Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft
File:                     B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft (raw, json)
Hash identifier:          +Dxl2DvOmjZ6p93R+47tqbflfRRayxmoqSgTuREZW34=
Subject key identifier:   07:7F:13:32:2F:A5:2D:1C:A2:6B:8C:8E:2C:F8:57:79:D1:84:FB:93
Authority key identifier: B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D
Certificate issuer:       /CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
Certificate serial:       48D04CBC84EBAACC31767EF55B4D75440F06285C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft
Manifest number:          0B
Signing time:             Fri 22 Nov 2024 11:12:38 +0000
Manifest this update:     Fri 22 Nov 2024 11:07:38 +0000
Manifest next update:     Sat 23 Nov 2024 13:23:38 +0000
Files and hashes:         1: 3137302e38322e32322e302f32332d3332203d3e20323636343430.roa (hash: VhhP8rnZ6UCnRJRiCucXMy4ncmyKDFOTf8Wxmj/hPMI=)
                          2: 3137302e38322e32302e302f32332d3332203d3e20323636343430.roa (hash: +nAxPRtHcxrgkfrh1mtsvE/NhFZA9Y3xvxEZni9mbCY=)
                          3: 3137302e38322e32322e302f32342d3332203d3e20323636343430.roa (hash: DJne4kBD+xNmWBwcSI8pOxz3/iDzRXKwxTctYsGvKzY=)
                          4: 3137302e38322e32302e302f32322d3332203d3e20323636343430.roa (hash: oSQRk40W0JY8sSyVmz7gA7J13dK7vc4st2hm/+lgUdA=)
                          5: 3137302e38322e32332e302f32342d3332203d3e20323636343430.roa (hash: 6PedwyVVFqTEjw2hbT1Tz2heBUwIRq91w7SbTmPftoM=)
                          6: B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl (hash: pM2DkYc0N178CwhUBUiNX7TiyJFQZk8ejPNouhp5bY8=)
                          7: 323830343a333764633a3a2f33322d313238203d3e20323636343430.roa (hash: qNAnNxMLf23lX/Toa0RnHfzZ1GHt/QjrCvGeOjqM+AY=)
                          8: 3137302e38322e32312e302f32342d3332203d3e20323636343430.roa (hash: beeX4B6MyKuGmrciweMX6QiNJiZS0b30i2PbXxCMlEg=)
                          9: 3137302e38322e32302e302f32342d3332203d3e20323636343430.roa (hash: 6NEYOLRI6MRrTzbOfEps6WpFR9L/MZ1xNz0hgxoPQ+g=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl
                          rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d0:4c:bc:84:eb:aa:cc:31:76:7e:f5:5b:4d:75:44:0f:06:28:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
        Validity
            Not Before: Nov 22 11:07:38 2024 GMT
            Not After : Nov 23 13:23:38 2024 GMT
        Subject: CN=077F13322FA52D1CA26B8C8E2CF85779D184FB93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ce:12:9a:ba:48:5c:08:db:27:71:a8:40:85:
                    c4:ef:29:e3:15:f2:ad:b4:20:9e:43:c1:65:64:cb:
                    cd:2c:fe:93:b5:65:bd:85:4f:d4:7a:4f:a9:c7:ab:
                    eb:e2:a5:73:65:0b:f0:b9:99:c1:06:e7:9b:4a:78:
                    12:2e:05:19:9f:52:30:71:9d:4d:76:d3:2e:e0:f2:
                    99:21:23:fa:92:73:c4:20:17:d0:a0:bc:33:ad:7d:
                    41:bc:eb:3e:09:34:6f:0c:b9:0f:83:cc:1e:5c:5c:
                    06:82:07:95:91:f7:15:bb:ce:eb:cd:e8:83:19:60:
                    6b:71:85:0d:8d:55:98:30:a2:76:37:ac:0a:00:fe:
                    30:8f:0f:0c:76:90:b5:a3:5b:97:54:eb:b1:94:f9:
                    1b:99:cd:6d:88:53:d5:5a:d8:8e:64:f6:9d:4c:27:
                    34:42:de:f3:4d:09:a7:6c:55:c4:47:a0:d7:05:56:
                    47:bf:51:50:f1:0d:08:00:a5:47:8c:2d:25:ca:93:
                    b0:b9:d7:e0:fb:ad:a4:aa:61:37:27:2a:03:a7:a6:
                    72:4e:31:c1:23:cf:c1:b3:27:92:34:99:42:12:a3:
                    6c:f0:90:4e:7b:7d:1d:53:8d:68:82:98:e0:2c:e7:
                    57:63:fa:a2:40:4d:61:d4:29:52:0d:18:d5:50:c9:
                    4d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7F:13:32:2F:A5:2D:1C:A2:6B:8C:8E:2C:F8:57:79:D1:84:FB:93
            X509v3 Authority Key Identifier:
                keyid:B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:4a:df:bb:57:39:37:0e:66:21:bb:78:8a:0a:6b:8a:5c:93:
         94:f6:ad:83:bc:ca:16:54:f2:f5:50:ce:3e:d8:2f:5d:bf:c9:
         75:42:7b:ea:58:b8:17:23:f4:38:9a:32:c2:0d:d4:26:91:74:
         40:1f:cc:38:45:5b:22:e7:1d:8e:be:ba:a6:99:6a:43:63:15:
         f4:6a:60:92:fb:3f:f3:7c:0b:9c:27:a9:84:a3:22:7b:77:1d:
         71:c9:7b:f1:d1:f8:47:c8:a3:7d:c9:da:f4:ed:ce:79:f2:57:
         24:b0:82:1f:e5:d8:46:dd:0f:f7:eb:0d:a3:74:84:fa:6c:cc:
         56:8e:85:ad:da:5b:17:6a:98:51:18:8b:e0:76:60:95:4f:cc:
         84:23:a2:2c:30:02:e5:1f:e0:9e:2f:a2:8a:93:e6:fe:48:ff:
         f3:11:e5:7f:51:06:2e:5d:2a:2e:b6:55:16:95:cc:01:cf:cc:
         ad:6e:db:9f:c9:8a:ec:3b:7d:72:80:bc:38:ef:ef:b2:88:67:
         c5:5b:98:84:62:7e:eb:6f:ae:2d:23:3a:b5:cc:46:c5:72:12:
         dd:14:3d:8e:0b:be:ec:42:b4:58:9e:1e:25:d5:ec:22:d2:d9:
         e4:76:10:23:77:2e:b2:cf:19:77:57:fe:36:51:9c:5d:ca:bd:
         f4:80:cd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:34 2024 by rpki-client on console-fra.rpki-client.org