Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.mft
File:                     4D3D5BA9F9B5356D2A4244549680670908498017.mft (raw, json)
Hash identifier:          3duioeZASq7L11kRT6FdCmIF+h0QLUj/oN5xjcmM84U=
Subject key identifier:   0B:C2:D2:A9:58:4A:3A:45:8F:83:93:EF:E0:D3:3A:0B:87:02:20:72
Authority key identifier: 4D:3D:5B:A9:F9:B5:35:6D:2A:42:44:54:96:80:67:09:08:49:80:17
Certificate issuer:       /CN=4D3D5BA9F9B5356D2A4244549680670908498017
Certificate serial:       3DEAC6B6F333607D11319BEB6F2ED6DEAACAEE6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.mft
Manifest number:          0137
Signing time:             Fri 22 Nov 2024 10:07:36 +0000
Manifest this update:     Fri 22 Nov 2024 10:02:36 +0000
Manifest next update:     Sat 23 Nov 2024 13:06:36 +0000
Files and hashes:         1: 323830343a3133303a323030303a3a2f34382d3438203d3e203238323634.roa (hash: nqFTAlXgNWdCS0wYy9drOTPSicLzrKEdyTapDahBWBo=)
                          2: 323830343a3133303a323030313a3a2f34382d3438203d3e203238323634.roa (hash: k6+8trGgtFAfDkJ70qnmVA86HhFldXyrBoqSLeCz6/o=)
                          3: 3137372e32322e3234302e302f32312d3234203d3e203238323634.roa (hash: vK92mp4IhIG4UmAiJf9Cgb8zHw0wezLCf5VahRRN+qw=)
                          4: 3137392e3132342e302e302f32312d3234203d3e203238323634.roa (hash: HFs6UUuiB3xOEDHJGU5kSLCOq+HTMt7CJOgDG2+sThE=)
                          5: 3138372e31372e3137362e302f32302d3234203d3e203238323634.roa (hash: 8181un+dNsW1/dG+ZNXczGI+1nSI1YcasTMzGXfaF6A=)
                          6: 4D3D5BA9F9B5356D2A4244549680670908498017.crl (hash: ksd5svJ68huxKkXuzb/lvZaw1vUdDmdV1GCkH7Mojwg=)
                          7: 323830343a3133303a3a2f33322d3333203d3e203238323634.roa (hash: i2fFyxNEdk9q3dTHMOvfcoPjXxEJuHSoqT5icCs5XE8=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.crl
                          rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ea:c6:b6:f3:33:60:7d:11:31:9b:eb:6f:2e:d6:de:aa:ca:ee:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D3D5BA9F9B5356D2A4244549680670908498017
        Validity
            Not Before: Nov 22 10:02:36 2024 GMT
            Not After : Nov 23 13:06:36 2024 GMT
        Subject: CN=0BC2D2A9584A3A458F8393EFE0D33A0B87022072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c3:a9:6a:4a:c1:95:0c:6d:7f:47:16:be:ea:
                    e0:8b:a7:bd:42:ce:e5:2d:b9:b5:56:c0:c1:14:ad:
                    cb:a0:c6:97:63:ce:cc:df:7f:f3:f6:05:2b:08:c8:
                    fe:3b:4a:bc:6f:8a:43:35:57:e7:b3:b8:f0:5f:e7:
                    e8:b8:cf:55:a1:41:ee:54:d1:01:1d:46:11:3e:0a:
                    39:8c:93:7f:ff:ff:bc:3b:ba:ba:d8:8a:ce:82:a8:
                    03:f5:77:f7:f7:22:e6:20:04:d7:2b:66:06:8f:ff:
                    90:ae:bc:20:9c:e5:55:1f:7c:d9:72:d3:d7:2d:27:
                    38:00:39:bd:2f:eb:b7:9e:53:17:ac:d7:c0:93:28:
                    4c:f0:cb:10:f7:7a:22:77:d1:74:06:51:8b:90:e2:
                    9a:e2:95:5a:93:7d:5f:6e:24:2b:26:38:b0:fd:2f:
                    e4:23:c1:8c:be:d7:1e:91:31:cb:4e:6a:16:e7:8e:
                    43:31:db:40:ee:8d:13:a1:e2:17:a5:5c:24:b5:be:
                    78:31:d9:7a:73:f8:3f:96:04:82:ae:79:28:8e:ca:
