Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/1/436CDA1F9370BE6E582FE8897E382D5816B0AE61.mft
File:                     436CDA1F9370BE6E582FE8897E382D5816B0AE61.mft (raw, json)
Hash identifier:          FazkbVNltji/40QQos91PH8zhpFIAI37CT+d/wetSqI=
Subject key identifier:   BE:31:C1:22:4A:AF:9A:70:75:AB:7B:39:86:ED:64:45:A3:0D:BC:C9
Authority key identifier: 43:6C:DA:1F:93:70:BE:6E:58:2F:E8:89:7E:38:2D:58:16:B0:AE:61
Certificate issuer:       /CN=436CDA1F9370BE6E582FE8897E382D5816B0AE61
Certificate serial:       06174CA2F8888A394F7CE31F0D410A1D5740CE2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436CDA1F9370BE6E582FE8897E382D5816B0AE61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/1/436CDA1F9370BE6E582FE8897E382D5816B0AE61.mft
Manifest number:          0137
Signing time:             Fri 22 Nov 2024 21:05:54 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:54 +0000
Manifest next update:     Sat 23 Nov 2024 22:05:54 +0000
Files and hashes:         1: 3137302e37392e3139362e302f32322d3232203d3e20323636333130.roa (hash: eNLph14H+t/K0Hzr4wOPzbzNNB/0Es152wrjMpx8SSo=)
                          2: 323830343a333564383a3a2f33322d3332203d3e20323636333130.roa (hash: NlomxSQuCyKGj1B/gLuGOUjTGq8ZIOu+BZSjoD5uTrU=)
                          3: 436CDA1F9370BE6E582FE8897E382D5816B0AE61.crl (hash: mx445aqlE9MknwEwrKNmsUORhPJggmKDj4McvNAe/R8=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/1/436CDA1F9370BE6E582FE8897E382D5816B0AE61.crl
                          rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/1/436CDA1F9370BE6E582FE8897E382D5816B0AE61.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436CDA1F9370BE6E582FE8897E382D5816B0AE61.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:05:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:17:4c:a2:f8:88:8a:39:4f:7c:e3:1f:0d:41:0a:1d:57:40:ce:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=436CDA1F9370BE6E582FE8897E382D5816B0AE61
        Validity
            Not Before: Nov 22 21:00:54 2024 GMT
            Not After : Nov 23 22:05:54 2024 GMT
        Subject: CN=BE31C1224AAF9A7075AB7B3986ED6445A30DBCC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:52:95:d2:75:60:46:58:a4:54:a8:1d:a1:8c:
                    9c:67:6b:74:35:48:02:66:5d:26:47:34:1a:0a:6a:
                    54:4c:07:2f:5b:be:a0:7d:10:5e:ec:ca:d5:66:c4:
                    69:d6:ec:3d:12:61:b9:0b:12:dc:f9:5a:52:a4:21:
                    89:eb:e0:9b:c6:e3:c1:80:af:25:4a:fc:62:c5:9b:
                    2e:48:00:5e:2e:f2:a1:6b:6c:5f:ca:6d:4a:bf:83:
                    3f:a1:88:9e:4a:56:d8:65:01:4e:12:dd:ea:1e:fb:
                    50:90:9c:3c:54:14:9e:af:24:f6:2f:be:50:78:19:
                    dd:f4:17:20:b1:3f:e4:6f:b9:6c:b3:09:fc:90:9a:
                    fd:f6:f3:bd:ff:12:3f:4b:70:b4:fa:9f:5c:37:85:
                    3a:11:0b:a0:49:03:e0:0f:11:98:25:f3:e4:94:ba:
                    66:f8:31:5a:17:05:06:6e:bf:4c:84:52:a9:a4:94:
                    ec:fc:af:f6:3f:2e:a5:51:e4:0f:58:21:bc:fc:4b:
                    70:46:14:af:c1:be:5a:7b:be:1d:2e:62:92:02:d0:
                    34:e2:89:ef:1e:23:21:b8:5f:e5:03:88:f3:0d:73:
                    b3:36:da:4e:57:f4:f7:63:b2:fa:b4:36:d4:8b:ad:
                    e9:a0:f0:3b:e5:e4:1b:7a:8d:91:f3:0f:a1:84:ba:
                    a4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:31:C1:22:4A:AF:9A:70:75:AB:7B:39:86:ED:64:45:A3:0D:BC:C9
            X509v3 Authority Key Identifier:
                keyid:43:6C:DA:1F:93:70:BE:6E:58:2F:E8:89:7E:38:2D:58:16:B0:AE:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/1/436CDA1F9370BE6E582FE8897E382D5816B0AE61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436CDA1F9370BE6E582FE8897E382D5816B0AE61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/1/436CDA1F9370BE6E582FE8897E382D5816B0AE61.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:02:16:46:e3:20:a9:bd:86:d1:8e:0d:a9:b2:fa:3a:75:18:
         a9:71:05:b3:2d:1d:50:93:3c:c1:0a:a4:b4:42:d9:4b:8f:04:
         96:33:0c:af:ca:df:6b:3a:37:f1:df:b0:11:af:da:47:d5:ee:
         c0:ee:81:73:74:3d:24:01:12:7a:99:4f:02:a1:47:06:24:63:
         4a:22:b6:62:9b:17:2d:df:38:a7:9c:9d:da:65:11:cf:17:30:
         3b:99:a0:9a:27:c2:1c:25:09:9a:ac:06:72:09:42:4a:a4:63:
         a7:92:86:ea:82:16:47:bd:91:1b:43:91:27:67:fc:82:2f:0e:
         92:0e:e3:e6:c3:5d:35:52:f5:ec:48:24:81:58:d7:88:55:d6:
         5a:d3:e3:50:fd:e6:1b:5d:06:f9:49:5a:c1:fe:de:cf:30:98:
         9b:bb:64:bd:26:eb:f0:fa:62:35:89:5c:0f:78:f2:32:7b:06:
         1c:e1:77:9c:69:53:87:0b:0b:de:d1:a3:51:73:a4:1d:d7:62:
         49:48:85:df:8e:fa:c6:9f:62:60:4c:9d:fe:c0:37:0b:d6:b2:
         fe:8a:31:e2:1f:f8:82:75:62:55:a1:d7:ce:4c:30:71:af:32:
         cd:ea:4e:6d:41:32:d1:88:d9:6c:ab:42:ff:eb:7a:3e:9c:61:
         51:e9:44:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:16 2024 by rpki-client on console-ams.rpki-client.org