Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
File:                     B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft (raw, json)
Hash identifier:          T1yF7z1P7zX0Kn3yHR9iAaOWlupP0XaESO6mkgkosCY=
Subject key identifier:   93:AB:39:59:78:E6:28:5B:6A:E3:18:16:1F:ED:36:72:2A:CE:4B:9A
Authority key identifier: B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF
Certificate issuer:       /CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF
Certificate serial:       518FBD0481A2D3C7713AB6DD58C2A165DC3E36B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
Manifest number:          0137
Signing time:             Fri 22 Nov 2024 18:46:06 +0000
Manifest this update:     Fri 22 Nov 2024 18:41:06 +0000
Manifest next update:     Sat 23 Nov 2024 18:51:06 +0000
Files and hashes:         1: B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl (hash: ocOOExOXP0RBbrH2dotMM1F6/9V+VX+qnw6O4uS1daU=)
                          2: 3137302e302e36382e302f32322d3332203d3e20323634393633.roa (hash: F0NweVL9JT1PH4P4nU3SBVhyJI6QMp7yhppzgl+J06o=)
                          3: 323830343a333039383a3a2f33322d313238203d3e20323634393633.roa (hash: QqEUuRgl46kTybAxzEprD4rjjseFoTJ4UxrBxBobdZ0=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl
                          rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:8f:bd:04:81:a2:d3:c7:71:3a:b6:dd:58:c2:a1:65:dc:3e:36:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF
        Validity
            Not Before: Nov 22 18:41:06 2024 GMT
            Not After : Nov 23 18:51:06 2024 GMT
        Subject: CN=93AB395978E6285B6AE318161FED36722ACE4B9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1a:1f:d6:c3:c6:f0:5b:1f:a5:ef:13:94:cc:
                    b9:66:3e:8b:d4:92:2a:d8:2b:01:69:23:3c:f1:ff:
                    26:f5:18:f3:b8:a4:1f:09:41:1f:20:db:37:83:4f:
                    75:76:f1:43:2f:30:c7:39:99:34:52:0c:27:c8:05:
                    1a:c2:d0:ed:32:6e:2a:89:fc:e6:e7:5c:80:38:62:
                    af:47:ac:bf:61:4f:b3:64:f0:04:a9:65:5f:23:76:
                    b7:e9:b5:b5:b6:d8:c8:af:ef:d7:92:30:4d:6d:17:
                    5d:e2:c9:4a:8f:34:64:43:1d:9d:a8:68:8d:75:03:
                    26:99:b5:b9:d1:66:e4:77:b9:71:53:f7:c2:3f:5a:
                    a3:c8:7c:5e:2b:ee:09:84:e1:87:77:0b:00:b1:ef:
                    d9:1f:86:93:f9:da:d9:6f:56:30:ac:92:1e:a3:bc:
                    ed:bd:52:96:51:bf:65:85:45:32:b3:2f:b2:1e:d6:
                    03:8f:7d:0d:df:a4:f9:73:ba:9d:9d:3e:51:5d:79:
                    fe:14:02:93:c2:2b:f5:e9:ae:e4:26:a6:2d:d1:ad:
                    72:c9:c5:e7:a9:0f:d1:25:25:01:f8:c8:38:d2:6a:
                    e9:6d:17:ba:5b:d3:db:d9:10:7b:b3:fd:c2:be:36:
                    da:80:8f:bf:45:3c:e5:fe:97:ae:97:e0:6c:4e:52:
                    ad:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AB:39:59:78:E6:28:5B:6A:E3:18:16:1F:ED:36:72:2A:CE:4B:9A
            X509v3 Authority Key Identifier:
                keyid:B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:46:87:fe:3e:d7:bf:47:40:31:99:9d:e7:73:a8:16:6c:fb:
         c3:9b:eb:fb:a5:81:6f:32:f6:c9:ed:3f:c1:3d:7b:7f:f0:10:
         40:f5:7b:2c:50:65:66:bd:1f:e2:7e:b2:45:22:06:c4:ab:33:
         b9:6f:55:e6:ed:b2:f0:6a:f5:2c:2d:94:00:1c:22:46:48:ac:
         fd:1b:be:e2:ef:d8:03:93:ab:85:55:cf:40:eb:0d:f7:4b:84:
         9a:13:f5:59:8e:38:4f:83:2e:12:48:12:73:cb:ef:84:4c:aa:
         0d:47:7a:d7:45:5b:99:ba:01:3a:a9:53:aa:35:02:f5:34:16:
         d1:ef:41:b9:a8:55:fa:94:01:7f:21:81:b7:6c:53:e8:fd:cc:
         5c:44:c4:0f:28:97:0d:0a:78:70:1b:90:62:11:d3:9a:ac:c1:
         35:2f:c3:32:f5:22:0b:ee:68:84:5d:2d:dd:e1:b9:e1:f5:ab:
         72:0d:b0:ee:71:82:1c:f7:8b:2b:b7:bc:60:c3:e0:ba:a6:fd:
         05:12:74:f8:93:e2:d7:fb:e4:94:9e:1d:d0:30:03:4e:2c:e2:
         cf:c0:18:7c:dd:ec:0d:d2:e0:28:95:d0:85:f5:2d:4f:33:4a:
         33:40:cf:13:a9:c4:d0:7e:f7:71:51:ce:51:13:9f:c1:5d:2d:
         fb:7d:08:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:31 2024 by rpki-client on console-ams.rpki-client.org