Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
File:                     4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft (raw, json)
Hash identifier:          JoGd+TU7RvWyVUzR/KH+cmB08PlOYWVT1R2OnhEW+tg=
Subject key identifier:   44:31:47:18:91:2C:2F:DD:90:9F:DE:36:F8:D7:BE:D2:8A:AD:BF:B6
Authority key identifier: 43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63
Certificate issuer:       /CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
Certificate serial:       2E0381143CD5D252828820EC3ECBE99C2E216958
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
Manifest number:          0134
Signing time:             Fri 22 Nov 2024 20:40:00 +0000
Manifest this update:     Fri 22 Nov 2024 20:35:00 +0000
Manifest next update:     Sat 23 Nov 2024 23:27:00 +0000
Files and hashes:         1: 3137372e38352e302e302f32312d3234203d3e20323632353935.roa (hash: y3AVkdj7HsI3k8xLZb2uBQHfe69PPv54yTkHPpa9ZAc=)
                          2: 3139312e372e382e302f32312d3234203d3e20323632353935.roa (hash: u8HrWiNbQ+lckiFxrMPjegCtPADBXCSjHNr2q0cvVFI=)
                          3: 3133382e302e36342e302f32322d3234203d3e20323632353935.roa (hash: Duhqtwrh+9+Vu8RsXh5YB7mcLyhaxd+3USdf0i0ir78=)
                          4: 34352e3136322e3138382e302f32322d3234203d3e20323632353935.roa (hash: uklFHEq2jLngTK++vrSnsSMrTdmqUVmW0gIyckKRtIM=)
                          5: 3136372e3235302e32302e302f32322d3234203d3e20323632353935.roa (hash: QwT1Vr+2NtXlKzmmR4uG883Ew+GcbJZSr5v8lql0Lp8=)
                          6: 34352e3137392e3138302e302f32322d3234203d3e20323632353935.roa (hash: 56ETSwOQO/yK8qRWCw4kWzUnE5pN0LSkLzMrftauavc=)
                          7: 3133382e3132312e31362e302f32322d3234203d3e20323632353935.roa (hash: k145iLR2Ob5ouHD1WnjUKDe4E0+QhRB/H7HcwdGVGkQ=)
                          8: 323830343a3639303a3a2f33322d3430203d3e20323632353935.roa (hash: kJXYAElT+pVCkWKbDh20qcSuJiTnLVzgdYQJPOreFlA=)
                          9: 3137302e37392e3232342e302f32322d3234203d3e20323632353935.roa (hash: /hF8RUQd9NGdY1rPvjB7170cqVR5nMSA+Q2yED9cUFc=)
                          10: 3137392e3130362e31362e302f32302d3234203d3e20323632353935.roa (hash: EL03CYYUygqBTbDftgdhfGcg5s61PeducVBftGZnYW4=)
                          11: 4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl (hash: y1wG1Spx9+VbRmS90IvJnmY8AWxOhAwIoo3R453pEpw=)
                          12: 3137302e38332e34342e302f32322d3234203d3e20323632353935.roa (hash: /9HT7cmy1i7/zLU/HoC+QbpZjMfwrtwKp5F4+V8Zd2I=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl
                          rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:03:81:14:3c:d5:d2:52:82:88:20:ec:3e:cb:e9:9c:2e:21:69:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
        Validity
            Not Before: Nov 22 20:35:00 2024 GMT
            Not After : Nov 23 23:27:00 2024 GMT
        Subject: CN=44314718912C2FDD909FDE36F8D7BED28AADBFB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5e:e9:e7:33:e4:b0:63:cd:73:40:31:62:ef:
                    3b:c2:14:c4:a7:6d:e7:22:fc:b8:c7:61:79:9d:bf:
                    3a:06:48:d6:c3:48:6b:f2:5f:33:a4:20:74:9e:37:
                    75:da:ec:21:21:bf:e2:00:d0:65:de:9e:d7:88:c2:
                    c1:e1:61:69:93:15:a0:9f:4e:7b:53:f4:a3:2a:ef:
                    78:24:ea:29:14:2c:32:e1:9d:d9:cc:4c:94:6b:17:
                    ca:c8:1a:b6:09:ad:04:b5:e8:7a:00:f5:4e:c0:f0:
                    93:27:ab:c3:77:44:07:77:ed:0d:8e:2f:f0:9d:a4:
                    f3:42:a0:fc:d1:ba:cc:52:3f:b4:30:18:12:7f:99:
