Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/648C0855082FB44E47607549445757FD4ABB0BD4.mft
File:                     648C0855082FB44E47607549445757FD4ABB0BD4.mft (raw, json)
Hash identifier:          GxznlU0U++lXxHjz/HkcLBfoVBfyXrGLNArmUspTatc=
Subject key identifier:   7C:E2:BF:7B:87:91:36:A0:72:51:14:22:C9:2B:8F:7A:4E:01:DB:06
Authority key identifier: 64:8C:08:55:08:2F:B4:4E:47:60:75:49:44:57:57:FD:4A:BB:0B:D4
Certificate issuer:       /CN=648C0855082FB44E47607549445757FD4ABB0BD4
Certificate serial:       410BF63567921BBC907AAE7689075DF7FCB3B157
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/648C0855082FB44E47607549445757FD4ABB0BD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/648C0855082FB44E47607549445757FD4ABB0BD4.mft
Manifest number:          23
Signing time:             Fri 22 Nov 2024 13:23:52 +0000
Manifest this update:     Fri 22 Nov 2024 13:18:52 +0000
Manifest next update:     Sat 23 Nov 2024 14:44:52 +0000
Files and hashes:         1: 323830343a383331383a3a2f33322d3332203d3e20323732313736.roa (hash: TPVGPWOQX/cU300xBlikgEFrpgEM5qA/wXpZH/BbeVU=)
                          2: 648C0855082FB44E47607549445757FD4ABB0BD4.crl (hash: e1skOAojJ467w5GMhe1xOhAHv+xnhokHSPyQBzpTH+A=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/648C0855082FB44E47607549445757FD4ABB0BD4.crl
                          rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/648C0855082FB44E47607549445757FD4ABB0BD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/648C0855082FB44E47607549445757FD4ABB0BD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:44:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:0b:f6:35:67:92:1b:bc:90:7a:ae:76:89:07:5d:f7:fc:b3:b1:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=648C0855082FB44E47607549445757FD4ABB0BD4
        Validity
            Not Before: Nov 22 13:18:52 2024 GMT
            Not After : Nov 23 14:44:52 2024 GMT
        Subject: CN=7CE2BF7B879136A072511422C92B8F7A4E01DB06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:42:84:fc:f2:c0:60:b0:54:f9:3a:a1:07:54:
                    66:ce:35:fd:3a:ba:0c:15:e2:9b:a7:48:23:5b:9b:
                    1e:a2:f0:ab:73:1f:76:e5:c6:67:3f:3a:72:c7:0d:
                    e8:34:68:04:19:2e:d1:9c:7c:bb:37:b7:c0:01:40:
                    83:d2:c9:c7:86:78:61:f1:f0:b2:05:6a:06:df:18:
                    23:fc:7a:b6:91:e7:cd:8a:ae:d4:70:01:86:2d:db:
                    4e:e8:61:0c:89:ec:5d:36:d5:e1:a5:bb:b8:3c:bb:
                    76:55:3b:fc:fd:2a:2a:5a:02:c2:df:f8:cf:78:65:
                    be:f0:50:d4:ff:54:9c:9d:cc:c4:35:5e:af:f4:c3:
                    ec:d3:44:ba:16:96:c4:20:7c:ef:b6:83:40:8f:03:
                    34:01:e4:ea:0f:49:4b:03:3c:b1:4f:a1:82:ad:73:
                    51:d9:e4:93:8f:ae:f8:dd:ee:61:94:6a:22:5f:f2:
                    d7:e1:56:1a:4f:eb:ad:69:68:7d:4c:0e:ea:23:10:
                    4a:bf:94:78:64:97:86:fe:fe:03:8e:47:d9:94:d5:
                    30:dd:18:78:5b:e6:fd:05:a8:06:79:94:dc:43:d1:
                    e0:61:f5:7d:e5:d9:2c:90:4c:49:ae:8a:c0:01:3f:
                    12:53:31:ea:aa:c3:d8:28:44:4e:d7:3a:8a:99:fe:
                    52:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E2:BF:7B:87:91:36:A0:72:51:14:22:C9:2B:8F:7A:4E:01:DB:06
            X509v3 Authority Key Identifier:
                keyid:64:8C:08:55:08:2F:B4:4E:47:60:75:49:44:57:57:FD:4A:BB:0B:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/648C0855082FB44E47607549445757FD4ABB0BD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/648C0855082FB44E47607549445757FD4ABB0BD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/648C0855082FB44E47607549445757FD4ABB0BD4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:0f:17:5a:30:b5:f9:7d:12:30:22:c3:fc:97:b8:6e:e0:5b:
         32:03:09:75:84:0a:46:10:50:24:e4:9b:f1:47:95:18:79:5c:
         a3:2a:3c:d2:c8:5e:e6:b8:fb:dc:70:bb:5b:90:91:31:a0:1c:
         b3:83:57:bc:02:39:64:e4:d3:1c:40:ad:d7:33:ee:24:8d:24:
         e0:8e:64:8f:0b:7d:b7:ae:1b:ab:75:ae:7f:2a:eb:14:91:a7:
         b7:dc:4e:8b:25:18:c1:cf:b0:b5:54:fd:c2:f2:cb:4e:42:d7:
         68:d5:72:9a:92:01:f0:10:e8:71:f6:13:57:f4:bf:6a:6d:05:
         e4:98:c9:bd:5a:f6:4b:d1:43:f4:91:23:d0:97:ed:31:56:d8:
         33:6a:33:5e:d1:9d:3f:50:1f:15:4d:6a:1c:38:5c:f6:f8:ae:
         02:00:4d:1f:ad:b6:1a:53:90:f9:44:ea:63:0a:cc:9f:98:d7:
         be:52:f2:3d:45:28:ac:da:60:14:64:cd:cb:cb:c1:62:51:be:
         e3:9f:22:f6:d9:92:59:77:8d:ef:a8:3d:20:a7:13:29:a7:04:
         ef:62:4a:e8:3e:5b:20:0f:31:36:db:02:2d:65:ff:e2:cc:26:
         c5:87:1e:a7:a3:a2:e8:10:04:02:af:62:13:b6:64:92:f3:cb:
         b3:c5:c9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:53 2024 by rpki-client on console-ams.rpki-client.org