                    c9:e3:b0:bd:38:93:05:04:89:d4:20:7f:d0:37:e2:
                    c9:5b:a3:8e:83:20:b0:6f:6b:17:5d:8c:92:86:f1:
                    09:de:77:92:c7:8f:5f:80:47:b9:53:ea:89:d8:7d:
                    6c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C2:D2:A9:58:4A:3A:45:8F:83:93:EF:E0:D3:3A:0B:87:02:20:72
            X509v3 Authority Key Identifier:
                keyid:4D:3D:5B:A9:F9:B5:35:6D:2A:42:44:54:96:80:67:09:08:49:80:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:c9:a9:f2:bf:80:30:57:52:a3:9d:f0:8a:5d:95:09:2f:d6:
         be:d0:43:57:64:33:ef:01:0c:0d:7f:b9:d3:94:31:11:c9:13:
         dd:60:a5:5d:0b:84:8c:20:7e:d2:c7:c6:18:df:08:be:b0:55:
         d1:2b:68:a0:4f:f2:e0:37:a4:7c:6a:78:ac:72:d7:53:89:9d:
         2f:00:95:bb:60:5c:67:be:7c:f2:cc:cb:c0:70:b2:b1:8f:3f:
         4e:bd:b6:6c:06:05:b3:65:6d:a5:06:2b:bd:26:64:1c:e0:20:
         08:05:fb:6e:f8:71:92:31:16:e6:49:8e:98:e5:43:d1:08:c8:
         0a:15:7b:02:2a:97:94:f4:9e:f0:ed:63:ee:b9:44:6e:ff:ef:
         3a:09:21:4a:71:15:66:ba:ea:cc:d2:13:47:c5:9a:a1:2a:f4:
         b2:33:96:10:a1:3e:0e:66:1d:45:2d:06:24:fe:4f:11:31:c0:
         c0:bd:4f:76:7e:43:e1:86:d6:55:b5:bc:e9:6b:11:a3:30:ed:
         6e:3c:71:f6:35:09:a3:b3:32:a7:ae:6b:97:6e:de:ae:61:b8:
         c6:12:69:fb:35:26:be:29:71:6a:bd:39:fd:55:1d:1c:ec:46:
         15:02:61:14:74:1a:9d:3e:e4:33:c8:6e:8a:95:c8:2b:5f:3c:
         04:3f:64:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPerGtvMzYH0RMZvrby7W3qrK7m8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQzRDVCQTlGOUI1MzU2RDJBNDI0NDU0OTY4MDY3MDkw
ODQ5ODAxNzAeFw0yNDExMjIxMDAyMzZaFw0yNDExMjMxMzA2MzZaMDMxMTAvBgNV
BAMTKDBCQzJEMkE5NTg0QTNBNDU4RjgzOTNFRkUwRDMzQTBCODcwMjIwNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDw6lqSsGVDG1/Rxa+6uCLp71C
zuUtubVWwMEUrcugxpdjzszff/P2BSsIyP47SrxvikM1V+ezuPBf5+i4z1WhQe5U
0QEdRhE+CjmMk3///7w7urrYis6CqAP1d/f3IuYgBNcrZgaP/5CuvCCc5VUffNly
09ctJzgAOb0v67eeUxes18CTKEzwyxD3eiJ30XQGUYuQ4prilVqTfV9uJCsmOLD9
L+QjwYy+1x6RMctOahbnjkMx20DujROh4helXCS1vngx2Xpz+D+WBIKueSiOysnj
sL04kwUEidQgf9A34slbo46DILBvaxddjJKG8Qned5LHj1+AR7lT6onYfWwpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUC8LSqVhKOkWPg5Pv4NM6C4cCIHIwHwYDVR0j
BBgwFoAUTT1bqfm1NW0qQkRUloBnCQhJgBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWR3R05nUTRnWHE4d0JUTkhmaE5yRzRRVTJOekpaZ0NSdnZ6OTNRUDh5
WG0vMS80RDNENUJBOUY5QjUzNTZEMkE0MjQ0NTQ5NjgwNjcwOTA4NDk4MDE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzREM0Q1QkE5RjlCNTM1NkQy
QTQyNDQ1NDk2ODA2NzA5MDg0OTgwMTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RWR3R05nUTRnWHE4d0JUTkhmaE5yRzRRVTJOekpaZ0NSdnZ6OTNRUDh5WG0vMS80
RDNENUJBOUY5QjUzNTZEMkE0MjQ0NTQ5NjgwNjcwOTA4NDk4MDE3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAcmp8r+AMFdSo53wil2VCS/WvtBDV2Qz7wEMDX+505QxEckT3WClXQuEjCB+
0sfGGN8IvrBV0StooE/y4DekfGp4rHLXU4mdLwCVu2BcZ7588szLwHCysY8/Tr22
bAYFs2VtpQYrvSZkHOAgCAX7bvhxkjEW5kmOmOVD0QjIChV7AiqXlPSe8O1j7rlE
bv/vOgkhSnEVZrrqzNITR8WaoSr0sjOWEKE+DmYdRS0GJP5PETHAwL1Pdn5D4YbW
VbW86WsRozDtbjxx9jUJo7Myp65rl27ermG4xhJp+zUmvilxar05/VUdHOxGFQJh
FHQanT7kM8huipXIK188BD9kXw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:51 2024 by rpki-client on console-fra.rpki-client.org