Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/950A0A5A0F2C11779076736FBBCA766C37783653.mft
File:                     950A0A5A0F2C11779076736FBBCA766C37783653.mft (raw, json)
Hash identifier:          K1MaIONbIhCSlep7HPmkDA/ZrHxha9Mf82v1uUrn23s=
Subject key identifier:   D5:17:E3:69:CC:6C:63:43:C0:55:57:EA:BF:2D:2C:8E:9F:B1:16:93
Authority key identifier: 95:0A:0A:5A:0F:2C:11:77:90:76:73:6F:BB:CA:76:6C:37:78:36:53
Certificate issuer:       /CN=950A0A5A0F2C11779076736FBBCA766C37783653
Certificate serial:       5B0A31DA067B221F9E52AF2E763E9814CB4B8C5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/950A0A5A0F2C11779076736FBBCA766C37783653.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/950A0A5A0F2C11779076736FBBCA766C37783653.mft
Manifest number:          77
Signing time:             Sun 30 Jun 2024 12:15:48 +0000
Manifest this update:     Sun 30 Jun 2024 12:10:48 +0000
Manifest next update:     Mon 01 Jul 2024 13:47:48 +0000
Files and hashes:         1: 3136382e39302e32382e302f32322d3234203d3e20323632343137.roa (hash: d/y67iPgyHfrZchr3UsCsH3kbZMjj5nCPI4W/1C4G8Q=)
                          2: 950A0A5A0F2C11779076736FBBCA766C37783653.crl (hash: +xkSxemMZ/7KfAu6UALymzN66dlR8+QxRI1COS41Qqg=)
                          3: 3137372e33372e36342e302f31392d3234203d3e20323632343137.roa (hash: 8leFq+t6NS5LwzqU+yrcgsKKe9S2jl062Ps29R/bMIE=)
                          4: 3137372e3132392e3230302e302f32322d3234203d3e20323632343137.roa (hash: sF7dr2kUzPOuyj+5+n32gi6KsI/pLQ9/HfJO0IxZws0=)
                          5: 3137392e34332e342e302f32322d3234203d3e20323632343137.roa (hash: 6DI6A5f3uyWUjU4Jv4UpLh0haOVso+raMP+SZCOOhEQ=)
                          6: 3138362e3231392e35362e302f32322d3234203d3e20323632343137.roa (hash: /qteiQPQZenJXmT1DLo/co8WAzozopgajUAARS8H7wk=)
                          7: 323830343a6532343a3a2f33322d3438203d3e20323632343137.roa (hash: ncCYGMFk649VVWQU38tdB4eWXB+GWGNFGiQWyPLg1oA=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/950A0A5A0F2C11779076736FBBCA766C37783653.crl
                          rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/950A0A5A0F2C11779076736FBBCA766C37783653.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/950A0A5A0F2C11779076736FBBCA766C37783653.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Jul 2024 13:47:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:0a:31:da:06:7b:22:1f:9e:52:af:2e:76:3e:98:14:cb:4b:8c:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=950A0A5A0F2C11779076736FBBCA766C37783653
        Validity
            Not Before: Jun 30 12:10:48 2024 GMT
            Not After : Jul  1 13:47:48 2024 GMT
        Subject: CN=D517E369CC6C6343C05557EABF2D2C8E9FB11693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c6:b9:3c:de:4c:ad:f6:18:21:48:be:c5:d1:
                    0b:bb:24:7e:68:6b:bf:15:a5:22:e6:32:24:a5:78:
                    9e:6d:72:e8:88:fa:cc:8c:ef:cb:d3:cc:8a:26:5b:
                    31:4c:10:77:65:8d:d6:be:09:53:fa:be:78:79:63:
                    18:86:05:eb:ca:ce:6b:da:79:7a:fb:f1:6e:83:83:
                    96:43:34:15:41:ea:72:a5:89:30:ad:13:2e:12:27:
                    8c:2d:27:8f:a0:37:d1:88:09:56:34:37:92:88:3f:
                    d7:ab:2b:0d:87:46:ac:7e:19:62:1f:f9:36:4d:a0:
                    89:a3:bf:af:9b:c3:04:92:ec:e7:da:48:08:79:82:
                    e2:d5:57:cc:d4:64:0f:e6:00:59:5a:16:41:05:87:
                    5e:d6:9e:be:df:c8:1c:93:51:1d:01:f6:c0:65:89:
                    fa:65:be:52:65:15:a2:4c:47:51:3d:02:de:51:88:
                    15:eb:41:71:cd:3c:01:8b:ca:28:f4:4a:e4:57:75:
