Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft
File:                     806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft (raw, json)
Hash identifier:          /4BZHZKoN+c8sMu5w0MU5Vei9uphpPDQBUBBJvzMfSw=
Subject key identifier:   4F:4B:B8:92:AB:67:D9:1B:E1:FE:BD:55:93:27:5C:A4:67:97:CE:39
Authority key identifier: 80:6E:0B:40:C6:7F:11:AA:3B:FD:31:E2:84:4B:8D:C3:A0:CA:14:52
Certificate issuer:       /CN=806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452
Certificate serial:       108953DC71193BC7CB46C50720505FA8A3561831
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft
Manifest number:          0132
Signing time:             Fri 22 Nov 2024 10:38:16 +0000
Manifest this update:     Fri 22 Nov 2024 10:33:16 +0000
Manifest next update:     Sat 23 Nov 2024 14:11:16 +0000
Files and hashes:         1: 806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.crl (hash: XoxP24axnauHznmRMZHcfE5CocLIU51xboZUXjc3Q1A=)
                          2: 323830343a383266633a3a2f33322d313238203d3e20323732313639.roa (hash: b1LJoJlXkjQ9CBMaNsjCElxiqxHMltfcTWreod0pajE=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.crl
                          rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:89:53:dc:71:19:3b:c7:cb:46:c5:07:20:50:5f:a8:a3:56:18:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452
        Validity
            Not Before: Nov 22 10:33:16 2024 GMT
            Not After : Nov 23 14:11:16 2024 GMT
        Subject: CN=4F4BB892AB67D91BE1FEBD5593275CA46797CE39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8b:8e:73:dc:ab:68:71:80:bf:9d:67:ee:e7:
                    ed:cc:6a:ef:f9:79:dc:9e:17:9d:65:54:7f:4a:12:
                    41:9a:ef:c9:9d:39:37:78:6e:cb:4d:f4:b8:90:8e:
                    39:53:5e:6b:f0:f3:fe:e7:1b:0a:ea:b3:cf:66:a4:
                    90:6e:08:a2:0e:21:6c:86:0a:4e:2a:2e:2f:cc:8a:
                    1f:b4:e7:8e:70:d3:72:80:49:a7:04:51:57:4d:16:
                    83:b6:c0:da:cf:03:aa:e2:7a:7d:74:c8:25:f1:f7:
                    e1:ea:f3:f0:20:0c:bd:b2:2a:39:c3:87:d4:9e:bc:
                    14:27:59:f1:06:48:c3:58:b6:68:3b:5e:ae:5d:55:
                    b2:71:a1:1d:7f:3b:73:cc:ab:42:e9:bf:db:84:7d:
                    84:61:cc:71:2a:70:0d:23:2f:37:ee:16:1d:e0:b5:
                    0b:d4:d2:3d:bf:90:9d:d1:1b:48:f7:ba:6b:18:ec:
                    b9:f3:23:0a:66:88:a3:d1:0b:83:7b:2d:ce:83:6b:
                    0f:fe:72:ba:f2:ca:34:fd:89:ee:d6:01:f0:68:65:
                    d5:75:7c:36:91:ae:56:73:95:b3:8b:b6:7f:fc:53:
                    cb:33:b3:1a:b9:47:08:f4:97:b4:fc:5e:b8:98:e3:
                    10:7e:e7:45:39:e2:db:bb:a5:f7:52:2c:7f:1e:15:
                    b7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4B:B8:92:AB:67:D9:1B:E1:FE:BD:55:93:27:5C:A4:67:97:CE:39
            X509v3 Authority Key Identifier:
                keyid:80:6E:0B:40:C6:7F:11:AA:3B:FD:31:E2:84:4B:8D:C3:A0:CA:14:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:2a:8a:18:3b:33:d4:c9:67:1e:ad:f3:7b:3d:31:d8:bf:59:
         7f:05:11:7f:6e:0f:b3:ba:87:fd:fc:00:d3:70:13:79:b5:12:
         aa:45:97:6c:fa:ec:da:e9:cf:b5:9e:7e:cc:5f:b5:f2:f0:0b:
         66:0e:bc:8a:ce:68:d0:c4:c3:d6:19:90:14:60:2a:2c:78:af:
         f4:25:b1:ed:30:9f:3d:91:d6:ff:28:47:4d:a3:55:84:a7:57:
         6f:6b:38:9f:48:ae:ec:c6:e4:91:61:24:62:e9:73:58:1f:4b:
         ac:ab:d6:8a:18:af:60:72:c9:b6:7c:eb:b7:99:53:ec:2d:6f:
         57:2f:fa:87:bb:d6:a5:c5:c3:f8:73:10:4c:81:b1:a5:b6:55:
         fb:f0:3e:c4:b3:a4:9d:d3:94:59:f7:f3:cb:39:b2:af:d7:95:
         69:be:09:46:4e:85:82:e2:75:2c:41:2a:e2:dc:43:99:85:ad:
         da:7b:a9:53:9c:0a:4b:67:b0:e6:a7:58:2f:27:27:cf:76:e7:
         2a:16:95:b1:5e:4d:c6:8e:e2:8a:bd:de:55:23:c9:01:f8:f4:
         9e:3e:36:31:f5:bf:77:95:9e:5e:af:58:3d:51:59:19:73:5b:
         d1:52:1c:4d:2d:78:70:5c:cf:d5:c2:a4:bc:44:91:d1:e1:21:
         94:e8:4b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:50 2024 by rpki-client on console-fra.rpki-client.org