Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/B7A663920AEF637DF79AA0A99AF488170644C538.mft
File:                     B7A663920AEF637DF79AA0A99AF488170644C538.mft (raw, json)
Hash identifier:          0Jrsq0i39zDyfDybQHrsWhqwtO5lN8m0MFetQeRzLXA=
Subject key identifier:   BD:37:7C:F7:51:0B:E8:CA:D3:0F:6F:85:9D:02:E6:54:E9:20:CC:98
Authority key identifier: B7:A6:63:92:0A:EF:63:7D:F7:9A:A0:A9:9A:F4:88:17:06:44:C5:38
Certificate issuer:       /CN=B7A663920AEF637DF79AA0A99AF488170644C538
Certificate serial:       18D4315A016BBE09D383B78164D2D16365C6FB42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A663920AEF637DF79AA0A99AF488170644C538.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/B7A663920AEF637DF79AA0A99AF488170644C538.mft
Manifest number:          0128
Signing time:             Fri 22 Nov 2024 19:16:09 +0000
Manifest this update:     Fri 22 Nov 2024 19:11:09 +0000
Manifest next update:     Sat 23 Nov 2024 19:26:09 +0000
Files and hashes:         1: 34352e3232352e31382e302f32342d3234203d3e20323636393230.roa (hash: maBzUUCcKt0wBzUIt/IbfYWNdPikT1GwbHGWFPet1Mc=)
                          2: 34352e3232352e31382e302f32332d3233203d3e20323636393230.roa (hash: rAtgQHLgiTEOKxFt1LKZtoqwRk5LNyf+hgQ7+qcqp5g=)
                          3: 3138372e38342e3135362e302f32322d3232203d3e20323636393230.roa (hash: sR5F9LvMuH8EtMHc4X3RT3QIydHGi1gv5pJwpeDghIc=)
                          4: 34352e3232352e31392e302f32342d3234203d3e20323636393230.roa (hash: 4uliAuLmbjq+5qVgOGZwjqXYzGIbGkWrxau9rkjKpQI=)
                          5: 34352e3232352e31362e302f32322d3232203d3e20323636393230.roa (hash: W2piEFnPzmhxpL9zerGPsTow291IZMh98uhvkn7Kp2U=)
                          6: B7A663920AEF637DF79AA0A99AF488170644C538.crl (hash: bslsJ2Yw/7xb+A/JE7gYqGY1UNUVj5pkz1oA/aHq4ZI=)
                          7: 323830343a343535383a3a2f33322d3332203d3e20323636393230.roa (hash: 4zw1f0YeaUj9tx7we5lfT0fCGJpxAfif98dvVSCduWg=)
                          8: 34352e3232352e31372e302f32342d3234203d3e20323636393230.roa (hash: fmM3t7RAPOew3Coxb7rJa2yELPPjrZLpiVZtfW3PkJA=)
                          9: 34352e3232352e31362e302f32342d3234203d3e20323636393230.roa (hash: PQ8OJgI+pzhGZtXVHXZLnRpLl17kYF/YPy/vDm49SbA=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/B7A663920AEF637DF79AA0A99AF488170644C538.crl
                          rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/B7A663920AEF637DF79AA0A99AF488170644C538.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A663920AEF637DF79AA0A99AF488170644C538.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:26:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d4:31:5a:01:6b:be:09:d3:83:b7:81:64:d2:d1:63:65:c6:fb:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A663920AEF637DF79AA0A99AF488170644C538
        Validity
            Not Before: Nov 22 19:11:09 2024 GMT
