Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
File:                     CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft (raw, json)
Hash identifier:          MJm5zhQmPQ0/FRb3xUsR7OQY04a+INm9fO/SeVYeW1k=
Subject key identifier:   93:E5:44:B4:8C:18:FF:0A:AA:16:E1:E6:13:E7:37:21:2A:C6:31:9F
Authority key identifier: CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2
Certificate issuer:       /CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
Certificate serial:       726B1F601E8CC34988A2E3F30F11D13D2B742E33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
Manifest number:          02F5
Signing time:             Fri 22 Aug 2025 18:50:00 +0000
Manifest this update:     Fri 22 Aug 2025 18:45:00 +0000
Manifest next update:     Sat 23 Aug 2025 18:50:00 +0000
Files and hashes:         1: 3133312e3130302e38302e302f32342d3234203d3e203631373539.roa (hash: wPCUlOTJfcrvxENWWp8r1HLX+/zoXRBc20kKp+zUs+s=)
                          2: 3133312e3130302e38332e302f32342d3234203d3e203631373539.roa (hash: vczHRbOFgEoCsKktD7VO871LT80N+PPbRvSy0Rgv0cQ=)
                          3: CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl (hash: 8C7KUC8a2/AXvHPI1foasMxvVZE4ak9clO8sLSRguIE=)
                          4: 3133312e3130302e38302e302f32322d3232203d3e203631373539.roa (hash: TIKPLBcgVkAqPb7AvJ7y3qnvaIg8at7tJhRtw5vlZcA=)
                          5: 3133312e3130302e38302e302f32332d3233203d3e203631373539.roa (hash: saQrKmND7jKCXcVCbLOZM0vGaAcVwgazmSq+F43U55s=)
                          6: 3133312e3130302e38322e302f32342d3234203d3e203631373539.roa (hash: AqaGJdnfVDnrDs9o4pa1x/Ggk3ojfJEIZ+CuPIpO/f8=)
                          7: 3133312e3130302e38312e302f32342d3234203d3e203631373539.roa (hash: qfzvsq2B1akHghZtIkDDQUyJbG4XgSSAx8hZTS7m9ho=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl
                          rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Aug 2025 18:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:6b:1f:60:1e:8c:c3:49:88:a2:e3:f3:0f:11:d1:3d:2b:74:2e:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
        Validity
            Not Before: Aug 22 18:45:00 2025 GMT
            Not After : Aug 23 18:50:00 2025 GMT
