Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/2003446125EA52EEA4D454A94B69C79AEDEB7687.mft
File:                     2003446125EA52EEA4D454A94B69C79AEDEB7687.mft (raw, json)
Hash identifier:          qaDd/f2euvFad/gGsC2po05pD9150V98FsoMnUIcRx4=
Subject key identifier:   2F:0B:BC:95:C7:4A:17:16:DC:94:0B:B1:7A:18:48:07:6F:F7:4F:C5
Authority key identifier: 20:03:44:61:25:EA:52:EE:A4:D4:54:A9:4B:69:C7:9A:ED:EB:76:87
Certificate issuer:       /CN=2003446125EA52EEA4D454A94B69C79AEDEB7687
Certificate serial:       1F00F703906FC6C7FDAE3DBC65A41C38FE6B2348
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2003446125EA52EEA4D454A94B69C79AEDEB7687.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/2003446125EA52EEA4D454A94B69C79AEDEB7687.mft
Manifest number:          3B
Signing time:             Wed 26 Jun 2024 02:34:48 +0000
Manifest this update:     Wed 26 Jun 2024 02:29:48 +0000
Manifest next update:     Thu 27 Jun 2024 05:45:48 +0000
Files and hashes:         1: 323830343a333764343a3a2f33322d3332203d3e20323636343338.roa (hash: TUUYd0NccVuu9M4ekO1ueQ06Acp7xQX0Xdzh+iS7Xq8=)
                          2: 2003446125EA52EEA4D454A94B69C79AEDEB7687.crl (hash: g7qLWv6ltGNonnjty9EKkZH8KEU+cwguHPZ90wz/MMs=)
                          3: 3137302e38322e35302e302f32332d3233203d3e20323636343338.roa (hash: 0O29DjcojPdtPydRbpD8ITeWvO6sEsBV97Z9p9vrmzQ=)
                          4: 3137302e38322e34382e302f32332d3233203d3e20323636343338.roa (hash: mHuelaLuqLx5UaUMnE2z0r0vrdzplQvevgx72IVuFXU=)
                          5: 3137302e38322e34382e302f32322d3232203d3e20323636343338.roa (hash: YmC0sGUTLYnCUS0ERJ04i86WP3sEksD1+nD3PUknSag=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/2003446125EA52EEA4D454A94B69C79AEDEB7687.crl
                          rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/2003446125EA52EEA4D454A94B69C79AEDEB7687.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2003446125EA52EEA4D454A94B69C79AEDEB7687.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 03:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:00:f7:03:90:6f:c6:c7:fd:ae:3d:bc:65:a4:1c:38:fe:6b:23:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2003446125EA52EEA4D454A94B69C79AEDEB7687
        Validity
            Not Before: Jun 26 02:29:48 2024 GMT
            Not After : Jun 27 05:45:48 2024 GMT
        Subject: CN=2F0BBC95C74A1716DC940BB17A1848076FF74FC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c9:ca:0a:8a:c7:8e:7b:7d:a3:05:6a:90:76:
                    b5:cc:8d:d5:d9:25:c9:bf:58:71:6b:b8:ab:04:d5:
                    e0:ef:d3:1b:4c:07:5e:c5:c3:31:84:21:03:2a:f2:
                    31:14:a6:ff:65:c4:f4:8b:20:88:8b:a7:03:ff:58:
                    91:3b:b5:df:ab:a6:3e:f4:06:f7:82:bb:a9:f8:6e:
                    2c:2e:e8:ce:55:72:0a:63:64:15:b8:6f:9c:fb:18:
                    70:04:c8:96:81:d2:5a:ea:a7:66:e3:d9:7c:5b:94:
                    a5:8e:b5:46:c9:7d:de:2c:4f:d1:d1:8c:e8:79:17:
                    a6:a7:53:51:5a:f2:15:cc:b8:8d:96:9b:83:d9:32:
                    ad:e2:94:6f:68:0c:c1:b4:4b:d9:dc:d7:02:08:8c:
                    63:f4:46:91:03:98:9b:8c:1e:20:8e:ab:0e:28:7c:
                    a8:48:fb:ce:92:df:86:5a:2a:58:95:3a:8b:c3:b9:
                    be:53:be:52:9e:21:85:6c:64:67:2d:cb:6b:1a:ff:
                    5b:60:09:d4:17:48:b5:b6:4c:ef:eb:6b:df:11:b9:
                    37:34:04:1d:88:b2:a9:7f:df:23:8e:bb:c1:f9:ee:
                    5b:29:24:ea:c2:ec:11:4f:44:49:73:79:cf:a4:6b:
                    d6:6c:e6:bf:52:f9:5f:ca:f8:22:f2:ea:d3:50:46:
                    4c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0B:BC:95:C7:4A:17:16:DC:94:0B:B1:7A:18:48:07:6F:F7:4F:C5
            X509v3 Authority Key Identifier:
                keyid:20:03:44:61:25:EA:52:EE:A4:D4:54:A9:4B:69:C7:9A:ED:EB:76:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/2003446125EA52EEA4D454A94B69C79AEDEB7687.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2003446125EA52EEA4D454A94B69C79AEDEB7687.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/2003446125EA52EEA4D454A94B69C79AEDEB7687.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:32:45:6e:b1:ca:0e:41:46:17:62:1b:0a:47:de:21:c3:8d:
         15:78:5c:1b:de:2c:99:be:b4:15:26:e6:75:9d:e4:fe:96:38:
         62:a4:47:a0:57:34:d7:17:15:df:a2:1b:f2:61:2c:6e:ac:23:
         5c:30:a5:06:79:29:28:3d:49:9c:43:6d:65:d5:09:1e:87:06:
         da:48:4b:6a:92:66:06:a6:b6:3c:f3:e8:b5:33:71:c6:9d:25:
         3d:86:02:03:57:c5:49:b8:09:9e:fd:75:14:f4:c1:49:aa:42:
         7f:64:c2:06:39:cc:82:02:b2:71:21:2f:0c:c5:f8:69:29:3c:
         3d:89:bc:e1:ae:71:69:a7:65:fa:13:02:53:84:80:10:22:56:
         6c:1a:bd:0d:03:32:da:b1:29:80:90:58:af:06:7f:ae:37:89:
         19:79:95:53:1f:6b:3d:87:9d:7c:ba:89:f5:63:b0:b7:12:29:
         26:4d:51:45:6d:f4:44:80:3d:cf:39:87:1d:48:04:9d:8a:b2:
         99:e2:a6:42:8e:6d:05:c5:3f:70:82:11:a8:c1:fe:d3:fd:04:
         93:70:39:d4:4b:0c:1e:c9:6b:d9:e2:60:47:4c:ff:4e:c8:1d:
         04:3a:2b:d1:9b:19:11:92:2e:ae:e9:26:18:23:b2:3a:f4:5a:
         cb:f5:ea:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 06:20:57 2024 by rpki-client on console-fra.rpki-client.org