Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft
File:                     CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft (raw, json)
Hash identifier:          yMTV1SzFgLfmxGxCt8V1t8f5OGtWR99z7aG5Jn4r278=
Subject key identifier:   C9:54:46:C8:2F:6E:98:33:E7:D4:BE:25:C1:98:3B:DE:14:EA:72:D5
Authority key identifier: CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2
Certificate issuer:       /CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2
Certificate serial:       09651D930B7706084026F7D50B93D547C7B813B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft
Manifest number:          013D
Signing time:             Tue 26 Nov 2024 01:33:26 +0000
Manifest this update:     Tue 26 Nov 2024 01:28:26 +0000
Manifest next update:     Wed 27 Nov 2024 02:55:26 +0000
Files and hashes:         1: 3137302e3233332e3131352e302f32342d3234203d3e20323635303738.roa (hash: w/o3AdrdK4KBAOgJb8IqQrFjpO9B5pDTtzBmyubLeog=)
                          2: 323830343a333237303a3a2f33322d3430203d3e20323635303738.roa (hash: +vV8aFeP54KD+iFWvnQA4EpbdZm64T4O9pm1XWnDdrw=)
                          3: 3137302e3233332e3131322e302f32342d3234203d3e20323635303738.roa (hash: /MHyqXTZKLL1mIGIaBF3gRepQbrRtiJd5LJ4kXHOM8A=)
                          4: 3137302e3233332e3131342e302f32342d3234203d3e20323635303738.roa (hash: ZU0utCrRwhLf9cf3Ktz0r0JUiIjPDVqLBl0kACiWp9o=)
                          5: CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl (hash: RkYTEQBaYd1c9hrjSBg3NKubPHVhaEINAd3jIzeBnKA=)
                          6: 3137302e3233332e3131332e302f32342d3234203d3e20323733373838.roa (hash: Gw3AjsLu5bAI1a/1OZWrCv+g9eZY1UiAMipz3Fk9fHs=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl
                          rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:55:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:65:1d:93:0b:77:06:08:40:26:f7:d5:0b:93:d5:47:c7:b8:13:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2
        Validity
            Not Before: Nov 26 01:28:26 2024 GMT
            Not After : Nov 27 02:55:26 2024 GMT
        Subject: CN=C95446C82F6E9833E7D4BE25C1983BDE14EA72D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:40:7f:45:91:fd:31:d8:72:6e:7b:1e:44:53:
                    0c:e2:86:68:71:ca:dd:b1:2e:57:3f:a6:a8:c1:5a:
                    ba:ab:b7:0e:2d:f8:d3:d9:56:7f:29:ca:c4:b8:9f:
                    44:df:87:cf:05:2e:eb:53:f9:a3:71:d5:e2:b2:4a:
                    32:8e:bb:c2:d8:fa:39:d6:83:6f:de:5e:9c:4c:ae:
                    1a:08:98:3d:a6:e7:4b:59:1f:84:ec:1c:26:a1:13:
                    88:26:3a:88:09:ac:89:c8:d2:37:6f:ce:49:98:ea:
                    7a:90:42:13:c0:33:ea:df:8a:14:e5:5c:44:b1:ab:
                    ab:88:1b:9e:d1:30:9e:0a:fd:2b:d5:bd:da:b4:ab:
                    68:b2:00:75:b5:ac:06:d1:55:76:19:dc:23:46:19:
                    22:8e:56:ba:4f:ef:bb:b1:fc:4e:22:89:62:56:1a:
                    ea:f4:3d:4e:8f:a6:4b:30:e3:7c:7c:01:07:bc:11:
                    c9:50:bb:0d:48:84:ba:89:f5:1f:73:08:41:4b:6c:
                    37:10:9c:19:e2:30:c4:43:4b:79:2d:62:81:04:2a:
                    2b:04:e9:a3:60:50:41:de:a3:82:8e:1a:df:d6:0f:
                    bc:a5:27:98:bf:4e:ed:4c:25:fe:f4:04:ee:f9:3b:
                    0d:17:17:80:4c:2c:98:c1:fb:8c:94:36:db:90:63:
                    10:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:54:46:C8:2F:6E:98:33:E7:D4:BE:25:C1:98:3B:DE:14:EA:72:D5
            X509v3 Authority Key Identifier:
                keyid:CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:c4:86:b5:30:a8:32:7c:d3:79:c3:f5:df:a5:77:a4:c8:aa:
         47:6d:1d:2c:d9:b4:cb:3c:4a:3f:3a:4d:e0:91:26:f5:dd:04:
         7b:b2:2b:c0:5a:ed:03:15:18:2f:87:5e:71:bb:11:cb:a0:b0:
         31:88:e8:96:45:27:59:f4:d8:88:64:2a:7a:62:93:2c:08:c9:
         6e:3f:82:2a:58:f3:11:41:17:38:f2:e2:08:e5:2b:25:29:c5:
         4c:5a:52:36:37:41:d0:23:5a:7a:6e:f4:f1:06:92:c3:1f:ca:
         46:91:b1:f5:0e:b1:d8:f7:c2:f0:5e:d3:09:db:aa:83:09:f7:
         3e:c2:11:75:9e:d0:93:19:a9:c5:02:e2:51:c4:28:2d:c8:f8:
         ff:c4:d4:6f:35:38:e2:19:5e:cd:f2:9d:ac:70:18:6b:b8:8d:
         b4:60:45:23:97:88:a5:98:37:9d:f4:e3:81:db:92:60:1c:ae:
         e6:49:1e:cf:82:ae:32:bf:bd:1c:4f:9e:28:30:15:b1:b9:f3:
         c3:49:1f:2e:fe:3b:30:53:bc:14:aa:a3:3d:04:c2:fd:31:79:
         67:1d:e7:a4:2b:54:47:00:0a:78:c2:49:67:0f:1a:d7:4a:7f:
         6a:50:85:59:e9:ec:02:04:53:25:78:81:6d:21:29:b0:3a:aa:
         ff:49:7d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:36 2024 by rpki-client on console-ams.rpki-client.org