Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/63BAA21C6C6C9CD990D0B9F47904C1CD157CF5DB.mft
File:                     63BAA21C6C6C9CD990D0B9F47904C1CD157CF5DB.mft (raw, json)
Hash identifier:          hST6MYGmnAdV/xaNXql4PdLfZqfVCRr5QyxgBtIj+Tk=
Subject key identifier:   00:18:48:07:00:D3:C7:9B:3A:29:78:79:AF:9F:0C:60:43:D9:8B:D1
Authority key identifier: 63:BA:A2:1C:6C:6C:9C:D9:90:D0:B9:F4:79:04:C1:CD:15:7C:F5:DB
Certificate issuer:       /CN=63BAA21C6C6C9CD990D0B9F47904C1CD157CF5DB
Certificate serial:       79EF8786564091F43A61CC55912C3EB7CFC99441
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63BAA21C6C6C9CD990D0B9F47904C1CD157CF5DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/63BAA21C6C6C9CD990D0B9F47904C1CD157CF5DB.mft
Manifest number:          D3
Signing time:             Fri 29 Nov 2024 10:32:11 +0000
Manifest this update:     Fri 29 Nov 2024 10:27:11 +0000
Manifest next update:     Sat 30 Nov 2024 13:51:11 +0000
Files and hashes:         1: 34352e3138362e3131362e302f32322d3234203d3e20323639343230.roa (hash: v6FfJeuumfXIYCweQXjbAZeYc74haJwQ/f96fMOUpQw=)
                          2: 63BAA21C6C6C9CD990D0B9F47904C1CD157CF5DB.crl (hash: glpKMbceLFmoGJ+BiK5/upDcRdmiVrjrcUpSNm4oEeE=)
                          3: 323830343a363435303a3a2f33322d3438203d3e20323639343230.roa (hash: LXnyeGKPRQl4EOPDFjU09hL9l3Vdd5/bUgxKfr+LUZw=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/63BAA21C6C6C9CD990D0B9F47904C1CD157CF5DB.crl
                          rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/63BAA21C6C6C9CD990D0B9F47904C1CD157CF5DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63BAA21C6C6C9CD990D0B9F47904C1CD157CF5DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 13:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ef:87:86:56:40:91:f4:3a:61:cc:55:91:2c:3e:b7:cf:c9:94:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63BAA21C6C6C9CD990D0B9F47904C1CD157CF5DB
        Validity
            Not Before: Nov 29 10:27:11 2024 GMT
            Not After : Nov 30 13:51:11 2024 GMT
        Subject: CN=0018480700D3C79B3A297879AF9F0C6043D98BD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:ed:00:d8:d5:33:ed:24:6d:fd:a4:6d:3c:51:
                    48:74:a5:43:84:e8:44:33:fb:8b:bb:3f:9c:97:fa:
                    78:68:c5:49:af:ea:6d:9f:62:50:a6:c5:d4:27:21:
                    20:8e:66:e0:eb:e3:ab:1a:a1:ba:39:cb:17:16:86:
                    ef:58:a8:71:8e:c2:78:68:78:a0:10:26:7a:2e:ca:
                    75:d5:a2:6a:5f:9b:ae:26:b6:2c:f1:e2:85:3a:8e:
                    fb:e3:e9:f1:a4:71:0a:f1:58:1d:c8:4b:2c:77:e3:
                    94:e2:08:4c:70:9d:c5:b1:39:ef:c8:2b:3e:24:02:
                    40:0d:3b:ce:2a:a7:b2:39:8c:7e:34:e0:a3:4b:9a:
                    75:64:32:c6:81:30:41:38:91:ce:2a:d2:16:17:a1:
                    a8:ea:9d:6d:0c:2a:59:d5:a2:47:4c:a3:3f:68:54:
                    ba:8c:37:d6:6d:14:2c:6b:c1:b4:21:0b:a6:f8:ec:
                    a2:d2:32:75:dc:66:81:85:7f:85:2b:9c:21:38:dc:
                    1b:d9:10:27:50:91:31:e3:7b:61:7f:7e:64:0a:c0:
                    c3:6e:73:2e:61:48:fd:e6:d7:a6:69:fe:17:4d:4c:
                    aa:71:ee:57:43:9d:03:c6:16:c9:1d:c2:31:34:f3:
                    9e:9c:cc:0d:70:75:a1:69:cf:ae:3e:4f:d3:86:fa:
