Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/32D32D34674F0161657AF3F71B992CAF74E2BBB9.mft
File:                     32D32D34674F0161657AF3F71B992CAF74E2BBB9.mft (raw, json)
Hash identifier:          waNoBhnvUuRa/yi9t5OzV7qR0qfQyz/ovvkq/mlHJKU=
Subject key identifier:   D8:3C:42:94:AB:CF:BF:31:8A:84:FD:95:2A:BD:D0:57:72:A2:9D:53
Authority key identifier: 32:D3:2D:34:67:4F:01:61:65:7A:F3:F7:1B:99:2C:AF:74:E2:BB:B9
Certificate issuer:       /CN=32D32D34674F0161657AF3F71B992CAF74E2BBB9
Certificate serial:       7F784F8062C49CE78E9D9576B1412357CE6C5A77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D32D34674F0161657AF3F71B992CAF74E2BBB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/32D32D34674F0161657AF3F71B992CAF74E2BBB9.mft
Manifest number:          AC
Signing time:             Sat 23 Nov 2024 12:40:27 +0000
Manifest this update:     Sat 23 Nov 2024 12:35:27 +0000
Manifest next update:     Sun 24 Nov 2024 13:07:27 +0000
Files and hashes:         1: 34352e3136322e39322e302f32342d3234203d3e20323638353137.roa (hash: x8J4OZ+KpxqNtkEJa28nJyr31ET7GEuR+WNk9ICmxS0=)
                          2: 34352e3136322e39342e302f32342d3234203d3e20323638353137.roa (hash: ByNelghwUiIuHTz1aDrpRkJgEm2Owi7Q0Mc7/Xf5b60=)
                          3: 323830343a353236633a653030303a3a2f33362d3336203d3e20323638353137.roa (hash: MowOAVySoc9feLhRIQQ7h741/bIE8qCstGX9fAOK6jY=)
                          4: 34352e3136322e39342e302f32332d3233203d3e20323638353137.roa (hash: 0Bt23eFXG+1zBuzHooVJsQ2rJKgMUZbkpq5PmKIxguU=)
                          5: 34352e3136322e39322e302f32332d3233203d3e20323638353137.roa (hash: SWBLNxXkhgY1dROUd0ghIFaeX5RL8CuI2IagBb+Mqqc=)
                          6: 323830343a353236633a3a2f33362d3336203d3e20323638353137.roa (hash: eO9l5Asgyn3jXzBTQZJgjHj4ipibEG/4AFj/+JDRCME=)
                          7: 32D32D34674F0161657AF3F71B992CAF74E2BBB9.crl (hash: 8tkEnuVtW1vv1YTfWlm4gVh7A8I53UZOrvTFalheNak=)
                          8: 34352e3136322e39332e302f32342d3234203d3e20323638353137.roa (hash: LK9wAISAtrdwuu5ixP/0SRk47XHmD/RCEICbfeR0BcM=)
                          9: 323830343a353236633a3a2f33322d3332203d3e20323638353137.roa (hash: VZ0+VbGo0j1fpYw/Wqs/RSDudQb16Cf8EzoQKfn0qfc=)
                          10: 34352e3136322e39322e302f32322d3232203d3e20323638353137.roa (hash: Vr+vdZy1BTWT1D8MSvYyBj0TUqAdyST4yoPzPhs36oM=)
                          11: 34352e3136322e39352e302f32342d3234203d3e20323638353137.roa (hash: C0Dv1jugT1q7IL86+uAmf8CEQ0GQXjQhDVhFTh2a3E8=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/32D32D34674F0161657AF3F71B992CAF74E2BBB9.crl
                          rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/32D32D34674F0161657AF3F71B992CAF74E2BBB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D32D34674F0161657AF3F71B992CAF74E2BBB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:78:4f:80:62:c4:9c:e7:8e:9d:95:76:b1:41:23:57:ce:6c:5a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32D32D34674F0161657AF3F71B992CAF74E2BBB9
