Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
File:                     CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft (raw, json)
Hash identifier:          SBmdLab7fCYd/HHhb3pOnO2vrfoaQKQfV7ATsmbk/9k=
Subject key identifier:   ED:CC:92:D3:FA:BD:71:43:BE:CC:CF:D2:E2:0A:73:22:79:C5:36:4A
Authority key identifier: CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2
Certificate issuer:       /CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
Certificate serial:       327AD29FA36D41A5735B0B452D96DFEFCDD63B22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
Manifest number:          02DC
Signing time:             Wed 06 Aug 2025 02:50:00 +0000
Manifest this update:     Wed 06 Aug 2025 02:45:00 +0000
Manifest next update:     Thu 07 Aug 2025 02:50:00 +0000
Files and hashes:         1: 3133312e3130302e38302e302f32342d3234203d3e203631373539.roa (hash: wPCUlOTJfcrvxENWWp8r1HLX+/zoXRBc20kKp+zUs+s=)
                          2: 3133312e3130302e38302e302f32322d3232203d3e203631373539.roa (hash: TIKPLBcgVkAqPb7AvJ7y3qnvaIg8at7tJhRtw5vlZcA=)
                          3: 3133312e3130302e38312e302f32342d3234203d3e203631373539.roa (hash: qfzvsq2B1akHghZtIkDDQUyJbG4XgSSAx8hZTS7m9ho=)
                          4: 3133312e3130302e38302e302f32332d3233203d3e203631373539.roa (hash: saQrKmND7jKCXcVCbLOZM0vGaAcVwgazmSq+F43U55s=)
                          5: 3133312e3130302e38322e302f32342d3234203d3e203631373539.roa (hash: AqaGJdnfVDnrDs9o4pa1x/Ggk3ojfJEIZ+CuPIpO/f8=)
                          6: CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl (hash: CS1tu0Jcv3VAtWCEL4bfVWzWZcGss3i7q0jwWHND0Ik=)
                          7: 3133312e3130302e38332e302f32342d3234203d3e203631373539.roa (hash: vczHRbOFgEoCsKktD7VO871LT80N+PPbRvSy0Rgv0cQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl
                          rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 02:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:7a:d2:9f:a3:6d:41:a5:73:5b:0b:45:2d:96:df:ef:cd:d6:3b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
        Validity
            Not Before: Aug  6 02:45:00 2025 GMT
            Not After : Aug  7 02:50:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:25:9f:2b:b9:96:42:26:4d:96:de:0a:01:c5:
                    46:24:86:78:25:34:6b:4d:9e:5b:71:6a:85:82:5a:
                    ae:79:13:a8:c8:13:9f:db:bd:14:32:79:b6:60:e3:
                    ae:d0:cd:c5:03:10:51:05:b2:c8:c7:3f:6c:a0:97:
                    14:4c:91:a4:3c:c5:fe:76:a4:f4:ef:07:f3:45:04:
                    17:60:34:83:df:22:3b:76:c5:ee:f5:93:4a:7f:56:
                    d7:11:fc:e2:58:9e:94:e9:c4:40:0a:20:04:19:aa:
                    41:5f:e8:c0:ec:95:1c:d4:b6:40:a5:af:8b:3e:03:
                    19:85:2c:34:7d:e0:0c:97:8c:27:89:59:99:47:8e:
                    86:9b:3a:54:b8:68:bf:1f:5c:98:1e:f0:4c:23:1d:
                    fd:80:97:37:8c:dd:91:56:cf:16:f0:55:ea:4b:2d:
                    c3:10:65:69:3e:ae:73:b5:65:fa:59:13:a6:9a:ed:
                    8e:96:09:08:39:e8:77:8c:c3:86:f1:a3:ab:1d:5a:
                    02:9b:b9:e6:e2:09:2a:c2:17:4d:db:19:4f:d5:e9:
                    56:ba:b8:73:63:67:61:09:e7:e6:ac:6f:98:81:9f:
                    44:ad:79:85:e0:bd:f7:1a:98:bf:6e:4d:7a:a3:2f:
                    3a:e1:5b:c2:66:0a:fc:ba:97:6b:67:f1:56:b1:58:
                    7f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CC:92:D3:FA:BD:71:43:BE:CC:CF:D2:E2:0A:73:22:79:C5:36:4A
            X509v3 Authority Key Identifier:
                keyid:CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:3f:e6:ae:c2:05:05:31:4c:a2:5f:19:67:c2:01:1e:0b:4d:
         54:d6:76:36:96:c3:d6:81:c0:15:d0:f5:e7:0e:cb:a7:12:e1:
         7a:b5:37:da:e7:eb:2a:d7:c4:72:45:4a:54:9b:20:79:37:ac:
         08:d6:93:e4:0b:ea:a2:5a:0e:73:a9:2c:41:a9:e3:5c:a4:b4:
         28:46:50:bd:b5:38:df:8f:8e:bd:bf:42:27:d4:d2:36:b0:8f:
         53:0f:bd:58:cc:d9:26:f5:72:70:cb:34:f9:bd:8a:a2:dc:75:
         46:42:03:96:c1:b4:18:ec:65:7e:99:92:36:42:71:92:22:c8:
         cd:5c:4b:72:97:d8:5a:9d:fc:ef:f9:c8:f6:de:75:d6:99:b9:
         a5:4c:86:7a:c3:39:91:48:3e:9a:88:48:fe:3d:f8:1a:1d:73:
         a8:f3:29:c5:bf:74:59:a3:0e:64:ac:13:73:53:fd:b8:a7:64:
         9d:98:fb:13:97:eb:4d:0e:ea:36:21:00:3d:ce:4e:65:8e:b1:
         f7:55:b9:a6:bc:20:fe:3d:0a:81:16:9f:48:d1:50:5e:cc:f4:
         ca:9a:83:c1:e3:6a:2b:cc:f2:f8:af:1d:43:52:ab:bb:30:44:
         4d:57:66:e3:65:0f:f9:fb:6e:b3:a8:8a:da:41:ee:82:5c:ea:
         9d:3c:e9:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:17:44 2025 by rpki-client