Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.mft
File:                     CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.mft (raw, json)
Hash identifier:          L2bBVb2srQ4IJ+Z1dM9pomCa/nucG0twXEqLgTnkwGQ=
Subject key identifier:   FD:C5:2D:E9:5D:E5:FF:EB:BC:5F:64:50:D8:19:AC:97:E9:4E:80:68
Authority key identifier: CC:1E:CC:FA:C7:A6:BB:A6:B9:3A:63:2D:D1:C6:10:06:86:34:4B:D8
Certificate issuer:       /CN=CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8
Certificate serial:       053FB16B3D9D759E37374E81B6890E5D483CC974
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.mft
Manifest number:          021D
Signing time:             Thu 15 May 2025 05:41:45 +0000
Manifest this update:     Thu 15 May 2025 05:36:45 +0000
Manifest next update:     Fri 16 May 2025 06:48:45 +0000
Files and hashes:         1: 3230312e3135382e34302e302f32312d3234203d3e20323638333233.roa (hash: 2A4rDuLRFWXAJlapuXpN/E4CaofZs0b0umVtQA4SiGw=)
                          2: 3139322e3134312e3139362e302f32322d3234203d3e20323638333233.roa (hash: aSLP+VQ2QnTk1424KJet/utalthKp4HIvlfM1VbIxkA=)
                          3: 3138372e34352e34382e302f32302d3234203d3e20323638333233.roa (hash: kyNjMzQuGSLsCNXU3CfYinPy8FMhKv4uvylDcPGReeo=)
                          4: 323830343a346636303a3a2f33322d313238203d3e20323638333233.roa (hash: kMEsIsALKKeUQ/kyS9ZYrQhiwDhIgH0vQDcsl0N86gQ=)
                          5: 3137372e35332e3132382e302f32312d3234203d3e20323638333233.roa (hash: sdu5+bfodftuulEa9fVD7+XKZZ87v1ITtxwVWjLNRxo=)
                          6: 34352e3137352e3138382e302f32322d3234203d3e20323638333233.roa (hash: RwLUdDz13N/BmIqzrNwzh4q3hMjilT4WEIqV6/ghBbw=)
                          7: 3230302e392e3136302e302f32322d3234203d3e20323638333233.roa (hash: OUfn275w0xXP56S/hYJpQv1yTT+DWCPdZUZdc5TZ6Mw=)
                          8: 34352e3233382e3131362e302f32322d3234203d3e20323638333233.roa (hash: JTBq8flR+nhyM/Li4g0y3q+ctvT+oBBg+FwjLBO+xgo=)
                          9: CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.crl (hash: +QLduAhjEi2Q7CxCOva3kwJec28x3/7NRVgIUMEzwXA=)
                          10: 3137372e3132352e3138342e302f32322d3234203d3e20323638333233.roa (hash: BBaYc4m/1X68USip6UBSVWqTl8KexxRRSsfkcn7bYR4=)
                          11: 3137372e3132352e3138382e302f32322d3234203d3e20323638333233.roa (hash: Dwz0bJkd5wJgXd0c0J0wgruQvnaKO5QdfcivsmcT6R8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.crl
                          rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 06:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:3f:b1:6b:3d:9d:75:9e:37:37:4e:81:b6:89:0e:5d:48:3c:c9:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8
        Validity
            Not Before: May 15 05:36:45 2025 GMT
            Not After : May 16 06:48:45 2025 GMT
        Subject: CN=FDC52DE95DE5FFEBBC5F6450D819AC97E94E8068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:56:24:d6:d8:d0:ec:62:1c:cd:38:c9:43:db:
                    ec:cc:04:2c:82:7d:d8:ad:4a:81:20:33:f7:6f:60:
                    66:bf:19:a6:b3:1f:e7:da:04:93:04:98:75:81:0f:
                    a2:d0:a7:b5:d4:9d:05:13:50:13:2e:70:bc:25:69:
                    42:f4:0e:57:33:24:a7:39:cd:81:b1:d4:cd:3d:5e:
                    57:89:a6:8e:a1:53:cc:3d:81:7c:a9:36:bc:7a:61:
                    98:49:14:61:c8:69:c6:10:64:f8:0b:e7:10:ed:b4:
                    83:97:fa:97:a3:ce:04:35:c8:5a:17:a3:88:cb:f5:
                    db:66:c8:95:a6:0d:7e:13:4e:82:1a:9b:06:8b:86:
