Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/1/41FAEE4FB242061F96FA0AC747E9DAAF65360241.mft
File:                     41FAEE4FB242061F96FA0AC747E9DAAF65360241.mft (raw, json)
Hash identifier:          6ygxkJxqDSkiOhxU8YmPnvUsCE4YucZrxm35piVntLA=
Subject key identifier:   8A:09:CC:D7:F3:82:3A:A5:BF:22:47:99:D7:AA:4D:AD:F3:92:E2:FA
Authority key identifier: 41:FA:EE:4F:B2:42:06:1F:96:FA:0A:C7:47:E9:DA:AF:65:36:02:41
Certificate issuer:       /CN=41FAEE4FB242061F96FA0AC747E9DAAF65360241
Certificate serial:       082F96D469D6BD86DAACD15B893A92EBA2B8BF24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FAEE4FB242061F96FA0AC747E9DAAF65360241.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/1/41FAEE4FB242061F96FA0AC747E9DAAF65360241.mft
Manifest number:          72
Signing time:             Wed 26 Jun 2024 12:29:59 +0000
Manifest this update:     Wed 26 Jun 2024 12:24:59 +0000
Manifest next update:     Thu 27 Jun 2024 14:47:59 +0000
Files and hashes:         1: 41FAEE4FB242061F96FA0AC747E9DAAF65360241.crl (hash: 3vOv7br7gHaE6cwqcSU1cGmGl51ivOo5yGIw+phZbgM=)
                          2: 323830343a363636343a3a2f33332d3333203d3e20323639353535.roa (hash: MGBvObgy9tUX8VepizDzn+MIM0z3DNduWYLsxPAuaQs=)
                          3: 34352e3138372e3138382e302f32332d3233203d3e20323639353535.roa (hash: JCMfQF3fVxNmr+aRbZUw6NN8rooGsYGvkn+2UFnvgww=)
                          4: 34352e3138372e3138382e302f32322d3232203d3e20323639353535.roa (hash: INGs3lX6Y7clrxj0ROHhAN1sGD13SPy90qRAD1n0r1U=)
                          5: 323830343a363636343a3a2f33322d3332203d3e20323639353535.roa (hash: S145N8zmXMfTcchWH9eg0rkNioepI3gUleMURmN7AO0=)
                          6: 323830343a363636343a383030303a3a2f33332d3333203d3e20323639353535.roa (hash: R/KaSVwGXXh5T1E7YX4kgDJpY90a5FOQThOU0H63w18=)
                          7: 34352e3138372e3139302e302f32332d3233203d3e20323639353535.roa (hash: 2e2+yDhr6AjOsvMBk3lLAuxoXki5nBZ1tg26YS4sZKI=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/1/41FAEE4FB242061F96FA0AC747E9DAAF65360241.crl
                          rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/1/41FAEE4FB242061F96FA0AC747E9DAAF65360241.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FAEE4FB242061F96FA0AC747E9DAAF65360241.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 14:47:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:2f:96:d4:69:d6:bd:86:da:ac:d1:5b:89:3a:92:eb:a2:b8:bf:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41FAEE4FB242061F96FA0AC747E9DAAF65360241
        Validity
            Not Before: Jun 26 12:24:59 2024 GMT
            Not After : Jun 27 14:47:59 2024 GMT
        Subject: CN=8A09CCD7F3823AA5BF224799D7AA4DADF392E2FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d0:8c:fb:2e:2d:dd:8f:4e:72:d1:fe:3f:b8:
                    8c:55:80:a8:e3:54:41:c5:0d:05:b8:31:0b:45:ba:
                    4b:11:02:5c:95:3f:66:bb:aa:77:46:54:21:18:1d:
                    c1:c9:19:f7:e9:6a:e3:91:f0:93:d4:2a:4f:7e:68:
                    6c:f2:1b:95:a9:e6:d9:22:54:0b:20:41:5c:49:45:
                    a0:06:6e:ac:ab:cd:da:9c:03:dd:cb:7d:90:63:99:
                    1d:1a:35:23:24:49:41:d8:39:42:d5:1a:fe:8f:95:
                    2c:6e:0f:6d:ba:22:81:48:0a:9c:4d:5d:3e:1b:97:
                    c2:45:5b:ea:56:77:53:e5:45:28:81:7c:77:61:c0:
                    60:f9:7b:98:7b:05:99:23:5e:eb:a6:7f:9b:a7:34:
                    82:0c:f9:9d:31:35:43:42:fd:85:9b:97:93:54:1d:
                    21:ad:1a:18:c7:b7:01:5d:24:5e:23:cd:e5:4d:1b:
                    4a:cc:2d:84:5b:40:b8:0a:f2:e3:57:1d:fc:f9:f6:
                    e7:8c:92:d4:c2:e1:07:77:00:52:85:5d:ca:bd:fb:
                    cf:9e:87:fd:b2:76:89:c5:4d:7f:b9:7d:2f:57:87:
                    3e:89:ec:7b:02:56:2d:06:7c:01:3e:5c:d4:1d:51:
                    23:75:c5:38:d8:8a:f7:0b:df:2e:64:83:4a:bb:1d:
                    90:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:09:CC:D7:F3:82:3A:A5:BF:22:47:99:D7:AA:4D:AD:F3:92:E2:FA
            X509v3 Authority Key Identifier:
                keyid:41:FA:EE:4F:B2:42:06:1F:96:FA:0A:C7:47:E9:DA:AF:65:36:02:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/1/41FAEE4FB242061F96FA0AC747E9DAAF65360241.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FAEE4FB242061F96FA0AC747E9DAAF65360241.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/1/41FAEE4FB242061F96FA0AC747E9DAAF65360241.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:3c:55:4a:0d:47:5d:8f:8a:93:88:04:12:43:e9:32:29:95:
         7a:09:63:04:36:4d:9a:51:3d:17:01:b3:46:97:fd:73:9f:fc:
         08:fc:64:4b:a0:ce:e2:22:43:5d:7b:e0:c6:d3:47:1a:47:76:
         c1:d1:16:8d:83:19:09:bd:e4:fb:fe:db:26:27:7f:a1:0b:67:
         af:b3:a6:8c:67:39:4e:8a:70:a0:74:45:3c:10:77:0c:f0:84:
         bc:ed:a0:20:30:e6:85:b8:17:c2:fb:9b:19:8e:0f:74:61:78:
         7f:3c:99:e6:0b:07:94:90:d2:b1:e4:36:d8:fe:e4:59:e9:72:
         4c:9e:73:59:73:48:15:31:6a:26:3c:ec:38:84:9e:f6:dc:17:
         cb:e1:5c:95:e8:f0:ba:3d:8a:55:b6:56:61:c2:97:e1:64:46:
         53:a7:0b:cd:60:10:2d:c6:32:9a:b1:b4:46:eb:9a:0d:dc:8e:
         4e:f6:6c:5a:d5:68:02:1f:a3:db:71:d0:b5:e5:16:22:c3:f9:
         bd:80:40:c6:6f:f2:46:b2:d9:39:67:38:b3:33:71:81:ee:6a:
         f9:3e:53:87:91:57:ad:65:3c:a4:fe:d9:ac:17:1c:5b:d2:2f:
         cc:4a:98:a9:36:f0:f0:1b:4b:28:74:79:5c:20:08:b3:7f:52:
         4a:b7:d6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 16:27:56 2024 by rpki-client on console-fra.rpki-client.org