Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.mft
File:                     2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.mft (raw, json)
Hash identifier:          IPOPyJxLhtTSPXX4ue8Tv45A0tTgml5vC6r6u9x5xTs=
Subject key identifier:   65:0C:D9:71:1A:6F:4C:F1:87:8A:AE:20:DC:C5:8E:CD:0D:9C:85:16
Authority key identifier: 2C:C0:B2:2D:7C:2B:5C:28:6F:EA:B5:49:8F:FF:34:11:FE:6C:19:9D
Certificate issuer:       /CN=2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D
Certificate serial:       2278D1B61627C17219F4286407122BBF3A82A1F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.mft
Manifest number:          0305
Signing time:             Wed 05 Nov 2025 03:20:28 +0000
Manifest this update:     Wed 05 Nov 2025 03:15:28 +0000
Manifest next update:     Thu 06 Nov 2025 06:31:28 +0000
Files and hashes:         1: 323830343a363361303a3a2f33332d3333203d3e20323639333733.roa (hash: 3xNc3nWAuntIdtLTscKEcHDOA1sAB+/NQ1nD/nr0eRw=)
                          2: 34352e3138352e3131342e302f32332d3233203d3e20323639333733.roa (hash: PXu69AW8ogshnfJ9lVdjONGi+NM820wd5Z219l9oFig=)
                          3: 323830343a363361303a383030303a3a2f33332d3333203d3e20323639333733.roa (hash: 3WEgfh4OjJ5itl4teE42nWqCKfQDpNMQjz1Z0AdbRgU=)
                          4: 34352e3138352e3131322e302f32322d3232203d3e20323639333733.roa (hash: gVuQFW9aqxwNIUZzxntnV4SYabJPYtNTPGv66lqkLCg=)
                          5: 323830343a363361303a3a2f33322d3332203d3e20323639333733.roa (hash: zwbzTYdGwpqQgQwOzPEGgIS7z6KhfZccqXtOvv+wJ5I=)
                          6: 34352e3138352e3131322e302f32332d3233203d3e20323639333733.roa (hash: EMTO2B2dJEONz0J5cX+jW42+BzO5qRXgHWGwpML5egY=)
                          7: 2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.crl (hash: hGMSXI6alHrydBoRmHkeBZntMk7iStyRs1KVHNwzodQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.crl
                          rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 06:31:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:78:d1:b6:16:27:c1:72:19:f4:28:64:07:12:2b:bf:3a:82:a1:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D
        Validity
            Not Before: Nov  5 03:15:28 2025 GMT
            Not After : Nov  6 06:31:28 2025 GMT
        Subject: CN=650CD9711A6F4CF1878AAE20DCC58ECD0D9C8516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5c:64:9b:99:34:89:a4:be:08:ae:03:a8:ca:
                    ac:2a:39:b7:58:16:6b:be:2a:e3:61:b0:98:bd:9f:
                    a5:be:c4:53:d4:2e:3f:51:d3:91:de:c6:7d:95:6b:
                    78:8f:88:46:e6:04:52:75:c8:ff:61:a3:15:d4:cc:
                    d6:54:a3:91:dc:84:11:a1:39:ea:37:67:1a:45:66:
                    f4:64:d1:de:82:0d:1e:45:ff:32:d6:4c:99:aa:2a:
                    2c:4b:23:7b:da:74:10:34:12:9a:5a:fc:ab:78:94:
                    a4:49:aa:f1:00:d3:1c:3a:83:9e:73:23:4d:c3:5c:
                    40:94:8d:a7:0d:d2:b2:8b:fd:34:36:30:d3:f1:48:
                    64:13:aa:29:1b:18:15:2f:d0:f9:b1:be:b5:69:ab:
                    17:97:a8:d2:cc:30:a8:f8:fc:46:c6:ee:f2:be:e2:
                    69:db:72:18:05:b6:78:27:14:83:77:3a:3c:cf:b9:
                    5f:1f:cf:74:54:9c:0c:fe:62:f7:ea:ce:22:5f:a3:
                    32:ea:d2:a9:45:75:73:18:8f:dd:4b:36:68:e4:21:
                    ef:40:51:f3:88:77:b9:85:a8:3e:70:60:85:67:54:
                    be:ee:c6:b6:53:06:80:34:d6:1c:16:99:cc:62:0b:
                    01:8d:ee:cf:ed:2b:f6:e8:ad:6b:45:68:1c:5e:8e:
                    ea:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0C:D9:71:1A:6F:4C:F1:87:8A:AE:20:DC:C5:8E:CD:0D:9C:85:16
            X509v3 Authority Key Identifier:
                keyid:2C:C0:B2:2D:7C:2B:5C:28:6F:EA:B5:49:8F:FF:34:11:FE:6C:19:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:9d:a3:45:6d:ce:2f:07:e0:d3:70:12:3f:ad:a3:6a:c7:c6:
         78:ea:fd:13:00:69:1b:6a:6d:92:6a:10:82:aa:89:a1:21:fb:
         7f:b7:e1:d3:86:ed:8f:9a:46:2b:00:44:72:18:ec:c5:51:bc:
         ee:75:a2:7d:5c:a8:cb:ba:84:bc:56:5d:d7:2d:48:d8:de:13:
         e6:58:40:81:5e:4e:22:fe:0e:b1:47:e0:f1:70:45:c3:17:79:
         1e:b0:3f:d4:8d:4b:bf:37:a3:3d:2f:bb:a6:4a:b3:cd:24:db:
         5c:63:8f:68:82:5e:96:2b:7e:88:ca:2e:6b:ff:5b:13:21:03:
         1f:c4:f9:89:18:2e:60:87:1d:03:87:81:a6:cc:eb:18:d9:11:
         36:64:21:0b:fd:a8:0e:b3:b0:80:88:dc:86:7f:c3:8e:e9:12:
         7c:27:26:4c:fb:23:a9:12:50:31:f4:ce:64:63:73:25:1c:bf:
         59:43:f5:36:00:cd:6d:13:d2:d5:ba:85:92:48:d7:3e:a3:73:
         06:c3:04:40:fa:98:d9:af:c3:20:43:02:82:35:ff:a6:02:4b:
         05:c2:b6:9b:24:52:ab:47:2c:9c:a5:5a:25:59:b4:16:ff:2e:
         ac:b2:a2:2a:44:a9:ce:ac:1a:aa:9e:53:49:30:34:e1:37:06:
         1b:31:1e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:52:28 2025 by rpki-client