Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft
File:                     A4C9B133126401D92DA5457C573EA0078BF42BA8.mft (raw, json)
Hash identifier:          FETSSdYERWXJTfwseZWrUFMmc2nBNhrOugPXq3Bik6Q=
Subject key identifier:   33:9D:71:F8:B6:90:08:0E:7C:40:23:A5:68:CF:11:E5:1B:C5:3F:E1
Authority key identifier: A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8
Certificate issuer:       /CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
Certificate serial:       1DEC14A34E05A1D209127ABF99920212D1C8DDEF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft
Manifest number:          0138
Signing time:             Fri 22 Nov 2024 19:12:18 +0000
Manifest this update:     Fri 22 Nov 2024 19:07:18 +0000
Manifest next update:     Sat 23 Nov 2024 21:47:18 +0000
Files and hashes:         1: 3136382e3139342e31352e302f32342d3234203d3e20323635333737.roa (hash: p28Q8LYDRJiHk0gSC3gscyjQp/EYRNfrKtkR6thJYKw=)
                          2: 3136382e3139342e31322e302f32342d3234203d3e20323635333737.roa (hash: C4uh0bHSyr5rXACHuNC6pmTFKdQCNjsLiiGS8AOgVEo=)
                          3: 3136382e3139342e31322e302f32322d3232203d3e20323635333737.roa (hash: IPsE9FVq049WqHQLIEv1iYb4WahG5K9WF63DuxIXs2s=)
                          4: 3136382e3139342e31342e302f32332d3233203d3e20323635333737.roa (hash: a7sAwmpLq5Mv7ym7f9YdFVagFM7hrr+/M8XqPsiH3PQ=)
                          5: 3136382e3139342e31322e302f32332d3233203d3e20323635333737.roa (hash: 2sGl9wi96YikTxZI5OdGdJ4Sfagk7PaomasiDnqmUj4=)
                          6: 323830343a333332343a3a2f33342d3334203d3e20323635333737.roa (hash: S+SWjbIGKFy9tmbmfaV71XxGOvJ/c/LXO59qOKs7vnc=)
                          7: 323830343a333332343a633030303a3a2f33342d3334203d3e20323635333737.roa (hash: HgXFn3Z4F6zeDj1OJqaKnClJwl+2ypRPEOKfL4DUSIU=)
                          8: 323830343a333332343a383030303a3a2f33342d3334203d3e20323635333737.roa (hash: Ju1JwRSG5X5n1rDVMXBwnVuKdY6n6Ld9dCHBBlFjqhU=)
                          9: 323830343a333332343a343030303a3a2f33342d3334203d3e20323635333737.roa (hash: GjB73PrzHIO5vOSn5kmHSD20v4Y/SQ9VSNAJcPOc1o8=)
                          10: 3136382e3139342e31332e302f32342d3234203d3e20323635333737.roa (hash: Krzyu7gM0Pkbs3pswW4qtlopqnbjbWmM2DJ/LHlM+f4=)
                          11: 3136382e3139342e31342e302f32342d3234203d3e20323635333737.roa (hash: j1GT7el2M3rQ3VCDUJ/lHbmAC3Njj+2g4f54J8FVdp4=)
                          12: A4C9B133126401D92DA5457C573EA0078BF42BA8.crl (hash: L16BT2z3pb8HZtVo2wOEaAH/grLuMy0g52YoLnUUIYs=)
                          13: 323830343a333332343a3a2f33322d3332203d3e20323635333737.roa (hash: U0dZoyNcDlYBG7rIeGuLvSwq460wge8VrDDGLAZN/zk=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl
                          rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ec:14:a3:4e:05:a1:d2:09:12:7a:bf:99:92:02:12:d1:c8:dd:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
        Validity
            Not Before: Nov 22 19:07:18 2024 GMT
            Not After : Nov 23 21:47:18 2024 GMT
        Subject: CN=339D71F8B690080E7C4023A568CF11E51BC53FE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0d:15:52:14:b7:9d:63:91:da:7c:d7:09:d1:
                    dc:56:cc:6f:30:a0:93:9b:17:f8:6f:77:2b:3e:62:
                    ea:01:b6:fa:c1:53:53:6e:cb:36:cf:02:53:54:75:
                    da:bc:8a:f6:85:9e:ec:08:08:48:79:6c:9b:30:a7:
                    ee:44:56:16:d3:1e:4f:50:e0:10:0c:ec:55:2d:b5:
                    e8:c4:78:48:fd:3d:ee:d2:fa:dd:00:d2:87:1d:a8:
                    c1:5e:88:0a:03:99:d2:a4:99:b1:ae:6e:ea:b0:a7:
                    ed:2a:85:84:ac:c5:67:e9:ba:50:ad:0b:34:0b:60:
                    fd:8c:7f:d6:88:94:be:5a:a6:56:c0:a4:14:ce:31:
                    d3:9b:41:ff:39:86:66:69:27:de:eb:8c:1c:0c:8a:
                    06:b0:79:59:76:bf:56:5b:b0:ad:9d:9c:17:83:c6:
                    b1:d4:78:d3:b7:72:e6:5e:e4:9f:89:ff:b0:69:e3:
                    09:f3:03:37:8c:15:e1:74:c6:77:6d:ff:e4:5a:57:
                    61:53:7a:cb:11:0a:60:99:c6:a6:1b:5a:a2:1d:0f:
                    29:3a:4e:a8:81:30:f5:6f:38:4f:96:5d:48:92:5a:
                    78:a0:83:7b:3e:b9:70:77:9b:de:67:7e:62:3c:ff:
                    66:d3:b5:fc:fb:03:ce:b8:db:25:1c:d3:fe:8b:7b:
                    1a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:9D:71:F8:B6:90:08:0E:7C:40:23:A5:68:CF:11:E5:1B:C5:3F:E1
            X509v3 Authority Key Identifier:
                keyid:A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:44:bb:43:8f:0a:31:4d:2b:ac:f9:82:c2:9e:64:ec:f5:c5:
         7c:35:67:f8:f9:89:7e:95:c0:fb:ed:94:8b:14:93:37:33:52:
         f0:88:89:b7:5b:18:6a:77:08:e1:9c:b5:60:fd:37:ee:c7:b2:
         29:3e:a1:9b:77:fd:40:4b:fb:6b:4c:b6:bd:9d:c0:3f:18:ac:
         9e:79:21:b5:dd:d0:1f:f3:0d:a9:42:23:92:00:92:25:7b:86:
         96:09:bd:07:90:a6:55:aa:ec:89:18:70:08:a6:6c:df:bc:d1:
         43:d6:d7:92:03:92:74:b4:00:f4:79:07:3b:5f:d1:4c:77:fa:
         2a:3d:4c:9d:ad:c6:c0:5e:26:72:fe:ef:d5:31:4d:16:17:6a:
         3b:4a:b5:b7:8b:8e:92:24:b7:5f:0b:0e:3f:20:2e:30:e8:de:
         14:41:60:0f:1b:a9:ea:62:a9:82:f0:26:ae:da:66:91:36:2c:
         d5:b9:8f:73:1b:b7:b3:46:bb:4d:c7:90:83:d8:9c:a5:33:b7:
         0f:92:c2:d8:53:5f:1e:55:4c:4b:68:7f:31:cd:50:ab:a0:f3:
         9e:34:2a:e2:4d:41:56:f9:71:34:da:fd:77:25:4a:c5:c6:bf:
         b0:8e:e1:88:d8:fc:fa:4e:3d:1b:e7:38:9a:27:63:ed:7d:ff:
         00:f0:5d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:24 2024 by rpki-client on console-fra.rpki-client.org