Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/THP8uhQACp48R9GXAE2yvp4jCwEgUvVyrE7wqfZDUNw/0/646DD77ED1BD2C6854BA1C4D1D2A42F0773325B4.mft
File:                     646DD77ED1BD2C6854BA1C4D1D2A42F0773325B4.mft (raw, json)
Hash identifier:          BXYPU/g10gBHrM3ErZGhvkvfoD6CiMC2PzINXQv31Bc=
Subject key identifier:   B8:05:DD:43:37:D1:1D:5F:34:E6:6C:DC:36:34:80:27:12:2B:78:B1
Authority key identifier: 64:6D:D7:7E:D1:BD:2C:68:54:BA:1C:4D:1D:2A:42:F0:77:33:25:B4
Certificate issuer:       /CN=646DD77ED1BD2C6854BA1C4D1D2A42F0773325B4
Certificate serial:       411C1EE6DA6A6FA3EBD63BE2693F8174B1BF2B3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/646DD77ED1BD2C6854BA1C4D1D2A42F0773325B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/THP8uhQACp48R9GXAE2yvp4jCwEgUvVyrE7wqfZDUNw/0/646DD77ED1BD2C6854BA1C4D1D2A42F0773325B4.mft
Manifest number:          0129
Signing time:             Mon 25 Nov 2024 16:45:55 +0000
Manifest this update:     Mon 25 Nov 2024 16:40:55 +0000
Manifest next update:     Tue 26 Nov 2024 18:13:55 +0000
Files and hashes:         1: 646DD77ED1BD2C6854BA1C4D1D2A42F0773325B4.crl (hash: LHEyoXsce0PGSGwfs0n1o3dGWCN0DhWZ7phiWQicQek=)
                          2: 323830343a386265303a3a2f33322d3438203d3e20323733373635.roa (hash: j6/QZ5rfozI4ktUB+J2szXF8UIAiJP1wsVx/1wlaTb4=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/THP8uhQACp48R9GXAE2yvp4jCwEgUvVyrE7wqfZDUNw/0/646DD77ED1BD2C6854BA1C4D1D2A42F0773325B4.crl
                          rsync://rpki-repo.registro.br/repo/THP8uhQACp48R9GXAE2yvp4jCwEgUvVyrE7wqfZDUNw/0/646DD77ED1BD2C6854BA1C4D1D2A42F0773325B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/646DD77ED1BD2C6854BA1C4D1D2A42F0773325B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:13:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:1c:1e:e6:da:6a:6f:a3:eb:d6:3b:e2:69:3f:81:74:b1:bf:2b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=646DD77ED1BD2C6854BA1C4D1D2A42F0773325B4
        Validity
            Not Before: Nov 25 16:40:55 2024 GMT
            Not After : Nov 26 18:13:55 2024 GMT
        Subject: CN=B805DD4337D11D5F34E66CDC36348027122B78B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e6:d9:d8:77:5b:67:85:e8:6d:69:45:26:3a:
                    50:6a:79:18:39:f1:91:c5:aa:10:e6:1f:d4:1c:df:
                    92:d9:c1:98:db:2b:3c:49:8d:a6:53:72:01:67:43:
                    46:8c:f5:df:43:9e:2a:3c:e7:81:f0:73:9f:2b:b7:
                    c0:b3:18:bb:19:d5:93:4a:cf:08:b4:0c:15:af:77:
                    08:49:ef:97:68:47:49:d1:d6:d7:c8:ce:3d:89:87:
                    31:16:fe:0d:22:0a:0a:32:11:aa:f6:c1:22:d0:99:
                    79:a8:ee:4a:24:b8:55:5f:ac:14:91:03:a1:8c:5a:
                    d3:5a:8b:91:4f:9b:5a:80:26:03:87:4b:80:ac:4a:
                    0e:53:1e:00:45:a0:7f:f3:85:7e:d7:51:14:96:28:
                    eb:53:18:da:3d:1c:f6:27:3d:0d:ef:fd:8a:66:4a:
                    cf:45:a9:7e:3b:fa:92:9d:31:d1:b5:f7:3a:d6:16:
                    75:c0:bc:44:1f:a7:b4:2d:1a:79:69:48:21:34:af:
                    73:d1:bd:b6:23:08:2d:1e:a8:5e:76:8f:36:ff:5a:
                    9a:96:af:3d:e7:ad:73:33:04:d2:e3:71:be:50:a6:
                    de:31:17:c5:82:ad:55:57:74:f3:bd:66:8b:42:a6:
                    91:79:b8:0c:f6:43:0c:e7:60:39:f8:f8:dc:8b:e6:
                    2f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:05:DD:43:37:D1:1D:5F:34:E6:6C:DC:36:34:80:27:12:2B:78:B1
            X509v3 Authority Key Identifier:
                keyid:64:6D:D7:7E:D1:BD:2C:68:54:BA:1C:4D:1D:2A:42:F0:77:33:25:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/THP8uhQACp48R9GXAE2yvp4jCwEgUvVyrE7wqfZDUNw/0/646DD77ED1BD2C6854BA1C4D1D2A42F0773325B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/646DD77ED1BD2C6854BA1C4D1D2A42F0773325B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/THP8uhQACp48R9GXAE2yvp4jCwEgUvVyrE7wqfZDUNw/0/646DD77ED1BD2C6854BA1C4D1D2A42F0773325B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:93:6b:b7:e0:6c:e8:e3:10:01:38:d4:27:ad:e0:fb:93:a2:
         31:59:7a:6a:14:4c:cf:77:9e:af:47:4a:07:1f:9e:7e:55:9a:
         26:88:b6:96:40:3b:7d:0d:ae:2c:e9:6f:7a:72:43:36:4a:03:
         a9:e1:4b:c9:c6:c2:e7:1e:1c:78:43:fe:28:e5:d8:a1:df:ab:
         c3:c3:fe:09:f7:e5:5f:e3:9d:cc:8d:84:1e:b3:d3:10:21:82:
         e4:e5:ee:05:71:78:98:02:ea:ba:e7:0f:dd:6b:f0:f2:12:b6:
         3e:9a:6e:fc:ef:42:e6:91:70:ac:0d:0d:24:2b:d1:d1:53:08:
         ca:9a:23:3d:44:36:b4:e8:1d:c8:9d:d7:52:99:7f:52:fc:ed:
         b8:e0:70:c8:c3:5d:0b:77:96:44:fb:3b:52:e1:47:e5:51:6a:
         f1:38:cf:1f:92:4c:8f:1e:73:81:b1:f9:0e:f8:70:37:98:90:
         b9:fc:86:b5:ea:48:69:2f:8a:7d:1d:4d:7e:ff:42:f5:5f:a1:
         56:e2:99:df:9c:dc:0f:fb:c6:e8:7e:ce:2a:fb:3d:77:f9:9a:
         b9:93:4f:c5:19:a9:bc:09:7a:f2:66:6f:ea:17:20:4d:48:cd:
         43:c8:c3:4e:50:78:a6:29:f4:41:c5:d3:f4:f1:ee:07:74:1b:
         95:ab:71:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:55:51 2024 by rpki-client on console-fra.rpki-client.org