Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.mft
File:                     4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.mft (raw, json)
Hash identifier:          9PZtwzBnfUsMLS425Vq/V2I/48TGrUgNV2urk1srkUc=
Subject key identifier:   D4:AE:63:9D:17:37:CF:1F:E5:7D:58:F1:00:2C:5B:9F:21:FF:73:17
Authority key identifier: 4E:87:B4:46:2F:90:42:B5:2A:A4:D6:5A:C7:D2:FD:92:C2:70:2D:D7
Certificate issuer:       /CN=4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7
Certificate serial:       1D097D1BF56CC17FD033A941D49F7919185DCD99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.mft
Manifest number:          EB
Signing time:             Mon 25 Nov 2024 15:09:05 +0000
Manifest this update:     Mon 25 Nov 2024 15:04:05 +0000
Manifest next update:     Tue 26 Nov 2024 19:03:05 +0000
Files and hashes:         1: 3230302e302e33322e302f32302d3332203d3e203631383839.roa (hash: bbgPAEyLCDOGc2W4J5pLkHQG6N6rjVF0AjWKU9noISw=)
                          2: 3230302e3134332e36342e302f31382d3332203d3e203134383430.roa (hash: ZuO3760agCW6ki2IUMCtyhYJ6ZjbnFPlmjd4mvq3Lt8=)
                          3: 323830343a6533343a3a2f33322d313238203d3e203631383839.roa (hash: OzX5IHOlyBKbpRBAH/RiuoBYJO1lVDjI2j6PLg2Jvtk=)
                          4: 3138372e3130332e39362e302f31392d3332203d3e203134383430.roa (hash: KD8MQH2YqX12Q2gXaC+3Sqlp1nZHTc+8eRBIztod7wY=)
                          5: 4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl (hash: UCx9qkFLNEykiMcYOdximiwJNTo4UsF0iKQqFBcqMxE=)
                          6: 3138362e3231312e3132382e302f31372d3332203d3e203134383430.roa (hash: il+qgVUwyIL8etwV4bR91jtFEHAWZP6Wt41hrMYV8+M=)
                          7: 323830343a383a3a2f33302d313238203d3e203134383430.roa (hash: jfpdgnYNlw9gu8ewZdAvy9xYK5y8VRrmTCp+u0o+AGQ=)
                          8: 3230302e3231352e3230382e302f32302d3332203d3e203134383430.roa (hash: krSzHLioVYLr4kbLbIswotFQEIGxmwRu7qzr5tCanBw=)
                          9: 3230312e31362e36342e302f31382d3332203d3e203134383430.roa (hash: p7nHpqDwPVMlOxuB18aTwBi5cY5ihmBxAYHdAWED2Q8=)
                          10: 3137372e3135322e3138342e302f32322d3332203d3e203631383839.roa (hash: CNrc2CMT9gGIDdU+PspWyupaLeF4mHfI0RnOLwk8fqc=)
                          11: 3230302e3139352e3232342e302f31392d3332203d3e203631383839.roa (hash: 50NQDQOpt2HbD4K5uxmWv4jkLs7gPGjfZ02DsrEWY+o=)
                          12: 3230312e31362e302e302f31382d3332203d3e203134383430.roa (hash: 593M5TF/lcU5PcCGQ9+lS3SsRDOB6eZwXky2yAnpXuw=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl
                          rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 19:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:09:7d:1b:f5:6c:c1:7f:d0:33:a9:41:d4:9f:79:19:18:5d:cd:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7
        Validity
            Not Before: Nov 25 15:04:05 2024 GMT
            Not After : Nov 26 19:03:05 2024 GMT
        Subject: CN=D4AE639D1737CF1FE57D58F1002C5B9F21FF7317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4b:b9:4c:51:0d:61:c0:7a:7c:4b:47:e1:1a:
                    ae:af:68:76:cc:97:d1:f4:50:de:e5:6f:68:85:13:
                    aa:89:a5:24:77:7f:74:1d:3c:c9:41:21:f4:72:8b:
                    6a:bf:2b:01:41:22:74:60:c8:8f:45:64:0f:2b:91:
                    47:ee:84:3d:43:0d:49:5d:e6:ed:46:c5:7f:09:16:
                    e6:2d:99:89:27:57:61:20:f7:77:36:72:3e:04:a8:
                    eb:c7:82:1d:f4:e9:6f:e4:21:c9:bb:d9:4b:d9:c1:
                    35:ac:06:75:92:1e:cd:a4:08:7a:4f:cd:bd:17:4b:
                    5f:01:bd:b0:be:a7:ef:f4:08:e8:70:a1:73:28:8a:
                    48:bc:93:bc:9d:3a:43:26:4c:1e:b9:99:ee:6c:b3:
                    99:cd:a0:a7:04:e6:02:c9:09:82:41:64:0d:03:97:
                    2b:b7:a9:41:b9:f5:e8:48:e2:7b:f8:e3:0a:74:f0:
                    92:93:5f:ff:4e:ad:a1:d9:c9:c4:e0:80:c8:4b:04:
                    00:14:62:2a:c1:9b:7c:aa:20:6b:71:2b:7e:90:6a:
                    72:b1:a5:c5:55:d7:67:ed:77:f9:4b:5f:d4:c7:81:
                    38:63:08:1c:b9:bd:bc:f5:5d:26:c8:59:91:b0:6a:
                    2b:9f:3d:4a:54:88:b4:e6:1b:b3:93:5b:d0:ec:13:
                    8d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AE:63:9D:17:37:CF:1F:E5:7D:58:F1:00:2C:5B:9F:21:FF:73:17
            X509v3 Authority Key Identifier:
                keyid:4E:87:B4:46:2F:90:42:B5:2A:A4:D6:5A:C7:D2:FD:92:C2:70:2D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:8a:ff:b3:87:68:84:2d:a2:2b:5d:73:b6:cc:ae:c5:93:9f:
         2f:48:0d:85:ae:61:53:20:bf:46:5b:3c:78:e6:37:e0:bc:c5:
         61:37:1c:f3:28:91:fa:71:7f:cf:58:33:80:ad:4b:61:1c:c2:
         6b:1e:b2:8a:90:7f:a0:6c:fe:54:7c:48:9f:5c:76:43:65:db:
         9c:83:3a:20:a1:79:04:c4:6e:f3:fb:b5:6f:06:d1:35:d9:68:
         f7:43:d2:15:06:d8:2f:85:f9:32:e3:21:63:52:a2:0f:a9:da:
         52:4b:03:c3:da:2e:5d:d5:81:d5:04:e8:3a:89:55:55:20:ed:
         a9:68:2d:e2:a1:23:8a:01:ad:1d:da:a6:ac:28:05:ee:cc:63:
         0d:4a:a0:b5:46:fd:e5:a6:e6:55:27:ed:26:84:83:d7:30:41:
         83:2f:bb:06:5e:cf:06:41:90:3d:b5:bc:aa:29:f9:18:a9:cf:
         a2:99:23:7e:39:f6:52:2a:d4:c6:9f:80:69:5c:0c:f2:b8:f2:
         a4:12:1c:51:fb:c2:b2:bf:9a:08:95:67:4e:6d:de:9e:23:3e:
         24:96:5d:f5:4a:f7:2b:cc:02:b7:da:a5:25:bd:92:86:fd:35:
         de:e3:37:ad:9e:b0:74:5f:a1:6d:8b:4c:92:89:7a:5f:7e:dc:
         f6:8f:13:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:23 2024 by rpki-client on console-ams.rpki-client.org