                    62:a3:7a:89:e7:28:74:49:95:58:d0:e7:4b:fb:6d:
                    58:66:7f:68:71:09:7d:74:01:c1:ca:88:b9:2c:9e:
                    c9:94:24:6f:20:8f:f4:dc:23:3c:6a:b5:f5:b6:ba:
                    98:79:cc:c8:51:12:fc:1a:fe:b5:23:05:a5:17:1a:
                    c4:e1:21:23:84:60:d5:e5:cc:6b:9b:99:a6:c8:da:
                    e1:8a:9e:dd:b5:a4:c5:46:47:04:7e:19:7a:81:6a:
                    41:71:b4:1f:aa:04:5d:c2:cf:ae:40:34:5f:ae:f3:
                    47:ad:aa:08:5f:22:ee:67:37:fa:79:af:c7:71:41:
                    89:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:31:47:18:91:2C:2F:DD:90:9F:DE:36:F8:D7:BE:D2:8A:AD:BF:B6
            X509v3 Authority Key Identifier:
                keyid:43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:f6:9b:dd:b5:90:b8:3a:00:0b:5f:7c:85:0a:ab:03:11:99:
         d0:07:75:b0:58:3a:2f:ad:55:94:e0:08:be:53:f3:19:a8:db:
         88:64:2c:12:49:4d:f1:53:58:0e:e2:e5:b4:a8:bb:02:e1:91:
         07:39:aa:b0:81:63:d8:13:e1:ec:ad:b6:61:a2:a4:fb:35:0c:
         62:27:58:71:6f:ee:79:fd:4a:8e:31:3f:70:0b:a6:1e:14:dd:
         70:81:43:71:22:3b:55:04:88:4a:83:12:31:c9:66:3b:b6:fe:
         5e:dd:4b:16:67:84:18:1f:f9:57:99:c8:f8:9c:1b:d5:f3:46:
         fe:44:a7:b5:17:70:79:bd:26:e2:78:c4:6a:e5:a3:47:0b:16:
         7f:31:40:cb:6c:99:cb:30:8a:1a:ca:8b:30:f1:f3:3c:94:dc:
         0e:3b:a0:2e:a6:ae:2a:2c:7c:dd:15:88:ee:3a:23:ce:e8:77:
         ca:29:86:b5:ac:21:b6:28:78:00:4f:7a:ce:0b:ea:aa:75:8c:
         90:a6:7d:9d:27:65:60:4d:14:7c:4f:86:3d:8a:1e:24:5f:04:
         65:5a:08:49:0b:68:a1:3e:1e:5d:7b:15:c0:a3:c6:f9:d3:5b:
         a2:f5:4b:fe:24:3e:ca:56:82:eb:d2:e0:3e:93:83:53:51:0b:
         5f:a2:69:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULgOBFDzV0lKCiCDsPsvpnC4haVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDM3MTAwN0IzQjc3NzFDNkNGNEZCRTRBNzFCM0I5NDZC
ODQxQUQ2MzAeFw0yNDExMjIyMDM1MDBaFw0yNDExMjMyMzI3MDBaMDMxMTAvBgNV
BAMTKDQ0MzE0NzE4OTEyQzJGREQ5MDlGREUzNkY4RDdCRUQyOEFBREJGQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtXunnM+SwY81zQDFi7zvCFMSn
beci/LjHYXmdvzoGSNbDSGvyXzOkIHSeN3Xa7CEhv+IA0GXenteIwsHhYWmTFaCf
TntT9KMq73gk6ikULDLhndnMTJRrF8rIGrYJrQS16HoA9U7A8JMnq8N3RAd37Q2O
L/CdpPNCoPzRusxSP7QwGBJ/mWKjeonnKHRJlVjQ50v7bVhmf2hxCX10AcHKiLks
nsmUJG8gj/TcIzxqtfW2uph5zMhREvwa/rUjBaUXGsThISOEYNXlzGubmabI2uGK
nt21pMVGRwR+GXqBakFxtB+qBF3Cz65ANF+u80etqghfIu5nN/p5r8dxQYknAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQURDFHGJEsL92Qn942+Ne+0oqtv7YwHwYDVR0j
BBgwFoAUQ3EAezt3ccbPT75KcbO5RrhBrWMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGVEY25nV1hudXF4R0s2b2ZVOVQxVjc1TnRvZERKckFFaE1EY1ZyemNo
NWcvMS80MzcxMDA3QjNCNzc3MUM2Q0Y0RkJFNEE3MUIzQjk0NkI4NDFBRDYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzNzEwMDdCM0I3NzcxQzZD
RjRGQkU0QTcxQjNCOTQ2Qjg0MUFENjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RGVEY25nV1hudXF4R0s2b2ZVOVQxVjc1TnRvZERKckFFaE1EY1ZyemNoNWcvMS80
MzcxMDA3QjNCNzc3MUM2Q0Y0RkJFNEE3MUIzQjk0NkI4NDFBRDYzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAovab3bWQuDoAC198hQqrAxGZ0Ad1sFg6L61VlOAIvlPzGajbiGQsEklN8VNY
DuLltKi7AuGRBzmqsIFj2BPh7K22YaKk+zUMYidYcW/uef1KjjE/cAumHhTdcIFD
cSI7VQSISoMSMclmO7b+Xt1LFmeEGB/5V5nI+Jwb1fNG/kSntRdweb0m4njEauWj
RwsWfzFAy2yZyzCKGsqLMPHzPJTcDjugLqauKix83RWI7jojzuh3yimGtawhtih4
AE96zgvqqnWMkKZ9nSdlYE0UfE+GPYoeJF8EZVoISQtooT4eXXsVwKPG+dNbovVL
/iQ+ylaC69LgPpODU1ELX6Jp2A==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:11 2024 by rpki-client on console-fra.rpki-client.org