Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft
File:                     45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft (raw, json)
Hash identifier:          yIT8us8G4qzcNSuezib4JmvKNoO2JclmUICi2G+wjyg=
Subject key identifier:   5A:93:66:CE:2E:70:D6:C7:49:18:A3:C4:B4:9C:EC:1F:B3:D1:69:BF
Authority key identifier: 45:D0:64:44:E7:E6:E8:1B:AA:7F:EF:D4:80:0A:93:70:73:96:AC:A6
Certificate issuer:       /CN=45D06444E7E6E81BAA7FEFD4800A93707396ACA6
Certificate serial:       2E784046F4CD83DE57EF764CCFC77821A13C2BF0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft
Manifest number:          0138
Signing time:             Fri 22 Nov 2024 22:29:22 +0000
Manifest this update:     Fri 22 Nov 2024 22:24:22 +0000
Manifest next update:     Sat 23 Nov 2024 23:11:22 +0000
Files and hashes:         1: 323830343a353934383a3a2f33322d3332203d3e20323638313831.roa (hash: /nDXTOAb1pnvDsF2crYiVQugRV897T8IVXwxPiPza5M=)
                          2: 34352e3137312e31362e302f32332d3233203d3e20323638313831.roa (hash: z/QrLN+niSf2iohxYNKq7Og8dV5Qt9xXNMRjh6XUFWk=)
                          3: 34352e3137312e31392e302f32342d3234203d3e20323638313831.roa (hash: 0fE9lB667MPldkPTpYVjeH7JLfcnra7Ym5x/HtXoz0k=)
                          4: 34352e3137312e31382e302f32342d3234203d3e20323638313831.roa (hash: dBJ4chKFQcsltllHlrhCjDHEa4Ij697iP4z11nHMwNo=)
                          5: 34352e3137312e31362e302f32342d3234203d3e20323638313831.roa (hash: +04rYly3B8ii//u3IcAJKewqGgBf9QJ05Zn5Lrlr3QA=)
                          6: 45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl (hash: +sG1eYWHq9BsaFa6oBiwDy8WQX2Cr4dNWw+qK57BX3I=)
                          7: 34352e3137312e31372e302f32342d3234203d3e20323638313831.roa (hash: Tys3HIFazZfu5zCZdOQpysxCMVRiGQlWGqerFqWS11M=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl
                          rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:11:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:78:40:46:f4:cd:83:de:57:ef:76:4c:cf:c7:78:21:a1:3c:2b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D06444E7E6E81BAA7FEFD4800A93707396ACA6
        Validity
            Not Before: Nov 22 22:24:22 2024 GMT
            Not After : Nov 23 23:11:22 2024 GMT
        Subject: CN=5A9366CE2E70D6C74918A3C4B49CEC1FB3D169BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:63:c6:85:13:b8:78:7a:7e:c0:6d:23:42:f1:
                    78:17:c5:d0:9b:6b:ff:23:0e:02:e2:c6:f1:e1:03:
                    c5:a1:ee:a7:cc:5c:7b:ec:dc:2f:35:a4:e1:51:9c:
                    e5:1c:e4:32:de:27:a0:55:c0:0c:a7:ae:71:fa:59:
                    0b:2b:bf:dc:53:22:c7:de:8a:00:82:ef:bb:3d:20:
                    81:5c:21:76:14:a5:63:8f:2c:bb:92:4d:fe:1d:c8:
                    b9:77:5d:36:bd:33:71:85:79:76:d6:ad:7d:b6:3a:
                    39:0a:17:07:95:83:cc:a3:07:5e:67:a1:13:eb:cd:
                    a5:2a:e6:b0:cd:1c:4f:d7:d9:d6:1b:41:84:e7:d8:
                    38:f4:6d:87:23:96:78:86:d4:6a:bb:31:e6:1a:ea:
                    41:4c:c1:32:6f:fa:c3:bf:e4:09:49:85:14:fa:09:
                    8f:bb:2b:42:e5:28:89:cc:66:16:90:ec:4d:75:4e:
                    03:9d:7d:8a:96:b8:cf:f1:0f:58:4f:c8:7d:95:81:
                    a4:f7:9e:2a:1d:7e:01:49:70:6c:21:b7:1b:b3:f6:
                    e1:7e:10:c6:2c:08:3c:29:2f:d7:46:5a:47:11:b7:
                    07:07:19:ad:58:99:ba:14:de:0a:05:51:65:6b:ce:
                    f9:3c:93:df:b9:41:ba:0a:72:d9:b4:7b:8d:83:5a:
                    15:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:93:66:CE:2E:70:D6:C7:49:18:A3:C4:B4:9C:EC:1F:B3:D1:69:BF
            X509v3 Authority Key Identifier:
                keyid:45:D0:64:44:E7:E6:E8:1B:AA:7F:EF:D4:80:0A:93:70:73:96:AC:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:72:d5:54:ed:96:56:86:76:ff:10:66:44:a3:11:e8:1a:8e:
         62:dd:ea:d2:55:f6:55:ae:61:22:36:a3:47:26:5e:b6:f9:37:
         9a:41:59:29:81:ef:ec:37:db:d1:81:2b:bc:1a:c6:5c:58:b4:
         4f:f8:66:8e:bb:19:ea:c1:a5:2d:4b:74:99:b8:7d:7e:f5:c3:
         10:83:e1:93:e9:f2:6c:32:cc:86:33:b4:ad:17:da:74:67:9f:
         71:66:ad:96:19:81:c9:0b:52:c6:79:60:07:38:8f:00:c2:06:
         8e:a0:2a:fe:0c:8a:41:d4:55:c7:6e:3c:1e:b1:02:19:70:80:
         a6:df:8e:e6:06:7a:a6:60:4b:0f:c2:a3:08:d2:6c:e0:bc:9b:
         a7:a2:ea:a6:ad:bb:57:58:01:0d:c5:65:43:ae:8b:70:67:89:
         3c:47:0e:d1:f2:4c:08:49:a8:f3:94:5c:22:ca:be:35:04:ef:
         70:13:b6:09:72:ca:88:94:9f:20:2f:9f:f0:9e:f1:79:c3:1b:
         c4:b8:f9:e0:ba:01:96:64:f9:c4:ae:b7:d2:ed:f5:7f:e4:0f:
         9c:03:6f:d4:ee:3b:da:76:51:d0:0d:9b:49:17:aa:6e:b3:68:
         fd:59:02:00:48:92:17:3a:e9:5a:cf:72:37:fc:c4:78:35:a0:
         e1:21:94:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:37 2024 by rpki-client on console-fra.rpki-client.org