Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/27515C5E9BC6223F27332FBE1616CE57715E9CAF.mft
File:                     27515C5E9BC6223F27332FBE1616CE57715E9CAF.mft (raw, json)
Hash identifier:          wUONu6wUpf0RmPh1XxUsyLS1UIM5ys48onmjf72WmP4=
Subject key identifier:   EC:3F:30:A7:47:83:37:0B:3D:A6:32:C0:E6:72:C3:02:0B:3D:B4:6F
Authority key identifier: 27:51:5C:5E:9B:C6:22:3F:27:33:2F:BE:16:16:CE:57:71:5E:9C:AF
Certificate issuer:       /CN=27515C5E9BC6223F27332FBE1616CE57715E9CAF
Certificate serial:       3ED73CD60F8F00EC1A4A0753890EE36C75A09ECC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27515C5E9BC6223F27332FBE1616CE57715E9CAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/27515C5E9BC6223F27332FBE1616CE57715E9CAF.mft
Manifest number:          74
Signing time:             Tue 26 Nov 2024 04:25:02 +0000
Manifest this update:     Tue 26 Nov 2024 04:20:02 +0000
Manifest next update:     Wed 27 Nov 2024 08:03:02 +0000
Files and hashes:         1: 3139312e3234312e32332e302f32342d3234203d3e20323633353431.roa (hash: Q0yoFJR7fs2VZb4FkHtve2TYnf31zmX0aGKon54l3mY=)
                          2: 3139312e3234312e32322e302f32332d3233203d3e20323633353431.roa (hash: VQx8dIuu0I9pC5NPmn+OhDMq5N4NbSsAsJpJdDvLS5E=)
                          3: 323830343a313339383a31313a3a2f34382d3438203d3e20323633353431.roa (hash: 6Rv8a2JmozLxNJrCy25Qz8pjyZf9fIaPv6tJCFXxQjc=)
                          4: 323830343a313339383a336630303a3a2f34302d3430203d3e20323633353431.roa (hash: wqoZeNxA+6GWQj/+xRahQvLgmOguwLiY9ovP9agfqnA=)
                          5: 3139312e3234312e32312e302f32342d3234203d3e20323633353431.roa (hash: yxQgcDkIR6t9xRK+PzLehFkegO5VxTdlwodmJOsmlqU=)
                          6: 3139312e352e3136342e302f32322d3234203d3e20323633353431.roa (hash: X/WrNQ0M0jDekmQsfYPbU20/IPKtSdR06oIjDUvd4Tg=)
                          7: 323830343a313339383a3a2f33342d3334203d3e20323633353431.roa (hash: SusTGJqV867cltUJC3G+YBYVRHmmgo0ieM5C2romNW8=)
                          8: 323830343a313339383a3230303a3a2f34302d3430203d3e20323633353431.roa (hash: VswnV/HarG6Oxl4cZKSiQ9Lrg307EjqD2Fx98pLx5FE=)
                          9: 323830343a313339383a383030303a3a2f33342d3334203d3e20323633353431.roa (hash: KWOSwpv7jG/uGwYFOl3eUS2fQ+A8OAIi0KsyvtJQkMQ=)
                          10: 323830343a313339383a313a3a2f34382d3438203d3e20323633353431.roa (hash: xRrsboggEHSYFJ2/fCPkdj3+5B6x7tdfg0GVmk74nk4=)
                          11: 323830343a313339383a3330303a3a2f34302d3430203d3e20323633353431.roa (hash: LOGE0jPVYXLj6SLTbfL6rCaOgIPBSDQcL4PQSqvJtNw=)
                          12: 323830343a313339383a3130313a3a2f34382d3438203d3e20323633353431.roa (hash: pZIlSe6oPKhKSqmorUVJTcZjcpfIRaFDBPopYrp3A2E=)
                          13: 323830343a313339383a3a2f34382d3438203d3e20323633353431.roa (hash: Pna3Q5FeGkBYIstP9PEsUmV2UT+jX0VCGuTwGGZY7lM=)
                          14: 27515C5E9BC6223F27332FBE1616CE57715E9CAF.crl (hash: DavXOYzcICc8TKNy5SpUAFCuc956BGaqMaWOS5n6HIQ=)
                          15: 323830343a313339383a3130303a3a2f34382d3438203d3e20323633353431.roa (hash: gMYN5rEt19rXOX9NsH2jDifYTUPPoEfLABSghM8zOss=)
                          16: 323830343a313339383a633030303a3a2f33342d3334203d3e20323633353431.roa (hash: PeD78jwz2fzNBWXFK2UjLO+kRh+1Q2UQD7elLfNVTBA=)
                          17: 3139312e3234312e32322e302f32342d3234203d3e20323633353431.roa (hash: 99DtrtJQKhUSghbQtfqOwfhVTtBtvsguLdzd3EIb3WA=)
                          18: 323830343a313339383a336530303a3a2f34302d3430203d3e20323633353431.roa (hash: x40l14/Qf6USw5sYz37b02li/lB4Ui0dhKnb/M9FjB4=)
