Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
File:                     CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft (raw, json)
Hash identifier:          sJ0z7eZ8boofz0Cuub6TN0PdgMihh33GyxYQ+0DGblE=
Subject key identifier:   40:2D:1F:E9:BE:00:A9:E5:0B:B4:1F:3C:4C:2E:EC:BD:93:11:93:BE
Authority key identifier: CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2
Certificate issuer:       /CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
Certificate serial:       4F332C949B0D36DEE44D712CC03AAA077CC6CE0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
Manifest number:          0259
Signing time:             Sat 10 May 2025 08:50:00 +0000
Manifest this update:     Sat 10 May 2025 08:45:00 +0000
Manifest next update:     Sun 11 May 2025 08:50:00 +0000
Files and hashes:         1: CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl (hash: hmOSUh7XUbpRiVeGm/+B5MjYUD2w0lIWK5z+DhvjgBE=)
                          2: 3133312e3130302e38332e302f32342d3234203d3e203631373539.roa (hash: vczHRbOFgEoCsKktD7VO871LT80N+PPbRvSy0Rgv0cQ=)
                          3: 3133312e3130302e38322e302f32342d3234203d3e203631373539.roa (hash: AqaGJdnfVDnrDs9o4pa1x/Ggk3ojfJEIZ+CuPIpO/f8=)
                          4: 3133312e3130302e38302e302f32332d3233203d3e203631373539.roa (hash: saQrKmND7jKCXcVCbLOZM0vGaAcVwgazmSq+F43U55s=)
                          5: 3133312e3130302e38302e302f32322d3232203d3e203631373539.roa (hash: TIKPLBcgVkAqPb7AvJ7y3qnvaIg8at7tJhRtw5vlZcA=)
                          6: 3133312e3130302e38312e302f32342d3234203d3e203631373539.roa (hash: qfzvsq2B1akHghZtIkDDQUyJbG4XgSSAx8hZTS7m9ho=)
                          7: 3133312e3130302e38302e302f32342d3234203d3e203631373539.roa (hash: wPCUlOTJfcrvxENWWp8r1HLX+/zoXRBc20kKp+zUs+s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl
                          rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 08:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:33:2c:94:9b:0d:36:de:e4:4d:71:2c:c0:3a:aa:07:7c:c6:ce:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
        Validity
            Not Before: May 10 08:45:00 2025 GMT
            Not After : May 11 08:50:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f8:42:66:19:61:1f:cc:dd:ad:20:98:8f:65:
                    b5:9f:cc:74:df:c2:31:b9:c4:68:59:79:1b:3a:c8:
                    d8:a7:42:3f:93:21:af:45:d0:13:03:10:2a:e3:28:
                    f8:c4:1f:db:dd:47:98:c0:08:a3:5a:85:1e:f1:b0:
                    91:55:ee:a3:43:c0:b9:c9:e1:8c:8a:7d:bd:d2:65:
                    76:99:b5:2a:e2:37:44:62:f7:18:13:ff:79:d6:a6:
                    a0:9b:82:2f:a5:18:10:10:a1:cf:19:53:2f:40:4f:
                    61:ba:4e:f2:7f:e1:5e:db:6a:f0:b5:79:5c:71:76:
                    00:6a:a0:92:31:c7:71:78:9f:43:37:5f:9d:32:31:
                    94:77:96:19:80:d3:5c:75:74:7c:ca:54:35:15:b7:
                    0c:25:de:e6:25:a6:9f:48:8f:67:3b:76:a8:c8:1a:
                    47:59:a4:77:31:ef:78:4e:69:e2:4d:1f:f1:bd:ef:
                    63:c3:c0:fe:81:41:79:7c:2c:95:c6:03:cc:11:3c:
                    9a:60:ad:f2:09:9c:38:eb:49:71:77:28:72:40:e6:
                    26:eb:fb:5b:ea:2e:61:1b:f0:72:e0:ed:8e:e1:3d:
                    cb:09:c8:5a:01:ba:ce:5b:22:33:f9:f0:f7:8c:f0:
                    88:16:40:b0:c9:b6:c9:bd:48:03:19:01:6f:af:21:
                    ad:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:2D:1F:E9:BE:00:A9:E5:0B:B4:1F:3C:4C:2E:EC:BD:93:11:93:BE
            X509v3 Authority Key Identifier:
                keyid:CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:ae:17:e3:e7:bd:cd:15:c8:17:06:bb:77:ad:20:e9:e9:c0:
         db:35:14:0a:db:bf:4e:02:5f:54:04:a2:55:8c:61:1d:62:f2:
         43:22:f2:f0:c9:cd:87:7d:1f:4d:ad:94:69:2a:fa:d5:90:88:
         32:f2:2c:3f:e1:e1:40:9b:92:7c:2d:45:ff:22:1d:d3:a3:ce:
         d3:66:a5:bc:1e:e4:22:78:0c:4b:89:fb:27:83:83:65:7b:e0:
         7d:04:3d:d4:eb:03:1e:46:85:82:d7:54:c3:33:9a:d4:bf:a2:
         4d:a4:f3:76:1f:d3:2c:15:fc:15:2b:03:af:a3:b1:06:64:c1:
         e3:c9:1d:be:20:5a:41:f8:f1:63:d1:30:45:17:d2:5c:dc:a9:
         ad:4a:a3:44:ec:bc:ed:70:65:c0:67:f7:c8:42:23:a9:f5:c7:
         82:b0:7e:5e:44:12:72:bc:b7:2f:44:49:51:eb:7d:76:47:c1:
         d7:0b:3c:83:b9:60:85:75:84:17:9e:77:8b:b0:20:72:53:90:
         9a:b3:14:f1:36:67:8d:e4:53:ce:10:2f:df:2f:77:cb:75:d3:
         2b:fd:ee:9b:54:d8:ff:40:20:b9:eb:d6:bb:d8:27:fc:17:81:
         b7:26:4b:a1:9f:c1:c5:fe:af:4e:ab:57:5c:2a:66:8d:09:54:
         86:d5:01:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 10 22:06:26 2025 by rpki-client