Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.mft
File:                     6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.mft (raw, json)
Hash identifier:          8tvJ7adig8btVRpPWKK8LqlORZcoG91o1DVTXUDqDdE=
Subject key identifier:   59:BE:A8:C4:D8:E9:16:3F:DA:85:82:67:04:67:74:0F:E2:FE:A0:4A
Authority key identifier: 6F:F2:A4:03:3B:E3:4E:02:3E:9C:C8:CA:78:CA:78:5B:05:DE:7D:A4
Certificate issuer:       /CN=6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4
Certificate serial:       0773F03C9CC72E2778658237EADD242A3E74AC3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.mft
Manifest number:          013A
Signing time:             Fri 22 Nov 2024 22:34:29 +0000
Manifest this update:     Fri 22 Nov 2024 22:29:29 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:29 +0000
Files and hashes:         1: 323830343a323032303a3a2f33322d3438203d3e20323634343730.roa (hash: ooQZTpBuhMWG8/HzCLTJPNIsEHGYbVM1dcxg7XxiRxs=)
                          2: 6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.crl (hash: xfhMTi/7/gHMc//06dVcXIy28qcpibk6Aj0Xl0NcDwI=)
                          3: 3133312e3235352e38302e302f32322d3234203d3e20323634343730.roa (hash: EG9jp7bfX4cKoQGjOQft907cHph9KgvxlmkTjkhJJ3s=)
                          4: 323830343a323032303a3a2f3332203d3e20323634343730.roa (hash: 4PEmYYhXhot8vScHFGWDRyigkvEZN9hpZiflwO7mmtc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.crl
                          rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:73:f0:3c:9c:c7:2e:27:78:65:82:37:ea:dd:24:2a:3e:74:ac:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4
        Validity
            Not Before: Nov 22 22:29:29 2024 GMT
            Not After : Nov 24 01:00:29 2024 GMT
        Subject: CN=59BEA8C4D8E9163FDA8582670467740FE2FEA04A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:69:9d:dc:82:4d:0b:7b:f8:ae:ba:ef:65:16:
                    39:db:eb:3c:64:7f:8b:8f:29:1e:d1:da:8f:7e:9e:
                    70:63:8c:d8:5f:40:9a:07:31:fe:2c:e3:92:1e:c4:
                    9b:71:4f:5a:37:13:3c:ce:65:42:09:9c:ba:8a:59:
                    77:38:99:53:cb:4b:ff:56:37:7a:2d:3e:92:64:11:
                    10:7c:06:fa:71:fe:6e:d1:c0:2c:c0:58:31:b4:b0:
                    fa:95:bf:c9:f1:74:46:32:f4:d9:0c:1b:1b:75:44:
                    2f:b9:8a:32:17:08:c3:b6:57:e1:19:6b:8b:17:ed:
                    26:2b:85:97:0d:85:03:b8:ed:8c:f8:c4:74:23:c1:
                    e0:64:1c:1b:2d:9c:d8:66:8d:2e:a9:b8:7f:11:12:
                    75:53:45:71:ea:5c:2d:51:c5:6e:52:68:9f:66:72:
                    bd:d3:32:ae:8f:2a:ac:a3:b8:d4:aa:c8:d6:62:69:
                    0b:48:98:b3:64:8f:04:e3:dc:28:fc:37:8b:3d:c8:
                    7d:db:2d:47:84:66:97:b1:c0:e4:02:81:bb:82:41:
                    cc:0f:d6:82:f2:2a:53:f7:d0:cb:bc:e7:2a:f6:b4:
                    e5:39:cb:d6:8a:9a:d0:f3:54:dd:e5:6b:23:32:48:
                    65:13:fb:d2:aa:ad:0f:63:25:7f:e4:d8:4b:d8:c6:
                    bd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BE:A8:C4:D8:E9:16:3F:DA:85:82:67:04:67:74:0F:E2:FE:A0:4A
            X509v3 Authority Key Identifier:
                keyid:6F:F2:A4:03:3B:E3:4E:02:3E:9C:C8:CA:78:CA:78:5B:05:DE:7D:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:90:4a:1c:48:d0:9e:e6:94:e7:b0:3f:36:9c:3b:d4:d8:da:
         e2:00:81:7d:da:54:d8:f9:48:1a:fa:34:2d:0f:17:50:99:8d:
         43:d5:7f:74:3b:ff:5c:f6:aa:36:1c:9a:40:48:fa:e0:a4:05:
         d4:76:7d:d7:2b:f6:32:aa:e6:c8:20:9f:5d:52:88:e8:57:69:
         43:89:4c:c7:76:9f:02:9d:d7:3f:29:c8:3b:4e:e3:15:b4:b3:
         f0:29:58:84:26:5b:35:63:fe:f9:b1:14:2b:81:a8:25:3e:59:
         d7:f5:1c:90:42:05:60:13:74:b0:5f:c6:da:1a:86:e5:f0:50:
         20:a8:c9:5e:51:61:1f:41:96:d5:ce:71:69:1f:50:27:4c:8e:
         6e:15:aa:72:ad:de:be:8d:9e:10:f9:86:d9:f3:f4:42:33:0b:
         61:9f:8e:85:98:d4:1f:58:3d:2e:7b:ae:bc:7a:90:70:06:12:
         e6:0f:71:ea:a4:e6:58:82:a0:c6:10:08:a1:48:49:4e:0e:aa:
         81:5b:cb:0f:26:b2:e6:43:9b:e9:1d:e2:cd:e5:5c:cd:7d:b9:
         e5:70:97:93:50:70:04:c1:a9:d9:1e:a6:3d:e7:1b:6f:ca:e6:
         e2:c7:db:8a:1e:ee:b4:be:32:5e:7d:3e:74:d7:61:e7:22:7a:
         75:4e:73:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:44 2024 by rpki-client on console-ams.rpki-client.org