                          19: 3139312e3234312e32302e302f32332d3233203d3e20323633353431.roa (hash: INK33TkcBJSCxDtumZeaR9jfj/RoBkkG9nOg2OsmrhA=)
                          20: 3139312e3234312e32302e302f32342d3234203d3e20323633353431.roa (hash: EthCnNwTAABm1cW+VJYS2G5+a8GIhKnIDgNyAT8d0Sk=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/27515C5E9BC6223F27332FBE1616CE57715E9CAF.crl
                          rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/27515C5E9BC6223F27332FBE1616CE57715E9CAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27515C5E9BC6223F27332FBE1616CE57715E9CAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d7:3c:d6:0f:8f:00:ec:1a:4a:07:53:89:0e:e3:6c:75:a0:9e:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27515C5E9BC6223F27332FBE1616CE57715E9CAF
        Validity
            Not Before: Nov 26 04:20:02 2024 GMT
            Not After : Nov 27 08:03:02 2024 GMT
        Subject: CN=EC3F30A74783370B3DA632C0E672C3020B3DB46F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d2:6f:8a:46:d4:df:15:1f:af:d7:5a:35:a6:
                    7d:ef:c1:6e:36:16:8d:30:5d:fb:6d:b8:51:2d:8b:
                    c2:08:56:ae:8f:79:9e:f9:87:71:3e:f5:41:ca:2d:
                    6d:b5:23:83:34:ac:ae:09:a8:07:37:8b:4b:b8:73:
                    2d:98:c5:9f:ea:fa:65:a8:e0:3b:71:f4:3c:74:9d:
                    e7:70:9c:8f:64:8c:63:b0:57:6b:04:38:df:69:fa:
                    81:a6:72:b0:04:47:a6:65:39:59:2e:f7:34:c8:9e:
                    ba:99:bd:85:20:dc:32:ad:da:52:57:95:6c:c7:01:
                    47:d1:97:d2:0e:f6:24:19:44:88:40:8d:6b:1f:47:
                    0f:28:2f:5c:fd:a4:db:df:e1:7d:0c:ce:f6:d0:21:
                    53:0f:f3:e9:26:b4:ec:5d:fd:f3:4f:d8:b0:94:e1:
                    61:91:5d:24:51:d2:20:9b:6d:61:6a:af:96:e1:23:
                    5d:3b:5b:42:d6:9a:cc:2c:59:00:d1:ca:e4:5c:17:
                    fb:82:7b:82:27:8a:69:db:d3:29:d8:c7:70:99:6c:
                    06:1c:d7:7a:f4:3b:f2:43:6e:05:4d:7a:1d:69:70:
                    cf:67:63:ef:d6:57:67:07:59:da:bc:33:7a:36:a5:
                    d9:ed:48:44:02:78:6c:a6:d4:6b:98:89:a1:70:92:
                    27:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3F:30:A7:47:83:37:0B:3D:A6:32:C0:E6:72:C3:02:0B:3D:B4:6F
            X509v3 Authority Key Identifier:
                keyid:27:51:5C:5E:9B:C6:22:3F:27:33:2F:BE:16:16:CE:57:71:5E:9C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/27515C5E9BC6223F27332FBE1616CE57715E9CAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27515C5E9BC6223F27332FBE1616CE57715E9CAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/27515C5E9BC6223F27332FBE1616CE57715E9CAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:fe:28:cd:c3:04:19:e3:de:6f:19:3f:0d:1b:e2:41:74:c7:
         46:43:4e:b1:a0:4c:36:82:2e:5c:f5:0a:c8:7d:31:10:9c:5a:
         e0:ec:b7:bb:96:62:bd:12:dd:c9:71:0e:83:0e:b5:5b:77:57:
         cb:dd:c8:62:8b:ea:71:fd:f6:cd:9e:c5:d2:f6:9e:94:a7:3e:
         6a:04:bd:96:bb:20:49:b2:d4:c1:f8:97:4a:06:25:d6:f3:80:
         43:4e:0e:63:c2:6f:29:86:d7:43:3c:12:19:2e:22:ba:7b:d6:
         56:18:51:7a:dd:39:12:98:6f:93:39:47:36:f1:77:9f:9f:c1:
         0e:7e:c2:5a:73:f4:8e:29:b2:f4:8a:31:ed:34:f2:90:aa:fc:
         80:fd:52:fc:7e:88:69:bd:35:b6:a1:df:e6:b2:0e:02:2d:54:
         7e:bd:a4:22:f8:c1:ef:7b:07:ec:81:b6:17:3e:e5:0f:b8:91:
         74:5c:96:c3:cd:cd:6d:71:b2:2b:68:66:c1:c8:6a:2c:4c:89:
         d8:03:42:f4:ee:41:0f:bc:3a:82:83:a8:e1:50:14:b5:b0:fb:
         1b:1e:4b:54:6d:e8:56:2d:04:1e:c0:5b:58:fe:e1:dd:de:5a:
         95:0c:20:cf:06:e0:80:86:94:8d:72:3e:53:d5:03:7d:11:98:
         35:c6:89:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:11 2024 by rpki-client on console-fra.rpki-client.org