                    a5:58:42:5a:14:20:fa:86:9b:52:b1:32:41:6b:90:
                    17:6a:3f:d1:77:f2:66:f2:04:a7:19:93:69:12:b9:
                    a3:b3:f6:be:7d:aa:07:d8:5a:a1:36:cd:b0:b8:e1:
                    bf:11:7c:d0:fb:1b:a2:d1:85:b5:16:8e:99:f4:54:
                    8c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:17:E3:69:CC:6C:63:43:C0:55:57:EA:BF:2D:2C:8E:9F:B1:16:93
            X509v3 Authority Key Identifier:
                keyid:95:0A:0A:5A:0F:2C:11:77:90:76:73:6F:BB:CA:76:6C:37:78:36:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/950A0A5A0F2C11779076736FBBCA766C37783653.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/950A0A5A0F2C11779076736FBBCA766C37783653.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/950A0A5A0F2C11779076736FBBCA766C37783653.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:57:8d:7c:b0:15:aa:cf:f3:c6:b8:5f:7c:5d:f0:e9:e9:59:
         a1:58:7e:1f:60:f3:6f:47:b2:1d:2b:61:2a:da:3e:cb:ad:62:
         db:69:46:e3:1e:86:a7:e9:66:1b:0c:69:30:be:67:b3:ba:74:
         eb:10:aa:76:a6:9c:fd:f4:f4:c8:d4:5b:b2:e7:a8:8e:4e:89:
         f1:32:3a:38:45:7d:3c:1d:4e:10:ef:80:1c:35:2f:09:2d:ab:
         fe:e6:18:53:80:88:1f:03:9d:52:bd:ec:b1:b7:22:f9:2c:ed:
         5e:b8:ca:62:bd:f2:26:9a:c3:d2:8b:23:24:66:82:bb:fa:62:
         0c:59:26:32:05:ff:d8:e9:4f:0b:73:90:05:65:47:3d:8c:8c:
         3b:3a:70:4a:34:97:9b:1a:88:e9:a5:d9:ad:bb:99:4a:7b:9a:
         6d:98:6f:b6:fa:11:70:b7:5e:ea:c8:eb:96:cd:bf:a5:de:1f:
         ef:91:e6:a1:bf:00:71:7e:fa:8b:c8:52:40:99:6b:a5:c4:9c:
         4b:3b:5e:7c:0a:c1:95:a7:33:0f:48:a8:cd:ba:46:e8:43:64:
         82:b8:92:61:1c:34:1d:27:d1:6a:fa:5f:49:00:d1:87:00:80:
         d9:54:44:6e:83:96:53:27:66:8c:35:3c:6e:f8:f4:e3:43:e1:
         36:21:15:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWwox2gZ7Ih+eUq8udj6YFMtLjF4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwQTBBNUEwRjJDMTE3NzkwNzY3MzZGQkJDQTc2NkMz
Nzc4MzY1MzAeFw0yNDA2MzAxMjEwNDhaFw0yNDA3MDExMzQ3NDhaMDMxMTAvBgNV
BAMTKEQ1MTdFMzY5Q0M2QzYzNDNDMDU1NTdFQUJGMkQyQzhFOUZCMTE2OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+xrk83kyt9hghSL7F0Qu7JH5o
a78VpSLmMiSleJ5tcuiI+syM78vTzIomWzFMEHdljda+CVP6vnh5YxiGBevKzmva
eXr78W6Dg5ZDNBVB6nKliTCtEy4SJ4wtJ4+gN9GICVY0N5KIP9erKw2HRqx+GWIf
+TZNoImjv6+bwwSS7OfaSAh5guLVV8zUZA/mAFlaFkEFh17Wnr7fyByTUR0B9sBl
ifplvlJlFaJMR1E9At5RiBXrQXHNPAGLyij0SuRXdaVYQloUIPqGm1KxMkFrkBdq
P9F38mbyBKcZk2kSuaOz9r59qgfYWqE2zbC44b8RfND7G6LRhbUWjpn0VIxPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1RfjacxsY0PAVVfqvy0sjp+xFpMwHwYDVR0j
BBgwFoAUlQoKWg8sEXeQdnNvu8p2bDd4NlMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEVCNDVSekZnM0c0aVVpejRmdVU0cVQ4UEdvNjRSUlBMdHphTVd4ZkdV
ZlIvMS85NTBBMEE1QTBGMkMxMTc3OTA3NjczNkZCQkNBNzY2QzM3NzgzNjUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1MEEwQTVBMEYyQzExNzc5
MDc2NzM2RkJCQ0E3NjZDMzc3ODM2NTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SEVCNDVSekZnM0c0aVVpejRmdVU0cVQ4UEdvNjRSUlBMdHphTVd4ZkdVZlIvMS85
NTBBMEE1QTBGMkMxMTc3OTA3NjczNkZCQkNBNzY2QzM3NzgzNjUzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVFeNfLAVqs/zxrhffF3w6elZoVh+H2Dzb0eyHSthKto+y61i22lG4x6Gp+lm
GwxpML5ns7p06xCqdqac/fT0yNRbsueojk6J8TI6OEV9PB1OEO+AHDUvCS2r/uYY
U4CIHwOdUr3ssbci+SztXrjKYr3yJprD0osjJGaCu/piDFkmMgX/2OlPC3OQBWVH
PYyMOzpwSjSXmxqI6aXZrbuZSnuabZhvtvoRcLde6sjrls2/pd4f75Hmob8AcX76
i8hSQJlrpcScSztefArBlaczD0iozbpG6ENkgriSYRw0HSfRavpfSQDRhwCA2VRE
boOWUydmjDU8bvj040PhNiEVRw==
-----END CERTIFICATE-----
Generated at Sun Jun 30 15:02:32 2024 by rpki-client on console-fra.rpki-client.org