Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.mft
File:                     38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.mft (raw, json)
Hash identifier:          zIzgvaJFM+a6mctMOAL61IJ+xRAVixRLn9Xez1ZuZeg=
Subject key identifier:   1B:62:DF:89:26:4D:4A:46:A7:DC:F8:4E:8C:71:8A:CB:5C:6E:7E:7E
Authority key identifier: 38:CD:1F:71:C2:A8:E3:3D:88:7C:09:9E:BB:04:6A:7E:B1:0C:6C:22
Certificate issuer:       /CN=38CD1F71C2A8E33D887C099EBB046A7EB10C6C22
Certificate serial:       4AEF9DB3C256244EC3B607BDE6EFB33AE499DBC5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.mft
Manifest number:          0135
Signing time:             Fri 22 Nov 2024 15:58:25 +0000
Manifest this update:     Fri 22 Nov 2024 15:53:25 +0000
Manifest next update:     Sat 23 Nov 2024 17:18:25 +0000
Files and hashes:         1: 34352e3233372e3235302e302f32342d3234203d3e20323638323937.roa (hash: o5JaO4xpbZuLyLYPmA+TFzN9j8KigEeGGqC0zhYmJ44=)
                          2: 34352e3233372e3235312e302f32342d3234203d3e20323638323937.roa (hash: bc9a6AFhih1dmGbhrKnh7pw12wRmckxVAUdT+2Ej9pw=)
                          3: 34352e3233372e3234392e302f32342d3236203d3e20323638323937.roa (hash: 6tzxxkrZr3ez8zFU4UIt2x+eYR55cHP+YbMZ8Jiovhc=)
                          4: 34352e3233372e3234382e302f32332d3233203d3e20323638323937.roa (hash: fFr/8JYWMgLz+osFkYDKs2BbUOyP9/9RCeJKhH/OIHA=)
                          5: 38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.crl (hash: 5tzcChRS9887AtHgG/JwxW//pty6NuRfMUWl+rgTSAs=)
                          6: 34352e3233372e3234382e302f32342d3234203d3e20323638323937.roa (hash: XbUKOjzePB0OF90xq7La8ZIxdIW8upH5eh9APtus9ok=)
                          7: 323830343a346630303a3a2f33332d3333203d3e20323638323937.roa (hash: 9Q9Ta/OsSdsuOEryLjmwec1OeLUl6tEsM3ocv0weJZs=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.crl
                          rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:18:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ef:9d:b3:c2:56:24:4e:c3:b6:07:bd:e6:ef:b3:3a:e4:99:db:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CD1F71C2A8E33D887C099EBB046A7EB10C6C22
        Validity
            Not Before: Nov 22 15:53:25 2024 GMT
            Not After : Nov 23 17:18:25 2024 GMT
        Subject: CN=1B62DF89264D4A46A7DCF84E8C718ACB5C6E7E7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9c:52:c0:5f:59:c5:11:bd:bb:88:34:df:a6:
                    e9:c3:41:44:25:50:43:22:9c:87:66:e8:58:b0:ff:
                    0c:1b:84:d9:e3:e0:5f:12:7e:dd:59:aa:aa:4f:4c:
                    41:62:99:48:e1:7f:b0:8f:a7:24:38:3b:41:7b:f2:
                    c1:14:5c:8b:3e:fc:19:0a:51:40:09:76:f7:2f:d1:
                    c0:eb:e9:8e:2b:88:fc:52:c8:a9:fc:a8:2f:1b:b1:
                    06:c4:db:ca:51:3a:2d:b3:f3:bf:c8:20:5b:d2:e0:
                    ce:00:d3:1e:ab:e8:d7:c2:61:5e:bd:8a:22:c6:47:
                    45:fc:cc:e3:3e:51:fe:ce:d1:13:57:95:95:77:75:
                    c0:ca:72:1d:74:35:c1:ed:73:de:a3:f9:49:6a:c3:
                    78:4e:58:42:f9:d7:21:14:50:a6:58:13:99:2e:1b:
                    92:f2:15:7c:74:f2:03:72:f6:59:d4:0e:75:df:8c:
                    09:e2:4a:f7:4d:e5:81:2d:d0:b1:3d:5f:31:aa:bb:
                    a7:04:18:b7:eb:9e:70:2e:45:20:50:3e:9b:6b:88:
                    17:01:39:e2:96:a6:fa:a5:87:9d:8b:51:7a:b0:a5:
                    e6:fe:ba:7c:32:be:c2:f1:f0:82:d2:64:e2:fa:bb:
                    eb:0f:38:1c:c4:22:25:ae:2c:f0:22:eb:78:50:5f:
                    56:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:62:DF:89:26:4D:4A:46:A7:DC:F8:4E:8C:71:8A:CB:5C:6E:7E:7E
            X509v3 Authority Key Identifier:
                keyid:38:CD:1F:71:C2:A8:E3:3D:88:7C:09:9E:BB:04:6A:7E:B1:0C:6C:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:b5:4f:c1:6a:29:47:27:b4:81:21:bf:d0:f8:02:7b:71:b7:
         9f:de:47:3d:86:a8:5d:29:6e:2b:19:bf:0a:26:62:1f:0f:ee:
         57:77:65:a2:9d:a6:1f:fa:47:f7:8c:d0:5a:a5:d0:0e:88:41:
         4e:79:96:1c:48:ce:04:ae:3b:ab:47:64:04:47:eb:c9:45:fa:
         bc:60:8d:4f:fe:16:04:17:74:7a:87:96:5e:d7:b4:be:cd:ce:
         8b:1e:bc:86:a2:e1:e8:a9:e1:e8:67:df:50:50:a8:2e:9d:ec:
         95:e6:56:3c:1d:61:20:dd:6a:60:57:50:0e:ba:88:22:f0:7a:
         c0:63:22:eb:84:6c:0e:15:23:71:f9:59:5d:99:df:ff:85:15:
         25:64:b5:60:27:aa:8c:ed:04:5b:08:54:3f:ae:07:b5:58:12:
         8a:96:53:0e:7c:a7:ed:cc:22:74:99:20:da:e8:86:41:e3:eb:
         f1:72:00:38:fb:26:c4:6b:8c:92:82:a5:17:dd:b1:f0:62:93:
         3f:33:1e:2d:2c:69:d5:0d:3d:2c:93:3d:89:c5:6e:de:cc:53:
         1f:99:8e:61:c4:73:cf:64:e5:9e:a9:ab:d7:e9:f6:4d:51:92:
         ff:c9:53:f8:19:e9:46:2c:b7:5e:ae:17:da:26:25:8a:e1:a7:
         aa:3a:ab:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:25 2024 by rpki-client on console-ams.rpki-client.org