Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.mft
File:                     785724BA2C79C31B8A2DA54506CAE7886EA06BE7.mft (raw, json)
Hash identifier:          pB5Do41gEweso2/Ol8eXQUHtjcQU4t6pkWtjMaPX/zk=
Subject key identifier:   2E:09:07:0A:2F:30:5A:C0:AA:0E:F0:09:3B:D4:68:1D:53:40:99:B3
Authority key identifier: 78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7
Certificate issuer:       /CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
Certificate serial:       2AAFCD56F1B6FAA648D653240290824E9CE25635
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.mft
Manifest number:          0169
Signing time:             Mon 25 Nov 2024 22:20:00 +0000
Manifest this update:     Mon 25 Nov 2024 22:15:00 +0000
Manifest next update:     Tue 26 Nov 2024 22:20:00 +0000
Files and hashes:         1: 785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl (hash: BF0wbMpMZqsE32/5QaihXBbMyNeZBzC5C+NE2tWk1hE=)
                          2: 323830343a313263633a3a2f33362d3336203d3e20323633343939.roa (hash: kg8oe9S81gutxp+p5O1ZnJv10r86cMye2Fxh8cxNwg0=)
                          3: 3139312e3234332e37322e302f32312d3234203d3e20323633343939.roa (hash: sXW/9ybIn9TuU3Ud4tZ+E/1zXutuOac3KC7b8Z98KEE=)
                          4: 323830343a313263633a323030303a3a2f34382d3438203d3e20323633343939.roa (hash: W1dxbun5mpyR+HVlGcwCnohbMP0Ff+hIO3NexyGRdp4=)
                          5: 323830343a313263633a323830303a3a2f34382d3438203d3e20323633343939.roa (hash: iVoufHXq1n8ES5tSJhh1MKPtok4Z9j6z7nGXDsxGuDs=)
                          6: 323830343a313263633a3a2f33332d3333203d3e20323633343939.roa (hash: rCtK/uXh7J8ybcySMJ2sgNsxEq1z2Eu0P0/+hY4gXyk=)
                          7: 323830343a313263633a3a2f33322d3336203d3e20323633343939.roa (hash: Isd50FLFxmfny6Tbkpy0metCBRwZ4joTCDmpwne5358=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl
                          rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:af:cd:56:f1:b6:fa:a6:48:d6:53:24:02:90:82:4e:9c:e2:56:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
        Validity
            Not Before: Nov 25 22:15:00 2024 GMT
            Not After : Dec  2 22:20:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:06:d7:9a:0c:de:8d:16:ad:fc:00:f8:cb:1a:
                    53:d6:48:99:bd:0f:7d:cc:e0:41:45:52:3a:1f:38:
                    a7:3f:f4:7a:27:1d:c6:e7:f1:fe:af:2a:0d:e7:f0:
                    7d:90:cc:fd:fd:a1:b0:48:e9:a1:11:9f:95:67:f2:
                    6e:3f:d8:39:87:e0:66:8a:19:12:12:a4:a0:e9:dd:
                    e9:c6:a0:27:8d:4c:75:4f:09:03:a5:b4:7e:4c:0e:
                    e0:7f:ca:02:a1:95:a5:dd:36:de:ea:dc:d9:3a:9c:
                    9d:0e:5f:2b:08:8c:03:37:fa:1d:5b:09:11:ea:69:
                    ca:ed:79:82:5c:40:62:c6:b6:a6:cf:94:fc:77:a9:
                    d7:09:36:44:3a:b7:85:9e:69:d4:d1:c7:64:cb:8b:
                    12:d2:aa:d4:bd:21:ac:db:34:07:1d:48:e7:ba:fb:
                    40:96:76:57:21:ef:76:68:29:7a:fc:ce:c2:8f:66:
                    7b:16:a2:53:16:dd:48:ba:62:e0:96:5b:00:bd:c8:
                    6b:49:cb:c9:15:82:84:f2:2a:ab:ec:d3:20:50:7d:
                    5b:7f:48:92:2b:c8:93:01:67:d2:87:a0:6f:51:67:
                    f5:85:71:9f:06:6f:ec:83:00:b5:3e:ac:ff:5e:f5:
                    59:31:44:90:27:a9:54:72:a1:cd:70:6f:84:95:c8:
                    05:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:09:07:0A:2F:30:5A:C0:AA:0E:F0:09:3B:D4:68:1D:53:40:99:B3
            X509v3 Authority Key Identifier:
                keyid:78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:e8:dc:5c:5e:83:21:b6:a6:97:cf:40:fd:cd:76:cd:20:9e:
         58:1c:e2:ca:4e:72:05:af:31:08:74:d6:e3:f8:05:8f:18:a7:
         49:a3:bc:73:9e:82:01:dc:1a:15:fa:39:44:4f:cc:ea:5c:95:
         e7:8d:82:97:d4:89:fc:c8:20:27:9e:2c:71:48:61:d3:4c:e6:
         b4:70:84:33:ab:42:e7:d5:ed:4d:22:b7:4a:65:91:07:03:84:
         33:cd:12:fa:df:71:fe:4a:d7:15:f8:6f:b4:3f:96:59:08:8d:
         c1:17:06:b9:cd:b5:7d:1c:70:2d:61:fc:fa:fc:aa:23:e8:f6:
         1c:de:a0:4d:54:5c:7a:07:1a:f9:60:e8:40:ce:e4:b1:8d:46:
         78:3f:aa:b0:73:d0:b9:93:09:bd:67:7d:48:b9:5f:88:b4:09:
         79:ac:be:e6:54:57:b1:18:5d:c9:50:2d:35:0d:f9:30:b0:2a:
         3f:3f:29:6c:8d:fb:b0:39:58:b1:7e:81:9d:85:d1:bd:59:e2:
         18:e7:aa:1e:44:0c:94:54:ea:58:76:f9:8d:67:dc:59:98:c0:
         9a:f9:d3:00:44:21:1d:7b:a9:1e:55:3d:4b:15:90:f2:a4:a1:
         8d:68:f0:76:7c:8b:b1:92:3b:6d:d4:92:83:5d:bb:5b:8b:20:
         1c:a2:1e:d1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:56 2024 by rpki-client on console-fra.rpki-client.org