Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3CECA6F152B3B0159CF06897187E3B5A86BB81A1.mft
File:                     3CECA6F152B3B0159CF06897187E3B5A86BB81A1.mft (raw, json)
Hash identifier:          4PtvyTjRq3KqgBm/lI6QUU19qNt+O4JWtQd7A97f9sk=
Subject key identifier:   05:60:9C:FD:0F:FD:7B:B2:8A:F4:82:6C:36:15:44:C5:5B:82:FE:A4
Authority key identifier: 3C:EC:A6:F1:52:B3:B0:15:9C:F0:68:97:18:7E:3B:5A:86:BB:81:A1
Certificate issuer:       /CN=3CECA6F152B3B0159CF06897187E3B5A86BB81A1
Certificate serial:       73C25DF80C34E207B9321936E142DB33248F0B3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CECA6F152B3B0159CF06897187E3B5A86BB81A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3CECA6F152B3B0159CF06897187E3B5A86BB81A1.mft
Manifest number:          5D
Signing time:             Mon 25 Nov 2024 20:07:19 +0000
Manifest this update:     Mon 25 Nov 2024 20:02:19 +0000
Manifest next update:     Tue 26 Nov 2024 21:00:19 +0000
Files and hashes:         1: 3138372e312e33322e302f32302d3234203d3e203238323436.roa (hash: J3WAcZ9Nj6YRuiPndljWKQLBmFtHxnStkqli7U562os=)
                          2: 3CECA6F152B3B0159CF06897187E3B5A86BB81A1.crl (hash: SZ/L8ocgqSCMjtT3M/aiUjtLAT0sknnTtJk5/EH+DfA=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3CECA6F152B3B0159CF06897187E3B5A86BB81A1.crl
                          rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3CECA6F152B3B0159CF06897187E3B5A86BB81A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CECA6F152B3B0159CF06897187E3B5A86BB81A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c2:5d:f8:0c:34:e2:07:b9:32:19:36:e1:42:db:33:24:8f:0b:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CECA6F152B3B0159CF06897187E3B5A86BB81A1
        Validity
            Not Before: Nov 25 20:02:19 2024 GMT
            Not After : Nov 26 21:00:19 2024 GMT
        Subject: CN=05609CFD0FFD7BB28AF4826C361544C55B82FEA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:29:14:d5:a7:41:0d:6c:f8:93:5d:ec:c6:e7:
                    70:12:24:0c:2b:92:79:5e:35:4b:c1:a0:3c:a6:da:
                    c8:31:0f:ea:a4:f9:22:c5:59:64:e8:42:7a:bc:7a:
                    14:35:b5:b3:9b:13:88:08:fd:24:aa:66:49:b3:f9:
                    b0:3d:5b:b1:be:46:10:9f:76:8d:17:85:5b:8b:98:
                    98:d6:09:b0:f3:53:d1:03:73:21:a4:b5:13:5a:93:
                    04:72:20:37:08:c5:45:c0:10:e2:68:bf:ee:9f:a7:
                    22:5f:37:7e:41:71:5d:bd:14:b6:44:8e:26:49:23:
                    0a:ac:d8:38:4b:c7:55:b7:9b:81:c3:00:f7:91:a3:
                    4d:a6:95:b7:1d:62:8e:4f:bc:b8:76:35:79:b6:93:
                    1e:fb:81:c0:c6:62:f7:15:9b:ed:79:88:cf:6c:c9:
                    e9:b3:26:57:4b:89:16:9b:df:2d:80:89:4b:3e:e0:
                    84:0b:0f:19:ca:c3:c7:ce:c6:79:3d:5a:a3:60:b3:
                    a3:67:96:c4:a8:c6:3c:45:70:f0:ce:89:16:bc:e2:
                    92:6f:90:9c:a0:32:5b:6f:47:49:a1:1e:27:38:dd:
                    a1:e3:69:0c:07:bc:2e:d8:c4:d2:6e:14:02:64:99:
                    af:ae:c1:1d:7b:e3:36:90:d2:50:f8:a0:1c:83:a3:
                    14:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:60:9C:FD:0F:FD:7B:B2:8A:F4:82:6C:36:15:44:C5:5B:82:FE:A4
            X509v3 Authority Key Identifier:
                keyid:3C:EC:A6:F1:52:B3:B0:15:9C:F0:68:97:18:7E:3B:5A:86:BB:81:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3CECA6F152B3B0159CF06897187E3B5A86BB81A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CECA6F152B3B0159CF06897187E3B5A86BB81A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3CECA6F152B3B0159CF06897187E3B5A86BB81A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:31:3d:a1:fb:14:e8:e1:59:47:4b:48:29:ee:18:67:97:74:
         30:59:6c:e0:dc:43:ab:6f:0e:59:18:b3:11:35:ba:48:9a:1e:
         db:9c:0d:6e:f9:6f:79:49:27:ea:1d:5a:31:f5:5d:db:4b:a4:
         a0:6d:52:16:cc:04:21:17:72:9b:07:7d:5e:75:df:5d:8c:db:
         77:2e:99:7a:09:09:15:c4:44:77:2f:94:e0:d6:35:70:f6:a1:
         17:f8:93:94:a1:a3:8d:28:1c:64:a6:2d:47:f5:06:f2:4a:d3:
         b3:d2:7b:7e:ca:34:42:35:99:b9:23:97:2b:93:13:dd:14:7d:
         0a:4d:d1:14:ca:20:42:b4:15:db:aa:c3:a3:12:3a:ea:3f:9f:
         9e:27:d9:93:2c:86:35:b6:7b:21:96:46:5b:84:90:02:d0:52:
         61:4c:f8:67:7d:2b:12:3f:a9:45:77:eb:18:09:c5:e0:a3:3b:
         b9:1f:00:04:6a:e7:14:01:ad:0b:8a:66:21:6d:8d:ac:64:b7:
         22:93:ab:38:c5:01:5a:cf:34:e7:f1:7d:9c:73:a4:2e:b2:e7:
         09:82:5f:7a:e0:eb:1b:56:59:3d:01:f2:4d:0a:a0:fb:63:39:
         35:3f:98:f2:82:c3:89:8c:dc:89:e6:de:26:45:d1:62:cc:54:
         3b:bf:ff:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:47 2024 by rpki-client on console-ams.rpki-client.org