Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft
File:                     ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft (raw, json)
Hash identifier:          hPvyqnEjKjxFc6WjAaGKZhLn3FT+ulI297x5+Jr1SMQ=
Subject key identifier:   01:2F:DA:F3:AB:1C:F4:B5:EB:67:5B:B7:F3:6F:7C:C3:E2:71:AB:65
Authority key identifier: AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D
Certificate issuer:       /CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
Certificate serial:       2D68019AE1C4E4ED6F11FCDF9D136B66AD9B41C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft
Manifest number:          013A
Signing time:             Thu 21 Nov 2024 18:50:00 +0000
Manifest this update:     Thu 21 Nov 2024 18:45:00 +0000
Manifest next update:     Fri 22 Nov 2024 20:37:00 +0000
Files and hashes:         1: 323830343a336439303a3a2f33322d3438203d3e20323636353339.roa (hash: iaX2Z+saqzQ9w7kGia24lgFQXYPhFD5n7/GIwnGAu0Q=)
                          2: 323830343a336439303a3a2f33322d3438203d3e20323033.roa (hash: 3K/aDf8mPV0pMzF5r7w0fd9AdDQdwhb2HQ56XGOm4m4=)
                          3: 34352e36352e3232302e302f32322d3234203d3e20323033.roa (hash: Y7TrC8Nobf0qjLXmk67DXyyqDZ0kOJoQtGAo1QsmxCI=)
                          4: 34352e36352e3232302e302f32322d3234203d3e2033333536.roa (hash: Ba8orPU/cowHs2XpbMDCnF1+NKjrMzwRewXa9GGFvPs=)
                          5: 323830343a336439303a3a2f33322d3438203d3e20323032.roa (hash: PXxFpgwqwDsPBndK3Tb3cOy4BfatUjjIcAAsI1Dj90s=)
                          6: 34352e36352e3232302e302f32322d3234203d3e20323636353339.roa (hash: T8xhgTs4JTIQDRTdzkF2FQJQOKhZjmOfPsHxHECqFUg=)
                          7: 34352e36352e3232302e302f32322d3234203d3e20323032.roa (hash: pPEorw9YnVdIYi5Wn7uJokD+CX5D5L5h7RSE+b5KKBw=)
                          8: ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl (hash: WCbXCyBet9Irw4lebC91gedC3+Zl+nEGgqKuo0k38xI=)
                          9: 3137372e3232332e33322e302f32302d3234203d3e20323636353339.roa (hash: qlAb68WVBXQ8h/OfETAMcW9D7dD+56kHUGaMSe+bcvI=)
                          10: 323830343a336439303a3a2f33322d3438203d3e2033333536.roa (hash: WC6NFXDFxp2xiHmPfDrALI5ZahaV4X0T/r6jZCQiTXo=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl
                          rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 20:37:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:68:01:9a:e1:c4:e4:ed:6f:11:fc:df:9d:13:6b:66:ad:9b:41:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
        Validity
            Not Before: Nov 21 18:45:00 2024 GMT
            Not After : Nov 22 20:37:00 2024 GMT
        Subject: CN=012FDAF3AB1CF4B5EB675BB7F36F7CC3E271AB65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:45:f3:cc:f2:ba:97:1a:03:75:0a:0b:4f:c1:
                    5b:8d:4d:a7:b0:13:96:e4:4e:fc:13:fc:8c:fd:79:
                    bf:72:db:4a:6f:c5:fc:74:00:43:04:00:6b:e1:95:
                    15:0c:b9:44:f1:85:c5:57:1b:14:9e:d1:ac:4e:5a:
                    3f:3d:ae:ac:b4:f5:c2:21:b5:c9:63:12:5d:79:a6:
                    65:e9:c5:ec:2b:de:a0:77:5c:0b:c5:03:2c:5b:4d:
                    ec:f9:de:a7:f8:59:53:04:94:9f:15:91:f5:c2:c6:
                    ec:c6:24:74:6c:22:b2:b9:9a:b3:30:60:e6:47:11:
                    f0:e0:db:b6:da:26:e1:98:7d:f2:5e:71:79:dd:f1:
                    1e:13:5e:bc:dc:e2:f1:1a:40:af:9e:88:fd:f2:63:
                    c9:93:e5:dc:b4:fe:3b:e7:7d:5f:b6:37:6c:2b:31:
                    80:31:d4:4e:66:7b:0f:06:bf:f3:6d:7d:7a:de:23:
                    99:b8:73:e3:ba:08:02:a3:f9:5f:a9:97:52:be:99:
                    29:6b:e9:9b:fc:41:0a:ab:78:51:71:79:52:b7:d0:
                    78:1e:b6:b0:31:8a:ac:49:d5:b2:dc:db:53:cb:bb:
                    26:05:43:d3:b4:23:9f:19:e4:dd:65:08:23:a1:21:
                    47:24:e7:f9:6d:18:25:c9:89:16:9a:4b:15:5a:a1:
                    7c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:2F:DA:F3:AB:1C:F4:B5:EB:67:5B:B7:F3:6F:7C:C3:E2:71:AB:65
            X509v3 Authority Key Identifier:
                keyid:AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:1f:2c:61:78:35:d9:84:78:36:78:53:65:86:85:d0:85:bc:
         68:26:ad:1e:db:e0:d5:8c:68:10:f9:61:ee:78:aa:e5:64:15:
         b0:bd:04:be:11:16:da:2f:ec:80:e6:a9:4f:81:4d:31:df:22:
         4a:1a:63:e2:d7:38:cd:9c:67:73:e0:af:fc:e4:92:b0:97:1a:
         6b:5b:34:60:19:ba:0a:8e:02:70:f7:73:77:d2:dc:21:6d:50:
         8a:46:91:9b:f2:cb:ee:9a:e6:a4:96:b6:fd:64:4b:f8:25:77:
         fa:d7:a1:30:36:0e:bd:9e:60:d5:d3:44:69:b6:be:e3:b0:4e:
         34:db:f7:ea:70:4e:71:d9:2a:20:15:1d:c9:3a:5b:26:0e:b8:
         a9:94:09:c6:6a:f9:91:82:79:c1:09:53:bc:7c:16:5d:0f:fb:
         aa:9f:8c:43:08:16:d8:51:e8:4c:e2:47:a4:10:a7:37:bf:bf:
         84:c6:63:b5:48:0b:a8:e5:67:d6:7c:bf:23:da:85:c8:be:b6:
         5a:39:46:0f:eb:d9:07:1f:b0:2b:c5:df:67:a3:b5:c5:75:79:
         e7:b9:40:28:b9:2f:96:21:83:23:a7:1b:49:24:89:bd:9d:31:
         18:6f:7f:0d:a1:0f:1c:cb:49:0b:a5:34:29:d9:23:06:a9:49:
         85:c9:5c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:02:00 2024 by rpki-client on console-fra.rpki-client.org