Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/2/8D8FEF42CB671E032CCE7021065F7CE02A10A552.mft
File:                     8D8FEF42CB671E032CCE7021065F7CE02A10A552.mft (raw, json)
Hash identifier:          o/3WVRm570mjGcmdeNAFyn6l/4uk6RODGoX3rUkfz9I=
Subject key identifier:   96:C6:99:29:72:DE:3A:7E:A6:34:BC:E6:0F:74:11:97:15:49:13:0F
Authority key identifier: 8D:8F:EF:42:CB:67:1E:03:2C:CE:70:21:06:5F:7C:E0:2A:10:A5:52
Certificate issuer:       /CN=8D8FEF42CB671E032CCE7021065F7CE02A10A552
Certificate serial:       53BEEF09A241F4C432FE2068D1D238CEB3D10C2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D8FEF42CB671E032CCE7021065F7CE02A10A552.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/2/8D8FEF42CB671E032CCE7021065F7CE02A10A552.mft
Manifest number:          76
Signing time:             Sun 30 Jun 2024 20:00:00 +0000
Manifest this update:     Sun 30 Jun 2024 19:55:00 +0000
Manifest next update:     Mon 01 Jul 2024 21:53:00 +0000
Files and hashes:         1: 34352e3233362e36372e302f32342d3234203d3e20323638323234.roa (hash: heNw41QdIkMbT7I19imT+6LgPUwCou1X5ucZv4gxee0=)
                          2: 323830343a346464633a3a2f33322d3332203d3e20323638323234.roa (hash: fqFP6MhniXAZOyA9hWUsDDT8nyUxevFQTOHIUkdg4XE=)
                          3: 34352e3233362e36352e302f32342d3234203d3e20323638323234.roa (hash: R4xMRXw4E5WuerUyxjyZfBn/gSFLpwJ/0NQFTGqrIqA=)
                          4: 34352e3233362e36342e302f32342d3234203d3e20323638323234.roa (hash: T1xnffg/JW/ZkxvAHx6Qfigjzrp1ROZpNOg/283aics=)
                          5: 34352e3233362e36342e302f32322d3232203d3e20323638323234.roa (hash: 6apui4qi81HF09PRxRrsU/eBCwKrfO+teFNqLW1P/ao=)
                          6: 8D8FEF42CB671E032CCE7021065F7CE02A10A552.crl (hash: TS09u1AcVVTI5zatfA0/vNoq0wa00ZOy2uDHwIwP9Jw=)
                          7: 34352e3233362e36362e302f32342d3234203d3e20323638323234.roa (hash: Rf8/eKphH+8ZUOHqrYm374OgLWcbD6VyPr3rgiaBvWE=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/2/8D8FEF42CB671E032CCE7021065F7CE02A10A552.crl
                          rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/2/8D8FEF42CB671E032CCE7021065F7CE02A10A552.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D8FEF42CB671E032CCE7021065F7CE02A10A552.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Jul 2024 20:04:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:be:ef:09:a2:41:f4:c4:32:fe:20:68:d1:d2:38:ce:b3:d1:0c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8FEF42CB671E032CCE7021065F7CE02A10A552
        Validity
            Not Before: Jun 30 19:55:00 2024 GMT
            Not After : Jul  1 21:53:00 2024 GMT
        Subject: CN=96C6992972DE3A7EA634BCE60F7411971549130F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:8a:36:7b:e2:10:e8:fa:92:7d:b6:86:78:
                    e8:0c:c5:c9:a6:ec:2c:04:ed:0b:ac:2b:5c:1b:47:
                    93:c3:82:81:a9:5b:d6:1d:4c:aa:a2:57:99:1a:a1:
                    b1:7e:55:ef:9b:ed:7c:fa:78:17:38:9a:89:f6:77:
                    94:7b:a5:5d:70:bd:f3:d4:1a:16:a6:11:14:4b:a4:
                    58:74:36:62:73:da:9d:42:4b:cf:7e:c8:4f:27:97:
                    66:26:d3:75:ce:14:c0:60:c7:89:9e:0c:f5:93:e6:
                    0a:e4:44:24:3f:72:b0:f4:1c:b4:90:6c:c1:93:6f:
                    d0:d9:bc:62:35:17:e6:c6:3c:91:62:bf:6c:6e:9e:
                    23:3c:73:ca:f6:bc:b7:f2:c6:ec:a2:bc:f5:c0:dc:
                    a3:b4:49:c2:0e:e0:37:90:bf:72:15:82:7b:16:5f:
                    bd:a9:5a:b9:ca:41:46:12:e2:a4:eb:46:e5:94:64:
                    bc:83:c1:77:cd:04:84:75:03:8b:4d:9c:c3:5d:86:
                    1e:61:4d:55:0c:91:f0:b7:12:b3:7e:ae:5e:6e:89:
                    b8:ab:1d:8b:10:92:b1:bf:b2:f3:71:36:be:93:64:
                    b4:56:6f:14:b4:22:05:5e:f0:63:d5:e4:6a:a8:87:
                    cf:2c:47:0b:cc:a1:8c:c2:37:e1:03:8b:d6:ae:5c:
                    5c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C6:99:29:72:DE:3A:7E:A6:34:BC:E6:0F:74:11:97:15:49:13:0F
            X509v3 Authority Key Identifier:
                keyid:8D:8F:EF:42:CB:67:1E:03:2C:CE:70:21:06:5F:7C:E0:2A:10:A5:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/2/8D8FEF42CB671E032CCE7021065F7CE02A10A552.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D8FEF42CB671E032CCE7021065F7CE02A10A552.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/2/8D8FEF42CB671E032CCE7021065F7CE02A10A552.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:cb:c9:66:bb:68:99:83:77:7f:d5:0f:ab:48:95:9d:be:37:
         b7:03:f5:f3:ee:e5:5d:2d:15:af:9e:32:2c:71:d0:d5:dd:31:
         17:aa:17:e2:16:84:15:0d:f6:8e:12:56:20:91:f3:c0:df:ae:
         6e:93:85:dd:01:68:51:ed:2d:05:63:19:e3:2b:a3:59:14:4c:
         53:20:ee:0e:a4:6f:44:46:7f:f1:59:8f:da:26:7b:ff:ab:99:
         c0:e9:3a:56:b4:88:af:12:b1:9c:e7:fe:e7:37:c2:73:ab:b5:
         c5:aa:95:9f:5c:e6:93:72:c3:37:96:4d:7e:4f:45:28:c4:69:
         fa:cc:82:74:0c:e1:d0:b2:2d:65:dd:3c:80:63:74:31:d6:c4:
         9b:a5:cb:5d:34:7e:93:9c:44:d8:b4:f9:63:d1:4b:fc:94:2b:
         03:7f:2a:a7:95:35:4d:32:7c:df:37:d5:a5:f2:29:3e:3d:d0:
         f0:b5:ea:ab:3e:5c:2f:f1:3e:cc:60:f4:55:b3:04:2b:6b:ac:
         40:a0:3d:8f:c0:9a:ed:e7:c3:9c:8f:28:e9:6d:f6:ac:69:0d:
         9a:d0:00:e1:79:7f:58:0d:2d:c3:34:c3:1f:43:32:de:ee:b6:
         b5:85:99:c5:67:f5:21:71:76:5e:28:8e:2e:12:58:48:a3:d9:
         a2:ae:b8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 23:02:13 2024 by rpki-client on console-ams.rpki-client.org