            Not After : Nov 23 19:26:09 2024 GMT
        Subject: CN=BD377CF7510BE8CAD30F6F859D02E654E920CC98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d6:da:cf:c7:74:3e:dc:7a:cf:74:d6:8c:26:
                    da:0a:1a:b9:97:a6:e0:19:b8:12:c1:b1:c2:57:50:
                    12:83:f8:f8:fa:f4:6a:a7:35:45:b7:2b:62:b3:e3:
                    69:ca:98:45:67:0d:e3:55:4e:ed:91:a9:37:a3:ac:
                    5f:81:c2:5a:83:e1:38:0e:f6:d8:64:6b:cd:ef:2b:
                    d4:f0:8d:ef:e1:ca:e6:f9:29:7d:73:b3:74:4e:2d:
                    36:0d:2c:37:ca:a2:23:c2:b3:ea:ab:08:29:f4:9b:
                    c0:78:db:aa:53:fc:15:4e:52:b2:67:ba:9d:4b:fa:
                    5d:b2:e8:ce:57:e9:72:9a:9c:d5:17:01:ea:0b:be:
                    08:dc:d4:d6:91:9f:f7:83:d2:bf:1f:55:3c:5e:35:
                    b2:04:e4:ae:69:1a:6e:5d:3f:40:91:40:97:27:0c:
                    90:50:82:1b:92:b3:4a:4d:33:48:01:dc:cb:18:15:
                    96:d9:84:a3:1f:45:aa:3f:17:8b:98:9c:74:9a:96:
                    b6:59:79:ba:7b:14:35:7a:49:b3:35:21:f0:4f:ee:
                    28:de:7b:cf:6e:24:63:24:92:44:50:ff:84:3f:dc:
                    82:7c:0e:05:f8:d4:cb:42:1e:16:eb:2c:fc:32:9b:
                    49:24:19:3a:7c:48:29:e0:1a:f3:7a:b1:f2:59:b1:
                    9f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:37:7C:F7:51:0B:E8:CA:D3:0F:6F:85:9D:02:E6:54:E9:20:CC:98
            X509v3 Authority Key Identifier:
                keyid:B7:A6:63:92:0A:EF:63:7D:F7:9A:A0:A9:9A:F4:88:17:06:44:C5:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/B7A663920AEF637DF79AA0A99AF488170644C538.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A663920AEF637DF79AA0A99AF488170644C538.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/B7A663920AEF637DF79AA0A99AF488170644C538.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:21:ee:31:74:89:f3:72:70:4a:2a:d0:e8:74:35:20:a9:ac:
         bf:cc:4e:5f:62:d4:be:4a:c1:9f:ca:65:8c:ad:7f:81:28:84:
         67:cf:1b:4c:12:59:41:a9:ae:5f:50:bb:0b:b5:ae:58:7a:28:
         58:ab:89:8e:d9:62:7b:bd:2e:15:7a:5e:bd:47:9d:09:04:3e:
         b6:79:b3:7a:2d:f9:b8:01:1b:13:2e:7b:d7:d6:85:7a:fa:94:
         24:ad:eb:12:4d:28:39:ea:1c:ae:2d:f6:60:0f:4b:1a:9d:41:
         3d:00:d9:70:cc:e8:c1:94:77:05:e3:38:56:ff:25:4c:d1:6b:
         81:42:00:f7:6a:2c:47:ed:a8:e3:31:fd:f5:50:c6:cf:2c:60:
         2f:e1:ed:3f:ac:c5:7c:78:46:a3:5e:73:cd:d0:be:7f:bf:03:
         83:ad:b2:c1:cb:48:17:8a:8a:15:f2:80:1e:2f:44:b5:85:8b:
         44:fe:e4:73:39:1f:a8:f7:f9:5d:97:c8:0c:d0:34:7e:15:f2:
         51:4d:0f:e8:12:db:38:ea:fb:38:3f:44:57:ab:74:69:63:6d:
         67:bb:03:ca:93:41:10:33:0d:9f:74:7b:88:db:04:07:f3:d2:
         f7:f9:b2:81:18:f0:23:5c:81:5d:c7:31:99:37:b8:fd:b8:60:
         ab:f5:2a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:12 2024 by rpki-client on console-ams.rpki-client.org