Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
File:                     CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft (raw, json)
Hash identifier:          LHBgkwf8MBV+GjhHdYKRzldewYqmMIjkVbiR/Ltbhnk=
Subject key identifier:   D2:99:F1:D3:3C:58:CD:8B:46:99:B9:05:78:E3:0D:23:0F:B9:D9:21
Authority key identifier: CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2
Certificate issuer:       /CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
Certificate serial:       1295E94625F20CC88CD1D9697B9C9F5EC6BC2497
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
Manifest number:          015C
Signing time:             Fri 22 Nov 2024 12:00:00 +0000
Manifest this update:     Fri 22 Nov 2024 11:55:00 +0000
Manifest next update:     Sat 23 Nov 2024 12:00:00 +0000
Files and hashes:         1: 3133312e3130302e38302e302f32332d3233203d3e203631373539.roa (hash: Qfqo07N3sq7EnPBxa5/vqkwVvK7CT7V0+e15w+x3Jz8=)
                          2: 3133312e3130302e38332e302f32342d3234203d3e203631373539.roa (hash: H36AOIBtsHLu6tmwcOzfh3s+EQXDw1eNQrJWqpv+yjs=)
                          3: 3133312e3130302e38312e302f32342d3234203d3e203631373539.roa (hash: /FEUj693A5811H4gGpT6G02Wpk8tCUczdDwpn7M2tGA=)
                          4: CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl (hash: 4RQA6rGMJmZ1Yx8xiTLLKYo25f04otyCpcWiHg2QHwc=)
                          5: 3133312e3130302e38322e302f32342d3234203d3e203631373539.roa (hash: NSBQNM4qgxbQl2azLs0mxiFiXyCtj0+9saGr8xHCCv0=)
                          6: 3133312e3130302e38302e302f32322d3232203d3e203631373539.roa (hash: CcN7PbBi/SlAPmNi4QVObf327IU1N8lceJHHaYBEwXk=)
                          7: 3133312e3130302e38302e302f32342d3234203d3e203631373539.roa (hash: 2MnrMAM0pYowH4inIl6Nw3MXr8Oql2v/ev9pfjbyEW8=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl
                          rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:95:e9:46:25:f2:0c:c8:8c:d1:d9:69:7b:9c:9f:5e:c6:bc:24:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
        Validity
            Not Before: Nov 22 11:55:00 2024 GMT
            Not After : Nov 23 12:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8c:a6:60:ad:6f:b5:5f:32:8b:8d:a5:0d:bd:
                    3e:e1:8c:0b:7b:94:f3:eb:f7:cb:3f:37:7c:1e:24:
                    51:c5:b3:a2:99:22:3d:25:99:b8:a5:25:dd:0c:43:
                    11:1d:98:5c:32:75:24:a0:44:08:c0:fb:0e:40:80:
                    f0:a7:94:da:fe:08:03:a7:f8:b0:0c:6a:a2:14:1f:
                    13:cf:08:9c:cb:03:96:ef:38:bb:37:d7:77:7a:d8:
                    05:00:f9:25:62:76:51:6a:55:8e:0b:81:7f:fc:36:
                    9c:ca:65:56:86:b5:64:ed:c0:92:1b:ae:f2:b5:0e:
                    4a:86:38:d7:e4:4a:a8:c2:9b:47:d4:65:7c:e3:99:
                    00:65:02:df:f4:68:6c:16:e5:b4:ba:3d:e3:e2:28:
                    e6:96:b0:a4:0c:ff:07:b9:c3:73:3e:c7:33:55:37:
                    3f:f4:35:79:81:c0:2a:c3:d8:f2:a8:cf:01:f7:53:
                    7f:53:a6:b8:8b:90:58:fd:76:e1:ba:e2:69:08:08:
                    17:82:b0:83:39:72:fd:b9:6b:c8:33:72:ca:4c:a3:
                    af:1d:07:8d:31:1c:a9:f1:a8:b3:e0:40:d5:89:02:
                    b8:ed:9b:f1:f0:34:56:42:ca:80:b7:d6:d9:76:ac:
                    83:4f:8d:17:67:4b:2d:b9:76:94:bc:4a:36:ff:cd:
                    13:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:99:F1:D3:3C:58:CD:8B:46:99:B9:05:78:E3:0D:23:0F:B9:D9:21
            X509v3 Authority Key Identifier:
