Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.mft
File:                     96088310B0454DFFF2FF457C587DBC38970A3CA8.mft (raw, json)
Hash identifier:          2AunNH8b5cPfISbiyKsDEgi3aA4MaXtcAthDXG6yhqk=
Subject key identifier:   D5:36:0D:96:10:CC:C0:BC:45:81:3E:78:07:D2:E9:9E:03:3E:9F:19
Authority key identifier: 96:08:83:10:B0:45:4D:FF:F2:FF:45:7C:58:7D:BC:38:97:0A:3C:A8
Certificate issuer:       /CN=96088310B0454DFFF2FF457C587DBC38970A3CA8
Certificate serial:       2A02BB2EE70C3274C4356295C589D724CF71CD1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.mft
Manifest number:          0137
Signing time:             Fri 22 Nov 2024 18:43:08 +0000
Manifest this update:     Fri 22 Nov 2024 18:38:08 +0000
Manifest next update:     Sat 23 Nov 2024 19:11:08 +0000
Files and hashes:         1: 34352e3232362e3133382e302f32332d3233203d3e20323636393637.roa (hash: ZL++6b8HBSQ2WBrsxj42PUUcrWCavMiFSipkxhtvbKs=)
                          2: 96088310B0454DFFF2FF457C587DBC38970A3CA8.crl (hash: KZj0cgdWET5K+qqukvRJ8IPwQbFKfab2jrz2LowI7lk=)
                          3: 323830343a343631343a653030303a3a2f33352d3335203d3e20323636393637.roa (hash: 4bu61uHcZgnOOvzZFLxD/oGCfDP72kAvyLh9K3qu4lY=)
                          4: 323830343a343631343a653030303a3a2f33362d3336203d3e20323636393637.roa (hash: IzwhaqLVrf3aNzv4B9cDZ113m2CfSD5/5TXcXCcUm6E=)
                          5: 323830343a343631343a663030303a3a2f33362d3336203d3e20323636393637.roa (hash: efzPqPshfWLr/L2LuGluORsM29z7wi/ldwWzWFYYQOI=)
                          6: 34352e3232362e3133382e302f32342d3234203d3e20323636393637.roa (hash: CbnMv/SaWKzKPg5g1fZ3zrHxjPhE9CdjU29Whq82gug=)
                          7: 34352e3232362e3133392e302f32342d3234203d3e20323636393637.roa (hash: vNXyeXP84IQ1Ot/Z819l+6OYa+aALWdSi7sSVf8lwIo=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.crl
                          rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:11:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:02:bb:2e:e7:0c:32:74:c4:35:62:95:c5:89:d7:24:cf:71:cd:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96088310B0454DFFF2FF457C587DBC38970A3CA8
        Validity
            Not Before: Nov 22 18:38:08 2024 GMT
            Not After : Nov 23 19:11:08 2024 GMT
        Subject: CN=D5360D9610CCC0BC45813E7807D2E99E033E9F19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:15:c6:d6:dd:c1:9f:41:df:87:61:70:b5:1b:
                    0e:a1:d8:01:e4:c4:f6:cc:e6:2a:74:6c:22:5e:a5:
                    19:ed:96:45:52:15:b9:10:9c:8f:d4:da:2c:ac:44:
                    67:8c:8f:6a:f9:09:fc:34:fb:55:53:b5:e0:be:1c:
                    05:32:f1:58:e2:b0:c1:a9:23:03:d4:bc:bc:1c:62:
                    4f:91:f5:6b:65:c4:e0:84:a0:ab:70:91:6c:e6:0f:
                    ed:4f:4d:2c:89:96:25:b9:51:39:62:72:3a:e2:74:
                    72:a4:d1:a1:fc:06:41:24:62:aa:5a:3a:ef:6a:09:
                    89:3a:e3:a1:e9:c9:cc:d0:18:43:94:f8:6e:23:62:
                    4d:eb:dc:83:c9:9d:70:dd:d1:99:2f:06:9b:aa:6f:
                    1c:60:3e:c1:3d:b7:31:0b:02:16:64:72:ac:82:f7:
                    d0:b8:a6:4c:ec:52:94:4d:2c:d3:ef:b3:07:c4:2b:
                    a4:cc:73:5f:dd:d8:73:83:2a:d7:80:bf:9f:d4:1e:
                    a3:4b:93:8f:b8:58:93:6f:3a:9a:35:44:c7:42:c0:
                    56:6a:b9:56:0e:d9:5b:60:4f:eb:4d:09:79:83:57:
                    b6:76:cf:c5:86:5a:26:1f:20:87:f3:d6:a7:5b:cf:
                    7a:b4:2c:68:4c:34:1b:e5:14:cf:c5:a6:af:21:09:
                    61:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:36:0D:96:10:CC:C0:BC:45:81:3E:78:07:D2:E9:9E:03:3E:9F:19
            X509v3 Authority Key Identifier:
                keyid:96:08:83:10:B0:45:4D:FF:F2:FF:45:7C:58:7D:BC:38:97:0A:3C:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:2d:0b:62:8d:06:88:e2:24:c8:78:84:99:a5:97:ce:5c:62:
         fd:98:64:51:52:60:31:a7:9f:35:92:9f:f7:b3:5a:03:66:ce:
         43:14:5d:d3:72:c2:68:44:21:78:57:d3:55:6b:c1:43:19:93:
         4e:68:7c:7b:6f:7e:0a:50:44:5f:e2:78:0f:eb:a2:29:67:b5:
         27:ff:14:7a:fa:52:84:02:26:37:0c:8d:e4:03:f0:2b:c9:ca:
         46:66:17:83:c8:0b:37:ed:3a:13:af:af:c0:f1:ba:b3:71:a9:
         86:9f:dd:2e:81:03:5e:88:69:b3:50:54:05:a1:fd:31:92:92:
         7b:f6:ab:1a:16:55:98:de:70:97:98:9a:85:d4:f8:7f:ef:bf:
         29:7e:55:e3:03:1c:13:16:01:e1:45:05:92:d5:ea:55:95:d7:
         cc:19:6f:29:b8:12:e8:4d:18:24:75:93:25:2b:b8:a9:7e:41:
         90:c2:0b:c0:6a:c2:ee:94:1d:4e:ba:81:a6:5e:42:95:f7:84:
         33:bb:00:fa:75:d8:40:4a:0e:95:1e:1e:e6:50:1c:44:b3:33:
         9e:13:17:cd:1e:96:23:e0:ec:ca:9f:ab:5e:61:59:00:4a:66:
         34:e8:bc:45:88:d9:7b:df:a8:2b:48:8b:90:80:76:86:de:38:
         11:ae:f6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:23 2024 by rpki-client on console-fra.rpki-client.org