Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft
File:                     2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft (raw, json)
Hash identifier:          X0jYDjm9FgMm9D6tJhSc7UOnHFN0jiHmVsv+0ARF8Hs=
Subject key identifier:   10:33:30:37:77:73:49:0C:03:D3:5A:C6:27:16:A8:24:30:BB:C7:A1
Authority key identifier: 2C:22:7B:E6:DE:FB:4B:9E:B0:05:C0:AC:9F:C2:84:72:7A:42:4D:89
Certificate issuer:       /CN=2C227BE6DEFB4B9EB005C0AC9FC284727A424D89
Certificate serial:       1D110B9C9AC8059A6F234D27956FF3D7EF5E9875
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft
Manifest number:          24
Signing time:             Fri 22 Nov 2024 19:10:48 +0000
Manifest this update:     Fri 22 Nov 2024 19:05:48 +0000
Manifest next update:     Sat 23 Nov 2024 23:01:48 +0000
Files and hashes:         1: 323830343a393135343a3a2f33322d3438203d3e20323734363334.roa (hash: 8Lapt3OqhJk+oBbw6CIS81Ly1MNMvSRSp7oM70142VI=)
                          2: 2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.crl (hash: YarSFVyijVKsliJyC9YAohr5hvJN7vbUXcl0TPEGayM=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.crl
                          rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:11:0b:9c:9a:c8:05:9a:6f:23:4d:27:95:6f:f3:d7:ef:5e:98:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C227BE6DEFB4B9EB005C0AC9FC284727A424D89
        Validity
            Not Before: Nov 22 19:05:48 2024 GMT
            Not After : Nov 23 23:01:48 2024 GMT
        Subject: CN=103330377773490C03D35AC62716A82430BBC7A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:89:9c:ed:4c:44:42:e1:8b:66:b1:c7:cb:55:
                    44:92:e6:bb:f5:00:a8:e1:2c:d9:74:89:da:ae:8b:
                    49:c0:be:d9:90:81:5f:8f:83:3d:20:7c:7a:2a:dd:
                    d8:cf:9d:59:14:e3:d9:95:0e:d4:50:86:30:20:06:
                    fe:62:7e:ed:99:f0:42:f9:38:04:33:1e:94:71:e6:
                    da:ae:23:6a:07:89:a0:7e:69:ec:b6:d3:70:5d:2d:
                    03:3f:ee:03:07:ce:61:63:02:d7:c0:96:34:c8:6e:
                    b8:af:92:cd:d4:2c:67:a4:b0:a3:b9:c7:f5:1c:11:
                    12:3c:5c:d8:56:64:5d:db:e2:46:4b:46:29:a6:56:
                    06:78:34:2d:94:80:0e:90:fa:b0:4a:12:46:1f:0a:
                    b9:31:8c:9a:c7:6e:be:49:1b:9b:86:d2:a7:cb:93:
                    e1:ad:fd:76:0f:c9:19:f1:9b:c8:4b:2e:40:72:47:
                    f5:5d:02:39:4f:06:ca:cf:04:b8:90:a6:09:56:63:
                    1a:9f:63:59:5b:0e:47:18:47:78:ed:8b:07:85:8e:
                    5a:32:3c:92:a0:e6:9b:c1:6c:d0:62:c9:c2:f5:07:
                    46:9f:79:19:ee:9a:a2:04:3c:57:e4:86:ac:20:5a:
                    80:96:b8:53:3f:31:12:22:17:19:4b:8b:1e:f4:96:
                    b3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:33:30:37:77:73:49:0C:03:D3:5A:C6:27:16:A8:24:30:BB:C7:A1
            X509v3 Authority Key Identifier:
                keyid:2C:22:7B:E6:DE:FB:4B:9E:B0:05:C0:AC:9F:C2:84:72:7A:42:4D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:16:6a:dd:5e:50:83:df:e0:10:5b:c2:c1:b1:cd:fc:5f:8f:
         88:cb:45:83:fb:a7:ff:b3:e7:61:c6:8e:43:ff:4b:1a:08:83:
         37:1c:a9:8f:de:f5:ec:08:32:f8:8c:c7:21:6b:47:7b:18:79:
         50:6c:92:5b:98:57:47:3a:56:40:19:84:30:d2:a4:2c:32:ce:
         16:41:18:91:03:3f:1e:b6:23:f4:18:80:03:f4:1d:c5:5e:21:
         db:86:dd:98:bb:6a:0a:59:5e:ad:40:c3:c3:aa:94:cb:2e:22:
         24:d0:88:ff:a9:8b:d1:b1:56:d6:e1:2d:f2:35:c5:a9:22:98:
         93:9d:d8:50:30:3c:b8:18:36:65:54:02:13:4a:71:81:fc:0a:
         4d:43:63:d8:ec:11:81:fd:30:67:bb:0b:37:1b:e7:ff:60:ab:
         b0:ed:47:81:dc:9f:8a:1b:40:70:86:84:38:31:78:69:cc:aa:
         88:8a:aa:e8:e3:e9:cd:9d:df:5b:f8:6d:58:88:f8:ce:af:2b:
         8b:97:f2:3c:a5:d6:5d:cf:b1:e6:fb:59:1f:f2:84:ab:85:5b:
         6f:1f:56:fc:85:12:9f:40:96:94:fd:96:b4:ce:64:1c:05:c9:
         f5:55:eb:1d:85:ca:cd:d8:03:22:07:51:74:3c:13:66:f4:24:
         a4:35:eb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:16 2024 by rpki-client on console-ams.rpki-client.org