Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.mft
File:                     3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.mft (raw, json)
Hash identifier:          JDjBaCHZmY4upFLC1Bzzo1HBxqqYdJneGU4Hn9N5oLU=
Subject key identifier:   F1:70:75:DB:64:0A:12:6C:5D:2F:E4:0E:16:E4:2F:56:D3:83:B8:38
Authority key identifier: 3D:5A:1B:2B:6D:E4:87:DB:B9:5C:EE:51:47:5E:26:56:F1:E9:BF:85
Certificate issuer:       /CN=3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85
Certificate serial:       37AF4C87CFD0F115DFE895AC26F4A4D19EB50B6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.mft
Manifest number:          70
Signing time:             Wed 26 Jun 2024 06:51:14 +0000
Manifest this update:     Wed 26 Jun 2024 06:46:14 +0000
Manifest next update:     Thu 27 Jun 2024 07:47:14 +0000
Files and hashes:         1: 34352e3233302e33302e302f32332d3233203d3e20323637313435.roa (hash: vKQaF51fvFu+NgqihhHudiF+Pn/Mk7GqvJzP9QMVi7U=)
                          2: 323830343a343863633a3a2f33322d3336203d3e20323637313435.roa (hash: Sk+kI4232BwbEpWyLhhbnKT4Xu/gc/sl8IDqDYCqxDE=)
                          3: 34352e3233302e32382e302f32332d3233203d3e20323637313435.roa (hash: eCyb6/NygJ3c50E2nBfGOmiAxDtH4lnYn25Joo0WQeA=)
                          4: 34352e3233302e32382e302f32322d3232203d3e20323637313435.roa (hash: kkDhDb4xbO5cOQcAHqSHOC1grsa+UmAJhLJwCxQJGbk=)
                          5: 34352e3233302e32382e302f32322d3234203d3e20323637313435.roa (hash: SweAu4w5BBLELKtum5L397vgVPHRqXo1D1ptnfDbVzE=)
                          6: 3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.crl (hash: bZiv23r8ebvH9f0tisDHRwD2gNTPAh/X4RcBDN6MmG8=)
                          7: 323830343a343863633a3a2f33322d3332203d3e20323637313435.roa (hash: Fddrz3UKYWIEofedK3idRbLb/s1OegiBzzenHgSrx5c=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.crl
                          rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 07:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:af:4c:87:cf:d0:f1:15:df:e8:95:ac:26:f4:a4:d1:9e:b5:0b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85
        Validity
            Not Before: Jun 26 06:46:14 2024 GMT
            Not After : Jun 27 07:47:14 2024 GMT
        Subject: CN=F17075DB640A126C5D2FE40E16E42F56D383B838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ec:4a:8b:64:1e:7a:45:f7:67:e7:e8:80:18:
                    33:38:d1:be:51:2b:90:54:3c:f5:3e:c5:1e:12:91:
                    87:15:c1:0e:33:8a:5e:42:0b:4c:8a:37:44:c8:96:
                    ff:8f:21:10:83:3b:61:4e:7d:16:88:cd:16:3c:76:
                    e1:28:53:19:49:4f:cb:44:cb:75:fa:67:b6:9f:52:
                    cc:1c:7c:f0:03:39:b0:91:c4:15:2e:20:a5:a9:cd:
                    89:c1:bf:c1:c2:a9:88:25:0e:75:8d:d9:45:58:19:
                    c9:69:3f:f2:65:c5:a3:1c:31:92:96:b7:2f:b6:fe:
                    fc:0e:30:db:bf:14:d5:cd:6d:77:47:74:5a:2d:12:
                    58:1e:3a:06:a8:7d:8b:48:2a:a1:a5:9a:02:a8:e1:
                    0d:ae:8b:d0:e4:3b:7a:39:69:f1:5d:a6:8b:aa:3f:
                    68:b0:9a:58:a9:da:9c:cb:c5:86:8f:56:7d:53:85:
                    a8:46:64:2b:c5:93:16:31:9d:da:de:2c:26:be:31:
                    1c:81:f6:86:fd:4c:8a:4b:4f:1c:5a:2c:f9:a9:6c:
                    2a:c5:73:f5:a2:c0:5e:cd:6c:1e:c4:76:36:3f:fa:
                    bb:0f:13:02:08:bd:b7:48:5a:09:8d:f6:52:1f:e3:
                    e0:5b:a4:21:99:df:1f:7e:42:7e:1c:32:19:fd:13:
                    5d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:70:75:DB:64:0A:12:6C:5D:2F:E4:0E:16:E4:2F:56:D3:83:B8:38
            X509v3 Authority Key Identifier:
                keyid:3D:5A:1B:2B:6D:E4:87:DB:B9:5C:EE:51:47:5E:26:56:F1:E9:BF:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:91:80:54:ef:1c:cf:7e:03:10:82:31:d2:f5:3f:e5:dc:73:
         58:ca:18:92:3a:c9:14:23:72:d1:ec:58:8e:30:30:b8:df:d3:
         61:0c:2a:2f:00:dc:3f:58:49:c1:35:89:a3:26:00:c9:fa:86:
         0e:24:a8:fb:ac:94:a8:8f:ad:f0:31:91:ff:7e:d2:b0:5b:34:
         b7:f2:01:74:5c:9c:e0:5a:1c:ac:64:cd:8c:ad:cd:30:6a:04:
         b2:ce:c2:43:54:74:8d:a4:55:b4:21:a6:36:92:54:f8:f0:01:
         64:7c:99:e2:42:1a:e8:f6:37:05:bb:8f:02:c4:42:fd:f8:ce:
         b9:be:42:5f:45:da:93:6b:1c:4a:03:09:1b:c8:fc:0a:1f:c5:
         8b:2e:cf:18:78:87:96:e8:03:a4:8e:cf:73:62:d9:80:fc:44:
         d3:91:1a:d2:c2:8f:b8:86:9e:4e:ac:e5:e4:20:7f:d3:c2:93:
         5c:ad:30:98:21:c4:18:07:f3:73:30:71:24:58:87:8a:1f:b4:
         2f:20:0b:91:ce:09:16:6a:6f:60:25:ad:49:1a:83:2b:df:e3:
         51:05:65:db:4b:97:96:36:14:47:c8:96:56:18:d9:2b:af:5d:
         2f:bf:4b:d3:05:53:0c:7c:2a:01:8c:b4:f0:d4:61:0d:45:0e:
         4a:66:df:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:11:47 2024 by rpki-client on console-ams.rpki-client.org