Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.mft
File:                     28C4721E667593A43DA7832F588E6B6B8F57311C.mft (raw, json)
Hash identifier:          HKqWPMcrdOHnYw/+ObkLks8PsexUMyavnCGpFVPSpNw=
Subject key identifier:   29:B3:9B:E2:00:3D:30:BD:70:25:0B:88:55:E0:D1:F8:EE:64:9B:A8
Authority key identifier: 28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C
Certificate issuer:       /CN=28C4721E667593A43DA7832F588E6B6B8F57311C
Certificate serial:       34356AADC32F07EA0C73B354070307C5156CAA22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.mft
Manifest number:          013A
Signing time:             Fri 22 Nov 2024 23:41:31 +0000
Manifest this update:     Fri 22 Nov 2024 23:36:31 +0000
Manifest next update:     Sun 24 Nov 2024 02:26:31 +0000
Files and hashes:         1: 323830343a356266343a3a2f33322d3332203d3e20323638383739.roa (hash: 0h8YXFLuxxZeGUncxSHDFsinFECiEhMnlmsl9k34Kwg=)
                          2: 323830343a356266343a343030303a3a2f33342d3334203d3e20323638383739.roa (hash: xum6h2BtY/bau5fchvUOMUlSZVFUaahR1EkiSkuPYf8=)
                          3: 323830343a356266343a3a2f33342d3334203d3e20323638383739.roa (hash: dbVgX3q0522NkP6HnFHBxjh6yqYBeQtellHq2vk9q+A=)
                          4: 323830343a356266343a383030303a3a2f33332d3333203d3e20323638383739.roa (hash: IOaYVeSDSoa2tOZQqCvZgCm7NxxQqd69vSLPa9zGSbg=)
                          5: 28C4721E667593A43DA7832F588E6B6B8F57311C.crl (hash: xg2AC3jO0osdDGqXda8ARgp7U3bG0v1Di6W7e+e+NJY=)
                          6: 34352e3137352e32342e302f32332d3233203d3e20323638383739.roa (hash: YQy6Z/iIgfJhkH/h5mKWPrWecxlIki7KYPcs5dYH21I=)
                          7: 323830343a356266343a3a2f33332d3333203d3e20323638383739.roa (hash: 71Yq68FQzbkNN1jU2qjkOOgvmZ/h4rFxpOjg5pian9w=)
                          8: 34352e3137352e32342e302f32322d3232203d3e20323638383739.roa (hash: Y/3k+wQfS24PsJWdn93JRSkwhz3mQBl5H3pHEUMULKI=)
                          9: 323830343a356266343a383030303a3a2f33342d3334203d3e20323638383739.roa (hash: CGfma1mLTkxGoWcMLocRddLID3RkuxZPkrMQEcDm0XU=)
                          10: 34352e3137352e32362e302f32332d3234203d3e20323638383739.roa (hash: OJtxdCpYWI4I5Qes2jHlC5MOF45+a7dz9CHsxqHJr3U=)
                          11: 34352e3137352e32342e302f32342d3234203d3e20323638383739.roa (hash: ZFuTwdBCyT3/+A8J0oBed5IrUWZZDcsQeS8PFMWyP2w=)
                          12: 323830343a356266343a633030303a3a2f33342d3334203d3e20323638383739.roa (hash: I6sYDdDAq2Iy56ONEfOfplKnsXkGaQexeJ2xYuX/cXs=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl
                          rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:35:6a:ad:c3:2f:07:ea:0c:73:b3:54:07:03:07:c5:15:6c:aa:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C4721E667593A43DA7832F588E6B6B8F57311C
        Validity
            Not Before: Nov 22 23:36:31 2024 GMT
            Not After : Nov 24 02:26:31 2024 GMT
        Subject: CN=29B39BE2003D30BD70250B8855E0D1F8EE649BA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:87:61:16:df:95:d9:10:a7:76:ca:23:e7:b2:
                    1f:83:42:f5:40:d0:fe:07:12:f5:26:cf:1d:ae:b4:
                    45:d2:73:69:01:f4:02:c0:f2:57:80:2e:28:95:5f:
                    3b:60:39:a0:d5:80:d5:1f:f0:3a:20:be:02:8f:d6:
                    a9:16:e5:6a:84:09:b5:5f:1d:92:a8:10:e6:2d:ae:
                    ff:7a:4e:ef:fb:11:e3:72:1c:63:4b:71:ac:7f:03:
                    19:81:35:82:3a:b5:de:1e:e8:77:62:0a:86:f4:a8:
                    a7:02:e7:65:ea:de:bd:3b:54:1d:65:ce:13:e9:3c:
                    5f:42:5f:8b:72:e5:b0:fe:0a:1e:39:c2:17:33:d4:
                    81:50:a6:04:b2:76:52:58:40:48:42:7b:34:77:76:
                    15:8a:d4:7e:7c:09:31:80:a0:14:37:fb:29:d5:8a:
                    21:7f:93:25:e0:87:6f:56:9b:77:29:bb:c5:6a:af:
                    a1:dd:cd:c2:92:41:53:dc:47:4b:3e:31:d7:18:d5:
                    26:5e:c4:22:05:60:3e:9b:f4:bf:d3:bc:8d:c9:00:
                    97:0f:39:7f:35:d4:99:4b:58:68:04:91:e0:58:70:
                    6b:ed:74:cd:a9:d8:ba:04:72:8e:ba:c3:0a:b4:b3:
                    55:8d:86:f7:69:d1:3b:bd:0e:ae:ee:1d:c1:68:8b:
                    49:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B3:9B:E2:00:3D:30:BD:70:25:0B:88:55:E0:D1:F8:EE:64:9B:A8
            X509v3 Authority Key Identifier:
                keyid:28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ba:26:2d:be:8e:10:22:f9:69:02:09:11:b9:f7:0f:ef:11:
         ff:68:f3:9b:29:51:ba:95:ee:55:d9:2e:05:14:51:1c:d5:bc:
         c3:99:b9:a3:e5:d2:70:bd:ea:85:6d:84:ee:d3:6c:82:9a:ac:
         10:29:ad:07:d6:f4:e9:aa:9e:58:20:57:e3:8d:04:fa:35:ac:
         ca:51:d0:32:eb:ed:e6:c0:6e:37:3d:32:26:51:47:4c:8d:4e:
         63:08:6c:71:66:66:12:23:c9:1b:27:7d:36:7d:35:6c:ec:32:
         cd:52:2e:8b:be:e1:70:58:86:9e:e4:8e:ac:6a:f6:ec:bb:8d:
         8f:e6:4f:de:37:94:cf:43:47:b1:63:8e:18:4b:2e:38:39:7b:
         2f:ef:59:16:81:92:c8:ce:86:e6:f4:45:81:b5:17:ff:40:1a:
         7f:c2:65:96:e1:3f:03:17:8b:b2:9b:ec:f6:3c:99:11:9a:80:
         b9:1c:6e:e7:bc:0a:dd:3f:11:32:b3:5e:f3:e7:ab:0a:20:99:
         ac:0e:b6:68:55:b3:7b:56:eb:e0:42:bd:af:0e:e6:59:8c:a0:
         56:55:bd:15:40:3f:69:8d:a4:dd:04:e6:7f:55:62:92:82:5b:
         e7:42:00:c6:3d:6b:f9:92:e7:77:a2:f6:5c:a5:03:e2:97:61:
         12:71:04:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:18 2024 by rpki-client on console-fra.rpki-client.org