Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.mft
File:                     821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.mft (raw, json)
Hash identifier:          0rxqpOkJZW7RLFe4D8UgW7Fq/YpanuId+XGUjolfi7g=
Subject key identifier:   C5:5B:2B:D3:59:06:87:58:CA:C6:63:B0:43:45:E6:2F:3D:7C:0A:2B
Authority key identifier: 82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48
Certificate issuer:       /CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
Certificate serial:       0DE3D24AC42D2595657F1D6488F60B691A015001
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.mft
Manifest number:          73
Signing time:             Wed 26 Jun 2024 00:15:00 +0000
Manifest this update:     Wed 26 Jun 2024 00:10:00 +0000
Manifest next update:     Thu 27 Jun 2024 01:19:00 +0000
Files and hashes:         1: 323830343a6132383a313134303a3a2f34322d3432203d3e20323633303236.roa (hash: HL6+djrZzpO/VIWsClVYJI5mwilLneuo+alUW56pp0Q=)
                          2: 323830343a6132383a313130303a3a2f34302d3430203d3e20323633303236.roa (hash: IKHZAcPAc9M71dsHtM8o9rsLf6XH5uKrvFUOABPjqSo=)
                          3: 3137302e38332e38302e302f32322d3232203d3e20323633303236.roa (hash: r3DtNb/HlV28/ZfOdApU+2od7ThMYltRsR8/+DRbkQg=)
                          4: 323830343a6132383a3a2f33342d3334203d3e20323633303236.roa (hash: DVvBVIAIySHS1GObyEfDJGU6QbSvN68jppVBi1JAZ7U=)
                          5: 323830343a6132383a3a2f33332d3333203d3e20323633303236.roa (hash: eAnAdd7lnUY8vSQWejo1dP6L9ajSP9bKrETJc/UVSMA=)
                          6: 323830343a6132383a3a2f33322d3332203d3e20323633303236.roa (hash: cW27myVuIn3poKvxy073Qb/jyoSyTp1IXXfZkYCqhDQ=)
                          7: 821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.crl (hash: moL50r5GBxuv7wkjOdrHsPlbB9f4+H+y6fa8blY6H/Y=)
                          8: 3133382e33362e32302e302f32322d3232203d3e20323633303236.roa (hash: bOOftaMnj/5qcj9C5SQJvRLisUUTUdXX0ZaEsMkHTJ0=)
                          9: 3138362e3234392e3230382e302f32312d3231203d3e20323633303236.roa (hash: j1dyJ+LCaw0H5CcyEA/ehfpp1OEi8Bev5iV9/DNkDqA=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.crl
                          rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 01:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e3:d2:4a:c4:2d:25:95:65:7f:1d:64:88:f6:0b:69:1a:01:50:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
        Validity
            Not Before: Jun 26 00:10:00 2024 GMT
            Not After : Jun 27 01:19:00 2024 GMT
        Subject: CN=C55B2BD359068758CAC663B04345E62F3D7C0A2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1e:66:da:5a:f5:d8:9d:bf:3b:d4:85:7c:cc:
                    a6:f9:ea:36:79:db:e9:d8:63:84:3f:35:e7:8a:1b:
                    a9:b0:14:14:50:d3:ab:01:d2:02:32:d6:8c:ca:fb:
                    f6:87:fd:3f:b1:67:d0:7f:21:03:25:26:a3:4a:7d:
                    6d:44:a1:e6:20:bb:b9:b1:ab:62:96:d5:24:9b:67:
                    39:ad:72:56:ba:4d:5b:59:5f:fa:5a:b9:a9:f1:f3:
                    15:a7:c7:79:3d:ff:15:be:35:0f:c1:f2:9f:0c:dc:
                    a9:4d:ac:7a:2c:d5:fe:8d:0a:0b:8b:ab:0a:e3:8f:
                    01:42:92:9e:04:ec:00:8b:41:7d:c9:bf:4b:52:bf:
                    e8:5b:54:b4:3c:ee:63:f4:f3:d5:c6:5c:1a:3a:bd:
                    f8:9d:58:88:9d:2c:5b:a0:19:d1:e7:4e:8f:1b:7c:
