Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.mft
File:                     10BF39CEE477C23BE60BA999BA7B70171BFB2C10.mft (raw, json)
Hash identifier:          mdnGfv0j7ccC86gI6vho7OwwxDYV5PtL6SX4sRY7Fpk=
Subject key identifier:   51:B1:58:4F:FF:A5:59:E1:18:8C:B9:F5:F1:54:A6:70:42:27:6B:95
Authority key identifier: 10:BF:39:CE:E4:77:C2:3B:E6:0B:A9:99:BA:7B:70:17:1B:FB:2C:10
Certificate issuer:       /CN=10BF39CEE477C23BE60BA999BA7B70171BFB2C10
Certificate serial:       248D8393F16ACBC96F880056B7222959344FD68A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.mft
Manifest number:          7A
Signing time:             Mon 01 Jul 2024 00:15:08 +0000
Manifest this update:     Mon 01 Jul 2024 00:10:08 +0000
Manifest next update:     Tue 02 Jul 2024 01:13:08 +0000
Files and hashes:         1: 323830343a366536343a3a2f33322d3430203d3e20323730353934.roa (hash: l3CaauS1ZQr/3WCpMbe09pUJCpDVJH3DFlx7TYcq86M=)
                          2: 3137372e33372e33302e302f32332d3233203d3e20323730353934.roa (hash: 4TBiFwDCvRFcE07V/YL0vEFa4YPmaAKnxvjXlq6OQ1Y=)
                          3: 3137372e33372e32382e302f32332d3233203d3e20323730353934.roa (hash: 6AN4jVMRDgjkwWnGJQe9X0hf2iwfu7k2E0h5KWnJI3s=)
                          4: 3137372e33372e32382e302f32342d3234203d3e20323730353934.roa (hash: M9/v73mCVe55di6eFfN0A8Iv7AqaF7acUI5PE8UEWdA=)
                          5: 3137372e33372e33302e302f32342d3234203d3e20323730353934.roa (hash: sWi3rplZNrPfj9/gHBY6y19LVPbs2NhCTy7c2mVf9Mo=)
                          6: 3137372e33372e32382e302f32322d3232203d3e20323730353934.roa (hash: DtpfdXe1Jvd4Uz0mL5V4qMN5vq2v8uZILMZ1lsOaXI0=)
                          7: 3137372e33372e32392e302f32342d3234203d3e20323730353934.roa (hash: 6IuaFZzazr+kerX5phgVPBPIkdMFSerk1LgU/RtvpvI=)
                          8: 10BF39CEE477C23BE60BA999BA7B70171BFB2C10.crl (hash: kMpku5v0tBUl4hCbWk+0uzhZqm0l9nVlFMlMe8q/kSI=)
                          9: 3137372e33372e33312e302f32342d3234203d3e20323730353934.roa (hash: WlAfL9l/bZLQZMrIVm6a39WYhlCVGU+QdHXeTTo4Nx8=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.crl
                          rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Jul 2024 20:04:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:8d:83:93:f1:6a:cb:c9:6f:88:00:56:b7:22:29:59:34:4f:d6:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BF39CEE477C23BE60BA999BA7B70171BFB2C10
        Validity
            Not Before: Jul  1 00:10:08 2024 GMT
            Not After : Jul  2 01:13:08 2024 GMT
        Subject: CN=51B1584FFFA559E1188CB9F5F154A67042276B95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:62:60:66:ea:3b:b8:69:16:ec:fd:2d:ce:b1:
                    80:5d:ae:93:7c:85:43:2f:7e:67:72:d3:18:85:83:
                    d4:4e:af:c0:92:9c:48:1a:82:bc:eb:96:dd:01:05:
                    e4:a7:1c:88:0c:7e:1c:73:f5:bb:43:1d:fc:fb:af:
                    08:27:eb:12:04:bc:ef:e3:39:5c:10:f4:18:e6:76:
                    6b:37:a7:c1:7e:ef:3a:51:71:05:00:6d:4d:11:6a:
                    5c:8e:e6:33:7f:de:f9:4f:93:0e:76:7e:7f:7c:69:
                    b0:f3:b9:d6:43:b4:58:46:b1:78:b0:d1:31:b8:73:
                    2c:86:46:8f:f4:b8:54:b4:b5:32:eb:41:56:08:25:
                    3d:b8:5f:67:12:fd:49:95:88:9d:fe:24:d9:81:02:
                    f8:d8:29:34:06:73:c3:a1:a5:2f:da:18:ee:ab:a8:
                    cc:bd:45:e1:9c:8f:63:57:89:ea:79:01:40:eb:8d:
                    d4:3c:8d:5a:d1:78:0b:04:a2:2a:6b:2f:14:97:2a:
                    5a:05:6b:95:cf:d0:59:7d:4e:8b:4c:a4:42:b1:f9:
                    26:f4:e9:7f:26:b1:24:92:f6:4a:72:56:56:e9:51:
                    b1:dd:f6:34:74:36:a9:6d:bd:2a:b4:41:52:54:20:
                    7b:cf:ec:78:ba:9f:59:8d:d3:be:de:fe:a2:19:17:
                    98:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B1:58:4F:FF:A5:59:E1:18:8C:B9:F5:F1:54:A6:70:42:27:6B:95
            X509v3 Authority Key Identifier:
                keyid:10:BF:39:CE:E4:77:C2:3B:E6:0B:A9:99:BA:7B:70:17:1B:FB:2C:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:71:40:3c:c1:98:59:57:81:41:e8:b5:c0:74:d4:1b:b0:7f:
         94:f3:d3:02:e6:0d:db:69:31:0e:c5:5c:08:eb:6f:bc:4b:53:
         2d:ef:d0:2e:54:51:3f:79:70:57:e5:66:3d:f8:08:93:00:d2:
         75:50:a4:cb:67:5d:68:95:02:06:25:79:da:9e:11:ba:cc:6d:
         95:31:d7:e7:02:e0:f7:24:38:b7:81:88:ec:db:46:2d:a8:4e:
         a4:2b:c2:03:b1:38:bd:b1:e9:17:c3:e5:5e:7b:20:5d:10:ca:
         6c:cc:d4:d0:03:55:6d:c7:e6:58:7e:de:c5:f3:0b:16:01:47:
         57:f1:27:f7:a9:4c:dc:17:27:c5:2f:6d:17:da:9c:cd:a0:1d:
         77:04:5e:f1:04:70:2d:45:6e:fb:60:45:4d:27:87:c5:51:de:
         ad:dc:e8:e8:0e:33:82:dc:a9:e1:fd:8b:7e:f4:a0:92:72:7c:
         73:c1:93:04:f9:36:46:77:08:32:8c:3a:1c:ec:84:a1:1e:c1:
         ef:8e:35:c5:63:d7:78:cd:ee:02:b5:e6:b2:fb:7a:34:3e:d3:
         73:c0:97:59:a4:d1:fc:0c:f9:3a:68:5e:4c:02:df:71:3a:94:
         81:eb:f0:28:1a:53:53:78:e8:a2:96:99:ea:0e:8f:aa:04:67:
         14:e7:fe:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 00:41:06 2024 by rpki-client on console-ams.rpki-client.org