        Subject: CN=3082010A0282010100CF5EF98253772D0D76382409C032C3D03B1D6F666F8FB763A4F28292CFCA52683C04A85DD56F78AAA968CC23A00B44877BE382C4A2174BAA311F5F649A7783A8A388C63458F0B0ABCB10BCA20752F67DADD5DCD491E1D3D630AF5D6C3131FD692FE20F8A5ACB51F2826DB62A5D008835A8597F4B2F47538A68FA595C6A0743E69D6865F38D88D1BAE85C00039FEB278CAEA3B2B1D078FC0A620109EEB15E4FBC067FBECEA7FC764A2647A7B907B024C4AC9ED302E44265C31D65739C3E106FFA8B6852AB92895A9063A2B520B51C6BD2C80FD05F0156187527D93CCAEC3716B9E265B9D400700772BE4DAD1B33EE178A98AED69A34833D3D48BB56C0331DFFF70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5e:f9:82:53:77:2d:0d:76:38:24:09:c0:32:
                    c3:d0:3b:1d:6f:66:6f:8f:b7:63:a4:f2:82:92:cf:
                    ca:52:68:3c:04:a8:5d:d5:6f:78:aa:a9:68:cc:23:
                    a0:0b:44:87:7b:e3:82:c4:a2:17:4b:aa:31:1f:5f:
                    64:9a:77:83:a8:a3:88:c6:34:58:f0:b0:ab:cb:10:
                    bc:a2:07:52:f6:7d:ad:d5:dc:d4:91:e1:d3:d6:30:
                    af:5d:6c:31:31:fd:69:2f:e2:0f:8a:5a:cb:51:f2:
                    82:6d:b6:2a:5d:00:88:35:a8:59:7f:4b:2f:47:53:
                    8a:68:fa:59:5c:6a:07:43:e6:9d:68:65:f3:8d:88:
                    d1:ba:e8:5c:00:03:9f:eb:27:8c:ae:a3:b2:b1:d0:
                    78:fc:0a:62:01:09:ee:b1:5e:4f:bc:06:7f:be:ce:
                    a7:fc:76:4a:26:47:a7:b9:07:b0:24:c4:ac:9e:d3:
                    02:e4:42:65:c3:1d:65:73:9c:3e:10:6f:fa:8b:68:
                    52:ab:92:89:5a:90:63:a2:b5:20:b5:1c:6b:d2:c8:
                    0f:d0:5f:01:56:18:75:27:d9:3c:ca:ec:37:16:b9:
                    e2:65:b9:d4:00:70:07:72:be:4d:ad:1b:33:ee:17:
                    8a:98:ae:d6:9a:34:83:3d:3d:48:bb:56:c0:33:1d:
                    ff:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E5:44:B4:8C:18:FF:0A:AA:16:E1:E6:13:E7:37:21:2A:C6:31:9F
            X509v3 Authority Key Identifier:
                keyid:CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:1b:b6:e7:57:b0:1b:19:60:0b:d7:0e:ba:49:65:00:b8:ed:
         26:f5:93:f6:5b:ec:51:1a:59:e1:95:ec:68:10:09:22:98:79:
         46:4b:26:05:bc:81:73:28:08:2a:a6:43:40:c0:ab:09:ec:d2:
         96:27:4f:3c:96:ed:65:97:bf:26:3b:ab:30:e4:7a:3b:f3:9c:
         e8:95:34:07:ed:ce:ec:fb:21:2d:79:26:db:fd:18:e9:66:79:
         60:bf:13:c2:4b:19:f1:8f:22:51:c4:b8:7a:45:cc:e7:3b:9b:
         c5:aa:90:72:14:4d:c5:77:aa:38:e5:fa:7a:7e:a2:13:55:6e:
         73:e7:71:bf:55:57:ad:cb:ce:cc:52:20:0d:5f:7e:2e:09:13:
         d8:85:53:7e:75:d4:75:5f:7a:2b:6c:12:90:9a:c4:14:16:2c:
         21:a5:0a:e6:1b:aa:62:6b:6b:8e:b3:bd:58:20:d2:a3:e4:a3:
         42:50:d4:fe:13:6d:a8:00:09:80:61:2b:98:c8:30:4c:86:05:
         96:8d:5b:8b:9e:2e:13:26:ea:d6:97:2f:de:01:69:5e:02:58:
         ff:d8:c5:09:c2:39:a9:f7:5e:fe:71:73:d1:c8:80:c9:17:b0:
         cc:a9:40:f8:f8:23:e3:6b:b0:2d:e8:48:5a:09:f3:ca:40:e8:
         9f:7b:66:c8
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUcmsfYB6Mw0mIouPzDxHRPSt0LjMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MyMUM1MjAwMkYxMjM4NUZFNjFGMzNCRjVGNjkzM0Qw
OUVGOEVEMjAeFw0yNTA4MjIxODQ1MDBaFw0yNTA4MjMxODUwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0Y1RUY5ODI1Mzc3MkQwRDc2
MzgyNDA5QzAzMkMzRDAzQjFENkY2NjZGOEZCNzYzQTRGMjgyOTJDRkNBNTI2ODND
MDRBODVERDU2Rjc4QUFBOTY4Q0MyM0EwMEI0NDg3N0JFMzgyQzRBMjE3NEJBQTMx
MUY1RjY0OUE3NzgzQThBMzg4QzYzNDU4RjBCMEFCQ0IxMEJDQTIwNzUyRjY3REFE
RDVEQ0Q0OTFFMUQzRDYzMEFGNUQ2QzMxMzFGRDY5MkZFMjBGOEE1QUNCNTFGMjgy
NkRCNjJBNUQwMDg4MzVBODU5N0Y0QjJGNDc1MzhBNjhGQTU5NUM2QTA3NDNFNjlE
Njg2NUYzOEQ4OEQxQkFFODVDMDAwMzlGRUIyNzhDQUVBM0IyQjFEMDc4RkMwQTYy
MDEwOUVFQjE1RTRGQkMwNjdGQkVDRUE3RkM3NjRBMjY0N0E3QjkwN0IwMjRDNEFD
OUVEMzAyRTQ0MjY1QzMxRDY1NzM5QzNFMTA2RkZBOEI2ODUyQUI5Mjg5NUE5MDYz
QTJCNTIwQjUxQzZCRDJDODBGRDA1RjAxNTYxODc1MjdEOTNDQ0FFQzM3MTZCOUUy
NjVCOUQ0MDA3MDA3NzJCRTREQUQxQjMzRUUxNzhBOThBRUQ2OUEzNDgzM0QzRDQ4
QkI1NkMwMzMxREZGRjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAz175glN3LQ12OCQJwDLD0Dsdb2Zvj7djpPKCks/KUmg8BKhd1W94
qqlozCOgC0SHe+OCxKIXS6oxH19kmneDqKOIxjRY8LCryxC8ogdS9n2t1dzUkeHT
1jCvXWwxMf1pL+IPilrLUfKCbbYqXQCINahZf0svR1OKaPpZXGoHQ+adaGXzjYjR
uuhcAAOf6yeMrqOysdB4/ApiAQnusV5PvAZ/vs6n/HZKJkenuQewJMSsntMC5EJl
wx1lc5w+EG/6i2hSq5KJWpBjorUgtRxr0sgP0F8BVhh1J9k8yuw3FrniZbnUAHAH
cr5NrRsz7heKmK7WmjSDPT1Iu1bAMx3/9wIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FJPlRLSMGP8Kqhbh5hPnNyEqxjGfMB8GA1UdIwQYMBaAFMwhxSAC8SOF/mHzO/X2
kz0J747SMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RSWlN2N3dGSnQxRWtZ
NWZHa0RMRER5ZFhVamNlekJKdzhQR3gyR0RQRnlYLzEvQ0MyMUM1MjAwMkYxMjM4
NUZFNjFGMzNCRjVGNjkzM0QwOUVGOEVEMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9DQzIxQzUyMDAyRjEyMzg1RkU2MUYzM0JGNUY2OTMzRDA5RUY4
RUQyLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RSWlN2N3dGSnQxRWtZNWZHa0RM
RER5ZFhVamNlekJKdzhQR3gyR0RQRnlYLzEvQ0MyMUM1MjAwMkYxMjM4NUZFNjFG
MzNCRjVGNjkzM0QwOUVGOEVEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACAbtudXsBsZYAvXDrpJZQC4
7Sb1k/Zb7FEaWeGV7GgQCSKYeUZLJgW8gXMoCCqmQ0DAqwns0pYnTzyW7WWXvyY7
qzDkejvznOiVNAftzuz7IS15Jtv9GOlmeWC/E8JLGfGPIlHEuHpFzOc7m8WqkHIU
TcV3qjjl+np+ohNVbnPncb9VV63LzsxSIA1ffi4JE9iFU3511HVfeitsEpCaxBQW
LCGlCuYbqmJra46zvVgg0qPko0JQ1P4TbagACYBhK5jIMEyGBZaNW4ueLhMm6taX
L94BaV4CWP/YxQnCOan3Xv5xc9HIgMkXsMypQPj4I+NrsC3oSFoJ88pA6J97Zsg=
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:00 2025 by rpki-client