                    a6:bd:cc:c8:cb:5e:7d:cc:39:9c:2b:b8:6d:61:dc:
                    ef:a7:6e:d0:89:2f:2e:ab:43:a5:ff:4f:c8:aa:57:
                    8a:0d:c5:8d:6c:17:2d:58:19:c0:81:4b:0a:7b:c2:
                    a9:e0:18:19:ca:5a:50:cd:f3:6f:56:2c:f4:d5:24:
                    08:dc:00:10:20:8e:f2:c9:0c:5a:da:53:20:da:b5:
                    30:20:c4:6b:26:a3:e2:51:aa:99:4f:f3:89:6e:e5:
                    40:c2:ff:f0:0c:52:48:65:91:46:fb:9b:9c:3a:d0:
                    78:ec:3d:01:28:d7:3a:ab:86:cf:0e:5f:21:65:db:
                    bb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C5:2D:E9:5D:E5:FF:EB:BC:5F:64:50:D8:19:AC:97:E9:4E:80:68
            X509v3 Authority Key Identifier:
                keyid:CC:1E:CC:FA:C7:A6:BB:A6:B9:3A:63:2D:D1:C6:10:06:86:34:4B:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:2f:c6:14:2e:2d:46:df:0b:55:83:b9:7d:26:b2:d6:2b:dc:
         d9:a0:e4:67:ba:ab:27:70:66:5f:70:68:7e:27:0b:14:54:67:
         21:f8:ff:e3:5c:f6:ab:b8:ec:d7:47:f9:24:87:cd:a1:d7:9d:
         b9:9d:06:86:cd:ad:97:ef:c0:b8:65:ab:00:ba:9b:bb:ee:fb:
         96:50:70:58:db:6c:19:53:bb:70:50:6b:90:08:0d:7f:41:7c:
         3e:1b:de:55:d1:c2:35:f5:96:ba:e5:44:c2:4c:15:1b:2f:3b:
         93:d7:a4:51:83:a0:0f:76:cb:cd:c5:0e:07:2c:7b:3a:3b:27:
         de:15:31:ac:9a:fd:06:a2:01:11:39:73:3e:29:97:f5:52:59:
         7d:87:26:0a:89:36:12:bf:e2:e8:85:fd:46:c2:6f:80:f3:79:
         ee:c0:ce:82:14:b3:2f:4b:9c:74:9a:a2:20:d3:2f:6f:b4:e2:
         f5:e9:d0:31:99:55:31:aa:fe:ce:a2:20:28:1f:29:dc:65:6b:
         f7:20:57:4b:b6:77:25:62:0f:d0:fd:b7:d3:32:f6:dc:e5:ea:
         27:6a:d4:ee:88:b0:36:4f:4e:24:21:15:98:f7:1f:2c:76:0f:
         93:3e:8f:21:b3:c3:10:db:3e:11:c3:4b:46:05:ae:15:ff:b0:
         bc:82:1d:8c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBT+xaz2ddZ43N06BtokOXUg8yXQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MxRUNDRkFDN0E2QkJBNkI5M0E2MzJERDFDNjEwMDY4
NjM0NEJEODAeFw0yNTA1MTUwNTM2NDVaFw0yNTA1MTYwNjQ4NDVaMDMxMTAvBgNV
BAMTKEZEQzUyREU5NURFNUZGRUJCQzVGNjQ1MEQ4MTlBQzk3RTk0RTgwNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuViTW2NDsYhzNOMlD2+zMBCyC
fditSoEgM/dvYGa/GaazH+faBJMEmHWBD6LQp7XUnQUTUBMucLwlaUL0DlczJKc5
zYGx1M09XleJpo6hU8w9gXypNrx6YZhJFGHIacYQZPgL5xDttIOX+pejzgQ1yFoX
o4jL9dtmyJWmDX4TToIamwaLhqa9zMjLXn3MOZwruG1h3O+nbtCJLy6rQ6X/T8iq
V4oNxY1sFy1YGcCBSwp7wqngGBnKWlDN829WLPTVJAjcABAgjvLJDFraUyDatTAg
xGsmo+JRqplP84lu5UDC//AMUkhlkUb7m5w60HjsPQEo1zqrhs8OXyFl27tFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU/cUt6V3l/+u8X2RQ2Bmsl+lOgGgwHwYDVR0j
BBgwFoAUzB7M+semu6a5OmMt0cYQBoY0S9gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQndBWlZGcHVuOERSY2Y3MjdNb3JLYnRXdnZ0em5BU2V6Mkh1WHBIODFo
bmYvMS9DQzFFQ0NGQUM3QTZCQkE2QjkzQTYzMkREMUM2MTAwNjg2MzQ0QkQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDMUVDQ0ZBQzdBNkJCQTZC
OTNBNjMyREQxQzYxMDA2ODYzNDRCRDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QndBWlZGcHVuOERSY2Y3MjdNb3JLYnRXdnZ0em5BU2V6Mkh1WHBIODFobmYvMS9D
QzFFQ0NGQUM3QTZCQkE2QjkzQTYzMkREMUM2MTAwNjg2MzQ0QkQ4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAti/GFC4tRt8LVYO5fSay1ivc2aDkZ7qrJ3BmX3BoficLFFRnIfj/41z2q7js
10f5JIfNodeduZ0Ghs2tl+/AuGWrALqbu+77llBwWNtsGVO7cFBrkAgNf0F8Phve
VdHCNfWWuuVEwkwVGy87k9ekUYOgD3bLzcUOByx7Ojsn3hUxrJr9BqIBETlzPimX
9VJZfYcmCok2Er/i6IX9RsJvgPN57sDOghSzL0ucdJqiINMvb7Ti9enQMZlVMar+
zqIgKB8p3GVr9yBXS7Z3JWIP0P230zL23OXqJ2rU7oiwNk9OJCEVmPcfLHYPkz6P
IbPDENs+EcNLRgWuFf+wvIIdjA==
-----END CERTIFICATE-----
Generated at Thu May 15 23:59:44 2025 by rpki-client