Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HD5SvVmUhcGUV9smnsZuVCRcokXivKfsxGZseW6UkEDh/0/FA1CBB25D0C026E2646F44107ABBC3B08879B290.mft
File:                     FA1CBB25D0C026E2646F44107ABBC3B08879B290.mft (raw, json)
Hash identifier:          KAQXmrgE+lqvec0vwchrAO/NCVHbLuP53wsUONvoGzM=
Subject key identifier:   A8:CC:A9:C5:25:2F:3A:0B:B9:28:D7:E9:A4:46:68:8C:75:18:A8:B3
Authority key identifier: FA:1C:BB:25:D0:C0:26:E2:64:6F:44:10:7A:BB:C3:B0:88:79:B2:90
Certificate issuer:       /CN=FA1CBB25D0C026E2646F44107ABBC3B08879B290
Certificate serial:       3B32677BBC89FD863E63C3DDF18DD10EBF718E8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1CBB25D0C026E2646F44107ABBC3B08879B290.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HD5SvVmUhcGUV9smnsZuVCRcokXivKfsxGZseW6UkEDh/0/FA1CBB25D0C026E2646F44107ABBC3B08879B290.mft
Manifest number:          2C
Signing time:             Sat 28 Sep 2024 18:40:34 +0000
Manifest this update:     Sat 28 Sep 2024 18:35:34 +0000
Manifest next update:     Sun 29 Sep 2024 20:31:34 +0000
Files and hashes:         1: 323830343a386634633a3a2f33322d3332203d3e20323733343832.roa (hash: 2LeqCloMK7tZS893vGsJ7oNBmmNme0dTiTTDJYF3d3I=)
                          2: FA1CBB25D0C026E2646F44107ABBC3B08879B290.crl (hash: CVNpNTfDByPJo/Ure9fdFFWWx2jWpf8Qp0xyiKsj/go=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HD5SvVmUhcGUV9smnsZuVCRcokXivKfsxGZseW6UkEDh/0/FA1CBB25D0C026E2646F44107ABBC3B08879B290.crl
                          rsync://rpki-repo.registro.br/repo/HD5SvVmUhcGUV9smnsZuVCRcokXivKfsxGZseW6UkEDh/0/FA1CBB25D0C026E2646F44107ABBC3B08879B290.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1CBB25D0C026E2646F44107ABBC3B08879B290.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 20:31:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:32:67:7b:bc:89:fd:86:3e:63:c3:dd:f1:8d:d1:0e:bf:71:8e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA1CBB25D0C026E2646F44107ABBC3B08879B290
        Validity
            Not Before: Sep 28 18:35:34 2024 GMT
            Not After : Sep 29 20:31:34 2024 GMT
        Subject: CN=A8CCA9C5252F3A0BB928D7E9A446688C7518A8B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fa:2c:90:1b:3c:fe:a5:d5:1f:75:9f:4e:b5:
                    07:a7:03:a9:dd:09:e4:42:02:ee:3a:10:9d:a2:f7:
                    61:85:f8:bc:fb:2a:eb:d4:64:35:3a:d1:b1:a5:22:
                    3e:29:6c:07:b8:24:2a:72:d9:54:13:ba:c1:3e:24:
                    18:33:68:e4:ae:4d:e9:b1:03:08:16:cb:f8:6a:1d:
                    7b:81:56:15:91:49:48:00:9a:f0:30:e7:5e:7b:fd:
                    c1:5f:17:03:18:cc:4d:16:a0:d4:7e:ac:ed:4c:4a:
                    f9:35:b8:91:93:69:19:33:e4:de:90:6f:71:b9:36:
                    1f:59:6e:8f:ce:77:c3:6d:03:54:e3:29:3d:5c:54:
                    91:2e:0b:df:e4:0c:d9:ee:72:23:fa:8e:c1:7d:9c:
                    3f:f9:ac:6d:bd:09:4e:51:3f:4d:ff:ab:19:ff:7d:
                    df:ae:63:7a:12:52:88:4d:64:e1:76:0e:84:76:50:
                    0f:62:1d:60:d8:c2:ab:79:c3:6c:4b:1a:5f:fb:e5:
                    b7:0e:6f:11:65:b5:0b:87:ee:07:ef:c9:85:1e:46:
                    fe:5f:6f:dd:a2:c6:3a:97:e2:13:d0:04:5d:74:f8:
                    dd:f3:e7:c4:94:52:42:a2:ea:f8:88:c7:1e:d0:bc:
                    fd:75:b3:75:35:2b:3e:4c:ae:0b:ef:c9:78:53:46:
                    ea:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:CC:A9:C5:25:2F:3A:0B:B9:28:D7:E9:A4:46:68:8C:75:18:A8:B3
            X509v3 Authority Key Identifier:
                keyid:FA:1C:BB:25:D0:C0:26:E2:64:6F:44:10:7A:BB:C3:B0:88:79:B2:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HD5SvVmUhcGUV9smnsZuVCRcokXivKfsxGZseW6UkEDh/0/FA1CBB25D0C026E2646F44107ABBC3B08879B290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1CBB25D0C026E2646F44107ABBC3B08879B290.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HD5SvVmUhcGUV9smnsZuVCRcokXivKfsxGZseW6UkEDh/0/FA1CBB25D0C026E2646F44107ABBC3B08879B290.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:c9:a7:ab:c8:2e:4d:c1:c2:ca:b2:62:51:ee:1f:38:b4:f9:
         33:5f:0c:24:41:cb:e0:9e:cd:75:e9:63:87:8c:ac:8f:3e:79:
         5b:51:7d:e1:21:3b:17:1b:e6:88:7c:ef:70:b4:7c:e7:e6:8b:
         b2:38:2a:de:d4:d5:2a:23:92:25:77:a6:cc:6a:5a:72:f9:f5:
         5c:12:df:6f:f0:1d:70:fd:c7:7f:f2:cf:71:a6:31:10:1c:f8:
         ff:3f:d3:22:83:ba:7a:a7:ef:46:12:39:f0:af:2d:69:9f:ec:
         27:03:59:ac:83:ce:a7:9d:2b:f9:2e:e7:0e:c3:b5:17:17:7d:
         95:7d:93:22:fc:26:d5:c1:0c:4b:14:9e:7c:f0:24:32:22:c7:
         c9:70:17:df:fe:61:cf:43:0f:58:e9:24:86:0f:dd:8f:94:81:
         d6:9a:17:b5:8a:2d:24:06:dc:68:81:24:7a:8f:a1:bc:ef:ea:
         3e:59:1f:ae:15:1d:ab:8d:82:89:f2:d2:9e:21:b7:2a:ae:90:
         8d:37:70:a3:78:e8:30:b1:fa:f8:c4:7c:9a:9e:cb:8e:71:68:
         d7:1d:09:db:ca:9c:7e:3f:ed:d8:20:3a:21:ea:8b:b8:48:18:
         4b:41:af:a4:45:e3:cc:81:43:32:fe:d1:ea:77:78:03:d3:58:
         71:89:e5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 20:53:12 2024 by rpki-client on console-ams.rpki-client.org