Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.mft
File:                     DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.mft (raw, json)
Hash identifier:          AHY2UcRvSK5otegZYWD4k1R+gT3lx1VsdhwT3QovkUQ=
Subject key identifier:   B9:B8:CE:A6:F8:AB:91:D3:72:BC:19:6F:A7:00:CC:CC:97:03:EB:1D
Authority key identifier: DA:41:07:AF:1D:9F:F7:0E:9E:D7:B9:A2:E8:E3:58:08:BA:92:1C:85
Certificate issuer:       /CN=DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85
Certificate serial:       6B17628FF59D7C5D2958B784D1187D7AFE2BCC8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.mft
Manifest number:          0137
Signing time:             Fri 22 Nov 2024 11:09:51 +0000
Manifest this update:     Fri 22 Nov 2024 11:04:51 +0000
Manifest next update:     Sat 23 Nov 2024 14:49:51 +0000
Files and hashes:         1: 34352e342e3134382e302f32322d3332203d3e20323636303733.roa (hash: tw4gTQrOp2XOzWcjBHflcQiTDuxKNrYb8Snrw5Yf38s=)
                          2: DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.crl (hash: 0H7OkmH2azLinyI1d6Mg7N+Xw1JHw3vI16yNms5eol0=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.crl
                          rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:49:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:17:62:8f:f5:9d:7c:5d:29:58:b7:84:d1:18:7d:7a:fe:2b:cc:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85
        Validity
            Not Before: Nov 22 11:04:51 2024 GMT
            Not After : Nov 23 14:49:51 2024 GMT
        Subject: CN=B9B8CEA6F8AB91D372BC196FA700CCCC9703EB1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9c:84:ec:75:48:c9:70:ae:be:60:96:ea:2e:
                    fa:91:b6:bc:39:56:f0:04:54:9f:6b:aa:d5:38:a2:
                    44:ca:f0:8e:60:58:ad:f3:a3:49:ee:47:48:27:fb:
                    4b:f2:00:99:44:49:4a:e0:86:64:14:f4:65:f0:3b:
                    c9:5d:2d:49:42:2c:6c:0d:18:fe:0b:74:cd:06:35:
                    c0:22:74:eb:e3:50:ab:da:03:d4:c8:68:e8:c5:32:
                    e4:33:c0:7d:12:3c:2e:73:52:e1:6f:86:bf:06:ab:
                    3d:01:51:01:09:31:98:d5:aa:68:4b:ba:dd:17:91:
                    62:bf:b7:f8:8f:d7:2a:0a:ed:66:80:44:16:ce:ee:
                    93:0e:33:eb:59:b0:43:ba:c5:40:17:ba:25:18:a7:
                    da:56:cc:41:51:de:bf:3f:e5:8f:67:ed:3b:fe:98:
                    ef:2d:5c:88:b6:d4:48:f1:76:73:3a:f3:0e:4f:3f:
                    3b:ff:73:21:78:90:37:ef:65:26:d8:ed:fe:f6:49:
                    60:78:e2:54:dc:ff:d8:93:6e:7f:89:bc:29:60:44:
                    e8:cc:52:9e:7f:b3:0b:1c:ea:5d:4b:8c:43:81:e5:
                    fc:f1:2f:85:c6:e0:4f:8d:09:2b:5a:d4:c1:24:59:
                    d5:15:0d:bb:a0:69:02:53:56:e3:8e:80:17:aa:ab:
                    c1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B8:CE:A6:F8:AB:91:D3:72:BC:19:6F:A7:00:CC:CC:97:03:EB:1D
            X509v3 Authority Key Identifier:
                keyid:DA:41:07:AF:1D:9F:F7:0E:9E:D7:B9:A2:E8:E3:58:08:BA:92:1C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:b2:78:e9:29:3e:d9:78:77:56:8e:53:d3:7d:9e:a9:78:25:
         49:70:60:f7:69:0a:70:6a:a4:37:3b:5b:e0:5d:a0:a0:24:a5:
         16:57:ed:b5:c9:cb:3b:fb:15:92:2e:13:0a:2c:94:76:d4:a5:
         93:0c:ab:0b:8f:8b:cb:53:cf:45:af:26:c7:ea:5a:e6:db:f9:
         dc:67:f1:85:1f:8c:2a:f7:73:19:fe:c8:d6:fe:d9:27:dc:7c:
         bf:9f:ae:00:03:ab:7b:79:51:b2:76:d0:f4:9a:62:20:02:73:
         b4:51:37:d1:51:90:31:fc:86:cf:c3:61:9d:5b:a0:15:b0:88:
         0d:35:4f:67:75:a1:38:00:e4:5d:43:98:a9:68:32:11:84:84:
         bd:22:e8:10:bf:50:31:b6:ca:6f:6d:35:8c:4c:f8:a4:49:70:
         9b:c7:6b:e0:c4:24:20:29:0b:7e:99:72:1e:5b:1d:82:3c:83:
         93:23:3b:b2:e4:78:60:f6:8e:79:76:22:58:e8:91:f8:21:66:
         82:9d:f9:94:2b:1e:a4:15:15:9a:20:4b:9d:b9:cf:ff:d1:34:
         24:3f:b1:c6:13:ef:75:d0:9f:b5:f4:8c:93:27:41:b0:5c:4d:
         ab:c5:20:23:c7:5b:72:40:65:e2:d8:36:e9:56:0d:90:9f:18:
         7c:55:9b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:47 2024 by rpki-client on console-ams.rpki-client.org