Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.mft
File:                     D495C627858363377EC2F78374A56D2330185EC0.mft (raw, json)
Hash identifier:          Y/CrhBYxH6b41Y2IbCT5/ovjweP/G7BfF8f0jxDfWXs=
Subject key identifier:   0D:7D:63:62:52:92:32:66:8F:D2:08:02:47:93:37:8F:4D:AC:E8:F1
Authority key identifier: D4:95:C6:27:85:83:63:37:7E:C2:F7:83:74:A5:6D:23:30:18:5E:C0
Certificate issuer:       /CN=D495C627858363377EC2F78374A56D2330185EC0
Certificate serial:       60FD74C160A0600E14DDCD20DD9022647E815427
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D495C627858363377EC2F78374A56D2330185EC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.mft
Manifest number:          3C
Signing time:             Sat 18 May 2024 16:52:54 +0000
Manifest this update:     Sat 18 May 2024 16:47:54 +0000
Manifest next update:     Sun 19 May 2024 18:28:54 +0000
Files and hashes:         1: D495C627858363377EC2F78374A56D2330185EC0.crl (hash: B1ClXKLu+r3L3tLe9joG3dRwCYCm3b5YaC5zHEX2oCc=)
                          2: 34352e3139312e3230342e302f32322d3234203d3e20323636353339.roa (hash: 4mVjWqaaT4/GqCZNJ7t40C4M4BgIh8QZBcQEuHa3O9M=)
                          3: 34352e3139312e3230342e302f32322d3234203d3e20323033.roa (hash: O4Gq5FvegfduSDm57Q2f5VxR9Pk09lqnrGJ5ClU3G+M=)
                          4: 34352e3139312e3230342e302f32322d3234203d3e20323639363834.roa (hash: g3gHjnyNPy+fcdPkBGHvbzuhq6eeutkKC7ncHuaZyHA=)
                          5: 34352e3139312e3230342e302f32322d3234203d3e2033333536.roa (hash: pF1UD0ohRrUrA/uoF1MvhgOp3OOokkhl3tDCRmc9boU=)
                          6: 34352e3139312e3230342e302f32322d3234203d3e20323032.roa (hash: dmChxSPeq0RZCKndH6z9ALcY3I6SKPJrJ6VEoJz4Zao=)
                          7: 323830343a363835303a3a2f33322d3438203d3e20323639363834.roa (hash: 8reTZJCJoxR/68mo+O6JIRstN6RVpKSozX9ZpRx+CKU=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.crl
                          rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D495C627858363377EC2F78374A56D2330185EC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 May 2024 18:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:fd:74:c1:60:a0:60:0e:14:dd:cd:20:dd:90:22:64:7e:81:54:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D495C627858363377EC2F78374A56D2330185EC0
        Validity
            Not Before: May 18 16:47:54 2024 GMT
            Not After : May 19 18:28:54 2024 GMT
        Subject: CN=0D7D6362529232668FD208024793378F4DACE8F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c9:c8:d3:36:d2:6f:cc:dc:4a:c4:1d:2e:37:
                    92:05:a9:76:69:14:80:93:a2:7c:0d:ed:33:bb:e5:
                    fe:c1:9a:4a:2e:0d:dc:cc:6e:31:c3:27:b7:4f:87:
                    74:71:db:b0:7e:28:8e:93:22:fc:5a:4a:e8:92:68:
                    4b:ff:c4:ea:25:a3:d9:76:4c:84:40:6f:93:d9:f3:
                    5f:0d:42:95:ae:ff:e1:f4:be:9a:5f:6b:58:1b:ad:
                    71:ee:1e:d1:db:c7:00:11:1b:68:34:b3:15:01:a4:
                    e8:91:ab:5e:0a:d5:c1:c6:b9:e6:25:e8:47:8d:50:
                    e1:61:42:47:2f:49:af:ed:20:fb:6a:da:98:37:0d:
                    ee:c3:76:01:11:40:3b:a9:1b:f8:e4:94:f8:db:2c:
                    dd:51:85:3f:3e:8d:c1:8c:95:6b:86:9b:8f:e5:47:
                    08:e0:6d:ff:d4:55:77:f4:65:03:9f:23:d4:c1:d9:
                    3c:e1:32:b1:ea:16:cd:e4:68:54:80:ac:2a:a2:9a:
