Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
File:                     4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft (raw, json)
Hash identifier:          Qdwpt7yC+LaQbnxRwydxV98C38myveV/lUUQEhZlgpA=
Subject key identifier:   BA:7D:85:94:A0:BF:BC:7D:AB:0F:F7:24:D8:53:60:8C:CE:0C:F3:44
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Certificate issuer:       /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial:       4C6DF573F6728A442E60A60D6548A3EAF95E66BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
Manifest number:          0136
Signing time:             Fri 22 Nov 2024 15:15:07 +0000
Manifest this update:     Fri 22 Nov 2024 15:10:07 +0000
Manifest next update:     Sat 23 Nov 2024 17:02:07 +0000
Files and hashes:         1: 323830343a3262383a3a2f33322d3438203d3e203238313330.roa (hash: dO4yOv/MIU0InHRkp5Vuwric3RjJ5YYjmCevNzo1pNM=)
                          2: 3133382e39392e3234382e302f32322d3234203d3e203238313330.roa (hash: 46supZm8NCAtHPkTPwALkcGcb18nF4locgMiCWYBxlQ=)
                          3: 323830343a3163633a3a2f33322d3438203d3e203238313330.roa (hash: re2uJwSZfAvBfIUH9JrqPzfLmJLgMXJ3tGVF7BfIg8U=)
                          4: 3138372e31392e39362e302f32302d3234203d3e203238313330.roa (hash: nSrNemdvmY1v2RUKo04heyIz//hIecAcM2L+2glhg9M=)
                          5: 4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl (hash: 0rh+CmLHK9dXPLicvWXBJ3H5EbQJ5LRn4XgkEdjSnu8=)
                          6: 3138362e3235312e3134342e302f32322d3234203d3e203238313330.roa (hash: NKE0oYB+C4cny95WXU8beqAqh3Lu9Cw2/CvuPjhEXz0=)
                          7: 3134332e3230382e34302e302f32322d3234203d3e203238313330.roa (hash: sLpeB/pAazb6FbtbzxeaVI/gva81Qs31JyawY3u0UVU=)
                          8: 3138362e3235312e3134382e302f32322d3234203d3e203238313330.roa (hash: UQhXYMh6S0pqYdqlc+NiAhKl4OkJlRJyqaQ4ukeD8U0=)
                          9: 3137302e3135302e3136342e302f32322d3234203d3e203238313330.roa (hash: XBDHg22OGfS1Mdcd1+reYEZtCnGhg3ahA8p11Zf5rOY=)
                          10: 3138362e3232372e39362e302f32302d3234203d3e203238313330.roa (hash: ImpFlhZjI75QQQSzjSW42xs+/mU72O/JdNySzBFOW8E=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
                          rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:6d:f5:73:f6:72:8a:44:2e:60:a6:0d:65:48:a3:ea:f9:5e:66:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
        Validity
            Not Before: Nov 22 15:10:07 2024 GMT
            Not After : Nov 23 17:02:07 2024 GMT
        Subject: CN=BA7D8594A0BFBC7DAB0FF724D853608CCE0CF344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0b:94:29:99:6b:23:60:17:7a:45:bb:ca:cd:
                    d9:0d:aa:ea:44:00:6f:9f:f9:a4:bc:c5:f0:b5:7a:
                    e0:a5:cf:24:c6:4e:da:8e:d9:43:1c:f4:41:5c:ac:
                    0d:f2:ca:27:d0:10:51:be:34:31:82:e1:1f:30:4a:
                    9e:3b:eb:1f:03:92:d8:44:47:f0:43:15:db:6c:f7:
                    69:33:fb:af:98:95:1b:f4:da:12:a3:58:09:fe:a2:
                    c7:6c:b7:db:1e:5b:78:52:ff:fe:dd:5a:5b:3e:e2:
                    74:59:b2:31:3b:5f:a1:11:b5:a7:01:ba:38:9a:97:
                    a7:4d:19:23:0e:24:89:1e:12:ea:a0:49:7f:1d:c8:
                    26:e6:f7:12:94:4e:4a:8e:cb:87:ca:43:1d:88:60:
                    95:01:2c:2a:2f:b1:05:01:97:9f:d5:62:36:c1:71:
                    c1:65:67:7d:b9:4f:ac:70:90:0b:c4:c6:8f:da:c3:
                    2c:8c:8d:16:62:12:e1:5b:bf:49:1c:61:02:54:f4:
                    85:45:17:9c:44:5a:3a:6c:53:1f:a7:8a:f0:b7:78:
                    71:3e:59:5f:e5:d4:0c:00:f7:b6:7a:b2:1e:23:e2:
                    68:ac:cd:d6:84:df:19:ea:2a:21:f5:c1:39:e5:f7:
                    ef:bb:5f:62:92:ab:75:25:50:77:46:44:a7:bc:cf:
                    43:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7D:85:94:A0:BF:BC:7D:AB:0F:F7:24:D8:53:60:8C:CE:0C:F3:44
            X509v3 Authority Key Identifier:
                keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:d1:cc:68:94:c4:37:69:13:57:e6:26:c9:2d:2e:99:1b:33:
         88:6c:03:d1:28:20:f3:55:ee:50:8f:2c:41:19:82:ba:95:9f:
         96:30:18:4a:ea:61:5f:de:a7:fd:93:2e:63:68:05:a9:6e:ec:
         8a:81:e2:ec:b7:bc:80:b5:f0:dc:2c:9a:a0:4c:73:64:e9:9a:
         59:f4:44:4c:3c:5a:f0:77:ba:76:50:61:2c:9e:4e:06:f5:e5:
         19:ff:4f:99:cd:10:c9:48:a5:5c:73:f4:2f:e5:a5:63:e3:a1:
         16:b0:f8:bf:5c:a4:6a:2e:b0:6a:97:ac:ca:3f:76:a4:09:67:
         37:8b:f5:02:6e:08:94:63:8e:f8:9a:fc:76:59:3f:ab:49:9c:
         7f:0b:ff:88:12:89:5f:8b:0b:51:2d:40:37:1e:42:89:11:f2:
         73:50:54:a1:23:74:ea:62:05:39:5d:45:44:b7:45:be:33:ed:
         f7:f2:70:88:cb:cd:d7:9f:7f:ec:36:1d:3d:f8:10:49:46:da:
         5b:96:b7:4b:14:0c:c1:36:7c:4f:f0:d6:96:c4:e6:b1:bc:41:
         ec:1f:1e:11:e4:3d:dd:31:c6:ca:5d:aa:ee:73:d8:b3:7c:a6:
         33:a5:fc:11:d0:97:e5:25:2f:9f:f9:b3:29:b3:c1:68:96:ea:
         b7:82:47:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:35 2024 by rpki-client on console-fra.rpki-client.org