Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
File:                     DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft (raw, json)
Hash identifier:          JeDMHyEpc5Jy7wn1bzjeWv4AiPk9BvesoCKfVGp0s9Y=
Subject key identifier:   EA:A5:82:47:03:03:C9:A1:D0:BD:4B:2D:C5:FA:D2:12:40:EF:29:99
Authority key identifier: DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF
Certificate issuer:       /CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
Certificate serial:       0DBA2641B74A5A54B0518A7F00884E37F96B0341
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
Manifest number:          013A
Signing time:             Mon 25 Nov 2024 20:20:01 +0000
Manifest this update:     Mon 25 Nov 2024 20:15:01 +0000
Manifest next update:     Tue 26 Nov 2024 22:19:01 +0000
Files and hashes:         1: 34352e3233322e37322e302f32332d3233203d3e20323637323531.roa (hash: 7sxcGkvauLeHZBHCaC8qW6Pztwa3QFVH7Rc+I4PW3/c=)
                          2: 34352e3233322e37352e302f32342d3234203d3e20323637323531.roa (hash: uSLk4kLQjPWgYMdwBbjEeQA41Wa/ufWutjiTthkObTQ=)
                          3: 34352e3233322e37332e302f32342d3234203d3e20323637323531.roa (hash: lV6dpYBF+UGIN0Zj7J9E69TkJzqBygSmd2nGIuF+xF0=)
                          4: 34352e3233322e37322e302f32342d3234203d3e20323637323531.roa (hash: IaO+M/0dGe0MHsmL3brZYR6BQsQKpxk4pS5D8hXmYNg=)
                          5: 34352e3233322e37342e302f32332d3233203d3e20323637323531.roa (hash: VpdcX5K/PgtOLgBv06n7D60IeLP2Cqz5thyEgjmgUeI=)
                          6: 34352e3233322e37342e302f32342d3234203d3e20323637323531.roa (hash: x8/4qYtYhu4oTvhf+s0EgVdC8YbHA3C556/kgYOP660=)
                          7: 34352e3233322e37322e302f32322d3232203d3e20323637323531.roa (hash: D/KFo0Tmo4o2j6Ty6F9nmPDZGIWfU74MszSeTXVyYbI=)
                          8: DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl (hash: t1t6umjmPMESXrtcENZBVTzo/XSmQ2IynBrBP5mCPG8=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl
                          rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ba:26:41:b7:4a:5a:54:b0:51:8a:7f:00:88:4e:37:f9:6b:03:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
        Validity
            Not Before: Nov 25 20:15:01 2024 GMT
            Not After : Nov 26 22:19:01 2024 GMT
        Subject: CN=EAA582470303C9A1D0BD4B2DC5FAD21240EF2999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:19:29:00:aa:5a:4c:f8:1f:77:1e:4c:4d:0a:
                    ef:54:b4:ab:74:82:e7:96:d7:fa:4d:62:97:93:26:
                    1c:34:32:ca:7d:8d:94:17:75:fb:d4:71:f9:c1:4f:
                    86:b3:f2:f1:4e:ad:4e:79:04:a5:a1:57:ab:d6:c2:
                    32:63:64:81:6e:17:2c:98:ce:64:f9:16:d7:b5:06:
                    ae:92:36:18:ab:aa:56:db:09:06:fc:9b:12:2b:e2:
                    ec:00:b0:31:a1:fa:1e:9d:84:97:08:c7:f1:25:cf:
                    41:b0:a5:b4:22:4c:62:8e:ba:aa:d9:c6:36:c4:2f:
                    f4:dd:89:2d:83:c9:ce:16:12:b9:3a:01:53:2b:05:
                    cf:89:cc:4d:a9:97:47:fe:a6:1c:c1:9a:a9:ac:c3:
                    23:b4:09:df:48:18:42:f7:23:ba:fc:3f:83:f2:81:
                    5d:b9:b8:bf:ca:5e:ff:f8:ef:29:ee:87:ac:f9:a8:
                    64:d1:cb:3b:55:df:84:50:de:08:f8:f2:57:94:71:
                    22:41:f4:f9:26:f4:ea:66:de:bd:8b:d4:bb:d9:a9:
                    5e:7a:15:48:da:27:3f:f5:74:70:b9:6a:fc:75:aa:
                    1a:f1:b4:44:d3:82:31:1b:fe:9c:0c:3f:36:72:56:
                    da:fd:4d:7a:21:da:0f:c4:33:67:67:e6:a9:86:85:
                    ed:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A5:82:47:03:03:C9:A1:D0:BD:4B:2D:C5:FA:D2:12:40:EF:29:99
            X509v3 Authority Key Identifier:
                keyid:DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:05:c2:69:a7:90:16:eb:c3:e8:00:73:ac:b9:7e:0a:f8:c2:
         d4:eb:c4:1a:32:bf:6b:93:ea:08:7b:6c:5a:d2:e3:01:2a:d1:
         8b:3a:01:3e:9d:bc:39:1b:73:04:e5:9f:34:87:de:5d:7c:15:
         45:24:89:3e:5e:0f:8f:18:91:0e:f5:0d:23:92:54:fe:ef:1c:
         b5:b7:b1:0f:21:7d:6d:2c:1d:83:50:65:4b:6b:cf:38:24:0d:
         4d:b0:da:e3:10:43:56:b2:b9:5c:a4:69:00:fb:cc:d7:60:20:
         77:83:7e:6d:91:f7:5c:49:f6:ed:f5:87:a0:a4:0d:75:a7:35:
         df:74:dc:6b:97:a6:44:9a:6f:6d:0d:ed:84:07:e6:59:59:a0:
         db:fb:4c:87:35:b4:fa:ce:35:a5:04:b3:8e:a5:f7:65:7d:0e:
         81:09:00:15:28:3c:f8:45:87:60:60:12:b5:7b:a3:84:bb:fb:
         db:f9:c2:7a:62:09:7a:87:1a:21:78:92:7b:61:7e:06:16:d6:
         73:96:cc:cf:fa:44:32:ec:68:67:e4:c9:81:8c:f5:54:2a:8d:
         24:45:65:df:8d:4e:7b:a6:06:3f:06:bd:5a:b4:0a:7b:0c:1c:
         9b:38:4f:ca:35:cc:1f:86:49:80:89:ab:59:56:a6:64:49:d5:
         82:b1:85:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:03:00 2024 by rpki-client on console-fra.rpki-client.org