Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.mft
File:                     3CF129D24760CA58DEE1B42CDACAE4407710A219.mft (raw, json)
Hash identifier:          /PmCKbPBgnOrMomqSo2g5vnW6uIE/I1c1GUg1th6Xtc=
Subject key identifier:   D7:76:D9:14:F4:78:EB:45:A1:08:DE:F6:9C:A0:9B:32:E8:C1:96:39
Authority key identifier: 3C:F1:29:D2:47:60:CA:58:DE:E1:B4:2C:DA:CA:E4:40:77:10:A2:19
Certificate issuer:       /CN=3CF129D24760CA58DEE1B42CDACAE4407710A219
Certificate serial:       4A30CDDA807E2C58FE684F90DC85A17FB3BF5E3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.mft
Manifest number:          0134
Signing time:             Fri 22 Nov 2024 07:32:20 +0000
Manifest this update:     Fri 22 Nov 2024 07:27:20 +0000
Manifest next update:     Sat 23 Nov 2024 10:24:20 +0000
Files and hashes:         1: 3139302e392e37372e302f32342d3234203d3e20323731363432.roa (hash: WbCN0REQddL3ErCz0I0mp/0E6WBHYisYnK1h58aAMAM=)
                          2: 3CF129D24760CA58DEE1B42CDACAE4407710A219.crl (hash: zV6eA3n91IqYjeNSa0BvlodRTC7pFS+Bl94G9Fz9E7o=)
                          3: 3139302e392e37362e302f32322d3232203d3e20323731363432.roa (hash: VTsSIA1f6tA7g6JEQbc3cz3p6tJXwisRJ5F8wTnGvc8=)
                          4: 3139302e392e37382e302f32342d3234203d3e20323731363432.roa (hash: cyTlpUqN4xzdAdIn/3jJBNGYwRC2+VgFClL8e7EYnMo=)
                          5: 3139302e392e37392e302f32342d3234203d3e20323731363432.roa (hash: PZeT/hrdcU167SE/aWaODWJUcHO1FqorVvc4p1E7Hgk=)
                          6: 3139302e392e37362e302f32342d3234203d3e20323731363432.roa (hash: +sYK/MlzyUTc9tMt6NDcrb2/9a4YLYauLj0aNIYGip0=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.crl
                          rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:30:cd:da:80:7e:2c:58:fe:68:4f:90:dc:85:a1:7f:b3:bf:5e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CF129D24760CA58DEE1B42CDACAE4407710A219
        Validity
            Not Before: Nov 22 07:27:20 2024 GMT
            Not After : Nov 23 10:24:20 2024 GMT
        Subject: CN=D776D914F478EB45A108DEF69CA09B32E8C19639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:81:ca:12:ae:9c:9c:9f:9b:50:4b:1d:62:b2:
                    99:91:95:44:b9:dd:b3:6d:e2:fb:56:e8:b6:14:a3:
                    5c:9e:52:1e:47:56:8b:44:7a:b9:cb:91:1d:0e:75:
                    39:9d:82:c2:c7:8b:43:f5:f8:25:9f:ca:79:e4:19:
                    07:47:0f:cd:94:f0:ce:57:93:c2:3d:98:c3:56:11:
                    fd:47:b6:1e:29:91:46:40:7d:50:53:fb:84:ad:6f:
                    d9:d5:53:33:9e:55:ec:ab:c8:e0:4a:37:7b:18:a6:
                    16:00:ac:14:01:f5:bc:68:b6:61:52:c4:8f:a7:71:
                    6a:2a:6c:d1:11:a3:7e:f7:e0:f5:d4:b0:ab:d9:20:
                    51:32:fe:74:c1:c0:50:be:fd:da:55:59:9b:ce:30:
                    5a:75:c6:fa:bb:a7:e9:a9:3a:62:1f:98:e2:74:16:
                    2d:91:b5:38:c2:12:fb:ab:fb:76:9c:1e:e4:e2:ae:
                    77:20:19:74:4c:d0:9a:9a:5c:ef:08:ad:4a:e3:f0:
                    62:ee:18:60:e7:18:dc:41:54:16:36:b5:65:aa:85:
                    ec:9b:04:01:ac:fe:bb:14:78:6e:f8:25:7c:08:f4:
                    a5:54:cc:66:77:9e:1b:ab:35:5f:d1:d3:f8:2c:70:
                    ba:3e:7e:81:91:98:03:b5:d2:0a:a1:a5:c7:77:d4:
                    ae:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:76:D9:14:F4:78:EB:45:A1:08:DE:F6:9C:A0:9B:32:E8:C1:96:39
            X509v3 Authority Key Identifier:
                keyid:3C:F1:29:D2:47:60:CA:58:DE:E1:B4:2C:DA:CA:E4:40:77:10:A2:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:c2:7f:87:2f:57:1c:4c:fb:13:a4:28:1f:10:b3:49:a6:f5:
         4b:b2:57:aa:af:12:f7:7c:b0:f1:ed:90:1a:52:b9:e9:04:12:
         53:c5:1d:f6:ec:b1:62:53:fa:25:24:51:e0:f3:45:07:70:62:
         c1:5c:85:9e:6c:06:9e:de:1b:6f:0e:5e:37:47:9f:bf:b6:4a:
         f4:21:50:39:7f:bc:37:d7:e2:52:ed:e6:13:54:f2:fd:c0:7d:
         d0:92:74:e2:45:0b:54:41:53:2f:7f:95:6a:0d:80:92:1e:13:
         49:aa:90:7e:41:79:97:25:51:b8:bc:54:a0:05:15:7d:53:d9:
         c8:fc:21:79:38:94:c7:51:3e:b0:42:c4:b6:66:b4:e8:d8:cb:
         47:73:06:a5:94:c8:79:4a:b2:61:46:0f:1c:97:18:57:79:19:
         75:06:57:07:e6:52:8f:75:4c:1c:e9:e4:ed:31:c5:9f:12:e2:
         26:ca:66:7f:95:23:1d:0f:5e:29:ff:28:93:85:bc:e3:d6:90:
         f1:e1:4b:ae:c8:d5:d6:66:f0:2b:bb:8c:72:46:60:ef:c9:2f:
         f8:5f:b9:e9:46:7e:b3:87:f7:20:9c:a4:09:b6:81:eb:f6:5e:
         61:30:01:f3:4b:25:e1:8b:eb:ac:99:55:69:7a:97:1f:66:c2:
         e8:8a:76:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:13 2024 by rpki-client on console-fra.rpki-client.org