Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/891876379661096633CCF1E14D82D1BBB9CBF133.mft
File:                     891876379661096633CCF1E14D82D1BBB9CBF133.mft (raw, json)
Hash identifier:          pmlCC1ylY0FbOMxiMJ8Jn3dVexWJ1VuA1HwkdEC0VIw=
Subject key identifier:   DC:E3:36:23:73:44:4B:CD:67:AE:EF:C9:31:E1:94:44:A8:68:41:D8
Authority key identifier: 89:18:76:37:96:61:09:66:33:CC:F1:E1:4D:82:D1:BB:B9:CB:F1:33
Certificate issuer:       /CN=891876379661096633CCF1E14D82D1BBB9CBF133
Certificate serial:       210D92E0FAF124049524D9F030BD19BE7BAEAD65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891876379661096633CCF1E14D82D1BBB9CBF133.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/891876379661096633CCF1E14D82D1BBB9CBF133.mft
Manifest number:          43
Signing time:             Fri 29 Nov 2024 19:10:33 +0000
Manifest this update:     Fri 29 Nov 2024 19:05:33 +0000
Manifest next update:     Sat 30 Nov 2024 20:10:33 +0000
Files and hashes:         1: 34352e3138332e3231342e302f32332d3233203d3e20323639323932.roa (hash: eSpDIpyHdzdP97qQXLYwkBWVxmQy2DtE4xQqzDW5Vg0=)
                          2: 323830343a363235633a3a2f33332d3333203d3e20323639323932.roa (hash: q6/FXBCQEvBOMLtOnug193i1fB9BJzn8tvG8xbuqVj4=)
                          3: 323830343a363235633a3a2f33322d3332203d3e20323639323932.roa (hash: iG9S9U9fXGCHJbOQDHfY8KU88PT5KXg8YyOAssEhUOo=)
                          4: 323830343a363235633a383030303a3a2f33332d3333203d3e20323639323932.roa (hash: 0FqUATDkbXu85wTNvNH7i9D0uhFVcTMG6hHQ3jdZhd4=)
                          5: 34352e3138332e3231322e302f32322d3232203d3e20323639323932.roa (hash: peRxNHVXlfZphtrZQBpIT3thQ4mpo0xgLq2sAv792oU=)
                          6: 891876379661096633CCF1E14D82D1BBB9CBF133.crl (hash: 6MczWt+HfX+yLX7r/pS0138QKlsD7FqKb6LOINTQCh0=)
                          7: 34352e3138332e3231322e302f32332d3233203d3e20323639323932.roa (hash: gPU+pwwhhwGyCvN44eP0vGWa6o768Y7W4IO2OTaenAE=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/891876379661096633CCF1E14D82D1BBB9CBF133.crl
                          rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/891876379661096633CCF1E14D82D1BBB9CBF133.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891876379661096633CCF1E14D82D1BBB9CBF133.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 20:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:0d:92:e0:fa:f1:24:04:95:24:d9:f0:30:bd:19:be:7b:ae:ad:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891876379661096633CCF1E14D82D1BBB9CBF133
        Validity
            Not Before: Nov 29 19:05:33 2024 GMT
            Not After : Nov 30 20:10:33 2024 GMT
        Subject: CN=DCE3362373444BCD67AEEFC931E19444A86841D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:de:7c:d2:06:83:fa:33:2d:98:17:61:7c:40:
                    59:47:85:b5:70:3c:8b:f2:c6:2e:f3:97:f8:c7:0e:
                    c4:dd:dd:04:67:ad:3c:73:9b:71:e3:d6:12:84:c8:
                    6d:57:eb:c7:ac:b4:d2:4d:60:44:0e:9a:bf:48:d7:
                    c6:00:d2:66:c3:54:c9:04:a3:28:5a:ac:0a:a3:a3:
                    54:46:25:ea:04:8a:91:14:cd:a3:9a:35:73:56:18:
                    a7:96:ae:93:07:50:1b:3b:d2:aa:a2:f0:60:ac:df:
                    99:3b:ce:8b:47:04:b7:85:0e:4e:8f:b2:f1:67:cd:
                    89:02:66:3d:47:cb:95:3c:ab:22:59:97:53:23:7f:
                    33:61:d0:33:f4:81:e2:94:85:5e:66:8e:7b:ec:5e:
                    3d:4a:55:59:43:16:54:b8:fd:eb:2c:85:9b:f2:49:
                    4d:25:50:84:08:b5:49:d4:3f:cf:0c:c4:62:b1:8e:
                    34:77:e2:3b:77:2e:6e:a3:f2:4b:17:3a:67:2b:dc:
                    db:62:16:bb:bd:96:1c:20:6f:98:a0:7b:ec:67:25:
                    ef:79:2d:48:da:67:61:56:44:21:e4:a7:b2:86:3c:
                    eb:01:8e:03:b6:8d:05:ab:97:8b:a3:f2:1b:94:f4:
                    cf:1b:90:fe:65:b9:9f:68:21:3c:e2:df:22:fe:58:
                    76:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E3:36:23:73:44:4B:CD:67:AE:EF:C9:31:E1:94:44:A8:68:41:D8
            X509v3 Authority Key Identifier:
                keyid:89:18:76:37:96:61:09:66:33:CC:F1:E1:4D:82:D1:BB:B9:CB:F1:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/891876379661096633CCF1E14D82D1BBB9CBF133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891876379661096633CCF1E14D82D1BBB9CBF133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/891876379661096633CCF1E14D82D1BBB9CBF133.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:db:7f:64:3d:77:55:7c:7a:cb:5f:13:fc:a1:54:43:fd:2a:
         d1:4e:1c:e3:fe:0c:3c:a0:39:29:0c:f7:cb:5b:f1:9a:d9:c2:
         bc:59:8a:48:2e:2b:9a:a5:f0:b1:cd:b8:9d:25:0b:e2:e3:b9:
         1d:cd:7e:51:ec:ab:fd:5b:7b:ab:20:1e:08:a0:41:ae:04:be:
         b6:28:1a:0f:17:58:46:f3:26:83:1d:cb:05:12:10:72:d8:5a:
         d2:f0:77:a4:28:da:b2:b1:f2:6a:9a:86:38:57:6e:f2:69:0f:
         af:34:d0:6c:c7:f4:ca:41:3d:53:53:b5:3d:27:74:4c:73:4c:
         8a:d0:f8:a9:6f:e9:40:7a:33:0f:94:dc:11:82:7a:bd:4d:c9:
         af:dd:77:fe:24:3b:9f:fd:52:72:e0:0e:67:3a:44:04:17:05:
         2b:4d:9b:26:69:ae:4d:9b:4b:bc:46:a4:95:23:08:28:47:fd:
         3d:1a:72:cc:4a:e9:41:9b:7b:5c:ca:c0:c4:41:ca:d4:fe:f4:
         2e:2d:74:17:8f:03:ae:8b:4d:79:95:78:d9:10:82:53:22:4c:
         b3:7f:68:12:4d:5d:ad:3c:f5:5a:de:73:7f:6c:af:7e:dc:da:
         ea:ba:92:25:c8:52:0e:82:66:15:5b:85:34:72:14:c3:67:67:
         e5:1c:6f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 20:49:04 2024 by rpki-client on console-ams.rpki-client.org