Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HGN2z2ZDbtWUvD1o29rA1dad7cjcoEtdPGbMgjXjgsd7/0/A42CBFC9E49E475B3D40986F62135FE9DE8D3830.mft
File:                     A42CBFC9E49E475B3D40986F62135FE9DE8D3830.mft (raw, json)
Hash identifier:          WZuH0uvfdSdTFSWoLV8sy0CF9D7JanUKODbs/P8gLzY=
Subject key identifier:   B8:7E:B2:00:DA:67:5E:3A:2B:5F:E6:FE:E7:42:0B:3C:1B:F8:FF:B6
Authority key identifier: A4:2C:BF:C9:E4:9E:47:5B:3D:40:98:6F:62:13:5F:E9:DE:8D:38:30
Certificate issuer:       /CN=A42CBFC9E49E475B3D40986F62135FE9DE8D3830
Certificate serial:       45B8E3CA988C8A0737CF1640094CAEACDDE58901
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A42CBFC9E49E475B3D40986F62135FE9DE8D3830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGN2z2ZDbtWUvD1o29rA1dad7cjcoEtdPGbMgjXjgsd7/0/A42CBFC9E49E475B3D40986F62135FE9DE8D3830.mft
Manifest number:          2A
Signing time:             Mon 25 Nov 2024 21:50:48 +0000
Manifest this update:     Mon 25 Nov 2024 21:45:48 +0000
Manifest next update:     Tue 26 Nov 2024 22:53:48 +0000
Files and hashes:         1: A42CBFC9E49E475B3D40986F62135FE9DE8D3830.crl (hash: mtReGUnmI7iOqhiQ2SgY2Dql5LlvQihI/lK0c8ZClDw=)
                          2: 323830343a393038343a3a2f33322d313238203d3e20323733353537.roa (hash: jGByXxMIiuwV7jEluZtPCj6aS511eCzKZuzRD5N1dZg=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGN2z2ZDbtWUvD1o29rA1dad7cjcoEtdPGbMgjXjgsd7/0/A42CBFC9E49E475B3D40986F62135FE9DE8D3830.crl
                          rsync://rpki-repo.registro.br/repo/HGN2z2ZDbtWUvD1o29rA1dad7cjcoEtdPGbMgjXjgsd7/0/A42CBFC9E49E475B3D40986F62135FE9DE8D3830.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A42CBFC9E49E475B3D40986F62135FE9DE8D3830.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b8:e3:ca:98:8c:8a:07:37:cf:16:40:09:4c:ae:ac:dd:e5:89:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A42CBFC9E49E475B3D40986F62135FE9DE8D3830
        Validity
            Not Before: Nov 25 21:45:48 2024 GMT
            Not After : Nov 26 22:53:48 2024 GMT
        Subject: CN=B87EB200DA675E3A2B5FE6FEE7420B3C1BF8FFB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:02:24:a4:ee:ae:29:1d:eb:bc:c1:f5:4b:ad:
                    00:2f:b2:ef:1e:57:1f:4d:f7:83:f8:e6:03:4f:60:
                    cd:66:29:bc:71:c3:b4:ef:e7:2e:16:dd:e7:4f:18:
                    86:83:97:c2:af:ed:fc:0e:30:b6:9f:a5:7d:5d:71:
                    23:fe:81:5c:38:a9:29:23:91:15:44:9a:40:0c:23:
                    b0:8d:51:7b:1f:6c:89:94:3d:ef:c1:d2:63:a9:26:
                    56:22:63:7c:ee:b7:28:f7:7d:5a:2b:50:40:7a:8b:
                    e0:48:4e:26:1f:91:e1:be:44:ff:1a:e4:60:03:17:
                    ed:c0:e3:07:11:a0:a1:b8:8c:06:c5:11:cd:af:8a:
                    a8:ae:ac:63:da:fa:3f:78:a0:8c:5e:f7:6d:7f:d6:
                    92:19:71:bb:3b:53:ea:5d:76:3c:90:6a:ae:f7:71:
                    84:de:00:c6:9c:78:57:6b:ad:9d:ea:fb:aa:76:a2:
                    fb:41:25:01:d3:3c:43:88:e6:c0:a9:48:d8:53:0c:
                    13:ae:ee:e9:fb:f7:94:9f:33:19:6f:74:e8:6b:62:
                    10:a6:e7:29:11:00:4a:b7:60:30:7c:4a:a6:2c:29:
                    a5:f4:e6:68:96:6c:9a:99:f5:5d:ee:25:e4:6f:15:
                    53:89:35:9e:49:5c:bb:d9:cd:f8:de:2c:37:33:05:
                    e7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:7E:B2:00:DA:67:5E:3A:2B:5F:E6:FE:E7:42:0B:3C:1B:F8:FF:B6
