Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/34DD33570D927291CC982869E0C396FAAE2C34A1.mft
File:                     34DD33570D927291CC982869E0C396FAAE2C34A1.mft (raw, json)
Hash identifier:          LrbLkmRtFcWzThxW7GVRiwdK69ouLIIreLg0gCFLd8M=
Subject key identifier:   4E:D0:73:4E:C4:51:DE:18:C3:A8:CA:CD:90:08:98:33:48:C7:35:4F
Authority key identifier: 34:DD:33:57:0D:92:72:91:CC:98:28:69:E0:C3:96:FA:AE:2C:34:A1
Certificate issuer:       /CN=34DD33570D927291CC982869E0C396FAAE2C34A1
Certificate serial:       19372BBE10CE202321E792FF584A0523A8F1FF08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34DD33570D927291CC982869E0C396FAAE2C34A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/34DD33570D927291CC982869E0C396FAAE2C34A1.mft
Manifest number:          10
Signing time:             Sat 23 Nov 2024 03:09:06 +0000
Manifest this update:     Sat 23 Nov 2024 03:04:06 +0000
Manifest next update:     Sun 24 Nov 2024 04:02:06 +0000
Files and hashes:         1: 34DD33570D927291CC982869E0C396FAAE2C34A1.crl (hash: a1QOHjxtzma9IJxw9ECg0QBJRWVDuBkACTChtNuZLmo=)
                          2: 3133312e302e3139322e302f32332d3233203d3e203631373139.roa (hash: GOvZ0rJC9N+rNmzBG8uibHi3JnDQbh7ETyp5zQ7swZM=)
                          3: 323830343a316235303a3a2f33322d3332203d3e203631373139.roa (hash: wR9/QV7+x4803JaO1eYqPQSq4VWKAk/R4EczOsqzZiA=)
                          4: 3133312e302e3139342e302f32332d3233203d3e203631373139.roa (hash: oEB4Jg74/Zv+Dk3d1GtT1MKzygNTeLq0xv9InsDYJyA=)
                          5: 3133312e302e3139322e302f32322d3232203d3e203631373139.roa (hash: 8ptOJygfyJEku0as0cp5xtnHjWpUuaT8uYhbyoafLfk=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/34DD33570D927291CC982869E0C396FAAE2C34A1.crl
                          rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/34DD33570D927291CC982869E0C396FAAE2C34A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34DD33570D927291CC982869E0C396FAAE2C34A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:37:2b:be:10:ce:20:23:21:e7:92:ff:58:4a:05:23:a8:f1:ff:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34DD33570D927291CC982869E0C396FAAE2C34A1
        Validity
            Not Before: Nov 23 03:04:06 2024 GMT
            Not After : Nov 24 04:02:06 2024 GMT
        Subject: CN=4ED0734EC451DE18C3A8CACD9008983348C7354F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1d:3e:d4:bf:3e:ba:a3:be:cd:e5:9a:fb:d5:
                    46:37:a7:45:b1:71:04:9b:26:c4:b2:f8:5c:c8:48:
                    af:da:23:ed:77:ba:11:9f:4f:49:93:60:54:08:42:
                    9f:fc:21:46:e5:10:1d:c8:a9:28:a2:c3:76:05:d4:
                    3a:35:e1:f7:a7:b9:06:b4:6c:c8:b6:bd:7d:5a:dd:
                    2e:f5:57:2b:e3:25:a4:1d:3d:9d:c7:07:70:e2:78:
                    54:f3:b2:d3:ed:51:aa:53:dc:b1:49:33:1b:c5:5f:
                    d7:84:f5:31:d3:1e:2e:a7:a7:c5:50:96:ab:8b:3e:
                    1a:11:50:fe:35:c3:1b:58:24:0e:24:a8:eb:ca:26:
                    ff:f7:27:79:e3:5d:69:a2:89:c8:f0:4e:0b:ed:d2:
                    e0:61:42:75:bd:9c:2e:8a:58:70:38:05:97:39:65:
                    7a:c2:8a:3a:80:2e:06:9d:c5:88:c3:a1:72:52:2a:
                    b7:7c:a7:48:c7:9b:82:aa:68:3c:b9:2d:9a:c3:d2:
                    d6:e6:0b:e2:e1:32:06:86:2e:8d:43:cd:a9:72:98:
                    b9:f3:f0:75:ba:fe:54:e3:82:a0:67:c4:92:80:9b:
                    1b:8a:a7:86:a7:d2:34:28:4e:4d:0e:a4:25:13:e2:
                    80:ba:2c:0a:35:53:8e:6c:44:90:9a:4d:c5:91:28:
                    97:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D0:73:4E:C4:51:DE:18:C3:A8:CA:CD:90:08:98:33:48:C7:35:4F
            X509v3 Authority Key Identifier:
                keyid:34:DD:33:57:0D:92:72:91:CC:98:28:69:E0:C3:96:FA:AE:2C:34:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/34DD33570D927291CC982869E0C396FAAE2C34A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34DD33570D927291CC982869E0C396FAAE2C34A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/34DD33570D927291CC982869E0C396FAAE2C34A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:68:59:ac:28:ed:02:4b:ea:48:68:23:b9:fc:1c:22:42:ff:
         44:84:d8:2b:1c:b8:3d:44:80:78:6f:4c:ec:95:8b:60:54:4e:
         69:00:e6:52:cc:6e:91:fe:6f:e6:c6:63:35:35:9e:51:f5:0f:
         96:b8:97:77:68:9c:e9:33:f0:ac:c3:43:74:82:17:a7:aa:d7:
         37:75:05:56:b2:db:cd:77:62:00:d1:5e:5e:76:dc:09:c2:a8:
         87:cb:a8:9a:ea:e4:68:24:2a:ee:69:2e:e3:fd:c1:5f:b0:9c:
         db:f9:e3:22:7e:b9:3a:00:0e:06:3a:94:60:94:7c:8c:fd:58:
         70:ec:fc:82:97:56:7a:e9:03:b4:82:2d:b6:74:21:72:14:ca:
         d2:1c:16:8c:97:54:76:25:5f:e5:52:9c:2c:a6:93:fd:a7:2d:
         46:21:fb:fb:b6:87:7c:2a:0d:d3:c8:8c:b1:df:83:9a:e0:43:
         7d:90:85:61:a5:d3:8d:4f:d8:a6:5e:8d:a5:5d:6d:8c:9f:a3:
         71:89:c3:df:01:c5:79:86:2b:6d:36:33:8c:05:87:d0:20:f3:
         7b:97:c4:2e:ea:b6:a7:e1:1f:cf:9a:af:e1:83:d9:67:e2:18:
         b7:32:ce:26:d8:7a:e0:6d:8b:d4:f2:65:54:9a:e2:5a:b5:67:
         d4:cc:e6:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGTcrvhDOICMh55L/WEoFI6jx/wgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzRERDMzNTcwRDkyNzI5MUNDOTgyODY5RTBDMzk2RkFB
RTJDMzRBMTAeFw0yNDExMjMwMzA0MDZaFw0yNDExMjQwNDAyMDZaMDMxMTAvBgNV
BAMTKDRFRDA3MzRFQzQ1MURFMThDM0E4Q0FDRDkwMDg5ODMzNDhDNzM1NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcHT7Uvz66o77N5Zr71UY3p0Wx
cQSbJsSy+FzISK/aI+13uhGfT0mTYFQIQp/8IUblEB3IqSiiw3YF1Do14fenuQa0
bMi2vX1a3S71VyvjJaQdPZ3HB3DieFTzstPtUapT3LFJMxvFX9eE9THTHi6np8VQ
lquLPhoRUP41wxtYJA4kqOvKJv/3J3njXWmiicjwTgvt0uBhQnW9nC6KWHA4BZc5
ZXrCijqALgadxYjDoXJSKrd8p0jHm4KqaDy5LZrD0tbmC+LhMgaGLo1DzalymLnz
8HW6/lTjgqBnxJKAmxuKp4an0jQoTk0OpCUT4oC6LAo1U45sRJCaTcWRKJd9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUTtBzTsRR3hjDqMrNkAiYM0jHNU8wHwYDVR0j
BBgwFoAUNN0zVw2ScpHMmChp4MOW+q4sNKEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDNLRHByUjlDRGlYdTEzajZuekV6aFdjVG5KTmRDRlFOMzJqNGJUNmhK
M1MvMC8zNEREMzM1NzBEOTI3MjkxQ0M5ODI4NjlFMEMzOTZGQUFFMkMzNEExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM0REQzMzU3MEQ5MjcyOTFD
Qzk4Mjg2OUUwQzM5NkZBQUUyQzM0QTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SDNLRHByUjlDRGlYdTEzajZuekV6aFdjVG5KTmRDRlFOMzJqNGJUNmhKM1MvMC8z
NEREMzM1NzBEOTI3MjkxQ0M5ODI4NjlFMEMzOTZGQUFFMkMzNEExLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPGhZrCjtAkvqSGgjufwcIkL/RITYKxy4PUSAeG9M7JWLYFROaQDmUsxukf5v
5sZjNTWeUfUPlriXd2ic6TPwrMNDdIIXp6rXN3UFVrLbzXdiANFeXnbcCcKoh8uo
murkaCQq7mku4/3BX7Cc2/njIn65OgAOBjqUYJR8jP1YcOz8gpdWeukDtIIttnQh
chTK0hwWjJdUdiVf5VKcLKaT/actRiH7+7aHfCoN08iMsd+DmuBDfZCFYaXTjU/Y
pl6NpV1tjJ+jcYnD3wHFeYYrbTYzjAWH0CDze5fELuq2p+Efz5qv4YPZZ+IYtzLO
Jth64G2L1PJlVJriWrVn1Mzmmw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:09 2024 by rpki-client on console-fra.rpki-client.org