                keyid:CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:36:52:8e:9c:cf:21:65:4a:bb:ac:45:63:57:9c:fe:e5:da:
         70:27:3e:26:c7:5d:dd:d1:3b:e3:42:dc:47:e1:af:54:90:68:
         7f:15:76:d8:1e:53:c8:77:e4:6e:fa:d4:05:e9:42:7f:e1:37:
         85:0e:f3:8d:6b:e6:bc:4b:d8:27:1c:e0:40:5b:c4:c8:79:5f:
         b3:5a:82:06:33:bb:a0:46:de:3f:70:f1:e6:ee:51:90:90:ce:
         69:7c:ea:cf:26:a7:5f:c3:4f:6f:f3:b4:06:28:89:16:86:d9:
         fe:4f:12:fa:5f:70:0e:54:0a:d4:cd:d9:5a:36:77:c9:f3:b3:
         f9:0e:f6:01:ea:49:e2:0a:31:a6:58:bd:81:1d:4e:79:b4:55:
         60:51:11:b5:00:af:f9:c8:27:ff:50:50:66:b8:ac:ca:c8:01:
         7c:b7:2a:a9:5a:23:fc:c1:45:94:96:45:66:d9:70:8a:8c:ce:
         ee:87:3c:72:28:6e:47:8c:c6:fb:5f:05:c5:d4:88:15:f8:c4:
         8f:51:ff:06:1d:72:f3:2b:04:78:b6:73:9b:52:5f:f7:10:7e:
         cf:13:57:36:17:65:f8:d6:2f:d4:2b:58:1f:1e:d1:f9:c3:f6:
         17:98:85:ea:ce:7d:29:61:37:d5:79:fc:d1:3e:29:15:ec:6d:
         a2:f8:23:de
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUEpXpRiXyDMiM0dlpe5yfXsa8JJcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MyMUM1MjAwMkYxMjM4NUZFNjFGMzNCRjVGNjkzM0Qw
OUVGOEVEMjAeFw0yNDExMjIxMTU1MDBaFw0yNDExMjMxMjAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzc4Q0E2NjBBRDZGQjU1RjMy
OEI4REE1MERCRDNFRTE4QzBCN0I5NEYzRUJGN0NCM0YzNzdDMUUyNDUxQzVCM0Ey
OTkyMjNEMjU5OUI4QTUyNUREMEM0MzExMUQ5ODVDMzI3NTI0QTA0NDA4QzBGQjBF
NDA4MEYwQTc5NERBRkUwODAzQTdGOEIwMEM2QUEyMTQxRjEzQ0YwODlDQ0IwMzk2
RUYzOEJCMzdENzc3N0FEODA1MDBGOTI1NjI3NjUxNkE1NThFMEI4MTdGRkMzNjlD
Q0E2NTU2ODZCNTY0RURDMDkyMUJBRUYyQjUwRTRBODYzOEQ3RTQ0QUE4QzI5QjQ3
RDQ2NTdDRTM5OTAwNjUwMkRGRjQ2ODZDMTZFNUI0QkEzREUzRTIyOEU2OTZCMEE0
MENGRjA3QjlDMzczM0VDNzMzNTUzNzNGRjQzNTc5ODFDMDJBQzNEOEYyQThDRjAx
Rjc1MzdGNTNBNkI4OEI5MDU4RkQ3NkUxQkFFMjY5MDgwODE3ODJCMDgzMzk3MkZE
Qjk2QkM4MzM3MkNBNENBM0FGMUQwNzhEMzExQ0E5RjFBOEIzRTA0MEQ1ODkwMkI4
RUQ5QkYxRjAzNDU2NDJDQTgwQjdENkQ5NzZBQzgzNEY4RDE3Njc0QjJEQjk3Njk0
QkM0QTM2RkZDRDEzNkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAx4ymYK1vtV8yi42lDb0+4YwLe5Tz6/fLPzd8HiRRxbOimSI9JZm4
pSXdDEMRHZhcMnUkoEQIwPsOQIDwp5Ta/ggDp/iwDGqiFB8TzwicywOW7zi7N9d3
etgFAPklYnZRalWOC4F//DacymVWhrVk7cCSG67ytQ5KhjjX5EqowptH1GV845kA
ZQLf9GhsFuW0uj3j4ijmlrCkDP8HucNzPsczVTc/9DV5gcAqw9jyqM8B91N/U6a4
i5BY/XbhuuJpCAgXgrCDOXL9uWvIM3LKTKOvHQeNMRyp8aiz4EDViQK47Zvx8DRW
QsqAt9bZdqyDT40XZ0stuXaUvEo2/80TbwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FNKZ8dM8WM2LRpm5BXjjDSMPudkhMB8GA1UdIwQYMBaAFMwhxSAC8SOF/mHzO/X2
kz0J747SMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RSWlN2N3dGSnQxRWtZ
NWZHa0RMRER5ZFhVamNlekJKdzhQR3gyR0RQRnlYLzEvQ0MyMUM1MjAwMkYxMjM4
NUZFNjFGMzNCRjVGNjkzM0QwOUVGOEVEMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9DQzIxQzUyMDAyRjEyMzg1RkU2MUYzM0JGNUY2OTMzRDA5RUY4
RUQyLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RSWlN2N3dGSnQxRWtZNWZHa0RM
RER5ZFhVamNlekJKdzhQR3gyR0RQRnlYLzEvQ0MyMUM1MjAwMkYxMjM4NUZFNjFG
MzNCRjVGNjkzM0QwOUVGOEVEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAE02Uo6czyFlSrusRWNXnP7l
2nAnPibHXd3RO+NC3Efhr1SQaH8VdtgeU8h35G761AXpQn/hN4UO841r5rxL2Ccc
4EBbxMh5X7NaggYzu6BG3j9w8ebuUZCQzml86s8mp1/DT2/ztAYoiRaG2f5PEvpf
cA5UCtTN2Vo2d8nzs/kO9gHqSeIKMaZYvYEdTnm0VWBREbUAr/nIJ/9QUGa4rMrI
AXy3KqlaI/zBRZSWRWbZcIqMzu6HPHIobkeMxvtfBcXUiBX4xI9R/wYdcvMrBHi2
c5tSX/cQfs8TVzYXZfjWL9QrWB8e0fnD9heYherOfSlhN9V5/NE+KRXsbaL4I94=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:59 2024 by rpki-client on console-fra.rpki-client.org