Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
File:                     CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft (raw, json)
Hash identifier:          Ph+2DV5TIRpR2AU/Ch58ZmMgwEnc8FxmVRknAB/tEPw=
Subject key identifier:   57:4E:8E:6D:CC:3D:D4:C8:7E:B1:87:06:83:3E:5D:D2:05:4F:1E:2A
Authority key identifier: CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2
Certificate issuer:       /CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
Certificate serial:       4B4709C1F8B29810E70AC75F302DD5D56BE722E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
Manifest number:          0235
Signing time:             Wed 16 Apr 2025 06:10:00 +0000
Manifest this update:     Wed 16 Apr 2025 06:05:00 +0000
Manifest next update:     Thu 17 Apr 2025 06:10:00 +0000
Files and hashes:         1: 3133312e3130302e38302e302f32322d3232203d3e203631373539.roa (hash: TIKPLBcgVkAqPb7AvJ7y3qnvaIg8at7tJhRtw5vlZcA=)
                          2: 3133312e3130302e38302e302f32342d3234203d3e203631373539.roa (hash: wPCUlOTJfcrvxENWWp8r1HLX+/zoXRBc20kKp+zUs+s=)
                          3: CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl (hash: KU4KYMuBtK53vA/zvAwosq7IGEM33BbhWP7p7ySUj14=)
                          4: 3133312e3130302e38302e302f32332d3233203d3e203631373539.roa (hash: saQrKmND7jKCXcVCbLOZM0vGaAcVwgazmSq+F43U55s=)
                          5: 3133312e3130302e38322e302f32342d3234203d3e203631373539.roa (hash: AqaGJdnfVDnrDs9o4pa1x/Ggk3ojfJEIZ+CuPIpO/f8=)
                          6: 3133312e3130302e38332e302f32342d3234203d3e203631373539.roa (hash: vczHRbOFgEoCsKktD7VO871LT80N+PPbRvSy0Rgv0cQ=)
                          7: 3133312e3130302e38312e302f32342d3234203d3e203631373539.roa (hash: qfzvsq2B1akHghZtIkDDQUyJbG4XgSSAx8hZTS7m9ho=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl
                          rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 06:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:47:09:c1:f8:b2:98:10:e7:0a:c7:5f:30:2d:d5:d5:6b:e7:22:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
        Validity
            Not Before: Apr 16 06:05:00 2025 GMT
            Not After : Apr 17 06:10:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4f:98:70:d3:40:1b:1d:68:eb:7c:ad:0e:79:
                    33:26:6f:ea:c0:1c:b2:19:b5:89:b8:86:f1:55:54:
                    ec:d4:38:2a:ab:2e:c8:0b:0c:63:ea:c0:1e:a6:8a:
                    6b:3b:97:21:6a:be:ab:1c:2b:cf:e6:62:fe:40:50:
                    4e:c8:7e:e5:75:6d:0e:5f:63:d3:50:f3:ae:69:20:
                    87:24:72:c8:4f:ea:c8:94:19:8a:26:72:c8:19:c4:
                    71:ff:6d:e0:4d:81:77:af:e2:2a:bb:5f:10:c5:4d:
                    d9:9b:f4:e9:02:88:34:a4:88:da:72:97:a5:b6:7a:
                    cb:56:90:b7:d6:e7:1f:d7:47:59:13:1a:c6:60:97:
                    80:ac:92:a9:8f:f3:ae:58:f7:de:f6:92:fc:db:38:
                    f6:19:1c:c7:a5:f1:c7:22:73:97:02:59:02:50:ec:
                    fc:f8:94:3b:f9:6d:b6:78:d0:67:48:b2:be:a4:20:
                    13:4b:1f:9b:36:44:db:0c:7f:e3:04:11:98:68:db:
                    d5:7b:66:82:b2:ad:75:39:86:82:89:ea:3b:4c:21:
                    3f:f0:2f:1d:35:75:ce:1d:53:a0:b0:96:ad:46:03:
                    3a:80:e0:be:de:2b:7a:13:53:46:c5:45:cf:16:f7:
                    1f:49:9b:25:79:bb:40:00:47:e2:b8:51:4f:6e:1d:
                    34:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:4E:8E:6D:CC:3D:D4:C8:7E:B1:87:06:83:3E:5D:D2:05:4F:1E:2A
            X509v3 Authority Key Identifier:
                keyid:CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:86:6c:d2:90:f5:33:87:e3:78:df:2e:4a:e9:aa:9f:49:93:
         7a:01:eb:d7:a9:f7:d1:e0:c0:9a:42:af:74:5e:5d:9e:34:d7:
         d8:3a:8f:9d:25:2c:d8:ae:4a:95:38:c2:b8:34:17:7b:8f:cd:
         ec:eb:90:ae:60:ad:9e:f1:1b:1d:86:42:e0:83:0f:11:8b:38:
         8b:50:6c:4d:a5:08:ec:8b:bd:62:c5:e6:d0:5c:82:01:4d:2e:
         09:d2:69:99:92:12:cc:61:17:ee:b5:e6:e4:72:c9:33:1b:59:
         9e:0c:76:9d:17:c2:30:2b:b3:ee:8e:92:53:da:bb:e4:69:c2:
         2c:64:97:21:0c:7e:1c:15:8d:ad:fa:3a:28:40:8b:b6:25:42:
         23:97:c0:fb:45:8a:9c:76:21:cf:85:2a:32:c0:76:01:f5:02:
         48:f1:03:ae:b9:91:e1:a7:92:db:91:95:e6:18:58:16:bb:1c:
         94:da:0b:2e:cd:e8:17:c6:66:87:92:fc:02:f7:2b:94:3b:cd:
         95:a6:aa:8c:c2:3a:a9:1d:d6:7e:7b:dd:9f:97:8f:49:7d:08:
         41:7e:19:c5:0b:ec:68:bb:ef:6b:0c:bb:b8:5d:e3:d1:5b:5f:
         dc:4c:af:43:0d:d4:06:bb:2a:6c:52:7d:42:6f:22:5b:ba:f6:
         00:73:97:80
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 17 05:39:42 2025 by rpki-client