Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/1/2102F1879CA4D61251D630CB79E650FDA70A9610.mft
File:                     2102F1879CA4D61251D630CB79E650FDA70A9610.mft (raw, json)
Hash identifier:          LvepQR2wVRO5Z8vtFUnWSld8e0JvzsLLzzwgXxfbCsU=
Subject key identifier:   CF:EF:74:BE:69:3C:10:A2:7F:09:DB:80:C0:E9:C4:A6:D3:4F:6A:F9
Authority key identifier: 21:02:F1:87:9C:A4:D6:12:51:D6:30:CB:79:E6:50:FD:A7:0A:96:10
Certificate issuer:       /CN=2102F1879CA4D61251D630CB79E650FDA70A9610
Certificate serial:       3B86105A0E3CD080A203D27F90B1725F1DC3E5F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2102F1879CA4D61251D630CB79E650FDA70A9610.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/1/2102F1879CA4D61251D630CB79E650FDA70A9610.mft
Manifest number:          0138
Signing time:             Fri 22 Nov 2024 13:56:00 +0000
Manifest this update:     Fri 22 Nov 2024 13:51:00 +0000
Manifest next update:     Sat 23 Nov 2024 16:46:00 +0000
Files and hashes:         1: 323830343a383636303a3a2f33322d3332203d3e20323732363339.roa (hash: 5rNOQ6okwMdbOHxIwPob68xw6HWP5xv0E4YO7VenvHM=)
                          2: 2102F1879CA4D61251D630CB79E650FDA70A9610.crl (hash: Jj3v53qi7eBYN3HTb+wsMUZ3Sgrs+IUt/TRJag/YMlc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/1/2102F1879CA4D61251D630CB79E650FDA70A9610.crl
                          rsync://rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/1/2102F1879CA4D61251D630CB79E650FDA70A9610.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2102F1879CA4D61251D630CB79E650FDA70A9610.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:86:10:5a:0e:3c:d0:80:a2:03:d2:7f:90:b1:72:5f:1d:c3:e5:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2102F1879CA4D61251D630CB79E650FDA70A9610
        Validity
            Not Before: Nov 22 13:51:00 2024 GMT
            Not After : Nov 23 16:46:00 2024 GMT
        Subject: CN=CFEF74BE693C10A27F09DB80C0E9C4A6D34F6AF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:41:72:0d:6a:b7:8b:50:c1:ad:32:9f:a6:ad:
                    10:31:6c:50:00:5b:89:79:7b:d9:b7:a7:ef:09:c4:
                    85:3c:ed:1a:00:b3:a9:e2:2c:c7:5b:76:2f:1b:3a:
                    20:22:3a:72:d8:d1:1c:57:ac:5f:40:31:a7:63:6f:
                    da:91:ca:35:a9:ba:54:f5:48:d0:79:ff:a4:f5:1d:
                    81:54:a3:83:c5:d0:88:30:3e:ef:51:5a:62:18:1e:
                    fc:fc:2f:4c:e7:fa:ec:f7:bd:ca:fc:41:05:e9:9f:
                    5a:dc:1d:e9:01:65:a2:75:2a:8b:7c:08:a5:06:a7:
                    9e:a2:c7:10:79:5a:d0:1b:5a:c8:dc:24:d5:0e:04:
                    ff:b6:b6:4d:15:1e:e6:e4:c0:c4:df:2c:5b:58:b7:
                    ef:a0:9a:80:a4:e4:ce:a4:7e:a3:93:0a:78:bc:76:
                    2b:df:b1:7a:bb:1d:f1:47:c6:9f:82:b8:dd:14:64:
                    9f:5f:91:89:ca:42:6e:76:11:cf:8f:03:78:a4:9e:
                    ae:b7:2d:65:89:88:b7:aa:18:7c:6c:22:1c:5c:26:
                    ea:5c:9c:64:48:6b:19:52:28:bb:1a:0c:93:aa:79:
                    47:57:48:3c:10:74:91:b0:16:be:7b:e0:ad:ab:7c:
                    ac:b6:32:cd:6f:9d:5f:c4:2e:84:45:da:cd:13:2d:
                    91:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:EF:74:BE:69:3C:10:A2:7F:09:DB:80:C0:E9:C4:A6:D3:4F:6A:F9
            X509v3 Authority Key Identifier:
                keyid:21:02:F1:87:9C:A4:D6:12:51:D6:30:CB:79:E6:50:FD:A7:0A:96:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/1/2102F1879CA4D61251D630CB79E650FDA70A9610.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2102F1879CA4D61251D630CB79E650FDA70A9610.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/1/2102F1879CA4D61251D630CB79E650FDA70A9610.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:28:90:eb:41:2e:6b:06:ed:5a:c4:b1:0e:fa:7b:36:e2:10:
         96:ca:c4:83:37:1f:6f:60:82:81:2b:6f:ec:bd:c2:e5:d5:46:
         6e:5e:4e:1b:d3:5d:19:15:95:39:12:3d:f0:96:0c:7d:40:25:
         b1:52:45:9b:67:f1:bb:06:1f:37:e3:3a:0d:33:8c:6c:87:9c:
         b9:d2:ca:51:89:36:ad:a7:97:2b:4c:b6:71:90:90:c5:5a:eb:
         17:d6:35:38:f4:a3:06:a1:fe:63:93:f0:96:4c:1b:ca:34:5e:
         7f:83:13:67:05:4e:e2:dc:f1:5b:14:a8:6c:d2:c1:10:1b:1c:
         a9:27:56:0a:f9:ce:80:b2:f7:91:ac:e1:65:2e:13:21:16:65:
         d9:06:61:aa:11:79:9a:f5:7b:1e:c0:d8:41:20:14:bd:e5:75:
         f1:be:82:6f:4f:a2:87:54:5f:14:c0:6d:c6:10:b8:8a:42:85:
         f8:ba:0c:79:cf:13:5c:52:08:01:84:fe:86:88:5b:50:f6:3f:
         50:9e:63:f0:e4:06:4b:49:8c:87:cd:8e:90:9f:3c:4d:8e:92:
         ed:86:61:f8:92:e0:21:7f:81:63:d6:7d:bb:e9:d8:e2:c8:ff:
         00:b8:7f:49:65:ca:a9:eb:57:13:b4:bf:64:4a:35:2e:17:a6:
         86:8b:f2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:42 2024 by rpki-client on console-fra.rpki-client.org