                    cd:3f:2d:d0:06:43:38:4e:46:68:2a:92:33:bb:0e:
                    b5:a3:8d:6e:6c:6d:04:7c:41:b0:c1:d8:8c:0b:56:
                    3d:3a:9b:db:4b:c9:64:4a:1d:46:88:dd:66:8d:76:
                    f4:79:72:4d:b8:1d:e7:85:ce:15:9d:0a:a1:f2:b7:
                    3e:e0:17:60:88:e2:e7:a5:fc:84:19:ec:a2:b9:37:
                    b0:c1:8f:bf:53:81:38:85:af:df:91:d9:f8:8a:da:
                    54:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5B:2B:D3:59:06:87:58:CA:C6:63:B0:43:45:E6:2F:3D:7C:0A:2B
            X509v3 Authority Key Identifier:
                keyid:82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:31:b4:49:81:36:47:36:40:bc:f0:3a:ec:14:a9:83:44:92:
         fa:6c:29:e7:1b:b4:7d:e5:33:b6:81:da:e8:e4:b7:08:68:ce:
         77:5d:b5:92:57:77:59:af:48:04:58:f2:d8:40:cb:b8:34:ed:
         dc:6e:59:cd:c0:a2:63:26:31:29:b7:a3:b9:01:f5:f3:1e:72:
         cc:57:4f:b2:72:cf:1a:57:e4:5a:ad:a9:c4:62:dd:45:7d:15:
         18:3e:41:cd:76:ef:b0:30:f2:0b:ae:5b:fa:76:b3:d0:17:9e:
         59:52:7c:2a:85:52:33:a0:5c:40:7f:1a:d7:2a:9c:1a:9c:72:
         7a:37:33:aa:7f:7c:78:0a:4e:69:77:83:c4:77:f9:71:93:28:
         d9:69:a7:c3:d0:8c:94:30:83:56:2d:e7:24:4e:46:af:2a:da:
         5c:90:8c:6c:fb:eb:df:6d:a0:b7:19:d3:3c:64:01:14:d5:34:
         bb:c5:42:56:c7:36:b6:6c:c3:1b:76:af:dd:20:16:a7:80:e7:
         8f:af:ba:a1:cc:4c:84:ea:e5:1c:4e:50:2e:5a:12:a3:84:a1:
         93:2e:a6:95:d4:45:12:a0:aa:46:bc:3e:4d:04:97:a3:e5:d7:
         90:fc:40:bb:63:78:08:8b:ee:35:93:0d:5a:52:5d:eb:c8:2e:
         93:61:f0:22
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUDePSSsQtJZVlfx1kiPYLaRoBUAEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODIxQUMwQkRBQUJDQ0UyMUIyN0I2Q0UwNTFFODRCM0I0
MERCQTM0ODAeFw0yNDA2MjYwMDEwMDBaFw0yNDA2MjcwMTE5MDBaMDMxMTAvBgNV
BAMTKEM1NUIyQkQzNTkwNjg3NThDQUM2NjNCMDQzNDVFNjJGM0Q3QzBBMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgHmbaWvXYnb871IV8zKb56jZ5
2+nYY4Q/NeeKG6mwFBRQ06sB0gIy1ozK+/aH/T+xZ9B/IQMlJqNKfW1EoeYgu7mx
q2KW1SSbZzmtcla6TVtZX/pauanx8xWnx3k9/xW+NQ/B8p8M3KlNrHos1f6NCguL
qwrjjwFCkp4E7ACLQX3Jv0tSv+hbVLQ87mP089XGXBo6vfidWIidLFugGdHnTo8b
fM0/LdAGQzhORmgqkjO7DrWjjW5sbQR8QbDB2IwLVj06m9tLyWRKHUaI3WaNdvR5
ck24HeeFzhWdCqHytz7gF2CI4uel/IQZ7KK5N7DBj79TgTiFr9+R2fiK2lRrAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUxVsr01kGh1jKxmOwQ0XmLz18CiswHwYDVR0j
BBgwFoAUghrAvaq8ziGye2zgUehLO0Dbo0gwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby94WHBzQWd2cDY5dEttcDNQNUJFOVlkaWR1QXoyZEJOOEVXYW4xdFZBQ2Jj
LzEvODIxQUMwQkRBQUJDQ0UyMUIyN0I2Q0UwNTFFODRCM0I0MERCQTM0OC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84MjFBQzBCREFBQkNDRTIxQjI3
QjZDRTA1MUU4NEIzQjQwREJBMzQ4LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3hY
cHNBZ3ZwNjl0S21wM1A1QkU5WWRpZHVBejJkQk44RVdhbjF0VkFDYmMvMS84MjFB
QzBCREFBQkNDRTIxQjI3QjZDRTA1MUU4NEIzQjQwREJBMzQ4Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
TDG0SYE2RzZAvPA67BSpg0SS+mwp5xu0feUztoHa6OS3CGjOd121kld3Wa9IBFjy
2EDLuDTt3G5ZzcCiYyYxKbejuQH18x5yzFdPsnLPGlfkWq2pxGLdRX0VGD5BzXbv
sDDyC65b+naz0BeeWVJ8KoVSM6BcQH8a1yqcGpxyejczqn98eApOaXeDxHf5cZMo
2Wmnw9CMlDCDVi3nJE5GryraXJCMbPvr322gtxnTPGQBFNU0u8VCVsc2tmzDG3av
3SAWp4Dnj6+6ocxMhOrlHE5QLloSo4Shky6mldRFEqCqRrw+TQSXo+XXkPxAu2N4
CIvuNZMNWlJd68guk2HwIg==
-----END CERTIFICATE-----
Generated at Wed Jun 26 02:43:55 2024 by rpki-client on console-fra.rpki-client.org