Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
File:                     2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft (raw, json)
Hash identifier:          pKfXHSetbdvn4eHNU/c9A2zWxDmRdZRY2eijuvdunjo=
Subject key identifier:   DC:F4:83:D0:C8:82:67:95:3E:5E:D3:95:65:43:D0:70:7A:87:52:B1
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Certificate issuer:       /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial:       3D5B6BB6F57C6E486451B313F677243D7189A64C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
Manifest number:          02BB
Signing time:             Mon 09 Jun 2025 01:23:28 +0000
Manifest this update:     Mon 09 Jun 2025 01:18:28 +0000
Manifest next update:     Tue 10 Jun 2025 04:53:28 +0000
Files and hashes:         1: 3230312e34392e3232342e302f32302d3234203d3e203532353332.roa (hash: CNJSlWtatUN4HSdkuVeA3UaPEokKP4ThP14ovzAF/c0=)
                          2: 323830343a326635633a3a2f33322d3438203d3e20323634383836.roa (hash: EtAFZVftso22tPfn5dl/88WB9YQ7x3P4uwE8iBRdUJk=)
                          3: 3230312e34392e3232362e302f32342d3234203d3e20323634383836.roa (hash: /Bqgdv/wF+ru9WBmwhXO8Kmck4O1wcfAaIl22CcZyRo=)
                          4: 3230312e34392e3232352e302f32342d3234203d3e20323730393539.roa (hash: KiQwHqW4L5k313W7Ix2tqfggra0fzCmTud2HSdaR8Rc=)
                          5: 3230312e34392e3232342e302f32342d3234203d3e20323634383836.roa (hash: aAcskGlGmP8AQ7qs2cBaT1+bvYjC59f6aR7MspSUM2s=)
                          6: 3137392e3130382e34342e302f32322d3234203d3e20323634383836.roa (hash: ZEOE1aModZQn//F6rEGH/N341h+IAF+P3KvayKztGlw=)
                          7: 3136382e3232372e3138302e302f32322d3234203d3e20323634383836.roa (hash: mvqMiFShrhl429jJZ2MEPX47X4Tu0n+8cbWaLIFXD74=)
                          8: 2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl (hash: f3jW+1i0fKyejcM19xRvacwpg6MlOYlSXUpV3qu2xRo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 04:53:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:5b:6b:b6:f5:7c:6e:48:64:51:b3:13:f6:77:24:3d:71:89:a6:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
        Validity
            Not Before: Jun  9 01:18:28 2025 GMT
            Not After : Jun 10 04:53:28 2025 GMT
        Subject: CN=DCF483D0C88267953E5ED3956543D0707A8752B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d1:2c:43:8d:f7:96:53:74:dd:70:e2:35:f4:
                    24:2d:bb:33:15:17:0f:2d:66:6d:e5:42:b0:04:dc:
                    bf:e6:8f:0a:b6:59:09:dc:9e:71:ad:9e:ea:a7:97:
                    92:68:a1:59:8a:d2:7e:b3:46:13:61:c6:1f:a5:be:
                    83:57:ba:2f:a4:3d:ba:4c:5a:9c:8d:fb:75:d1:23:
                    0a:c0:d5:3e:8d:28:7b:34:a2:1c:9c:b2:aa:d0:a9:
                    d7:31:30:87:c0:8c:e8:1a:c1:52:d0:cd:0d:8b:99:
                    e5:ca:b3:a2:9b:b2:04:d2:19:3c:a4:90:ce:ba:37:
                    70:b9:12:0e:ae:16:88:0b:c7:3d:a6:cf:58:b4:84:
                    19:ab:cb:7a:e1:e4:74:90:7f:ea:7e:fe:95:e5:dd:
                    8e:25:d8:18:d5:3f:6f:63:40:88:71:83:38:54:1c:
                    34:0e:da:bf:32:10:02:38:9b:93:8f:b5:c7:98:2e:
                    16:55:53:92:48:d1:9e:0e:1a:a1:eb:d8:6c:12:64:
