Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft
File:                     02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft (raw, json)
Hash identifier:          yzCBVik96Yjn8FZsIz+b+RpqJLNwGWzBt+NWkj1kBiE=
Subject key identifier:   63:F8:D0:52:54:7F:AE:7F:D0:2D:92:4F:CF:C6:AB:F9:EC:30:26:CF
Authority key identifier: 02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED
Certificate issuer:       /CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED
Certificate serial:       33F2E0C4D10817B233FF410D9FA7D43F0125E56C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft
Manifest number:          70
Signing time:             Tue 25 Jun 2024 23:32:04 +0000
Manifest this update:     Tue 25 Jun 2024 23:27:04 +0000
Manifest next update:     Wed 26 Jun 2024 23:59:04 +0000
Files and hashes:         1: 02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl (hash: Cu/FRjZfMS/RzKRPecyrdBtyJW907hef8joblyXX5eg=)
                          2: 3139312e372e37322e302f32312d3234203d3e203533313330.roa (hash: sJylGoaewN4tNVGTsx6aWKlBSnLP34EgH80x6KDG5k0=)
                          3: 323830343a313431633a3a2f33322d313238203d3e203533313330.roa (hash: ktjzMQbU1TWUEcYqpFFC7wtgpD/Gm3NXMEEwQ8V6LR0=)
                          4: 3138372e3132302e3234302e302f32302d3234203d3e203533313330.roa (hash: Fb9y/FuVpFnJO7W0Q5uh/C8zaImFd4ZbicveEaIis/4=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl
                          rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Jun 2024 23:59:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f2:e0:c4:d1:08:17:b2:33:ff:41:0d:9f:a7:d4:3f:01:25:e5:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED
        Validity
            Not Before: Jun 25 23:27:04 2024 GMT
            Not After : Jun 26 23:59:04 2024 GMT
        Subject: CN=63F8D052547FAE7FD02D924FCFC6ABF9EC3026CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:35:d5:0c:43:dc:99:e3:b0:5d:a7:f5:5d:7e:
                    81:e5:9f:ca:32:38:32:a4:85:a6:6c:5b:c9:91:dc:
                    f3:d6:c5:f2:73:85:f2:f7:09:54:9e:86:bc:a3:ae:
                    82:24:e9:0d:ab:0d:77:32:3f:4b:a3:39:cf:06:c2:
                    84:9b:4b:40:3d:9c:83:db:a6:b8:3e:46:12:2d:ee:
                    1e:5e:fc:69:ff:91:67:2e:07:36:21:85:06:dc:e0:
                    10:0a:b8:4b:be:f1:a4:e4:3a:db:62:31:7d:67:31:
                    d2:18:6b:5a:8f:1e:51:76:0f:07:2e:cb:6e:0f:1c:
                    aa:43:ce:56:42:b6:0c:14:d5:41:94:3f:aa:af:db:
                    23:6e:ee:45:ea:29:f6:bd:b4:da:72:d7:04:00:c8:
                    71:d0:c9:cc:80:8c:27:a5:83:ee:95:5a:35:ca:66:
                    1e:c8:01:bb:7e:f9:1c:3a:4a:8f:2e:18:45:57:e8:
                    b4:25:c0:57:4f:a5:de:b9:da:35:70:30:aa:a3:18:
                    20:63:fa:89:9b:e3:eb:08:98:af:17:7a:9e:f7:9b:
                    07:8b:09:96:4e:75:8e:cf:b8:2b:ab:76:91:eb:73:
                    02:ba:75:b3:2f:11:82:24:e7:08:1d:e2:cf:51:11:
                    f1:e3:09:9a:4b:47:fa:8f:bd:ec:6f:9d:fb:39:3e:
                    99:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F8:D0:52:54:7F:AE:7F:D0:2D:92:4F:CF:C6:AB:F9:EC:30:26:CF
            X509v3 Authority Key Identifier:
                keyid:02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:2f:26:f0:e5:21:15:2c:fc:16:1b:90:8c:12:08:38:cc:b2:
         fa:56:2f:a0:e6:29:b6:1f:76:9d:d9:d7:5c:18:d0:9d:5c:98:
         00:a4:67:ce:af:6e:97:0d:53:1b:c7:b2:c0:1f:74:b8:37:d4:
         76:7c:d1:72:61:2c:87:11:d6:67:17:a9:24:3f:aa:01:20:6f:
         01:51:be:5a:86:57:fb:68:1e:dd:19:59:e8:ea:cd:1a:18:11:
         21:60:43:c3:4e:b7:ff:10:1c:32:41:8f:e1:4e:cf:ec:e7:10:
         30:4f:da:03:86:0a:f9:48:2f:d1:69:a4:61:1d:38:9d:15:70:
         66:87:f5:8a:f4:ff:54:c2:1d:53:4e:a7:91:8c:69:20:4b:6a:
         68:03:e5:15:10:55:59:00:59:88:31:03:65:0b:1a:45:96:78:
         39:49:08:9d:2f:59:cd:7a:1c:71:91:91:cd:66:77:e6:39:6a:
         af:c1:d0:40:92:ba:3e:a7:d0:fc:ab:38:80:0a:d8:fe:71:e0:
         de:0e:e2:95:2a:5c:0e:9a:50:17:2d:20:c1:a8:1c:12:2c:5e:
         48:17:16:d1:e9:cb:6e:f1:64:c1:f9:9c:2b:d4:8e:3d:1b:f3:
         f6:39:00:5c:13:30:f7:f4:2f:fe:91:0e:6a:95:cb:33:73:0e:
         ef:ad:88:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:43:21 2024 by rpki-client on console-fra.rpki-client.org