Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.mft
File:                     3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.mft (raw, json)
Hash identifier:          03l/SXgzeHrByFyoBXTbrMMelVsw+gjzqA0bdF5wNhE=
Subject key identifier:   67:D9:BC:6B:0E:18:BD:D0:8F:C4:7C:DD:3C:23:D5:84:EC:08:16:DE
Authority key identifier: 3C:0F:B6:F8:3D:6C:A4:9D:A6:6C:B1:CE:15:9A:49:38:5C:83:0F:FE
Certificate issuer:       /CN=3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE
Certificate serial:       3311CE4CEEAF36C9C5D3EE140C4254A9870AD19D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.mft
Manifest number:          0139
Signing time:             Fri 22 Nov 2024 13:17:42 +0000
Manifest this update:     Fri 22 Nov 2024 13:12:42 +0000
Manifest next update:     Sat 23 Nov 2024 13:58:42 +0000
Files and hashes:         1: 3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.crl (hash: 4OzNE/YN92yUeNRGlJVdXDSejNSVO4Lyu7RQeSOZ3i0=)
                          2: 323830343a386235383a3a2f33322d313238203d3e20323733373237.roa (hash: y4NQI14x8AlBG+F+T6UEycpx5yV3p+bt8WFwHMM+K60=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.crl
                          rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:11:ce:4c:ee:af:36:c9:c5:d3:ee:14:0c:42:54:a9:87:0a:d1:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE
        Validity
            Not Before: Nov 22 13:12:42 2024 GMT
            Not After : Nov 23 13:58:42 2024 GMT
        Subject: CN=67D9BC6B0E18BDD08FC47CDD3C23D584EC0816DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5f:22:76:1f:cc:98:eb:56:c2:07:6b:9f:ba:
                    b6:9f:ac:79:80:9d:53:a9:02:0a:b7:e3:3e:e6:28:
                    5b:8e:af:7a:ad:28:89:2d:e7:34:26:e8:6c:41:37:
                    d7:e0:6d:2e:74:89:4d:c3:d1:f5:34:48:f5:92:01:
                    7c:6e:76:55:09:93:b3:d5:67:2b:a6:d6:5f:95:8d:
                    3d:9e:a5:e0:1d:33:6f:cc:0d:97:ec:32:d1:e7:6c:
                    6c:c8:ee:e1:cc:99:bb:f8:d9:18:38:0d:1c:79:b6:
                    1f:83:b8:77:55:8b:44:8c:04:82:66:ef:9e:a9:79:
                    62:5e:b1:00:c1:66:ea:53:77:7b:d8:0d:81:84:b7:
                    2c:89:c1:bc:3b:49:1d:de:7a:e3:99:cc:49:9c:64:
                    62:08:64:7f:5d:e5:c8:13:9b:92:e1:88:33:d0:44:
                    e9:6f:75:d7:06:66:e9:c2:b1:ae:06:48:d5:c4:fe:
                    7e:c4:b5:e1:08:17:8d:83:6b:59:ba:49:0a:f2:d7:
                    f7:6b:be:e6:9f:1f:eb:58:50:b1:8f:7f:3d:4d:46:
                    cc:60:c1:91:bd:58:d1:e7:84:de:f0:28:99:1a:08:
                    c2:08:a1:7f:fc:75:26:4e:1c:ec:d9:49:cc:d6:00:
                    72:1e:16:96:18:81:c9:f6:cf:18:0e:6f:42:35:1c:
                    a4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D9:BC:6B:0E:18:BD:D0:8F:C4:7C:DD:3C:23:D5:84:EC:08:16:DE
            X509v3 Authority Key Identifier:
