Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.mft
File:                     3FE77B8855F61DF2AD68185DD0977BCB42C708F4.mft (raw, json)
Hash identifier:          CXE+phL3BHoLkv/vzJQemXMXl/bUHdMH5bG7StSJn3w=
Subject key identifier:   9E:7D:B4:04:20:5E:50:14:10:26:C0:B8:AB:7C:51:FF:DF:37:CA:DD
Authority key identifier: 3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4
Certificate issuer:       /CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
Certificate serial:       0C7AE5C34864E53DFC38A5879257C2A573D791BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.mft
Manifest number:          CA
Signing time:             Thu 21 Nov 2024 22:41:32 +0000
Manifest this update:     Thu 21 Nov 2024 22:36:32 +0000
Manifest next update:     Sat 23 Nov 2024 01:31:32 +0000
Files and hashes:         1: 323830343a326233383a343030303a3a2f33342d3334203d3e20323635313431.roa (hash: o8clDDi2YhgPGguFx3oWmYu/tdIbPJITyDvyhQ/FK7o=)
                          2: 323830343a326233383a383030303a3a2f33342d3334203d3e20323635313431.roa (hash: K1dq9j88/1ybXF5q1Pa/IpRJ1qn2Gv6syJBvPZsZRdY=)
                          3: 323830343a326233383a383030303a3a2f33332d3333203d3e20323635313431.roa (hash: IztZjxNMOUVNVvJxQrV/SzBlfVFW14zAiN80x2avzfM=)
                          4: 323830343a326233383a643830303a3a2f33372d3337203d3e20323635313431.roa (hash: OHWhWDEjLa0DtvK5OJ2em7cZ8CaQCcUS2n16wV56lv0=)
                          5: 3137302e302e3231392e302f32342d3234203d3e20323635313431.roa (hash: K3Cwc0BA6g5oOgH3LKNkSbhC4YjrTwrmQfZQgDYFH4k=)
                          6: 323830343a326233383a653030303a3a2f33372d3337203d3e20323635313431.roa (hash: xGKuCz34b+7dElQCks+Q9ivWjXSl9J0bUsTn7JCnvyo=)
                          7: 3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl (hash: 1B5aPDhriZCGMEfLGjaGsyd8UWZ20niRwRK9DYzefbo=)
                          8: 3134332e3235352e31322e302f32322d3232203d3e20323635313431.roa (hash: v17tBSMcRDsUYa47BQKjnT8k7mSbVo5K4NzmOj7e1vU=)
                          9: 3134332e3235352e31352e302f32342d3234203d3e20323635313431.roa (hash: CPGGo0/XrG6U+f7cnp0tGRUEmorVYFLI3agmH3s1kuw=)
                          10: 3134332e3235352e31332e302f32342d3234203d3e20323635313431.roa (hash: T3pzALHqHDVUhZyDtDE5HdHBd1pOxB/IpFAWrVSLeo0=)
                          11: 3137302e3234362e3130382e302f32322d3232203d3e20323635313431.roa (hash: e0ygaAh7heQ195AWxo0ffegFCqRh4wwJI9D95ZN5zS4=)
                          12: 323830343a326233383a633030303a3a2f33342d3334203d3e20323635313431.roa (hash: FYNLQwaOSsjmRyZ1WIgtL29Krqa95+1LvpLqQ/Rslz0=)
                          13: 323830343a326233383a3a2f33332d3333203d3e20323635313431.roa (hash: 5EYr/p8Ka3wMf4+VCcUdwWGENVGJwv/Y2yXY5rBEKtw=)
