Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.mft
File:                     0A6CE41314DED3332665E69E87FF0E48E950B3A3.mft (raw, json)
Hash identifier:          9k+Lf/CZi6IFobMMAiqQ4i5zXRXZ1K6IuQHZ3oVyVro=
Subject key identifier:   87:63:65:86:19:3C:10:57:84:D4:51:A1:1A:B3:00:1E:FF:9C:95:1B
Authority key identifier: 0A:6C:E4:13:14:DE:D3:33:26:65:E6:9E:87:FF:0E:48:E9:50:B3:A3
Certificate issuer:       /CN=0A6CE41314DED3332665E69E87FF0E48E950B3A3
Certificate serial:       77E5AAF8DF405CB13E9C33843C7A407393A2BD0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.mft
Manifest number:          0135
Signing time:             Mon 25 Nov 2024 15:14:52 +0000
Manifest this update:     Mon 25 Nov 2024 15:09:52 +0000
Manifest next update:     Tue 26 Nov 2024 15:30:52 +0000
Files and hashes:         1: 3230302e3136302e31362e302f32302d3234203d3e203232313438.roa (hash: dfjnzZs+eaXumT61ek7iM/qPRguLPQkqogQErNsIoI0=)
                          2: 0A6CE41314DED3332665E69E87FF0E48E950B3A3.crl (hash: 3G/bw1BxfuOkOynZCoZ+skvXVuz3IXk2LQ938mSov2c=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.crl
                          rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 15:30:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e5:aa:f8:df:40:5c:b1:3e:9c:33:84:3c:7a:40:73:93:a2:bd:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A6CE41314DED3332665E69E87FF0E48E950B3A3
        Validity
            Not Before: Nov 25 15:09:52 2024 GMT
            Not After : Nov 26 15:30:52 2024 GMT
        Subject: CN=87636586193C105784D451A11AB3001EFF9C951B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e2:07:4c:44:62:c1:33:dc:a2:ca:ce:a7:f4:
                    62:19:1e:17:c8:00:0e:32:a3:8a:3b:b6:0d:7a:76:
                    45:d9:57:a5:02:6f:79:b1:5a:9e:68:5c:3f:a0:51:
                    d0:61:64:a1:66:f2:30:9f:fb:fa:b2:64:86:d6:1a:
                    51:ce:25:c3:77:7c:5b:58:0f:07:a3:9c:6b:43:38:
                    67:a7:29:e1:34:cb:2c:aa:6a:8c:02:4e:62:24:0f:
                    bd:2a:a3:8c:da:b5:a9:e7:cf:f0:b8:cc:e4:89:96:
                    ba:27:0b:ac:d8:c7:b9:62:4c:b2:f6:72:52:7a:3c:
                    dd:a0:dd:38:91:9d:0a:10:af:72:65:5d:6b:0b:ee:
                    d8:88:1d:07:b0:d7:15:92:8e:f6:ce:80:1f:7e:bb:
                    d3:d4:38:d4:cc:62:0c:c8:ac:a3:bc:d3:93:09:90:
                    83:52:eb:3c:38:cf:6e:a5:9d:dd:85:94:a3:38:b0:
                    89:d9:5f:70:1e:35:94:e7:8e:66:fe:cd:ab:a9:06:
                    81:d5:b0:24:ee:fd:ed:7f:69:39:48:6f:ce:ec:a1:
                    4c:04:c7:c5:31:33:e5:52:b3:41:db:f8:95:01:17:
                    f1:10:0d:23:ae:ec:7e:9e:4c:a1:93:b2:f0:44:da:
                    41:5b:0c:1e:6e:b3:95:d0:60:6f:41:09:5e:a1:72:
                    06:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:63:65:86:19:3C:10:57:84:D4:51:A1:1A:B3:00:1E:FF:9C:95:1B
            X509v3 Authority Key Identifier:
                keyid:0A:6C:E4:13:14:DE:D3:33:26:65:E6:9E:87:FF:0E:48:E9:50:B3:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:b2:02:99:eb:01:a2:a0:5b:e4:13:7e:fb:11:b9:25:ad:ef:
         1b:07:c8:75:ea:40:da:55:2b:b1:50:81:af:90:7e:28:58:57:
         18:a8:d3:ec:f0:ea:6a:37:d3:d3:d6:2f:18:2f:27:94:c2:f5:
         1b:a8:9c:88:0b:39:87:0e:39:fc:0a:cf:7d:f6:49:8d:87:68:
         ff:db:74:59:5b:83:b5:b0:48:8c:6b:bc:8f:bd:17:2d:4f:36:
         bd:c9:6b:d4:00:26:88:9b:8a:5c:c7:46:a7:52:7a:70:e2:df:
         56:ab:6f:b9:20:c1:66:89:45:2b:30:a9:f6:a0:71:ae:aa:eb:
         09:fa:3f:95:e5:89:bb:6b:4a:c9:e4:ed:02:07:65:63:c9:2b:
         66:6d:3c:e6:35:d5:5a:c2:c2:32:e6:8e:aa:c8:c3:64:a3:6e:
         0b:42:75:1a:c2:45:a8:63:42:f1:0b:34:1e:bd:5b:0a:22:53:
         6b:e6:04:7f:28:90:ff:08:c9:67:8a:b5:16:7d:ca:74:2d:58:
         ee:d1:a3:9f:7d:1e:72:fe:ed:66:cd:98:11:62:88:e3:57:3d:
         59:90:4e:fb:40:c4:7a:ad:63:cd:66:f2:42:3a:37:c1:a3:3b:
         b9:2e:bd:23:a6:81:5e:d0:3a:38:85:dd:8c:3e:03:58:88:eb:
         1d:e5:d5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:28 2024 by rpki-client on console-ams.rpki-client.org