Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.mft
File:                     F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.mft (raw, json)
Hash identifier:          tuYmeI7nxUluictJdoIGaiM+bndXVAp/QV1BUfBMpX8=
Subject key identifier:   52:9F:6D:7A:5E:4D:9D:0D:31:B9:3E:60:3F:B6:33:3F:63:86:4B:10
Authority key identifier: F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0
Certificate issuer:       /CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
Certificate serial:       0DB032445549EDDFD2A6A5731A0835C635D9C7E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.mft
Manifest number:          010D
Signing time:             Fri 22 Nov 2024 17:43:31 +0000
Manifest this update:     Fri 22 Nov 2024 17:38:31 +0000
Manifest next update:     Sat 23 Nov 2024 20:20:31 +0000
Files and hashes:         1: 323830343a363435633a383030303a3a2f33332d3333203d3e20323639343233.roa (hash: xwbExWJQZq6HcW2ClT/dxJhGQMOTvWzv7F0pZa2GJws=)
                          2: F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl (hash: YhFu4zBK4SxSw2sVUc/I+d1iAwNPxIKklXD1fQANc1Q=)
                          3: 34352e3138362e3132322e302f32342d3234203d3e20323639343233.roa (hash: Vt3oDBgfk5GWbyNvc1wUgX71I0MtEtTkJj+zN2Pvztc=)
                          4: 34352e3138362e3132312e302f32342d3234203d3e20323639343233.roa (hash: Hd9oh1XdeLL9KB38vPgPhapmynUA7pTBYmnRwBj5D7Q=)
                          5: 323830343a363435633a3a2f33332d3333203d3e20323639343233.roa (hash: d4s0X102FWMyN2GKbojYcZkg7oAFNe7WG6t8I9WkaQQ=)
                          6: 323830343a363435633a3a2f33322d3332203d3e20323639343233.roa (hash: xGNYObocw5KpqILKyy5T69OA4yOeaSO/sGQON7tpz4Q=)
                          7: 34352e3138362e3132302e302f32332d3233203d3e20323639343233.roa (hash: TR5/rj79ilKBN8moAULva9O5G+9H0MEchq9QQU1bt8w=)
                          8: 34352e3138362e3132322e302f32332d3233203d3e20323639343233.roa (hash: NKSu+JZyQUyeShh3MayAHkldq7Dr0F1DAB3wFp9TfJE=)
                          9: 34352e3138362e3132302e302f32342d3234203d3e20323639343233.roa (hash: 1OZATLAbobjruhpOnXjbnc7E8GUrr0Y5tz1iB/47xuM=)
                          10: 34352e3138362e3132302e302f32322d3232203d3e20323639343233.roa (hash: TyoGENqUpgZy7HoPxWQWQNuwjex03/lyjKvX5OlGsu8=)
                          11: 34352e3138362e3132332e302f32342d3234203d3e20323639343233.roa (hash: z09pKrP9RB6T+j7QkTXPfs+YzlByQppsa149GuhLlLw=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl
                          rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b0:32:44:55:49:ed:df:d2:a6:a5:73:1a:08:35:c6:35:d9:c7:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
        Validity
            Not Before: Nov 22 17:38:31 2024 GMT
            Not After : Nov 23 20:20:31 2024 GMT
        Subject: CN=529F6D7A5E4D9D0D31B93E603FB6333F63864B10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b6:4c:3b:3f:ce:36:3f:7f:93:08:77:50:6c:
                    7b:83:72:be:e7:65:4e:f6:3e:f6:82:35:52:a7:90:
                    4e:59:c0:2c:62:76:69:fc:3f:c7:f9:a9:83:09:dc:
                    a8:f0:04:0c:19:11:cd:0f:5a:1a:02:77:a0:9d:40:
                    9f:b4:be:7f:a0:09:2f:44:63:c8:73:ff:17:51:76:
                    a6:03:e5:c1:2d:2d:f0:26:14:67:64:cf:9a:92:75:
                    b3:8d:44:9b:0c:d6:77:6d:3e:84:70:f9:e6:28:97:
                    26:92:79:33:bc:38:f0:73:34:12:e4:da:f9:82:cf:
                    22:7d:71:33:40:77:0f:06:21:27:9b:1b:c3:3f:7f:
                    1b:70:c7:83:fc:d6:00:dd:68:63:ad:e1:0d:ad:67:
                    9f:54:8f:6d:c7:eb:e2:da:16:0c:85:e4:29:2e:ab:
                    bf:cf:d9:89:7d:a9:56:cf:e0:8f:82:62:72:50:77:
                    3f:a7:b4:34:a7:37:23:b0:52:c5:2c:af:43:2c:56:
                    4e:8d:c8:bf:6f:52:ed:2f:48:4c:54:69:e0:80:7b:
                    3a:07:71:53:37:82:1a:b8:91:0e:5b:72:c9:60:15:
                    13:e9:87:9a:9c:71:74:4d:25:08:31:a4:ee:b2:f0:
                    7f:09:2d:01:68:ba:31:7e:e1:75:1d:47:43:b9:35:
                    fc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9F:6D:7A:5E:4D:9D:0D:31:B9:3E:60:3F:B6:33:3F:63:86:4B:10
            X509v3 Authority Key Identifier:
                keyid:F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:72:e2:2f:52:32:ab:78:7d:59:5b:41:6b:ce:2f:e6:4f:ca:
         a6:f5:d0:a7:ab:09:03:eb:1b:5f:b3:8c:b6:02:3d:e2:35:58:
         68:ab:3a:7d:ef:5d:33:5e:98:9a:93:f7:f1:0a:b3:6b:69:1c:
         59:3f:19:2a:a9:a2:36:85:66:f7:cf:66:0e:ea:c5:e4:c5:d4:
         61:68:9b:11:c3:33:58:89:ab:21:ed:5c:8c:b7:ee:f1:60:4b:
         7e:40:c6:b2:be:93:43:5d:41:07:ee:27:72:35:6a:5a:57:af:
         30:ee:55:e7:74:79:c2:0c:14:0a:08:e2:13:11:18:98:7a:d2:
         24:df:9a:c3:4a:d2:05:f0:71:03:44:32:c7:72:84:e0:6f:c2:
         d5:20:7b:64:4d:d8:63:3e:4d:fa:50:57:d8:18:b1:f1:6b:3b:
         60:59:41:8c:20:a1:cf:28:d0:e2:04:d3:f0:8b:ab:54:d9:89:
         c3:ba:97:1f:95:6d:c3:4d:57:5c:91:8c:97:fa:02:a7:39:bd:
         af:36:1d:04:b7:e9:55:9d:7c:22:ca:78:2e:3d:7e:9b:38:3b:
         ad:9e:b1:82:3d:44:01:12:3e:41:45:c8:0b:ce:41:52:67:9c:
         23:1d:51:e1:b1:37:f5:65:f0:ca:38:6e:dc:dc:5c:e2:0c:a5:
         b2:64:3c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:25 2024 by rpki-client on console-fra.rpki-client.org