                    4e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:18:48:07:00:D3:C7:9B:3A:29:78:79:AF:9F:0C:60:43:D9:8B:D1
            X509v3 Authority Key Identifier:
                keyid:63:BA:A2:1C:6C:6C:9C:D9:90:D0:B9:F4:79:04:C1:CD:15:7C:F5:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/63BAA21C6C6C9CD990D0B9F47904C1CD157CF5DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63BAA21C6C6C9CD990D0B9F47904C1CD157CF5DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/63BAA21C6C6C9CD990D0B9F47904C1CD157CF5DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:1a:49:69:d1:78:08:63:bc:d2:fc:6f:be:b0:e2:03:9b:4b:
         e0:42:c7:26:d6:72:ec:e8:4d:f0:97:00:2e:a9:35:32:23:9e:
         aa:16:ee:1b:bd:24:fe:4d:b7:cc:fe:2b:e6:00:97:7c:29:c2:
         b6:74:ce:0b:f8:ae:27:a0:5a:4d:6d:f0:4d:cb:d0:7f:8f:c4:
         e5:d6:b9:5f:18:2a:2f:f0:05:ab:80:28:26:5b:bb:05:4f:4f:
         af:29:34:2b:02:98:13:ee:07:d8:b7:aa:ef:06:02:cf:46:1e:
         82:84:40:00:7f:2b:7b:b3:1c:15:2a:7d:14:2c:a7:62:16:bb:
         26:e0:6c:d4:83:0a:0c:b9:8f:d3:84:1a:9d:14:9d:f4:a6:38:
         81:59:d9:dc:a0:cc:c6:89:0a:95:ea:e4:3a:f8:5a:70:d7:c6:
         b5:e0:51:b2:85:ce:d4:0c:fc:c8:8e:3d:47:eb:27:04:07:6b:
         62:ea:2c:20:4b:43:50:5d:c6:19:86:41:4f:ee:6f:0d:c4:7d:
         e2:5d:f0:34:70:5e:aa:55:47:a5:aa:18:b4:5a:65:f1:7d:b9:
         43:59:a1:28:df:51:73:f2:70:74:7d:0e:d0:08:a0:f0:ca:35:
         3d:1a:1a:da:5d:9a:f2:6f:8d:75:e0:24:d2:c5:cd:71:86:55:
         74:b4:87:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUee+HhlZAkfQ6YcxVkSw+t8/JlEEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjNCQUEyMUM2QzZDOUNEOTkwRDBCOUY0NzkwNEMxQ0Qx
NTdDRjVEQjAeFw0yNDExMjkxMDI3MTFaFw0yNDExMzAxMzUxMTFaMDMxMTAvBgNV
BAMTKDAwMTg0ODA3MDBEM0M3OUIzQTI5Nzg3OUFGOUYwQzYwNDNEOThCRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD47QDY1TPtJG39pG08UUh0pUOE
6EQz+4u7P5yX+nhoxUmv6m2fYlCmxdQnISCOZuDr46saobo5yxcWhu9YqHGOwnho
eKAQJnouynXVompfm64mtizx4oU6jvvj6fGkcQrxWB3ISyx345TiCExwncWxOe/I
Kz4kAkANO84qp7I5jH404KNLmnVkMsaBMEE4kc4q0hYXoajqnW0MKlnVokdMoz9o
VLqMN9ZtFCxrwbQhC6b47KLSMnXcZoGFf4UrnCE43BvZECdQkTHje2F/fmQKwMNu
cy5hSP3m16Zp/hdNTKpx7ldDnQPGFskdwjE0856czA1wdaFpz64+T9OG+k4pAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUABhIBwDTx5s6KXh5r58MYEPZi9EwHwYDVR0j
BBgwFoAUY7qiHGxsnNmQ0Ln0eQTBzRV89dswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEIzSmZDSlkxQ0FKUUFVczZpZXdDY1RYM1Nnc2JzNTJ3eXJTcTdSYkpR
bWIvMC82M0JBQTIxQzZDNkM5Q0Q5OTBEMEI5RjQ3OTA0QzFDRDE1N0NGNURCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYzQkFBMjFDNkM2QzlDRDk5
MEQwQjlGNDc5MDRDMUNEMTU3Q0Y1REIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SEIzSmZDSlkxQ0FKUUFVczZpZXdDY1RYM1Nnc2JzNTJ3eXJTcTdSYkpRbWIvMC82
M0JBQTIxQzZDNkM5Q0Q5OTBEMEI5RjQ3OTA0QzFDRDE1N0NGNURCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABBpJadF4CGO80vxvvrDiA5tL4ELHJtZy7OhN8JcALqk1MiOeqhbuG70k/k23
zP4r5gCXfCnCtnTOC/iuJ6BaTW3wTcvQf4/E5da5XxgqL/AFq4AoJlu7BU9Pryk0
KwKYE+4H2Leq7wYCz0YegoRAAH8re7McFSp9FCynYha7JuBs1IMKDLmP04QanRSd
9KY4gVnZ3KDMxokKlerkOvhacNfGteBRsoXO1Az8yI49R+snBAdrYuosIEtDUF3G
GYZBT+5vDcR94l3wNHBeqlVHpaoYtFpl8X25Q1mhKN9Rc/JwdH0O0Aig8Mo1PRoa
2l2a8m+NdeAk0sXNcYZVdLSH2A==
-----END CERTIFICATE-----
Generated at Fri Nov 29 13:09:38 2024 by rpki-client on console-fra.rpki-client.org