Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
File:                     CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft (raw, json)
Hash identifier:          mW2u5A85q7j0nQbA5eNoNq8toWucrQlke7jF2V67GKQ=
Subject key identifier:   09:38:CD:39:25:30:4E:B3:0F:49:1F:76:3D:24:A8:29:4B:B5:BB:40
Authority key identifier: CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2
Certificate issuer:       /CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
Certificate serial:       5A687EC79A5F79E9A96BEBCB725D2EBF4C082F64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
Manifest number:          0366
Signing time:             Thu 06 Nov 2025 02:50:00 +0000
Manifest this update:     Thu 06 Nov 2025 02:45:00 +0000
Manifest next update:     Fri 07 Nov 2025 02:50:00 +0000
Files and hashes:         1: CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl (hash: Q1bblH3yZ162pp6SQXf1bj7qvo3WMj0g0fpHbnfTDnE=)
                          2: 3133312e3130302e38332e302f32342d3234203d3e203631373539.roa (hash: vczHRbOFgEoCsKktD7VO871LT80N+PPbRvSy0Rgv0cQ=)
                          3: 3133312e3130302e38302e302f32322d3232203d3e203631373539.roa (hash: TIKPLBcgVkAqPb7AvJ7y3qnvaIg8at7tJhRtw5vlZcA=)
                          4: 3133312e3130302e38322e302f32342d3234203d3e203631373539.roa (hash: AqaGJdnfVDnrDs9o4pa1x/Ggk3ojfJEIZ+CuPIpO/f8=)
                          5: 3133312e3130302e38302e302f32332d3233203d3e203631373539.roa (hash: saQrKmND7jKCXcVCbLOZM0vGaAcVwgazmSq+F43U55s=)
                          6: 3133312e3130302e38312e302f32342d3234203d3e203631373539.roa (hash: qfzvsq2B1akHghZtIkDDQUyJbG4XgSSAx8hZTS7m9ho=)
                          7: 3133312e3130302e38302e302f32342d3234203d3e203631373539.roa (hash: wPCUlOTJfcrvxENWWp8r1HLX+/zoXRBc20kKp+zUs+s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl
                          rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 07 Nov 2025 02:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:68:7e:c7:9a:5f:79:e9:a9:6b:eb:cb:72:5d:2e:bf:4c:08:2f:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
        Validity
            Not Before: Nov  6 02:45:00 2025 GMT
            Not After : Nov  7 02:50:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9a:94:c9:af:73:37:b3:3b:35:7e:3f:cf:f8:
                    07:c1:20:5c:6a:77:ab:88:ab:7b:9d:7e:62:fa:4d:
                    96:d7:45:2d:55:5a:fe:5d:7b:e9:fc:4f:8f:dd:bf:
                    50:6c:13:e2:8c:59:9e:f1:a1:29:59:42:65:1e:c7:
                    70:f7:0e:e0:9e:05:3b:20:e7:bb:38:12:ca:ec:9c:
                    fa:94:79:1f:37:82:3d:d3:05:eb:5f:b7:f1:80:94:
                    89:ff:37:78:75:a2:0d:88:ab:b8:a6:38:86:93:45:
                    8e:db:90:f2:21:e2:6a:92:f8:19:b0:55:f0:7e:c7:
                    1e:c0:ea:34:83:37:e5:99:29:cc:75:37:70:c1:14:
                    31:51:70:5f:55:22:7d:44:5f:e6:2c:06:e5:88:0d:
                    02:1e:19:3a:2d:71:ad:c9:da:a1:d9:62:00:be:98:
                    ed:df:70:7b:e3:ae:dd:aa:b9:69:41:0d:24:03:4a:
                    64:ed:5e:e5:5a:b4:9d:b4:47:31:0b:a9:26:87:cc:
                    7b:31:14:61:2b:5d:5c:dc:5f:21:4a:47:ea:76:9b:
                    a7:9d:f8:32:f4:7f:61:78:75:9f:ce:f0:ef:a3:44:
                    f8:c8:6b:81:05:8b:aa:f1:97:a5:61:58:66:9d:51:
                    c5:2c:98:ae:dc:0a:60:17:dc:b8:bc:1e:a3:a2:c1:
                    a0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:38:CD:39:25:30:4E:B3:0F:49:1F:76:3D:24:A8:29:4B:B5:BB:40
            X509v3 Authority Key Identifier:
                keyid:CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c4:1d:b0:f9:7f:b3:77:d2:d9:d0:72:c4:19:0f:53:f9:aa:
         18:9b:be:3c:b3:d4:96:22:36:47:8f:38:cc:ed:81:19:a9:c4:
         cc:e9:1f:53:25:eb:04:8b:00:7e:20:2c:5b:dd:70:bc:e3:1f:
         9a:8a:bf:c3:fb:60:a3:e4:fd:a9:e8:57:2a:bf:26:c4:d5:51:
         75:aa:91:6d:89:ad:f5:aa:32:f5:84:69:a8:34:83:c8:cb:72:
         07:af:8f:2d:82:f7:6f:39:6a:50:f9:4f:77:37:5b:2f:fd:27:
         8d:42:87:fd:22:65:b6:2c:62:4f:41:36:55:93:cf:be:88:07:
         52:1b:93:82:67:db:6f:34:52:77:9a:92:f4:8c:a4:79:25:19:
         f6:f2:97:12:c8:7e:a8:c7:ea:b3:ef:82:6a:a8:4b:04:52:0b:
         4f:d1:37:7f:39:00:54:a7:54:55:c8:3e:95:c1:85:19:f9:56:
         fb:fb:b0:b3:c7:3a:ad:7f:09:3b:d1:d1:1b:7f:ea:48:47:49:
         72:6b:5d:48:c7:d4:0d:54:37:ae:f8:5c:a7:f2:7c:e7:ea:31:
         65:40:5a:78:f2:5c:18:ec:dc:a6:d3:14:48:cc:63:a4:8b:4f:
         18:5e:f3:1d:c9:ce:83:fc:fa:15:e2:ec:3c:a4:3b:fa:65:a5:
         5d:eb:ae:66
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 6 04:42:43 2025 by rpki-client