Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FGEpzEM2AHPA8uSvaY5uxoP9mQavB7yC7SepttSuD76q/1/CA13AD3243174A46B6FCF9E3D5E495650BB23938.mft
File:                     CA13AD3243174A46B6FCF9E3D5E495650BB23938.mft (raw, json)
Hash identifier:          wzOmDqPtKMVw+uZbJG0/o3lmDoHjPlg0Ux8uOOklhOQ=
Subject key identifier:   BE:D9:3A:9E:C2:2D:EF:3C:F3:20:6F:AC:F9:50:0E:CA:7D:37:68:3A
Authority key identifier: CA:13:AD:32:43:17:4A:46:B6:FC:F9:E3:D5:E4:95:65:0B:B2:39:38
Certificate issuer:       /CN=CA13AD3243174A46B6FCF9E3D5E495650BB23938
Certificate serial:       7BF2CB1DBBFE55EAFBD4B00D75E020B09352DF80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA13AD3243174A46B6FCF9E3D5E495650BB23938.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FGEpzEM2AHPA8uSvaY5uxoP9mQavB7yC7SepttSuD76q/1/CA13AD3243174A46B6FCF9E3D5E495650BB23938.mft
Manifest number:          013C
Signing time:             Mon 25 Nov 2024 19:52:16 +0000
Manifest this update:     Mon 25 Nov 2024 19:47:16 +0000
Manifest next update:     Tue 26 Nov 2024 22:51:16 +0000
Files and hashes:         1: 323830343a386565383a3a2f33322d313238203d3e20323733343535.roa (hash: 4IR5NOgljMICTEuUQYrPN5eYDFLG+Lmg12xvPoyfHQc=)
                          2: CA13AD3243174A46B6FCF9E3D5E495650BB23938.crl (hash: yhK4yPn2ewHQKvNvwdb/cWmG2ThxOZ2/x0pzZo9QIKg=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FGEpzEM2AHPA8uSvaY5uxoP9mQavB7yC7SepttSuD76q/1/CA13AD3243174A46B6FCF9E3D5E495650BB23938.crl
                          rsync://rpki-repo.registro.br/repo/FGEpzEM2AHPA8uSvaY5uxoP9mQavB7yC7SepttSuD76q/1/CA13AD3243174A46B6FCF9E3D5E495650BB23938.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA13AD3243174A46B6FCF9E3D5E495650BB23938.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f2:cb:1d:bb:fe:55:ea:fb:d4:b0:0d:75:e0:20:b0:93:52:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA13AD3243174A46B6FCF9E3D5E495650BB23938
        Validity
            Not Before: Nov 25 19:47:16 2024 GMT
            Not After : Nov 26 22:51:16 2024 GMT
        Subject: CN=BED93A9EC22DEF3CF3206FACF9500ECA7D37683A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4b:7f:59:4f:50:6e:f7:20:96:c8:63:fa:1a:
                    05:70:12:ab:4f:d7:d2:e0:8f:ee:d7:1a:38:d1:93:
                    a6:e8:ac:71:dc:04:ef:cf:bf:12:63:37:14:19:11:
                    68:79:0d:ac:7f:66:84:6e:50:fd:78:2f:67:5d:46:
                    c3:ab:54:05:63:54:b1:71:71:ca:ce:1d:ae:59:ea:
                    6a:19:30:29:6c:78:20:86:cb:28:6f:98:d1:ef:8e:
                    85:53:e7:52:78:e4:52:03:24:cf:be:32:46:6f:f1:
                    51:9f:b0:fe:3e:4b:90:0e:87:dc:5a:5e:85:9a:a0:
                    81:ec:32:84:9c:56:54:5e:54:b3:b0:30:e6:fc:74:
                    72:57:df:0c:41:66:a3:fe:80:8e:11:e4:f2:3b:8e:
                    6e:e1:1a:bf:51:88:48:9b:44:17:fa:01:b3:5d:4f:
                    7c:04:ab:53:15:3e:ef:f0:4e:0e:b8:11:38:c9:0d:
                    46:5c:d9:3e:30:1b:6d:a6:24:fa:30:c8:8c:50:fe:
                    0d:ab:95:f5:15:3c:9d:15:3e:68:70:a5:8f:9f:99:
                    34:f4:c8:e5:b3:ea:4f:bb:c4:f5:f3:af:a5:92:82:
                    4b:13:4b:de:48:fd:04:d0:0c:5f:67:0b:50:df:32:
                    95:83:04:5a:c4:5b:15:84:8e:38:6d:ed:1a:97:af:
                    e2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D9:3A:9E:C2:2D:EF:3C:F3:20:6F:AC:F9:50:0E:CA:7D:37:68:3A
