Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
File:                     CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft (raw, json)
Hash identifier:          hj5uDBAk6yhqAYjaCpQmNpeR5adGzkqdxtZzI68caV8=
Subject key identifier:   F4:19:7C:76:73:AB:E2:2C:F7:09:51:34:E4:A0:F6:F8:5F:64:06:31
Authority key identifier: CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2
Certificate issuer:       /CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
Certificate serial:       08777DD8BA40136DF6656F310D80973E173319C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
Manifest number:          0284
Signing time:             Sun 08 Jun 2025 10:50:00 +0000
Manifest this update:     Sun 08 Jun 2025 10:45:00 +0000
Manifest next update:     Mon 09 Jun 2025 10:50:00 +0000
Files and hashes:         1: 3133312e3130302e38302e302f32322d3232203d3e203631373539.roa (hash: TIKPLBcgVkAqPb7AvJ7y3qnvaIg8at7tJhRtw5vlZcA=)
                          2: CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl (hash: rG+pt8epVTJEs0t48oacUi7LDOqPMY4zF44pAorFfMo=)
                          3: 3133312e3130302e38302e302f32332d3233203d3e203631373539.roa (hash: saQrKmND7jKCXcVCbLOZM0vGaAcVwgazmSq+F43U55s=)
                          4: 3133312e3130302e38332e302f32342d3234203d3e203631373539.roa (hash: vczHRbOFgEoCsKktD7VO871LT80N+PPbRvSy0Rgv0cQ=)
                          5: 3133312e3130302e38322e302f32342d3234203d3e203631373539.roa (hash: AqaGJdnfVDnrDs9o4pa1x/Ggk3ojfJEIZ+CuPIpO/f8=)
                          6: 3133312e3130302e38312e302f32342d3234203d3e203631373539.roa (hash: qfzvsq2B1akHghZtIkDDQUyJbG4XgSSAx8hZTS7m9ho=)
                          7: 3133312e3130302e38302e302f32342d3234203d3e203631373539.roa (hash: wPCUlOTJfcrvxENWWp8r1HLX+/zoXRBc20kKp+zUs+s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl
                          rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 10:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:77:7d:d8:ba:40:13:6d:f6:65:6f:31:0d:80:97:3e:17:33:19:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
        Validity
            Not Before: Jun  8 10:45:00 2025 GMT
            Not After : Jun  9 10:50:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6d:96:a7:ac:e6:c1:32:78:82:50:6a:72:a0:
                    98:46:d6:8a:fa:ea:c4:64:cf:07:17:da:01:36:d8:
                    95:2c:83:e4:0d:8b:fd:f7:52:90:14:41:bc:14:25:
                    76:d8:fe:d3:ff:19:37:26:ae:5a:b4:3b:20:9d:07:
                    7c:e8:2a:00:c7:ff:5d:cd:8b:fd:84:bc:dc:8d:cb:
                    10:f5:3a:63:ca:1b:e9:cb:d8:a3:93:47:cb:b9:f3:
                    69:42:09:4f:d5:d1:81:da:bb:93:a1:f9:66:15:f0:
                    9a:65:96:72:86:58:07:9b:b0:5b:14:9e:0d:bb:c1:
                    95:b9:e1:eb:9c:b2:b4:ae:3b:64:fb:f6:f5:0f:44:
                    74:65:07:95:8c:0d:ea:92:78:2b:4f:dd:d6:9e:98:
                    13:07:a1:ca:fc:5d:cd:5e:b8:4a:d7:ee:a5:37:87:
                    34:2a:24:ca:24:b9:8f:aa:6c:ec:00:c2:0d:a1:75:
                    f2:9f:34:5c:12:78:0c:04:9b:b0:c6:ba:f7:59:0b:
                    8e:71:ac:0a:30:7f:20:d2:ba:1a:10:1c:f6:25:9c:
                    06:c1:ea:6c:c8:7b:57:bf:85:73:f6:e0:b3:ea:67:
                    1c:03:48:5f:4c:ac:e3:94:1f:14:99:d4:54:af:54:
                    a0:bc:09:25:bd:06:3e:b4:7e:f2:65:31:02:87:2e:
                    e3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:19:7C:76:73:AB:E2:2C:F7:09:51:34:E4:A0:F6:F8:5F:64:06:31
            X509v3 Authority Key Identifier:
                keyid:CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:6b:46:02:fd:43:78:f1:71:6b:f8:b9:a4:32:bd:0a:fd:94:
         bf:fb:87:08:86:ad:7a:ba:0b:24:90:b3:45:f4:63:b0:b3:68:
         54:a9:f7:0b:a3:6e:1f:09:e8:4d:dd:27:35:54:a7:d0:33:53:
         01:82:9a:91:94:51:5b:8a:ff:bd:cf:bb:49:d7:69:45:04:05:
         61:cb:63:ed:55:6b:06:1c:65:e9:4b:00:f5:9f:32:60:c2:60:
         6b:17:58:de:8f:ae:d8:d1:27:13:af:2d:63:de:b6:e5:e7:58:
         11:15:6a:5d:89:38:d1:c0:a3:e1:f5:e0:2b:f9:81:de:08:cd:
         b3:cf:12:4d:3f:06:7d:66:4b:12:62:00:03:84:f6:50:00:d6:
         9a:d9:92:cf:ba:4f:72:30:49:20:79:05:5c:11:d8:68:1c:74:
         64:57:ab:ca:f6:bd:ca:ff:ab:a4:0c:8c:f3:c3:62:de:87:a7:
         e1:6b:5c:b4:dc:7a:d3:1a:22:66:13:95:63:ea:48:65:31:b1:
         b4:d0:5e:5a:c4:7c:ab:bc:ae:6c:4e:22:58:f9:74:16:8c:64:
         9d:43:fd:81:41:66:91:b5:03:a5:97:9c:bf:b8:eb:66:70:e0:
         85:06:f5:fa:3c:cb:5e:de:d2:2b:f7:60:93:48:9b:3f:26:83:
         36:9e:64:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:47:34 2025 by rpki-client