Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.mft
File:                     CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.mft (raw, json)
Hash identifier:          2t9JrviLnz2qb+XWsAj2Y0UlGHRkN2gvlFXBDUJxsG0=
Subject key identifier:   23:DF:C4:6E:41:C2:D9:E0:55:17:48:FC:92:5C:6D:92:F4:6A:08:2F
Authority key identifier: CC:1E:CC:FA:C7:A6:BB:A6:B9:3A:63:2D:D1:C6:10:06:86:34:4B:D8
Certificate issuer:       /CN=CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8
Certificate serial:       7E66C740C8C91F9B6F5CEB64EC910C7871863D29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.mft
Manifest number:          02F1
Signing time:             Mon 20 Oct 2025 21:24:56 +0000
Manifest this update:     Mon 20 Oct 2025 21:19:56 +0000
Manifest next update:     Wed 22 Oct 2025 00:21:56 +0000
Files and hashes:         1: 34352e3137352e3138382e302f32322d3234203d3e20323638333233.roa (hash: RwLUdDz13N/BmIqzrNwzh4q3hMjilT4WEIqV6/ghBbw=)
                          2: 3137372e35332e3132382e302f32312d3234203d3e20323638333233.roa (hash: sdu5+bfodftuulEa9fVD7+XKZZ87v1ITtxwVWjLNRxo=)
                          3: 323830343a346636303a3a2f33322d313238203d3e20323638333233.roa (hash: kMEsIsALKKeUQ/kyS9ZYrQhiwDhIgH0vQDcsl0N86gQ=)
                          4: 3139322e3134312e3139362e302f32322d3234203d3e20323638333233.roa (hash: aSLP+VQ2QnTk1424KJet/utalthKp4HIvlfM1VbIxkA=)
                          5: 3230302e392e3136302e302f32322d3234203d3e20323638333233.roa (hash: OUfn275w0xXP56S/hYJpQv1yTT+DWCPdZUZdc5TZ6Mw=)
                          6: 34352e3233382e3131362e302f32322d3234203d3e20323638333233.roa (hash: JTBq8flR+nhyM/Li4g0y3q+ctvT+oBBg+FwjLBO+xgo=)
                          7: 3137372e3132352e3138342e302f32322d3234203d3e20323638333233.roa (hash: BBaYc4m/1X68USip6UBSVWqTl8KexxRRSsfkcn7bYR4=)
                          8: 3137372e3132352e3138382e302f32322d3234203d3e20323638333233.roa (hash: Dwz0bJkd5wJgXd0c0J0wgruQvnaKO5QdfcivsmcT6R8=)
                          9: 3230312e3135382e34302e302f32312d3234203d3e20323638333233.roa (hash: 2A4rDuLRFWXAJlapuXpN/E4CaofZs0b0umVtQA4SiGw=)
                          10: CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.crl (hash: o3s830QBqipAfx7LFwiWey5kjWQxlBfeWtSP6DI2XFM=)
                          11: 3138372e34352e34382e302f32302d3234203d3e20323638333233.roa (hash: kyNjMzQuGSLsCNXU3CfYinPy8FMhKv4uvylDcPGReeo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.crl
                          rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 00:21:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:66:c7:40:c8:c9:1f:9b:6f:5c:eb:64:ec:91:0c:78:71:86:3d:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8
        Validity
            Not Before: Oct 20 21:19:56 2025 GMT
            Not After : Oct 22 00:21:56 2025 GMT
        Subject: CN=23DFC46E41C2D9E0551748FC925C6D92F46A082F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4b:e3:71:6a:6a:02:6b:c0:b0:e4:91:f2:2c:
                    f6:9f:06:a1:16:87:44:8b:fc:21:bd:a6:b0:07:fa:
                    63:ac:a1:15:ea:19:e3:e3:b8:4e:c6:3d:ee:39:76:
                    38:98:98:71:57:05:4a:a9:b3:16:93:7b:8b:a1:7a:
                    23:9b:23:09:c9:2d:fb:44:95:7c:1f:df:09:39:19:
                    d4:fe:94:af:f1:f6:0d:64:75:2d:c3:66:45:19:0c:
                    15:f9:9e:a5:ac:1b:70:12:ce:cc:2b:e7:f0:0f:af:
                    87:ec:94:0c:78:ed:43:22:d5:dc:d9:c8:5e:87:33:
                    db:9f:82:b3:6b:8e:10:62:c8:4d:8f:74:59:cf:81:
                    8e:65:c4:44:ba:cb:1b:41:6d:a8:db:c5:7c:fa:8c:
                    ab:fb:03:96:fd:57:f0:92:80:7b:fe:c6:0a:df:44:
                    26:90:d4:f4:77:d4:bf:59:d2:c1:dd:ca:6f:53:f1:
                    67:05:a5:82:f2:dd:9d:1b:87:8b:c8:b6:1a:9e:68:
                    ca:84:07:fe:9f:fc:d3:9e:dd:24:d8:3c:9a:66:75:
                    d3:02:85:56:3d:b5:4f:14:7e:7d:68:02:32:9f:70:
                    af:58:db:7d:a3:4d:e2:d6:10:71:95:df:72:d7:e5:
                    c7:25:9f:6a:ce:9a:79:39:db:24:6e:d8:90:70:5b:
                    b5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:DF:C4:6E:41:C2:D9:E0:55:17:48:FC:92:5C:6D:92:F4:6A:08:2F
            X509v3 Authority Key Identifier:
                keyid:CC:1E:CC:FA:C7:A6:BB:A6:B9:3A:63:2D:D1:C6:10:06:86:34:4B:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:36:ed:ca:48:ea:ca:54:f0:26:39:6d:90:84:28:06:65:e3:
         60:a5:d2:c5:51:b3:da:34:f4:53:da:e6:60:c3:06:77:47:55:
         40:f5:45:07:78:07:bd:95:f5:6d:45:50:c7:ae:8b:cc:86:21:
         47:11:79:5e:62:2c:e7:a1:07:dc:7a:2e:75:d6:20:89:bb:b5:
         6e:5d:ab:83:32:b1:06:0c:f0:90:c1:da:c5:c7:fa:ec:66:61:
         ed:d1:9b:d1:14:ec:2f:80:3e:26:ca:7a:e3:e2:94:65:aa:d2:
         a9:58:ea:1f:f1:97:21:84:cf:8f:40:73:8d:31:c1:ab:53:db:
         b2:46:e5:93:d6:c3:db:bb:1e:c0:eb:30:59:79:69:19:05:09:
         fc:e3:92:cf:1a:5a:2d:9a:5b:08:1b:b3:bd:ce:11:79:63:a2:
         64:9b:1a:0d:2b:4b:b4:32:22:47:11:88:ac:dd:47:37:99:6d:
         d3:e7:a2:d8:e7:85:18:a9:f6:2c:43:ca:59:0c:29:b2:5f:0f:
         ff:17:c2:b8:64:20:b4:70:63:a4:bf:5f:3a:f4:b3:2b:6f:37:
         7d:96:09:ac:6e:b2:85:b5:76:66:e4:3e:94:15:70:3b:5e:a4:
         aa:ff:07:17:4e:e4:95:35:8f:74:0c:a9:2d:27:bf:d7:82:f7:
         04:fc:40:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:57:58 2025 by rpki-client