Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.mft
File:                     47F932452F6354876C2CDBACA9AD34D90A502586.mft (raw, json)
Hash identifier:          yfYqfgdvVk29wDb9Cx939NVVOspYQfbxIS5nBETLfbI=
Subject key identifier:   C2:DD:D4:48:FB:81:58:78:1F:94:08:01:79:72:E7:46:EF:44:6E:BD
Authority key identifier: 47:F9:32:45:2F:63:54:87:6C:2C:DB:AC:A9:AD:34:D9:0A:50:25:86
Certificate issuer:       /CN=47F932452F6354876C2CDBACA9AD34D90A502586
Certificate serial:       4C69488CB4FD08FF784CAC66845541049CD085A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F932452F6354876C2CDBACA9AD34D90A502586.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.mft
Manifest number:          3A
Signing time:             Tue 25 Jun 2024 22:30:12 +0000
Manifest this update:     Tue 25 Jun 2024 22:25:12 +0000
Manifest next update:     Thu 27 Jun 2024 00:19:12 +0000
Files and hashes:         1: 47F932452F6354876C2CDBACA9AD34D90A502586.crl (hash: sDzEM62Zu9qnkEE6CYzzDxl4X1PG2g+Eix+bP64BX9g=)
                          2: 323830343a3832633a3a2f33322d3336203d3e20323632333535.roa (hash: RDDXu7auEF3bDwwCJU4tk6k1YsLS3kaYlVSNlmXHpnQ=)
                          3: 3137372e3132352e3231362e302f32322d3234203d3e20323632333535.roa (hash: wzKyAcjOMtDH8NjH8ov/IeoIH6YXyKP4oxrKZqNEeB0=)
                          4: 3137372e39312e3137322e302f32322d3234203d3e20323632333535.roa (hash: ARB/5MwIxYFONPuHzAEyLSOZUcBuQfqmrJtr3n++IaU=)
                          5: 3138362e3139352e3131322e302f32302d3234203d3e20323632333535.roa (hash: 9x7RnnYMPZgMzV43EDcPtISmuuhqr8lMECyc1R2X1zc=)
                          6: 3133312e3136312e37322e302f32322d3234203d3e20323632333535.roa (hash: heNSOjZpiOoSNw6htyJaFkkibfz8IwaQ2MVonNI1MVI=)
                          7: 3138362e3233332e3138382e302f32322d3234203d3e20323632333535.roa (hash: 740j9yWQ3VzBt4gawYQ2IrUDC5kaGD0jzp0M1w4xCq4=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.crl
                          rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F932452F6354876C2CDBACA9AD34D90A502586.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 00:19:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:69:48:8c:b4:fd:08:ff:78:4c:ac:66:84:55:41:04:9c:d0:85:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F932452F6354876C2CDBACA9AD34D90A502586
        Validity
            Not Before: Jun 25 22:25:12 2024 GMT
            Not After : Jun 27 00:19:12 2024 GMT
        Subject: CN=C2DDD448FB8158781F9408017972E746EF446EBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b1:8b:96:7b:5b:2d:35:fe:a8:16:82:71:73:
                    cc:cd:c2:17:ca:77:63:a1:56:7e:12:91:3f:95:d0:
                    42:c3:44:56:63:a9:63:2f:f7:bf:d5:35:fe:b3:66:
                    ed:71:5e:8b:fd:a6:bc:23:12:07:52:73:10:a8:b6:
                    84:23:88:f7:17:93:4f:e6:15:3d:7a:57:cb:7e:99:
                    04:86:a8:95:30:87:f2:c1:9e:83:a6:b7:23:33:f1:
                    06:8f:e5:92:4f:4f:38:35:8b:54:7f:c6:0c:c0:7c:
                    8f:e1:78:c7:b9:78:61:34:43:92:ff:c8:2b:1a:01:
                    b6:f3:f2:c4:ee:e6:15:06:d6:68:6b:0b:9f:3d:f6:
                    29:df:ad:1d:75:a3:b4:21:f8:76:30:e7:76:e3:f3:
                    ec:3a:be:e2:21:04:80:57:04:d8:87:62:9f:09:61:
                    32:d4:70:4f:3f:d5:92:7d:b2:9c:09:05:9b:41:54:
                    d1:3a:bc:f1:27:3b:93:65:45:88:80:8b:1e:b9:ae:
                    ec:f5:20:9e:23:59:36:6d:b5:5a:c1:c2:10:97:64:
                    73:a6:91:6b:91:a2:07:13:a7:2f:39:53:71:eb:41:
                    1b:87:e5:13:66:67:7c:2c:73:38:12:ed:ee:85:9f:
                    b2:14:cb:1b:00:ea:34:de:34:ed:2e:e7:46:12:94:
                    f8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DD:D4:48:FB:81:58:78:1F:94:08:01:79:72:E7:46:EF:44:6E:BD
            X509v3 Authority Key Identifier:
                keyid:47:F9:32:45:2F:63:54:87:6C:2C:DB:AC:A9:AD:34:D9:0A:50:25:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F932452F6354876C2CDBACA9AD34D90A502586.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:96:ef:fa:f3:69:61:ef:a4:b9:78:9c:b4:6b:c1:28:6c:57:
         00:6b:74:80:f7:fc:63:e5:b8:62:67:f3:b6:2e:33:7d:9a:05:
         47:01:59:e2:bd:9a:bb:d6:6f:e2:c4:c3:4c:ab:bd:1d:18:56:
         e5:08:4d:f2:7b:ba:f2:0e:dc:50:99:c2:37:e3:3a:71:e8:60:
         b6:5b:3c:27:7f:9d:75:79:50:fb:7a:f9:0f:5a:49:e8:a8:55:
         77:37:71:83:25:ca:63:d2:18:f5:ab:2d:aa:3e:dc:34:03:86:
         95:d7:e3:3c:0e:ad:46:5b:f0:c2:eb:5d:b1:d1:72:53:f2:39:
         3f:11:7a:39:34:4b:b5:8e:6f:7e:8e:f1:2c:01:d6:70:29:8a:
         82:64:09:d2:27:44:bb:23:78:7e:7a:1c:b8:d1:d9:db:3d:9f:
         f3:52:90:cd:a7:79:f2:11:77:14:a5:86:5a:a3:55:5f:15:a5:
         92:34:e5:9a:c3:32:66:e4:92:dc:fb:33:48:7c:88:27:1d:2c:
         8f:aa:73:7e:53:5b:38:e9:2b:a3:92:f1:22:19:10:c4:a7:23:
         56:a8:7d:7a:d2:32:69:97:a5:f2:6f:47:9d:33:e5:6e:36:25:
         8a:a1:9d:53:d2:43:7e:42:c4:e9:75:9c:87:d9:6d:c7:aa:00:
         42:7f:1f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:08:29 2024 by rpki-client on console-ams.rpki-client.org