Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.mft
File:                     2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.mft (raw, json)
Hash identifier:          JpOVW4OurxbF0ZeANCN+128iPc7hECT9pyHocZk85bI=
Subject key identifier:   6B:C0:09:8D:FE:3F:27:87:02:D5:E9:89:84:80:B9:F1:E2:EA:31:98
Authority key identifier: 2C:C0:B2:2D:7C:2B:5C:28:6F:EA:B5:49:8F:FF:34:11:FE:6C:19:9D
Certificate issuer:       /CN=2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D
Certificate serial:       2D751ADD8343631EB239A560037F8EB6B5AA424B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.mft
Manifest number:          020D
Signing time:             Fri 02 May 2025 08:01:18 +0000
Manifest this update:     Fri 02 May 2025 07:56:18 +0000
Manifest next update:     Sat 03 May 2025 10:13:18 +0000
Files and hashes:         1: 34352e3138352e3131322e302f32322d3232203d3e20323639333733.roa (hash: gVuQFW9aqxwNIUZzxntnV4SYabJPYtNTPGv66lqkLCg=)
                          2: 34352e3138352e3131342e302f32332d3233203d3e20323639333733.roa (hash: PXu69AW8ogshnfJ9lVdjONGi+NM820wd5Z219l9oFig=)
                          3: 323830343a363361303a3a2f33332d3333203d3e20323639333733.roa (hash: 3xNc3nWAuntIdtLTscKEcHDOA1sAB+/NQ1nD/nr0eRw=)
                          4: 2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.crl (hash: BqG5ZEYGMC/wlWp0EgQ/seQ+/KKmxMiM4RRq93BhDlM=)
                          5: 34352e3138352e3131322e302f32332d3233203d3e20323639333733.roa (hash: EMTO2B2dJEONz0J5cX+jW42+BzO5qRXgHWGwpML5egY=)
                          6: 323830343a363361303a383030303a3a2f33332d3333203d3e20323639333733.roa (hash: 3WEgfh4OjJ5itl4teE42nWqCKfQDpNMQjz1Z0AdbRgU=)
                          7: 323830343a363361303a3a2f33322d3332203d3e20323639333733.roa (hash: zwbzTYdGwpqQgQwOzPEGgIS7z6KhfZccqXtOvv+wJ5I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.crl
                          rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 10:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:75:1a:dd:83:43:63:1e:b2:39:a5:60:03:7f:8e:b6:b5:aa:42:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D
        Validity
            Not Before: May  2 07:56:18 2025 GMT
            Not After : May  3 10:13:18 2025 GMT
        Subject: CN=6BC0098DFE3F278702D5E9898480B9F1E2EA3198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5a:07:ae:e1:34:b9:ce:e7:dc:fd:d1:f0:5d:
                    83:a9:42:ee:e2:50:a3:e8:67:f5:d7:46:48:eb:e5:
                    02:8c:71:23:69:cc:60:06:59:ba:ad:d1:ce:3e:29:
                    2a:51:0d:8b:9a:01:19:5e:7b:af:b3:42:28:8a:01:
                    23:8d:56:a7:6a:68:6e:70:ca:d1:93:cd:15:fe:52:
                    cc:4a:08:e9:50:a4:1c:42:22:6e:7d:2e:16:12:86:
                    4d:73:c2:36:8d:2d:44:60:92:12:59:28:80:a6:65:
                    d3:89:2f:1e:6b:47:fd:15:a2:1b:63:06:20:13:c6:
                    8d:63:f6:1e:84:a3:f2:2e:ea:11:2a:63:01:8c:0c:
                    f3:10:ee:6b:a2:cc:bd:76:6c:5b:6f:aa:35:ac:96:
                    3a:8f:6e:f0:1e:5c:58:42:ab:f4:e8:70:eb:e6:03:
                    0c:57:f6:bb:67:62:93:85:ae:3b:7f:16:77:10:10:
                    6d:d1:a5:6b:7d:89:8c:03:68:00:d2:e5:e2:b1:bb:
                    f6:5d:5f:32:ca:37:39:e2:34:1f:4d:7e:06:eb:9b:
                    c0:cc:fe:e1:45:c2:d1:b9:ab:3c:48:17:d4:e5:2a:
                    65:a8:1b:37:87:6d:47:de:93:58:1b:c2:11:df:db:
                    d7:92:93:c5:ca:d6:4a:dc:13:6f:25:36:e9:bd:f9:
                    87:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C0:09:8D:FE:3F:27:87:02:D5:E9:89:84:80:B9:F1:E2:EA:31:98
            X509v3 Authority Key Identifier:
                keyid:2C:C0:B2:2D:7C:2B:5C:28:6F:EA:B5:49:8F:FF:34:11:FE:6C:19:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:bf:23:5c:49:b4:c7:28:d7:36:4f:19:15:72:bb:0d:f4:02:
         61:55:25:ed:d8:97:42:28:a2:33:e9:65:17:84:67:12:9e:c0:
         7c:94:00:f2:5e:69:ab:21:17:e7:f4:8b:fb:1f:58:1e:a6:24:
         0c:c3:19:40:8a:44:f4:4b:be:dc:9a:29:80:6e:26:0f:25:34:
         0c:a4:73:79:dc:c5:10:c2:3f:99:f7:01:c5:b9:bd:8d:ba:44:
         d4:60:56:cc:f8:78:ac:45:d7:04:42:9f:52:1a:0f:87:1b:65:
         f7:38:b6:09:ba:26:4d:3a:a3:cb:13:74:d6:7a:17:85:2d:0d:
         33:49:b9:80:85:30:93:9b:eb:47:ef:44:32:a5:6d:1f:49:af:
         74:c0:04:f2:d0:36:a4:22:a7:89:b9:e6:09:b0:27:5d:85:ce:
         9b:a0:f5:b8:9f:ef:82:7e:c4:c5:5a:ad:e5:4b:7e:38:1a:bd:
         97:8f:53:fb:f2:3a:1e:32:58:6a:7e:06:8a:9b:cc:d3:62:eb:
         4d:9e:d2:db:b6:01:43:a0:31:10:48:56:a6:73:f4:a4:02:45:
         92:1f:88:01:b0:af:ce:dc:a3:ee:33:e4:20:d6:88:7e:11:ca:
         01:8d:d3:f2:72:12:f4:24:13:86:ce:8c:ea:fa:3f:96:1a:f0:
         55:7a:24:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULXUa3YNDYx6yOaVgA3+OtrWqQkswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNDMEIyMkQ3QzJCNUMyODZGRUFCNTQ5OEZGRjM0MTFG
RTZDMTk5RDAeFw0yNTA1MDIwNzU2MThaFw0yNTA1MDMxMDEzMThaMDMxMTAvBgNV
BAMTKDZCQzAwOThERkUzRjI3ODcwMkQ1RTk4OTg0ODBCOUYxRTJFQTMxOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Wgeu4TS5zufc/dHwXYOpQu7i
UKPoZ/XXRkjr5QKMcSNpzGAGWbqt0c4+KSpRDYuaARlee6+zQiiKASONVqdqaG5w
ytGTzRX+UsxKCOlQpBxCIm59LhYShk1zwjaNLURgkhJZKICmZdOJLx5rR/0Vohtj
BiATxo1j9h6Eo/Iu6hEqYwGMDPMQ7muizL12bFtvqjWsljqPbvAeXFhCq/TocOvm
AwxX9rtnYpOFrjt/FncQEG3RpWt9iYwDaADS5eKxu/ZdXzLKNzniNB9Nfgbrm8DM
/uFFwtG5qzxIF9TlKmWoGzeHbUfek1gbwhHf29eSk8XK1krcE28lNum9+YffAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUa8AJjf4/J4cC1emJhIC58eLqMZgwHwYDVR0j
BBgwFoAULMCyLXwrXChv6rVJj/80Ef5sGZ0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjZVN3pKWWp4enhodlJVcWlSVzFCZUJCY0w3aW1uR0w0M3BKczRNSFE3
eG8vMS8yQ0MwQjIyRDdDMkI1QzI4NkZFQUI1NDk4RkZGMzQxMUZFNkMxOTlELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDQzBCMjJEN0MyQjVDMjg2
RkVBQjU0OThGRkYzNDExRkU2QzE5OUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SjZVN3pKWWp4enhodlJVcWlSVzFCZUJCY0w3aW1uR0w0M3BKczRNSFE3eG8vMS8y
Q0MwQjIyRDdDMkI1QzI4NkZFQUI1NDk4RkZGMzQxMUZFNkMxOTlELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU78jXEm0xyjXNk8ZFXK7DfQCYVUl7diXQiiiM+llF4RnEp7AfJQA8l5pqyEX
5/SL+x9YHqYkDMMZQIpE9Eu+3JopgG4mDyU0DKRzedzFEMI/mfcBxbm9jbpE1GBW
zPh4rEXXBEKfUhoPhxtl9zi2CbomTTqjyxN01noXhS0NM0m5gIUwk5vrR+9EMqVt
H0mvdMAE8tA2pCKnibnmCbAnXYXOm6D1uJ/vgn7ExVqt5Ut+OBq9l49T+/I6HjJY
an4GipvM02LrTZ7S27YBQ6AxEEhWpnP0pAJFkh+IAbCvztyj7jPkINaIfhHKAY3T
8nIS9CQThs6M6vo/lhrwVXokFw==
-----END CERTIFICATE-----
Generated at Fri May 2 12:52:50 2025 by rpki-client