                          14: 3137302e302e3231362e302f32322d3232203d3e20323635313431.roa (hash: WChbUTeiDJUjluJnuXRSWAfrWNrYM39uLeyJuP6p5DM=)
                          15: 323830343a326233383a653830303a3a2f33372d3337203d3e20323635313431.roa (hash: Yn2/2lfi5UNNM4q72Cm/EcSDqSt7fH928GBPgT7AVT0=)
                          16: 3134332e3235352e31342e302f32342d3234203d3e20323635313431.roa (hash: 6DdzedaGRR4ududrz8CHFxJ5y1QMECExKTpn2xJSkMA=)
                          17: 323830343a326233383a3a2f33322d3332203d3e20323635313431.roa (hash: N3+0QGHbTEtfWG/31eUOxzjEI9qcTWaQvA+/B1e2skk=)
                          18: 323830343a326233383a3a2f33342d3334203d3e20323635313431.roa (hash: bAqJQqimc3vzpll79BGBz4LdtZd9X5597Yigt7jVPJI=)
                          19: 3134332e3235352e31322e302f32332d3233203d3e20323635313431.roa (hash: Vrf9aCuzo3bAyb5wkiY8voGDwoR0tS6bnzH0GalOK6A=)
                          20: 3138392e39302e32342e302f32322d3234203d3e20323635313431.roa (hash: cUqJ+VMccOeulmz7j6lREnYQ/bvbngr2MyqckPk2NIY=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl
                          rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:31:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:7a:e5:c3:48:64:e5:3d:fc:38:a5:87:92:57:c2:a5:73:d7:91:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
        Validity
            Not Before: Nov 21 22:36:32 2024 GMT
            Not After : Nov 23 01:31:32 2024 GMT
        Subject: CN=9E7DB404205E50141026C0B8AB7C51FFDF37CADD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:91:35:58:31:9d:9b:00:2d:fe:99:de:c8:c6:
                    7d:37:48:8d:5a:53:71:b7:78:b3:31:2a:34:86:e3:
                    23:cc:5b:56:e2:d6:94:5c:22:11:9d:8d:11:ec:4d:
                    85:16:39:15:a7:f0:c0:b2:ff:b4:e8:34:f9:8d:1c:
                    1e:e7:a0:31:3b:60:38:82:83:4b:4f:2d:2e:a1:a0:
                    d3:94:53:ea:fb:72:bc:f2:6f:f4:ff:18:cf:39:cf:
                    85:66:b2:8c:dc:3f:57:4a:ca:a1:40:4a:cb:bd:f6:
                    9b:37:47:24:ac:e3:0e:8f:ad:f8:d1:d5:d0:7a:3f:
                    d5:3e:52:a0:eb:c2:0d:8d:63:89:9e:9d:18:ae:db:
                    bf:14:98:27:1f:5d:82:8d:f6:8f:db:30:20:b3:df:
                    5e:60:ea:8c:11:44:64:d2:83:bc:a8:bc:e0:7d:62:
                    8d:ea:d7:da:f5:83:e5:9f:ad:85:d4:3b:55:b2:4f:
                    ee:0f:78:22:c6:92:01:d2:29:73:62:a4:31:d0:a2:
                    7c:5d:e3:aa:6c:13:1a:40:20:0b:fb:fa:6f:28:73:
                    70:74:f1:df:4e:7b:da:9f:1d:da:17:34:d8:88:76:
                    ea:2b:cb:0b:b2:b6:7c:2e:04:1e:da:66:af:08:03:
                    83:ff:b5:00:7f:19:87:40:5c:19:1f:72:31:67:d7:
                    b4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7D:B4:04:20:5E:50:14:10:26:C0:B8:AB:7C:51:FF:DF:37:CA:DD
            X509v3 Authority Key Identifier:
                keyid:3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:c7:4d:9b:70:e4:23:36:81:4d:da:41:dc:10:ac:e5:f4:14:
         b1:39:70:dc:d6:76:24:df:2c:c9:1b:0a:e4:c5:d7:48:93:eb:
         7a:2d:f4:c3:0c:9b:78:09:a0:14:bd:c8:95:41:da:d7:cc:37:
         b1:a3:e1:b0:ae:bc:70:6f:15:e7:20:08:5f:e2:fe:12:f4:77:
         74:5f:e0:98:7c:09:93:58:74:93:51:bd:86:a3:23:11:ae:01:
         ad:49:7e:f0:75:76:f6:04:2b:92:9c:29:83:9b:11:03:3e:17:
         a7:6d:3f:91:71:1d:83:89:b3:fe:d1:a9:80:cb:61:c7:d7:02:
         c0:25:c9:d3:ee:2d:75:63:35:ec:32:cd:0b:d2:4b:3e:cd:eb:
         3e:61:0e:61:06:db:d7:05:4b:33:1f:1b:b2:62:b8:b8:f6:75:
         06:bc:8f:90:2b:c5:3e:60:fe:3f:30:dd:0f:7e:30:09:ad:ca:
         10:cb:a5:b4:66:4a:be:14:81:7c:4f:9e:d1:38:b5:84:a2:4f:
         33:71:c4:97:64:8d:28:87:9e:87:ff:23:8b:7c:ff:ea:c6:33:
         8e:1c:d1:25:bf:50:0e:f8:0c:f9:a3:3c:1a:56:40:e0:aa:14:
         77:8e:c1:41:9b:80:5c:3c:fe:b3:29:09:95:09:46:1e:34:a1:
         cf:9d:7b:f3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUDHrlw0hk5T38OKWHklfCpXPXkb8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZFNzdCODg1NUY2MURGMkFENjgxODVERDA5NzdCQ0I0
MkM3MDhGNDAeFw0yNDExMjEyMjM2MzJaFw0yNDExMjMwMTMxMzJaMDMxMTAvBgNV
BAMTKDlFN0RCNDA0MjA1RTUwMTQxMDI2QzBCOEFCN0M1MUZGREYzN0NBREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHkTVYMZ2bAC3+md7Ixn03SI1a
U3G3eLMxKjSG4yPMW1bi1pRcIhGdjRHsTYUWORWn8MCy/7ToNPmNHB7noDE7YDiC
g0tPLS6hoNOUU+r7crzyb/T/GM85z4VmsozcP1dKyqFASsu99ps3RySs4w6PrfjR
1dB6P9U+UqDrwg2NY4menRiu278UmCcfXYKN9o/bMCCz315g6owRRGTSg7yovOB9
Yo3q19r1g+WfrYXUO1WyT+4PeCLGkgHSKXNipDHQonxd46psExpAIAv7+m8oc3B0
8d9Oe9qfHdoXNNiIduorywuytnwuBB7aZq8IA4P/tQB/GYdAXBkfcjFn17SjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUnn20BCBeUBQQJsC4q3xR/983yt0wHwYDVR0j
BBgwFoAUP+d7iFX2HfKtaBhd0Jd7y0LHCPQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVhad0pMZUJETkF5UXVHaG5UdlNja3FTbXE3OVF1WGdCNDYzUm9OeW1j
djEvMC8zRkU3N0I4ODU1RjYxREYyQUQ2ODE4NUREMDk3N0JDQjQyQzcwOEY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGRTc3Qjg4NTVGNjFERjJB
RDY4MTg1REQwOTc3QkNCNDJDNzA4RjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RVhad0pMZUJETkF5UXVHaG5UdlNja3FTbXE3OVF1WGdCNDYzUm9OeW1jdjEvMC8z
RkU3N0I4ODU1RjYxREYyQUQ2ODE4NUREMDk3N0JDQjQyQzcwOEY0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANcdNm3DkIzaBTdpB3BCs5fQUsTlw3NZ2JN8syRsK5MXXSJPrei30wwybeAmg
FL3IlUHa18w3saPhsK68cG8V5yAIX+L+EvR3dF/gmHwJk1h0k1G9hqMjEa4BrUl+
8HV29gQrkpwpg5sRAz4Xp20/kXEdg4mz/tGpgMthx9cCwCXJ0+4tdWM17DLNC9JL
Ps3rPmEOYQbb1wVLMx8bsmK4uPZ1BryPkCvFPmD+PzDdD34wCa3KEMultGZKvhSB
fE+e0Ti1hKJPM3HEl2SNKIeeh/8ji3z/6sYzjhzRJb9QDvgM+aM8GlZA4KoUd47B
QZuAXDz+sykJlQlGHjShz5178w==
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:59 2024 by rpki-client on console-fra.rpki-client.org