Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.mft
File:                     D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.mft (raw, json)
Hash identifier:          XPJfv5WuA06F8jjR05OdCsX0obaBq/HTiiFLZzQ9a60=
Subject key identifier:   F1:86:A9:54:9E:3B:3D:AE:42:50:A3:2F:5D:FE:36:0C:91:0C:67:65
Authority key identifier: D6:BB:4A:91:FB:EF:B5:DE:B7:F9:10:E0:E5:34:65:EE:64:3D:EF:EE
Certificate issuer:       /CN=D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE
Certificate serial:       4BC788CC5B912726E2BF218898BE8CFAEB7A41CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.mft
Manifest number:          32
Signing time:             Fri 22 Nov 2024 09:08:03 +0000
Manifest this update:     Fri 22 Nov 2024 09:03:03 +0000
Manifest next update:     Sat 23 Nov 2024 09:53:03 +0000
Files and hashes:         1: 3137372e3132352e3230342e302f32322d3234203d3e20323632333436.roa (hash: jokGSTWUAhA10ALtGfqvf6xVRPayWVwXe/H8aZXO1/k=)
                          2: 3137302e3135302e3130302e302f32322d3234203d3e20323632333436.roa (hash: G90varhrRS1Bmj26Sjde+mhs/SvRSh9YC9tcWMBnn1o=)
                          3: 323830343a3831633a3a2f33322d3438203d3e20323632333436.roa (hash: CNiIZxl/3E62K6LTCXfWr6Ed/xVAfg9Q3TQDVI/WH1c=)
                          4: 3137392e3130372e35362e302f32312d3234203d3e20323632333436.roa (hash: M+PTOGA+D+DkyZs9OhmUeDPVW15sANJ3OsKuVVlHZoc=)
                          5: D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.crl (hash: bG+hYhBkTVUN8175IPBamvO77yuAI5wRLqSbovOZ9yg=)
                          6: 3137372e3132352e3136302e302f32312d3234203d3e20323632333436.roa (hash: v9eIzZEwHo/xUPFGVamZwsMcE43cor5VRlR2OfPMfzU=)
                          7: 3134332e3230322e3232342e302f32322d3234203d3e20323632333436.roa (hash: f6LpZPPeOn+4tPVGb9AWZuOxhxPVQ1oQOFu1ImQYwws=)
                          8: 3133382e39372e302e302f32322d3234203d3e20323632333436.roa (hash: cuVPSasSVkUJd0P2hhdUOeAto3bXiHwvdThoubGvVdQ=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.crl
                          rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:53:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:c7:88:cc:5b:91:27:26:e2:bf:21:88:98:be:8c:fa:eb:7a:41:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE
        Validity
            Not Before: Nov 22 09:03:03 2024 GMT
            Not After : Nov 23 09:53:03 2024 GMT
        Subject: CN=F186A9549E3B3DAE4250A32F5DFE360C910C6765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f2:95:51:ff:11:25:82:e5:a3:da:f6:b5:5c:
                    5e:4c:9d:b9:85:dc:e9:40:df:24:b8:c1:47:90:e6:
                    b8:cf:f8:be:81:5a:11:3e:4b:13:bd:74:ca:04:b5:
                    14:d3:7f:3f:79:b2:70:03:81:6b:eb:a4:31:38:15:
                    44:ee:58:9b:eb:85:c4:0b:4d:ee:25:25:3c:de:8f:
                    7d:b7:ff:6f:55:42:82:99:a6:cd:be:14:44:c9:a4:
                    6c:10:93:ce:5e:79:7a:5a:37:d7:87:c7:1c:c5:b8:
                    4d:aa:8d:e4:f7:4e:be:e9:b6:63:70:10:f7:74:dc:
                    9a:e3:3e:12:b1:f4:b2:27:f9:57:a2:4a:1b:6b:aa:
                    f1:b6:e4:79:fa:32:fa:75:58:8c:6b:cf:2f:57:97:
                    bb:04:4e:45:c4:0c:f0:74:36:b9:07:97:d6:97:bd:
                    31:60:a4:3a:92:fe:6c:a2:b6:20:ae:b6:18:ba:2e:
                    ea:64:86:9d:30:b9:c0:49:b3:07:4e:48:6b:fc:39:
                    59:2a:b3:47:ff:23:70:da:fa:4c:cd:76:bb:2c:d3:
                    f9:94:1c:bf:ec:a6:f2:e0:f2:22:97:be:d4:17:4b:
                    cb:2a:2a:ee:c9:ab:86:ad:e0:f9:ee:f8:db:d8:5d:
                    5f:56:fb:fe:81:e2:a3:51:11:a5:be:99:9c:be:1b:
                    11:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:86:A9:54:9E:3B:3D:AE:42:50:A3:2F:5D:FE:36:0C:91:0C:67:65
            X509v3 Authority Key Identifier:
                keyid:D6:BB:4A:91:FB:EF:B5:DE:B7:F9:10:E0:E5:34:65:EE:64:3D:EF:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:3f:55:e6:44:7b:66:a1:e5:be:de:e3:e3:f4:e5:ea:46:22:
         12:71:22:0c:b5:ff:2a:26:da:a3:93:ad:01:19:f4:2e:b2:fd:
         b5:28:a9:a1:aa:40:bb:49:62:26:3a:1b:57:57:85:06:3f:c4:
         f2:0a:ad:9b:95:c2:e6:20:08:04:c4:b1:ad:af:0a:0e:fd:b4:
         a9:fe:aa:2a:a9:a1:f6:a0:cc:2d:e9:fb:d4:c7:eb:c3:29:20:
         c7:63:61:02:a1:44:60:16:9d:5a:a0:07:05:13:05:ae:a4:53:
         9c:0f:f6:97:aa:d9:41:f9:8d:94:d5:86:19:79:9d:df:a1:7f:
         9e:5a:fd:73:ac:8e:46:14:a1:6d:27:24:0d:ad:b6:18:bb:be:
         6e:01:b9:d6:23:ca:1a:ac:b0:a6:9b:33:e0:e8:83:7c:f7:e8:
         a7:4f:bb:fc:a2:36:04:46:b7:4f:21:c9:db:f2:0a:3b:bf:ee:
         de:d0:5a:de:02:f7:1f:ab:88:b0:c1:aa:08:ae:cb:5b:72:49:
         9e:a0:fd:25:37:9f:5b:cd:19:a0:f9:5d:7b:a5:60:2f:cd:9d:
         e6:28:2b:de:43:c4:7b:96:c0:e5:2d:b1:e0:66:1b:d5:6f:ab:
         62:a9:59:f0:8f:c6:c5:41:b9:08:82:db:2b:e4:1c:f2:a6:5b:
         81:38:66:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:52 2024 by rpki-client on console-fra.rpki-client.org