                keyid:3C:0F:B6:F8:3D:6C:A4:9D:A6:6C:B1:CE:15:9A:49:38:5C:83:0F:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:41:5e:fd:fb:48:2d:1e:15:23:21:0a:4c:85:76:60:02:c7:
         6b:fe:00:bd:63:d7:e0:34:e9:20:9a:a6:48:7d:a4:da:b3:31:
         ab:8b:e8:f5:70:b7:9d:ef:20:8c:42:5d:43:fb:9b:f5:09:a5:
         0b:b4:e8:87:e4:fe:77:d7:9f:8a:c6:f5:07:51:19:39:56:a5:
         9d:7a:27:85:4b:b6:ee:ed:1f:28:ae:2c:ff:ef:03:b4:e3:d9:
         f8:d1:3d:70:45:9e:15:e4:e0:f5:62:3f:15:15:3c:b2:be:ed:
         d5:8e:8c:f0:34:ef:b5:c1:86:89:7b:6e:e2:31:bc:77:18:4b:
         97:d7:2c:71:5c:ec:d2:0d:12:84:e1:52:68:d9:26:d1:b0:4a:
         2c:42:f9:1f:94:f2:a1:0a:31:1d:a7:a9:a9:86:e3:5b:f4:bf:
         bb:e4:05:7b:6b:86:38:3b:76:f4:57:ea:eb:9f:0b:21:7d:0a:
         53:f7:92:f9:e0:f3:53:13:7e:ae:43:43:56:9b:f2:29:95:94:
         38:5a:5b:0e:a6:21:f9:d4:3c:a8:2f:a5:4d:46:c4:23:6a:04:
         93:69:5c:6a:1f:7e:1c:81:56:c6:4e:c2:5b:e9:de:0b:6e:7c:
         ff:85:2a:c2:f3:b0:96:64:e6:41:65:e8:8f:ce:ac:7c:b4:54:
         10:3b:13:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMxHOTO6vNsnF0+4UDEJUqYcK0Z0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0MwRkI2RjgzRDZDQTQ5REE2NkNCMUNFMTU5QTQ5Mzg1
QzgzMEZGRTAeFw0yNDExMjIxMzEyNDJaFw0yNDExMjMxMzU4NDJaMDMxMTAvBgNV
BAMTKDY3RDlCQzZCMEUxOEJERDA4RkM0N0NERDNDMjNENTg0RUMwODE2REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOXyJ2H8yY61bCB2ufurafrHmA
nVOpAgq34z7mKFuOr3qtKIkt5zQm6GxBN9fgbS50iU3D0fU0SPWSAXxudlUJk7PV
Zyum1l+VjT2epeAdM2/MDZfsMtHnbGzI7uHMmbv42Rg4DRx5th+DuHdVi0SMBIJm
756peWJesQDBZupTd3vYDYGEtyyJwbw7SR3eeuOZzEmcZGIIZH9d5cgTm5LhiDPQ
ROlvddcGZunCsa4GSNXE/n7EteEIF42Da1m6SQry1/drvuafH+tYULGPfz1NRsxg
wZG9WNHnhN7wKJkaCMIIoX/8dSZOHOzZSczWAHIeFpYYgcn2zxgOb0I1HKSNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUZ9m8aw4YvdCPxHzdPCPVhOwIFt4wHwYDVR0j
BBgwFoAUPA+2+D1spJ2mbLHOFZpJOFyDD/4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFhzNjlYejFXQktqSlNGYWVneDlwb29HUFkzd2N3anNWUG9Eem1ZSjk2
ek0vMS8zQzBGQjZGODNENkNBNDlEQTY2Q0IxQ0UxNTlBNDkzODVDODMwRkZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDMEZCNkY4M0Q2Q0E0OURB
NjZDQjFDRTE1OUE0OTM4NUM4MzBGRkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SFhzNjlYejFXQktqSlNGYWVneDlwb29HUFkzd2N3anNWUG9Eem1ZSjk2ek0vMS8z
QzBGQjZGODNENkNBNDlEQTY2Q0IxQ0UxNTlBNDkzODVDODMwRkZFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJkFe/ftILR4VIyEKTIV2YALHa/4AvWPX4DTpIJqmSH2k2rMxq4vo9XC3ne8g
jEJdQ/ub9QmlC7Toh+T+d9efisb1B1EZOValnXonhUu27u0fKK4s/+8DtOPZ+NE9
cEWeFeTg9WI/FRU8sr7t1Y6M8DTvtcGGiXtu4jG8dxhLl9cscVzs0g0ShOFSaNkm
0bBKLEL5H5TyoQoxHaepqYbjW/S/u+QFe2uGODt29Ffq658LIX0KU/eS+eDzUxN+
rkNDVpvyKZWUOFpbDqYh+dQ8qC+lTUbEI2oEk2lcah9+HIFWxk7CW+neC258/4Uq
wvOwlmTmQWXoj86sfLRUEDsTUg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:46 2024 by rpki-client on console-fra.rpki-client.org