            X509v3 Authority Key Identifier:
                keyid:A4:2C:BF:C9:E4:9E:47:5B:3D:40:98:6F:62:13:5F:E9:DE:8D:38:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGN2z2ZDbtWUvD1o29rA1dad7cjcoEtdPGbMgjXjgsd7/0/A42CBFC9E49E475B3D40986F62135FE9DE8D3830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A42CBFC9E49E475B3D40986F62135FE9DE8D3830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGN2z2ZDbtWUvD1o29rA1dad7cjcoEtdPGbMgjXjgsd7/0/A42CBFC9E49E475B3D40986F62135FE9DE8D3830.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:6b:92:15:ba:50:05:23:37:db:bf:0f:d0:e1:23:0f:9c:46:
         c1:92:8b:3c:7c:05:b0:17:ad:7b:88:4b:7d:01:91:98:5a:ad:
         6e:10:ba:9f:b2:de:28:5b:25:e9:54:ec:08:1a:ef:94:76:f3:
         04:35:a6:70:ef:22:31:a9:20:07:ee:4d:af:4f:d1:3e:33:76:
         fa:d9:7b:59:aa:36:b9:65:76:37:13:18:c6:e0:97:31:e1:13:
         fd:7c:b2:d2:3f:4b:84:e7:03:67:8e:05:90:43:59:cc:90:39:
         79:88:b7:59:ff:c5:b4:23:c6:9e:55:e1:fd:56:79:05:d5:f7:
         83:a8:42:cc:25:1a:f1:05:60:92:e6:d3:7f:df:a3:56:3a:e7:
         61:ab:6a:6d:cf:fd:19:42:fe:9a:77:e6:aa:57:05:6e:9a:53:
         7b:20:96:46:c9:50:12:80:af:75:35:e8:ab:40:5d:25:66:6a:
         c5:d8:82:4b:8e:d3:70:37:64:1b:b3:9b:6e:5f:54:42:31:f5:
         73:46:0d:1a:01:58:ff:41:c6:e5:c2:e0:6c:fa:d5:e2:41:a6:
         21:ff:ea:ea:70:9f:59:17:ab:51:ef:ef:ef:00:77:fc:af:f1:
         b7:d8:12:e0:47:9c:84:6e:2b:15:c5:14:48:61:4e:36:ce:31:
         60:5e:9b:c5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURbjjypiMigc3zxZACUyurN3liQEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQyQ0JGQzlFNDlFNDc1QjNENDA5ODZGNjIxMzVGRTlE
RThEMzgzMDAeFw0yNDExMjUyMTQ1NDhaFw0yNDExMjYyMjUzNDhaMDMxMTAvBgNV
BAMTKEI4N0VCMjAwREE2NzVFM0EyQjVGRTZGRUU3NDIwQjNDMUJGOEZGQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyAiSk7q4pHeu8wfVLrQAvsu8e
Vx9N94P45gNPYM1mKbxxw7Tv5y4W3edPGIaDl8Kv7fwOMLafpX1dcSP+gVw4qSkj
kRVEmkAMI7CNUXsfbImUPe/B0mOpJlYiY3zutyj3fVorUEB6i+BITiYfkeG+RP8a
5GADF+3A4wcRoKG4jAbFEc2viqiurGPa+j94oIxe921/1pIZcbs7U+pddjyQaq73
cYTeAMaceFdrrZ3q+6p2ovtBJQHTPEOI5sCpSNhTDBOu7un795SfMxlvdOhrYhCm
5ykRAEq3YDB8SqYsKaX05miWbJqZ9V3uJeRvFVOJNZ5JXLvZzfjeLDczBeezAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUuH6yANpnXjorX+b+50ILPBv4/7YwHwYDVR0j
BBgwFoAUpCy/yeSeR1s9QJhvYhNf6d6NODAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEdOMnoyWkRidFdVdkQxbzI5ckExZGFkN2NqY29FdGRQR2JNZ2pYamdz
ZDcvMC9BNDJDQkZDOUU0OUU0NzVCM0Q0MDk4NkY2MjEzNUZFOURFOEQzODMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E0MkNCRkM5RTQ5RTQ3NUIz
RDQwOTg2RjYyMTM1RkU5REU4RDM4MzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SEdOMnoyWkRidFdVdkQxbzI5ckExZGFkN2NqY29FdGRQR2JNZ2pYamdzZDcvMC9B
NDJDQkZDOUU0OUU0NzVCM0Q0MDk4NkY2MjEzNUZFOURFOEQzODMwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUWuSFbpQBSM3278P0OEjD5xGwZKLPHwFsBete4hLfQGRmFqtbhC6n7LeKFsl
6VTsCBrvlHbzBDWmcO8iMakgB+5Nr0/RPjN2+tl7Wao2uWV2NxMYxuCXMeET/Xyy
0j9LhOcDZ44FkENZzJA5eYi3Wf/FtCPGnlXh/VZ5BdX3g6hCzCUa8QVgkubTf9+j
VjrnYatqbc/9GUL+mnfmqlcFbppTeyCWRslQEoCvdTXoq0BdJWZqxdiCS47TcDdk
G7Obbl9UQjH1c0YNGgFY/0HG5cLgbPrV4kGmIf/q6nCfWRerUe/v7wB3/K/xt9gS
4EechG4rFcUUSGFONs4xYF6bxQ==
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:00 2024 by rpki-client on console-fra.rpki-client.org