Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
File:                     CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft (raw, json)
Hash identifier:          F07JKfNYgDXbY88i4NNoFithl5NYjMjV3CCtYvQl9HA=
Subject key identifier:   08:12:9D:B9:F7:CF:B6:63:BA:15:63:76:3A:9E:C1:97:BF:B9:5E:33
Authority key identifier: CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2
Certificate issuer:       /CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
Certificate serial:       262A01DE6017515BD325F5893D336B2E02FD5713
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
Manifest number:          02CA
Signing time:             Fri 25 Jul 2025 02:50:00 +0000
Manifest this update:     Fri 25 Jul 2025 02:45:00 +0000
Manifest next update:     Sat 26 Jul 2025 02:50:00 +0000
Files and hashes:         1: 3133312e3130302e38302e302f32332d3233203d3e203631373539.roa (hash: saQrKmND7jKCXcVCbLOZM0vGaAcVwgazmSq+F43U55s=)
                          2: 3133312e3130302e38312e302f32342d3234203d3e203631373539.roa (hash: qfzvsq2B1akHghZtIkDDQUyJbG4XgSSAx8hZTS7m9ho=)
                          3: CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl (hash: CHPEiPINFYy8QP753llvWeGJOALDRHbLdDiQW8OBOGM=)
                          4: 3133312e3130302e38302e302f32342d3234203d3e203631373539.roa (hash: wPCUlOTJfcrvxENWWp8r1HLX+/zoXRBc20kKp+zUs+s=)
                          5: 3133312e3130302e38332e302f32342d3234203d3e203631373539.roa (hash: vczHRbOFgEoCsKktD7VO871LT80N+PPbRvSy0Rgv0cQ=)
                          6: 3133312e3130302e38302e302f32322d3232203d3e203631373539.roa (hash: TIKPLBcgVkAqPb7AvJ7y3qnvaIg8at7tJhRtw5vlZcA=)
                          7: 3133312e3130302e38322e302f32342d3234203d3e203631373539.roa (hash: AqaGJdnfVDnrDs9o4pa1x/Ggk3ojfJEIZ+CuPIpO/f8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl
                          rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 02:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:2a:01:de:60:17:51:5b:d3:25:f5:89:3d:33:6b:2e:02:fd:57:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
        Validity
            Not Before: Jul 25 02:45:00 2025 GMT
            Not After : Jul 26 02:50:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:db:98:f6:63:78:3e:0a:5b:9e:90:67:2c:8d:
                    eb:4d:f1:41:c1:5c:cf:2a:71:33:e8:14:d9:60:62:
                    a8:e8:2e:f8:b5:ac:ea:d3:3e:08:bc:58:62:1b:de:
                    39:91:4e:c6:5d:50:50:32:d1:ab:2f:d8:28:eb:30:
                    cd:89:4b:95:33:5e:0c:e0:15:c5:a6:09:77:df:a9:
                    65:f4:c0:9e:f6:28:74:68:0d:e8:89:15:34:93:0c:
                    30:6a:1e:5f:12:18:f2:5c:51:fa:a0:8d:2c:0c:43:
                    71:b7:35:e6:38:d4:cd:c1:1e:60:9b:d0:7f:bf:ec:
                    33:42:ad:cf:f5:32:23:a9:02:04:96:f0:dd:68:fa:
                    ab:ff:d6:0c:17:b3:12:7a:fd:de:e8:9e:e9:85:02:
                    33:00:a2:f7:a0:f9:b3:3b:9a:80:e0:cc:1f:69:c1:
                    c8:65:50:f2:36:f7:2c:4a:58:96:68:73:4c:1b:6f:
                    d8:f3:ab:59:b1:f0:41:b1:78:6e:d7:42:45:5f:25:
                    40:38:57:1f:73:19:eb:2b:f6:0b:31:9a:66:70:b9:
                    e5:f6:3e:f6:47:ae:b0:cc:c1:3e:f5:2e:21:d0:4a:
                    2d:56:bd:05:d5:56:2d:e9:4a:de:f9:39:c2:59:f2:
                    07:48:92:15:b6:44:bd:a6:b2:ec:f2:f4:68:84:b7:
                    72:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:12:9D:B9:F7:CF:B6:63:BA:15:63:76:3A:9E:C1:97:BF:B9:5E:33
            X509v3 Authority Key Identifier:
                keyid:CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:43:5c:7d:a0:f2:90:e4:49:2b:42:7e:c4:f0:9b:48:6a:f3:
         3a:3b:39:19:91:30:49:f0:ea:7e:83:ac:41:0d:ad:29:23:87:
         c1:00:94:a0:9b:49:91:70:a8:fe:8d:b9:1a:32:a3:0e:cf:75:
         96:dc:b0:91:33:8d:f7:75:b1:49:a2:24:38:23:6e:26:5a:c7:
         8f:b2:50:8d:59:72:a5:5c:9f:7c:42:28:b5:b2:07:f6:7a:b2:
         f4:10:03:20:3a:1b:e5:49:be:98:f1:77:83:2b:78:a3:13:f3:
         ed:1d:a1:41:41:3b:e7:51:a7:07:ce:4b:20:87:dd:b3:73:3f:
         83:4f:7c:46:d9:c2:a2:1d:83:ee:d6:12:6f:b0:ff:c6:af:cd:
         83:4e:03:91:83:ef:84:6f:6f:43:c1:f9:40:81:bf:a9:83:db:
         dd:4d:22:4f:8f:37:a5:62:eb:46:7c:70:b6:64:9c:89:c8:89:
         63:a8:0c:9f:5b:ea:cd:b1:cb:1f:85:04:85:9b:19:03:e2:b5:
         56:1f:3c:34:a3:a9:66:86:be:39:b8:9f:95:9f:59:6c:c8:1f:
         c4:38:f7:85:e9:0e:9a:66:45:4a:94:a7:39:3a:2b:26:8b:80:
         6c:8e:98:37:76:71:55:b1:27:b5:04:0e:f1:51:eb:0b:f7:32:
         de:d3:f4:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 25 12:47:03 2025 by rpki-client