138322e36362e302f32332d3233203d3e20323637353031.roa (hash: qbOh6fEyhdGLld2m2hfihV1HqBEHUhF+eYSuQXdKmcA=)
                          4: 3230312e3138322e36352e302f32342d3234203d3e20323637353031.roa (hash: NkBwBVSPHN+Wt6d9cZd0DV51YrtTQ8JT0Qjp6AixsBw=)
                          5: 3230312e3138322e36342e302f32332d3233203d3e20323637353031.roa (hash: 6PHP6lVB4iDr5Rd2/M1aJQSXZuhFL7BfR4MiWD50yWs=)
                          6: C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.crl (hash: fTm0AnlTp8SXM1mfyO/fthJTY8BcD5z4S9fovJySd7Y=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.crl
                          rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:32:75:40:9a:3d:50:b3:8d:6b:bf:80:39:f5:20:11:e6:8f:41:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7CEBDAC7451296ECAEFC51DE2EA531B5A105086
        Validity
            Not Before: Nov 22 06:14:00 2024 GMT
            Not After : Nov 23 09:15:00 2024 GMT
        Subject: CN=9ED79B6E7C03B2EB86AAC1A1E169F5D919BDB18F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:29:ac:04:a4:60:96:d0:07:01:1f:b4:a4:24:
                    2d:e1:8d:e5:d5:9f:15:0b:9d:b1:3f:ab:b4:6b:8d:
                    0c:8e:c7:73:b1:1e:5b:af:59:d4:82:18:9b:d9:30:
                    3f:98:60:5a:9e:5b:f5:2a:99:7e:d5:dc:d4:5f:54:
                    da:0d:2c:37:a6:00:a3:d1:c7:cd:fc:be:90:6a:11:
                    c0:19:e2:ed:24:c2:bd:53:b9:b1:70:32:69:c0:cc:
                    64:71:ac:b7:55:f2:ea:12:2c:dd:ae:80:1d:11:0d:
                    9b:0f:81:6b:d4:b8:92:d0:5a:8f:52:dc:60:3c:d0:
                    a5:29:14:11:36:3a:09:34:9d:90:86:31:75:a2:1f:
                    5f:8b:da:f1:8e:0f:66:67:7e:d8:fd:4e:95:3c:31:
                    cd:2f:46:41:b7:8c:09:ad:7d:1e:45:91:27:0b:d7:
                    c4:b6:0f:a2:3d:33:e8:c0:a4:1a:18:8d:64:c0:f2:
                    12:19:13:3a:a0:c0:0a:6c:00:11:64:fc:b2:88:41:
                    ea:ff:ce:de:cb:c5:47:2d:e7:ac:5d:55:13:36:22:
                    f5:69:dc:54:e9:74:26:22:01:06:93:83:6f:62:16:
                    85:1b:bd:0a:5c:3c:82:83:96:af:38:4d:27:41:af:
                    c0:79:f3:34:fa:e8:52:76:8f:67:4c:52:e5:08:3a:
                    ed:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D7:9B:6E:7C:03:B2:EB:86:AA:C1:A1:E1:69:F5:D9:19:BD:B1:8F
            X509v3 Authority Key Identifier:
                keyid:C7:CE:BD:AC:74:51:29:6E:CA:EF:C5:1D:E2:EA:53:1B:5A:10:50:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:59:ad:e8:24:d3:9d:df:8a:0a:02:d0:21:d7:59:38:c3:c2:
         41:71:31:96:a0:90:72:c0:d9:d2:48:15:e6:3e:a1:24:4b:1e:
         7a:52:be:2b:3a:c3:b6:da:40:29:f0:d6:ca:6c:e7:60:a1:9e:
         a6:cd:2b:3c:a4:cf:5c:bf:5b:b7:fa:38:55:4c:dd:52:8b:21:
         44:db:aa:74:ef:bd:af:d2:45:01:76:e3:22:d0:f8:3e:22:43:
         bb:30:e3:39:d1:25:d4:53:53:72:12:ef:d4:f1:f4:f5:a4:93:
         b6:d9:10:fa:c0:ca:de:28:5e:4e:6c:9f:f1:85:e7:66:f5:28:
         63:a9:a1:71:a6:b9:58:f8:6e:65:cf:81:a7:3d:28:a1:b6:36:
         82:8b:a5:8e:52:48:61:2a:51:93:ff:4d:82:3f:d9:4a:55:69:
         fc:25:10:f8:1f:cd:69:43:a7:25:c6:3c:c5:18:18:f9:ed:a1:
         93:ce:8e:96:8c:e1:53:14:c5:f7:db:83:14:70:1e:e2:e5:77:
         3b:3f:cb:c2:1a:a5:57:94:67:f8:e0:82:a5:1d:2c:9c:94:13:
         ad:6c:2d:15:c9:b9:83:de:66:06:03:82:65:23:51:31:80:51:
         cd:bd:25:2d:81:f2:2b:5c:b6:b2:22:76:ae:10:2e:84:ca:58:
         23:2a:3b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:18 2024 by rpki-client on console-ams.rpki-client.org