                    db:d1:0b:36:2f:90:92:9e:c9:73:a7:c7:47:f9:43:
                    48:b5:f4:4f:da:40:b8:37:7e:04:50:38:5c:f1:37:
                    10:18:e4:38:89:52:7c:fd:c6:e5:47:44:bd:a8:35:
                    bf:fe:9c:88:77:61:c9:57:3d:c4:e4:17:85:7a:77:
                    f0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:7D:63:62:52:92:32:66:8F:D2:08:02:47:93:37:8F:4D:AC:E8:F1
            X509v3 Authority Key Identifier:
                keyid:D4:95:C6:27:85:83:63:37:7E:C2:F7:83:74:A5:6D:23:30:18:5E:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D495C627858363377EC2F78374A56D2330185EC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:3f:ab:aa:58:24:07:13:0e:bb:3f:c9:2a:a9:67:92:e6:41:
         28:15:e3:dd:81:a5:8c:a9:82:30:e6:bb:43:df:ca:2a:5e:98:
         56:a6:86:b7:01:ed:84:af:7f:60:87:62:8f:63:fd:26:6d:fd:
         fc:94:45:35:99:66:cb:f1:e6:f0:92:01:15:54:e3:fa:ca:39:
         65:e0:ab:1e:88:b7:75:84:48:c6:64:ac:bb:32:de:33:b5:e8:
         57:0e:17:5b:ff:1b:e1:6d:df:73:4b:91:32:79:0d:20:31:ca:
         ff:f6:e6:52:5a:99:53:43:19:6f:be:c1:42:63:89:b0:da:ca:
         1c:7c:ad:d4:fc:74:8e:69:6d:c9:9a:b2:0b:40:ef:bd:79:33:
         53:9f:a3:0c:f4:79:53:4b:21:3a:a8:d3:f5:18:04:f3:f7:41:
         9a:ac:38:32:22:e5:68:46:d6:61:06:d8:d2:bf:eb:c0:dd:20:
         36:57:65:a2:ce:01:f8:d3:56:9e:56:d2:c0:ea:69:2b:97:e3:
         41:5f:09:0f:3d:b7:60:97:90:a4:ce:c6:ff:44:ab:f5:1d:24:
         0c:01:31:a0:8d:40:62:5a:7a:dc:58:4f:fa:7e:df:64:7e:5e:
         26:b4:25:89:a7:e1:d9:68:53:fb:26:64:5a:5b:5e:d2:f4:3e:
         63:85:04:a8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYP10wWCgYA4U3c0g3ZAiZH6BVCcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ5NUM2Mjc4NTgzNjMzNzdFQzJGNzgzNzRBNTZEMjMz
MDE4NUVDMDAeFw0yNDA1MTgxNjQ3NTRaFw0yNDA1MTkxODI4NTRaMDMxMTAvBgNV
BAMTKDBEN0Q2MzYyNTI5MjMyNjY4RkQyMDgwMjQ3OTMzNzhGNERBQ0U4RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrycjTNtJvzNxKxB0uN5IFqXZp
FICTonwN7TO75f7BmkouDdzMbjHDJ7dPh3Rx27B+KI6TIvxaSuiSaEv/xOolo9l2
TIRAb5PZ818NQpWu/+H0vppfa1gbrXHuHtHbxwARG2g0sxUBpOiRq14K1cHGueYl
6EeNUOFhQkcvSa/tIPtq2pg3De7DdgERQDupG/jklPjbLN1RhT8+jcGMlWuGm4/l
Rwjgbf/UVXf0ZQOfI9TB2TzhMrHqFs3kaFSArCqimtvRCzYvkJKeyXOnx0f5Q0i1
9E/aQLg3fgRQOFzxNxAY5DiJUnz9xuVHRL2oNb/+nIh3YclXPcTkF4V6d/BjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUDX1jYlKSMmaP0ggCR5M3j02s6PEwHwYDVR0j
BBgwFoAU1JXGJ4WDYzd+wveDdKVtIzAYXsAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSE1hdmZYbzhqZ3Z3c0Z5NTNrNEVMcXhHeVlhQ1hlaHA5SnpuOVFyVDJo
UzgvMS9ENDk1QzYyNzg1ODM2MzM3N0VDMkY3ODM3NEE1NkQyMzMwMTg1RUMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0OTVDNjI3ODU4MzYzMzc3
RUMyRjc4Mzc0QTU2RDIzMzAxODVFQzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SE1hdmZYbzhqZ3Z3c0Z5NTNrNEVMcXhHeVlhQ1hlaHA5SnpuOVFyVDJoUzgvMS9E
NDk1QzYyNzg1ODM2MzM3N0VDMkY3ODM3NEE1NkQyMzMwMTg1RUMwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIj+rqlgkBxMOuz/JKqlnkuZBKBXj3YGljKmCMOa7Q9/KKl6YVqaGtwHthK9/
YIdij2P9Jm39/JRFNZlmy/Hm8JIBFVTj+so5ZeCrHoi3dYRIxmSsuzLeM7XoVw4X
W/8b4W3fc0uRMnkNIDHK//bmUlqZU0MZb77BQmOJsNrKHHyt1Px0jmltyZqyC0Dv
vXkzU5+jDPR5U0shOqjT9RgE8/dBmqw4MiLlaEbWYQbY0r/rwN0gNldlos4B+NNW
nlbSwOppK5fjQV8JDz23YJeQpM7G/0Sr9R0kDAExoI1AYlp63FhP+n7fZH5eJrQl
iafh2WhT+yZkWlte0vQ+Y4UEqA==
-----END CERTIFICATE-----
Generated at Sat May 18 17:37:14 2024 by rpki-client on console-fra.rpki-client.org