Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
File:                     CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft (raw, json)
Hash identifier:          zN7Lakrzk5mditOUIh6PrHpsGYTPoyk3Cnw33UCe/54=
Subject key identifier:   2E:3F:CF:41:9E:64:AB:CD:7C:82:E5:D6:C4:48:02:7F:B5:25:F5:C6
Authority key identifier: CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2
Certificate issuer:       /CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
Certificate serial:       634BDFE84954815C0B1BE78190E40F74E345706E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
Manifest number:          0290
Signing time:             Mon 16 Jun 2025 10:50:00 +0000
Manifest this update:     Mon 16 Jun 2025 10:45:00 +0000
Manifest next update:     Tue 17 Jun 2025 10:50:00 +0000
Files and hashes:         1: 3133312e3130302e38302e302f32322d3232203d3e203631373539.roa (hash: TIKPLBcgVkAqPb7AvJ7y3qnvaIg8at7tJhRtw5vlZcA=)
                          2: 3133312e3130302e38302e302f32332d3233203d3e203631373539.roa (hash: saQrKmND7jKCXcVCbLOZM0vGaAcVwgazmSq+F43U55s=)
                          3: 3133312e3130302e38332e302f32342d3234203d3e203631373539.roa (hash: vczHRbOFgEoCsKktD7VO871LT80N+PPbRvSy0Rgv0cQ=)
                          4: 3133312e3130302e38302e302f32342d3234203d3e203631373539.roa (hash: wPCUlOTJfcrvxENWWp8r1HLX+/zoXRBc20kKp+zUs+s=)
                          5: CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl (hash: AMlrhVVS/ShhPqUWGeSYHGLCL8YC2EJtf9TNVjDUx3M=)
                          6: 3133312e3130302e38322e302f32342d3234203d3e203631373539.roa (hash: AqaGJdnfVDnrDs9o4pa1x/Ggk3ojfJEIZ+CuPIpO/f8=)
                          7: 3133312e3130302e38312e302f32342d3234203d3e203631373539.roa (hash: qfzvsq2B1akHghZtIkDDQUyJbG4XgSSAx8hZTS7m9ho=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl
                          rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 10:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:4b:df:e8:49:54:81:5c:0b:1b:e7:81:90:e4:0f:74:e3:45:70:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
        Validity
            Not Before: Jun 16 10:45:00 2025 GMT
            Not After : Jun 17 10:50:00 2025 GMT
        Subject: CN=3082010A0282010100CFD7762AFFA830C746FABD27188F72CDFD2366DFE81F412115FF1B6EC727676E3287499E61F778B0A93C6C7DE72DD8312A0CBEBAC93758AFA7483B15599A4871D2A2AFCB2F3E30FF30CD20029C96B72384C7BDDED5CA479524352AAEC051AF9DC6B0AF1F0EB2A0D0997CC3E05D9FFE06DFCE1EA6087230F9AFC8124E6EAE66114CC740A60F5458979623F8E7758F3C924E9215780E9907BAF06A165E9B164E00BF481B03F45B5D6B6BE7B25CBE1CD8FC702FA42062EDC01EF9FDB1FC192325B17661B4E12FCD89A096285527676841DBB15D53A588D75CD8BE0A531B3CE36167231647DC33F40B0CBB0FC496563462AA0282C0147D2575B7F25FA5868BF405050203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d7:76:2a:ff:a8:30:c7:46:fa:bd:27:18:8f:
                    72:cd:fd:23:66:df:e8:1f:41:21:15:ff:1b:6e:c7:
                    27:67:6e:32:87:49:9e:61:f7:78:b0:a9:3c:6c:7d:
                    e7:2d:d8:31:2a:0c:be:ba:c9:37:58:af:a7:48:3b:
                    15:59:9a:48:71:d2:a2:af:cb:2f:3e:30:ff:30:cd:
                    20:02:9c:96:b7:23:84:c7:bd:de:d5:ca:47:95:24:
                    35:2a:ae:c0:51:af:9d:c6:b0:af:1f:0e:b2:a0:d0:
                    99:7c:c3:e0:5d:9f:fe:06:df:ce:1e:a6:08:72:30:
                    f9:af:c8:12:4e:6e:ae:66:11:4c:c7:40:a6:0f:54:
                    58:97:96:23:f8:e7:75:8f:3c:92:4e:92:15:78:0e:
                    99:07:ba:f0:6a:16:5e:9b:16:4e:00:bf:48:1b:03:
                    f4:5b:5d:6b:6b:e7:b2:5c:be:1c:d8:fc:70:2f:a4:
                    20:62:ed:c0:1e:f9:fd:b1:fc:19:23:25:b1:76:61:
                    b4:e1:2f:cd:89:a0:96:28:55:27:67:68:41:db:b1:
                    5d:53:a5:88:d7:5c:d8:be:0a:53:1b:3c:e3:61:67:
                    23:16:47:dc:33:f4:0b:0c:bb:0f:c4:96:56:34:62:
                    aa:02:82:c0:14:7d:25:75:b7:f2:5f:a5:86:8b:f4:
                    05:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3F:CF:41:9E:64:AB:CD:7C:82:E5:D6:C4:48:02:7F:B5:25:F5:C6
            X509v3 Authority Key Identifier:
                keyid:CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:46:0e:cf:a0:8f:a2:31:c4:97:65:22:36:0b:c0:7a:70:9a:
         88:6c:e1:c6:9f:bb:30:c3:9e:e2:b0:fb:f0:fc:4e:bf:d2:49:
         d8:27:b7:d7:1e:71:ae:a7:10:40:92:e7:14:7d:9f:ea:12:c2:
         6d:eb:c9:f5:34:1c:c4:2e:de:da:1c:84:5b:97:aa:6c:07:88:
         2c:b9:3a:76:bc:41:cb:12:be:0f:da:71:9f:a1:4a:e0:d3:56:
         e3:e0:24:c2:48:5b:98:5d:eb:2b:cb:39:9f:41:7c:48:cd:4a:
         2a:a3:ab:2a:21:78:9a:5e:78:c8:47:d3:ee:a1:55:6d:5f:19:
         6e:49:2d:7f:08:7f:22:46:d7:de:c4:92:4a:3e:01:b1:af:e8:
         94:8a:09:61:f4:18:02:94:5b:bb:8a:d6:47:40:8d:71:47:35:
         e1:64:c1:15:7e:ce:94:ee:bc:1e:ca:3f:c1:15:f6:ef:25:32:
         9e:2e:4c:a7:87:47:9a:60:dc:96:51:84:b9:1d:65:9e:ad:f0:
         ec:67:14:bc:d6:4f:bc:8b:a5:85:bf:a6:30:fc:e3:f1:30:6d:
         b3:de:10:c5:a9:4e:95:18:6c:6b:83:3d:be:2d:e9:6c:7c:36:
         94:8d:90:50:1e:bb:b8:c2:a3:d8:ea:57:4f:73:d0:72:37:43:
         27:09:77:21
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:31:44 2025 by rpki-client