        Validity
            Not Before: Nov 23 12:35:27 2024 GMT
            Not After : Nov 24 13:07:27 2024 GMT
        Subject: CN=D83C4294ABCFBF318A84FD952ABDD05772A29D53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2a:8f:e3:0e:70:d6:bc:d5:6a:54:fa:71:5e:
                    06:77:e7:fa:af:69:b4:60:6c:9b:48:0f:f4:fe:98:
                    a1:50:7b:3f:00:94:fc:3a:36:c4:d8:94:de:5e:4f:
                    f4:42:db:c5:20:d9:66:40:3e:a9:ad:1f:c2:6e:ee:
                    26:ad:97:44:c3:1b:04:62:34:db:77:6f:1a:5f:37:
                    a2:42:06:2d:4a:d0:26:19:0b:6f:9d:d5:6c:3b:25:
                    71:94:b0:bf:54:11:9b:88:97:57:42:c3:75:a3:d7:
                    95:1f:c3:96:4f:cc:41:92:db:50:dd:1c:84:e4:87:
                    34:cc:c2:ec:27:8f:b1:08:55:b9:a5:ba:a4:59:f9:
                    62:fd:04:46:71:16:c1:aa:ae:bd:e9:2c:90:9b:66:
                    b9:c8:3c:6f:3a:b0:7d:fe:69:02:0b:d5:22:2d:dd:
                    d1:35:c7:93:be:22:47:35:69:7f:4e:ec:af:11:d6:
                    4f:05:2f:6e:a3:f9:2e:a9:ab:57:ee:37:07:98:fe:
                    20:f6:b1:47:3b:9c:71:f9:5e:19:b0:9f:1d:42:21:
                    0d:00:72:57:07:3b:fb:ec:4c:0e:bb:a2:ed:21:b3:
                    23:e5:3b:b9:a2:71:87:e4:ab:8b:10:32:a4:a6:7a:
                    8b:c7:96:67:44:c9:1a:61:d4:17:13:b4:97:42:56:
                    f5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:3C:42:94:AB:CF:BF:31:8A:84:FD:95:2A:BD:D0:57:72:A2:9D:53
            X509v3 Authority Key Identifier:
                keyid:32:D3:2D:34:67:4F:01:61:65:7A:F3:F7:1B:99:2C:AF:74:E2:BB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/32D32D34674F0161657AF3F71B992CAF74E2BBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D32D34674F0161657AF3F71B992CAF74E2BBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/32D32D34674F0161657AF3F71B992CAF74E2BBB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:7f:97:e9:9c:20:0d:f1:d2:b7:af:4f:75:18:4a:b6:4b:65:
         9c:5f:12:94:35:e5:c0:2c:b9:53:ad:ff:d7:e1:26:50:fd:9e:
         de:aa:3a:ce:9c:c2:ce:8a:42:d9:44:da:cd:1d:66:0f:82:7a:
         ff:ff:69:96:ce:e8:35:9d:9e:05:a3:43:64:8c:f6:fb:c2:ce:
         3d:18:ca:8a:53:d9:3d:e7:00:28:de:5f:37:89:d1:13:63:b3:
         ce:3f:86:e4:1f:31:1c:ee:01:0d:57:7c:ff:54:8b:bd:69:97:
         f0:0c:d1:1d:7d:4a:07:79:e6:ae:88:c6:3f:a8:c3:de:58:44:
         60:27:f3:fb:35:a6:b7:68:32:ff:32:7f:23:16:3a:d0:08:5b:
         e4:43:28:ac:aa:e0:a3:85:d6:b3:b3:3a:b9:ba:1b:9a:c0:b1:
         14:50:63:3a:da:be:94:ec:92:fa:bc:4c:fe:da:57:ce:3d:79:
         5f:bd:9d:8c:0b:3a:25:5c:d6:8c:9a:5c:fc:73:d0:84:83:b3:
         8a:4a:3c:58:b3:1c:1d:24:25:bf:5b:d2:a9:b3:f5:9a:d5:a4:
         80:45:69:59:10:22:df:03:86:41:07:0c:50:71:fa:22:a7:3f:
         f1:ed:54:88:88:3c:7c:89:5e:18:13:23:ea:9a:1d:11:e3:35:
         ca:9e:33:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:41 2024 by rpki-client on console-fra.rpki-client.org