            X509v3 Authority Key Identifier:
                keyid:CA:13:AD:32:43:17:4A:46:B6:FC:F9:E3:D5:E4:95:65:0B:B2:39:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FGEpzEM2AHPA8uSvaY5uxoP9mQavB7yC7SepttSuD76q/1/CA13AD3243174A46B6FCF9E3D5E495650BB23938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA13AD3243174A46B6FCF9E3D5E495650BB23938.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FGEpzEM2AHPA8uSvaY5uxoP9mQavB7yC7SepttSuD76q/1/CA13AD3243174A46B6FCF9E3D5E495650BB23938.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:0e:f5:43:47:6a:fb:3c:67:ae:d0:48:c0:c2:3d:88:8a:04:
         13:c2:72:6e:74:9d:0d:20:7b:c7:58:1c:8a:5b:74:03:60:b6:
         81:25:6c:86:1d:da:c9:f0:ed:01:fa:13:a4:42:4f:78:c7:45:
         83:bb:95:0a:8a:07:85:73:c1:5a:d5:91:4e:6e:d9:45:cb:49:
         a4:d8:d9:f6:6c:27:d9:db:7c:5a:78:82:a6:35:e9:c8:95:96:
         56:a5:5a:7d:25:b1:65:30:ac:4e:12:db:43:f3:cb:06:02:25:
         4d:7b:05:71:83:25:45:85:83:18:78:73:71:6a:fe:d5:c3:0b:
         0e:f3:21:fb:a6:fc:7b:e9:94:14:e0:58:35:e6:5c:8e:b8:ce:
         64:c9:3e:b4:af:78:4b:df:08:9f:c1:e4:0a:70:f0:d2:51:17:
         4f:cb:de:61:ec:d0:32:b3:e8:8d:55:27:d2:88:95:33:5b:d3:
         fc:49:12:5b:f3:a8:4d:57:dd:ed:04:4b:15:b3:01:64:51:84:
         7c:de:53:9e:9a:d4:f4:3f:87:3d:82:87:e6:49:a1:81:bd:d0:
         fa:d7:43:64:23:49:d8:26:f1:c6:52:92:06:d9:7d:c9:81:56:
         bb:b8:af:17:85:1b:bb:92:5f:57:02:85:8a:48:e8:68:cd:7d:
         c4:ec:f2:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUe/LLHbv+Ver71LANdeAgsJNS34AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0ExM0FEMzI0MzE3NEE0NkI2RkNGOUUzRDVFNDk1NjUw
QkIyMzkzODAeFw0yNDExMjUxOTQ3MTZaFw0yNDExMjYyMjUxMTZaMDMxMTAvBgNV
BAMTKEJFRDkzQTlFQzIyREVGM0NGMzIwNkZBQ0Y5NTAwRUNBN0QzNzY4M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7S39ZT1Bu9yCWyGP6GgVwEqtP
19Lgj+7XGjjRk6borHHcBO/PvxJjNxQZEWh5Dax/ZoRuUP14L2ddRsOrVAVjVLFx
ccrOHa5Z6moZMClseCCGyyhvmNHvjoVT51J45FIDJM++MkZv8VGfsP4+S5AOh9xa
XoWaoIHsMoScVlReVLOwMOb8dHJX3wxBZqP+gI4R5PI7jm7hGr9RiEibRBf6AbNd
T3wEq1MVPu/wTg64ETjJDUZc2T4wG22mJPowyIxQ/g2rlfUVPJ0VPmhwpY+fmTT0
yOWz6k+7xPXzr6WSgksTS95I/QTQDF9nC1DfMpWDBFrEWxWEjjht7RqXr+JFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUvtk6nsIt7zzzIG+s+VAOyn03aDowHwYDVR0j
BBgwFoAUyhOtMkMXSka2/Pnj1eSVZQuyOTgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkdFcHpFTTJBSFBBOHVTdmFZNXV4b1A5bVFhdkI3eUM3U2VwdHRTdUQ3
NnEvMS9DQTEzQUQzMjQzMTc0QTQ2QjZGQ0Y5RTNENUU0OTU2NTBCQjIzOTM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMTNBRDMyNDMxNzRBNDZC
NkZDRjlFM0Q1RTQ5NTY1MEJCMjM5MzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RkdFcHpFTTJBSFBBOHVTdmFZNXV4b1A5bVFhdkI3eUM3U2VwdHRTdUQ3NnEvMS9D
QTEzQUQzMjQzMTc0QTQ2QjZGQ0Y5RTNENUU0OTU2NTBCQjIzOTM4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoA71Q0dq+zxnrtBIwMI9iIoEE8JybnSdDSB7x1gcilt0A2C2gSVshh3ayfDt
AfoTpEJPeMdFg7uVCooHhXPBWtWRTm7ZRctJpNjZ9mwn2dt8WniCpjXpyJWWVqVa
fSWxZTCsThLbQ/PLBgIlTXsFcYMlRYWDGHhzcWr+1cMLDvMh+6b8e+mUFOBYNeZc
jrjOZMk+tK94S98In8HkCnDw0lEXT8veYezQMrPojVUn0oiVM1vT/EkSW/OoTVfd
7QRLFbMBZFGEfN5TnprU9D+HPYKH5kmhgb3Q+tdDZCNJ2CbxxlKSBtl9yYFWu7iv
F4Ubu5JfVwKFikjoaM19xOzydg==
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:58 2024 by rpki-client on console-fra.rpki-client.org