Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/4E954E92398DE10004D8805C61AFDF6831FA4AA5.mft
File:                     4E954E92398DE10004D8805C61AFDF6831FA4AA5.mft (raw, json)
Hash identifier:          UDrJXuHI5QkrkQB1Gi+c0IT78AUwhM/rjoX5aVtja9Q=
Subject key identifier:   18:1C:DB:28:BB:A7:5B:85:58:62:6F:9B:83:EC:E8:DA:B0:06:8F:6C
Authority key identifier: 4E:95:4E:92:39:8D:E1:00:04:D8:80:5C:61:AF:DF:68:31:FA:4A:A5
Certificate issuer:       /CN=4E954E92398DE10004D8805C61AFDF6831FA4AA5
Certificate serial:       5717CCA2DA699E37161A880B2CB5FB97EBFFE170
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E954E92398DE10004D8805C61AFDF6831FA4AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/4E954E92398DE10004D8805C61AFDF6831FA4AA5.mft
Manifest number:          13
Signing time:             Fri 22 Nov 2024 22:40:00 +0000
Manifest this update:     Fri 22 Nov 2024 22:35:00 +0000
Manifest next update:     Sat 23 Nov 2024 23:23:00 +0000
Files and hashes:         1: 4E954E92398DE10004D8805C61AFDF6831FA4AA5.crl (hash: Jq6qMGqYYxAZPOUgURKLM+3rAeUIs2JXd29BRoPhQVs=)
                          2: 3138392e3132372e3134342e302f32322d3232203d3e20323730373034.roa (hash: Zre19wF98ACCPhyN1OHuaVTRC2bMI1WTcC/s1ViYo8E=)
                          3: 3138392e3132372e3134352e302f32342d3234203d3e20323730373034.roa (hash: jHX8rKTJIVzH1nDn1ZKmg7Dc/AgHN8F973eXTDMc5Pc=)
                          4: 3138392e3132372e3134342e302f32342d3234203d3e20323730373034.roa (hash: Xojmt+hOhWk/eAfqNyLm582FKoELsaSO/YaHOf7nRpo=)
                          5: 323830343a373031343a3a2f33322d3333203d3e20323730373034.roa (hash: tSTWoRQ5dSXgBZsgqqaXNgyq6qepM994e12zSVyFFbE=)
                          6: 3138392e3132372e3134372e302f32342d3234203d3e20323730373034.roa (hash: QKaypV5BfWHpdcMntxxAMv59Auy88+2q8C4vwfXD0CQ=)
                          7: 3138392e3132372e3134362e302f32332d3233203d3e20323730373034.roa (hash: 520XA7dzNckydnXA5QdgozHVDoHDcDNiNU1v33dNMls=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/4E954E92398DE10004D8805C61AFDF6831FA4AA5.crl
                          rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/4E954E92398DE10004D8805C61AFDF6831FA4AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E954E92398DE10004D8805C61AFDF6831FA4AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:17:cc:a2:da:69:9e:37:16:1a:88:0b:2c:b5:fb:97:eb:ff:e1:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E954E92398DE10004D8805C61AFDF6831FA4AA5
        Validity
            Not Before: Nov 22 22:35:00 2024 GMT
            Not After : Nov 23 23:23:00 2024 GMT
        Subject: CN=181CDB28BBA75B8558626F9B83ECE8DAB0068F6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5d:56:39:42:73:26:fb:22:df:05:a5:3e:c3:
                    65:a1:bb:d5:d7:eb:76:59:1e:71:67:7c:c0:ab:93:
                    f8:de:96:40:a5:78:c3:5d:b6:71:1b:9d:27:19:36:
                    d9:e4:06:64:41:db:b9:a0:f6:97:6b:e5:95:59:df:
                    7c:29:fe:2c:72:65:d5:1e:82:19:bf:78:8c:19:ff:
                    46:20:8a:65:41:8a:a3:2f:5f:36:f4:8c:fd:9a:ef:
                    44:73:7f:1a:3e:85:8f:44:96:9a:dc:cc:9b:85:e0:
                    dc:36:2f:6d:e7:64:3a:d4:a9:d5:ae:1c:fc:dc:62:
                    ed:2a:16:b6:86:37:35:a4:10:c5:b6:a9:90:31:28:
                    e3:7a:84:27:23:12:5a:15:c6:a6:51:25:89:5a:c8:
                    ce:82:b9:7a:69:ed:86:1e:e9:cb:4a:81:2c:43:e5:
                    c4:4a:38:56:f2:8f:91:d8:f9:0a:0b:0a:29:86:1c:
                    5d:c1:7b:20:6d:e1:3b:79:80:ab:7c:90:74:48:96:
                    13:ba:5c:a9:2f:39:8a:1b:b7:b1:14:f6:e2:6c:dd:
                    ff:1d:4b:d8:68:42:f7:24:3f:af:f5:c9:b5:20:da:
                    88:40:69:18:e4:3c:f8:73:2a:f5:41:24:8e:5f:fe:
                    2c:e5:c1:ea:d1:35:4b:2b:5c:62:17:ff:b9:c2:c7:
                    f2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1C:DB:28:BB:A7:5B:85:58:62:6F:9B:83:EC:E8:DA:B0:06:8F:6C
            X509v3 Authority Key Identifier:
                keyid:4E:95:4E:92:39:8D:E1:00:04:D8:80:5C:61:AF:DF:68:31:FA:4A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/4E954E92398DE10004D8805C61AFDF6831FA4AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E954E92398DE10004D8805C61AFDF6831FA4AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/4E954E92398DE10004D8805C61AFDF6831FA4AA5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:a8:34:24:9c:23:39:7a:7c:18:87:59:66:3f:f8:94:08:3f:
         5b:08:08:02:6c:00:07:a2:14:92:98:5c:40:fd:9d:0a:25:c4:
         2c:3a:2f:ef:32:f8:ed:c2:82:6e:c9:50:4f:d4:20:78:9f:1e:
         73:37:35:fe:47:7e:8c:a4:9a:05:90:1d:8a:a2:81:5e:a3:53:
         a1:42:c0:b6:de:03:ce:99:f9:5c:db:d8:f5:64:b7:9f:73:de:
         c5:f4:0e:64:aa:e6:ee:c9:63:e8:5f:a9:99:65:d4:af:60:74:
         5e:52:7f:c1:7b:00:a1:5d:81:98:ef:87:1d:e4:8e:f1:1c:99:
         b4:b0:9e:22:8b:b3:8b:6b:26:2e:ed:98:1a:b8:f8:4a:c7:27:
         52:7c:c9:cd:d4:34:39:dd:ae:7c:f0:df:72:0f:eb:03:12:d5:
         26:cc:5f:7c:b4:08:a1:e8:3f:b7:da:6e:64:4d:28:85:07:ac:
         8a:a0:85:e0:28:5c:15:55:25:66:8b:b6:e3:a6:b4:35:34:fc:
         ed:d7:0b:ac:c4:dd:6d:5e:2d:e2:8d:5d:1d:0b:e0:ce:7a:e5:
         79:14:01:0a:79:39:ac:ee:f6:bf:0d:4c:ab:c3:d4:cc:66:77:
         72:2b:6c:cc:47:8a:98:ee:c7:2d:1a:5c:ba:a6:3a:0b:45:43:
         16:ac:bd:20
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUVxfMotppnjcWGogLLLX7l+v/4XAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEU5NTRFOTIzOThERTEwMDA0RDg4MDVDNjFBRkRGNjgz
MUZBNEFBNTAeFw0yNDExMjIyMjM1MDBaFw0yNDExMjMyMzIzMDBaMDMxMTAvBgNV
BAMTKDE4MUNEQjI4QkJBNzVCODU1ODYyNkY5QjgzRUNFOERBQjAwNjhGNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoXVY5QnMm+yLfBaU+w2Whu9XX
63ZZHnFnfMCrk/jelkCleMNdtnEbnScZNtnkBmRB27mg9pdr5ZVZ33wp/ixyZdUe
ghm/eIwZ/0YgimVBiqMvXzb0jP2a70Rzfxo+hY9ElprczJuF4Nw2L23nZDrUqdWu
HPzcYu0qFraGNzWkEMW2qZAxKON6hCcjEloVxqZRJYlayM6CuXpp7YYe6ctKgSxD
5cRKOFbyj5HY+QoLCimGHF3BeyBt4Tt5gKt8kHRIlhO6XKkvOYobt7EU9uJs3f8d
S9hoQvckP6/1ybUg2ohAaRjkPPhzKvVBJI5f/izlwerRNUsrXGIX/7nCx/JZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUGBzbKLunW4VYYm+bg+zo2rAGj2wwHwYDVR0j
BBgwFoAUTpVOkjmN4QAE2IBcYa/faDH6SqUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGU1aUtvNVV2eTNTc1RIYm4yS2dyMmVYbnhEejM3OTN0NEwyRndCbnNV
TFUvMC80RTk1NEU5MjM5OERFMTAwMDREODgwNUM2MUFGREY2ODMxRkE0QUE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFOTU0RTkyMzk4REUxMDAw
NEQ4ODA1QzYxQUZERjY4MzFGQTRBQTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SGU1aUtvNVV2eTNTc1RIYm4yS2dyMmVYbnhEejM3OTN0NEwyRndCbnNVTFUvMC80
RTk1NEU5MjM5OERFMTAwMDREODgwNUM2MUFGREY2ODMxRkE0QUE1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQqg0JJwjOXp8GIdZZj/4lAg/WwgIAmwAB6IUkphcQP2dCiXELDov7zL47cKC
bslQT9QgeJ8eczc1/kd+jKSaBZAdiqKBXqNToULAtt4Dzpn5XNvY9WS3n3PexfQO
ZKrm7slj6F+pmWXUr2B0XlJ/wXsAoV2BmO+HHeSO8RyZtLCeIouzi2smLu2YGrj4
SscnUnzJzdQ0Od2ufPDfcg/rAxLVJsxffLQIoeg/t9puZE0ohQesiqCF4ChcFVUl
Zou246a0NTT87dcLrMTdbV4t4o1dHQvgznrleRQBCnk5rO72vw1Mq8PUzGZ3cits
zEeKmO7HLRpcuqY6C0VDFqy9IA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:47 2024 by rpki-client on console-ams.rpki-client.org