Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft
File:                     21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft (raw, json)
Hash identifier:          ALhO+K0B7YX2mo4AAmg9MA52ZaAJNC/7M0dT4q7hZEk=
Subject key identifier:   F6:93:0B:F5:97:A3:D8:84:C3:CF:1B:6D:4A:26:02:76:3E:CE:B1:87
Authority key identifier: 21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27
Certificate issuer:       /CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
Certificate serial:       2116BBDEF7334A2BCFF1ABE6CA6764E8E8186204
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft
Manifest number:          8C
Signing time:             Sat 23 Nov 2024 09:25:22 +0000
Manifest this update:     Sat 23 Nov 2024 09:20:22 +0000
Manifest next update:     Sun 24 Nov 2024 09:41:22 +0000
Files and hashes:         1: 21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl (hash: XeJkVJWMRXzVIPP3kvZBNyK8eWywyIZBv3e/abYF7RM=)
                          2: 323830343a316238303a3a2f33322d3334203d3e20323632393933.roa (hash: QQyiG+i1liLgM69zHzpT4jn4iYVUNA3LELnXKnMg9MM=)
                          3: 3138362e3235312e37382e302f32342d3234203d3e203631393232.roa (hash: fMniLVi5jMndVedCiTz7SzfVSP78AYWLLI/5D7/ezCI=)
                          4: 3138362e3235312e37322e302f32322d3234203d3e20323632393933.roa (hash: TBCOFBWWAapaLoeXJva4Y9ATVzcRRDT4fxgZ/I7i98E=)
                          5: 3138362e3235312e37362e302f32322d3234203d3e20323632393933.roa (hash: 0s218+Ss6caCnMfWw06qo2rHBQk62WGNvSHIJgfJW9I=)
                          6: 323830343a316238303a3266663a3a2f34382d3438203d3e20323632393933.roa (hash: JH1n7o/DSCccyDaaMhB0MEAOb1cECD//NMzbLDaEFfI=)
                          7: 3133382e3132322e3232302e302f32322d3234203d3e20323632393933.roa (hash: jULvzAmUH0fWR8rrV7xAwTtrfgF+p/71upiRkceoBLU=)
                          8: 323830343a316238303a3266653a3a2f34382d3438203d3e20323632393933.roa (hash: mNBJRwEZQchpEJQ22aH+J3kADJor0zwoXg2QFIsfBTs=)
                          9: 3133312e37322e3137322e302f32322d3234203d3e20323632393933.roa (hash: /GwKeqS6zDuYxlrn1jYTH8ZargsWnUmZVhue7tGWaig=)
                          10: 323830343a386639303a3a2f33322d3332203d3e20323733343938.roa (hash: 8/P/ecIJiLuhtWEJJG3oGsc79ncbdsSzXrJ53xmHFfo=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl
                          rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:16:bb:de:f7:33:4a:2b:cf:f1:ab:e6:ca:67:64:e8:e8:18:62:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
        Validity
            Not Before: Nov 23 09:20:22 2024 GMT
            Not After : Nov 24 09:41:22 2024 GMT
        Subject: CN=F6930BF597A3D884C3CF1B6D4A2602763ECEB187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5c:de:2b:22:40:3b:0c:84:f9:39:85:4a:bd:
                    c8:0e:8d:25:f9:e1:38:b9:78:50:a1:82:e2:1d:06:
                    7d:de:01:91:2a:77:a9:13:39:95:4d:96:9f:85:16:
                    e3:d5:91:ce:df:ba:91:78:fa:ab:d1:97:12:60:5d:
                    2f:69:77:76:34:59:ef:e2:71:fb:49:7f:0e:1d:15:
                    f0:67:6e:a0:79:97:dd:43:60:e6:c5:12:82:92:21:
                    cb:f4:95:bc:d4:3c:b3:fb:65:75:02:17:65:70:97:
                    ed:d8:b5:0c:18:5c:92:91:1e:e7:e6:38:ee:0c:7c:
                    31:09:9f:35:bb:75:43:ad:29:63:7e:42:7d:cd:d2:
                    0f:3f:13:dc:ce:aa:30:e0:68:18:ed:7a:8d:94:d1:
                    93:46:61:64:ef:b0:4c:c6:d3:67:be:1f:70:b0:79:
                    be:23:8a:9b:63:31:34:53:71:f2:f2:8c:2e:cc:c8:
                    c3:8c:72:76:62:d9:99:4b:ac:bf:8d:1d:2b:3a:50:
                    8b:25:d8:05:ca:7d:45:1e:0f:08:87:4e:6b:82:8e:
                    c5:98:63:13:95:38:91:81:79:a7:66:7b:89:63:9e:
                    5e:a9:77:8a:5d:4b:71:51:49:ef:10:4b:cc:39:61:
                    bd:b0:cd:38:e0:1a:f2:bc:0c:6f:5e:82:e4:00:35:
                    9b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:93:0B:F5:97:A3:D8:84:C3:CF:1B:6D:4A:26:02:76:3E:CE:B1:87
            X509v3 Authority Key Identifier:
                keyid:21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:e3:f2:e0:a0:1a:a0:22:59:e9:e0:ad:78:1d:f1:10:5c:df:
         67:1c:17:9b:d1:90:a4:9f:92:93:b2:6c:d5:2e:0d:24:b1:d0:
         74:90:63:b2:c6:35:03:2b:48:cf:d3:56:15:86:d0:ae:da:13:
         83:d7:7c:a0:31:32:c9:31:e9:9a:89:ed:f0:eb:8b:e1:20:50:
         2d:87:fa:e4:56:e6:ec:29:cb:b2:17:d3:d4:39:dd:bc:d6:20:
         82:b6:f3:19:65:c2:34:82:18:92:ad:08:4b:1b:17:9d:1b:07:
         a1:53:0a:a0:74:6f:c4:db:05:b4:bb:40:59:a6:97:da:37:a6:
         0c:16:bf:82:7a:a9:b2:e1:4d:e3:77:89:81:fc:4f:8f:bc:29:
         e1:8d:36:fe:fc:be:fc:bf:d5:1f:3e:2c:5e:4d:b8:cc:79:9b:
         8e:22:af:4c:02:ac:20:ed:c1:ce:28:8a:c5:25:16:c7:b3:73:
         21:ae:21:46:b6:63:ae:fa:32:dc:1d:b3:ed:89:28:6d:24:25:
         45:9f:8c:25:3e:1c:98:34:13:40:4d:7a:93:3e:cf:cb:76:46:
         c8:bf:0c:2e:c1:c7:94:d5:0a:1d:ef:e7:ac:6b:d0:07:fd:ee:
         26:33:41:3e:b8:5b:d3:99:1e:4d:1f:5c:d8:3a:dc:05:50:8d:
         98:11:cf:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:59 2024 by rpki-client on console-fra.rpki-client.org