                    01:40:4e:05:81:02:84:8e:a4:af:5d:3c:79:4d:dd:
                    ce:ea:f3:d3:08:f7:b0:24:a5:cc:96:ac:3f:98:01:
                    48:43:3b:78:4c:14:94:18:e3:ba:78:99:d6:e1:32:
                    3b:10:65:26:31:bc:35:37:08:d5:d4:06:8f:d8:a2:
                    7c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F4:83:D0:C8:82:67:95:3E:5E:D3:95:65:43:D0:70:7A:87:52:B1
            X509v3 Authority Key Identifier:
                keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:7e:34:95:dc:ed:1d:a2:53:5b:c5:60:71:7d:a2:19:2b:26:
         ac:f4:48:9c:1f:e2:28:70:13:f5:3d:e6:2b:9e:30:12:b6:09:
         40:16:64:08:a7:f7:f2:80:3f:8c:18:5e:e6:7c:f9:18:35:53:
         c6:73:e0:10:04:27:bf:b5:d8:c5:9d:39:65:07:66:26:7d:4e:
         7f:0c:f4:86:69:22:49:28:a4:ff:9f:1f:9e:6d:02:f0:25:2f:
         6a:b6:65:18:0c:47:bd:b4:35:39:0e:6b:13:37:2a:9c:42:bb:
         3e:8d:cf:09:30:32:9d:53:97:59:c3:65:d2:09:5d:27:dd:68:
         06:6c:b8:53:76:9d:0d:f5:60:b8:32:ac:fd:45:35:ad:22:6c:
         ae:d1:f3:e6:41:d3:d1:cb:03:9d:8a:c6:7e:9c:98:ec:ba:ec:
         3d:e8:45:e7:5b:07:cb:d3:e6:c2:4f:b9:51:e3:6b:f7:83:d1:
         f7:14:bc:c4:0d:04:64:52:ee:41:58:b7:00:c6:52:58:5a:79:
         9f:a3:1f:6d:1c:3f:45:e8:db:9c:25:5a:42:91:e6:99:3e:26:
         7e:cf:4c:f9:20:72:44:68:d4:5c:36:45:36:11:70:72:d2:df:
         a3:24:20:7b:7e:f4:33:c7:28:74:0a:36:4b:80:f6:60:4f:2f:
         3f:d9:9a:50
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUPVtrtvV8bkhkUbMT9nckPXGJpkwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkMxQ0M5NDM1MzdFNzJBQTU5OUJDOUI5NDBGQjE4MEJB
ODlDMkQxQTAeFw0yNTA2MDkwMTE4MjhaFw0yNTA2MTAwNDUzMjhaMDMxMTAvBgNV
BAMTKERDRjQ4M0QwQzg4MjY3OTUzRTVFRDM5NTY1NDNEMDcwN0E4NzUyQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE0SxDjfeWU3TdcOI19CQtuzMV
Fw8tZm3lQrAE3L/mjwq2WQncnnGtnuqnl5JooVmK0n6zRhNhxh+lvoNXui+kPbpM
WpyN+3XRIwrA1T6NKHs0ohycsqrQqdcxMIfAjOgawVLQzQ2LmeXKs6KbsgTSGTyk
kM66N3C5Eg6uFogLxz2mz1i0hBmry3rh5HSQf+p+/pXl3Y4l2BjVP29jQIhxgzhU
HDQO2r8yEAI4m5OPtceYLhZVU5JI0Z4OGqHr2GwSZAFATgWBAoSOpK9dPHlN3c7q
89MI97AkpcyWrD+YAUhDO3hMFJQY47p4mdbhMjsQZSYxvDU3CNXUBo/YonxdAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU3PSD0MiCZ5U+XtOVZUPQcHqHUrEwHwYDVR0j
BBgwFoAULBzJQ1N+cqpZm8m5QPsYC6icLRowDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9hZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNp
LzEvMkMxQ0M5NDM1MzdFNzJBQTU5OUJDOUI5NDBGQjE4MEJBODlDMkQxQS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yQzFDQzk0MzUzN0U3MkFBNTk5
QkM5Qjk0MEZCMTgwQkE4OUMyRDFBLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2Fm
WEZNa1F5cEpqYVNhVXp0M0VRUW9KTmNWdXpoaG1kQk51MVc0WEVvM2kvMS8yQzFD
Qzk0MzUzN0U3MkFBNTk5QkM5Qjk0MEZCMTgwQkE4OUMyRDFBLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
Dn40ldztHaJTW8VgcX2iGSsmrPRInB/iKHAT9T3mK54wErYJQBZkCKf38oA/jBhe
5nz5GDVTxnPgEAQnv7XYxZ05ZQdmJn1Ofwz0hmkiSSik/58fnm0C8CUvarZlGAxH
vbQ1OQ5rEzcqnEK7Po3PCTAynVOXWcNl0gldJ91oBmy4U3adDfVguDKs/UU1rSJs
rtHz5kHT0csDnYrGfpyY7LrsPehF51sHy9Pmwk+5UeNr94PR9xS8xA0EZFLuQVi3
AMZSWFp5n6MfbRw/RejbnCVaQpHmmT4mfs9M+SByRGjUXDZFNhFwctLfoyQge370
M8codAo2S4D2YE8vP9maUA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 11:53:47 2025 by rpki-client