Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.mft
File:                     2CACC99A330A3753D03224139703412FA1CB21D3.mft (raw, json)
Hash identifier:          4DHiFTo5o2aXcBCwa0nJw6yTY7Y/LLH+HpBCKZJUC60=
Subject key identifier:   71:D6:1C:6F:07:5D:8A:B0:E0:0D:DD:F8:35:9C:BF:F5:B5:D0:51:F8
Authority key identifier: 2C:AC:C9:9A:33:0A:37:53:D0:32:24:13:97:03:41:2F:A1:CB:21:D3
Certificate issuer:       /CN=2CACC99A330A3753D03224139703412FA1CB21D3
Certificate serial:       569D87B81642D351CE0A1387A4565A9CCDCA0489
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CACC99A330A3753D03224139703412FA1CB21D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.mft
Manifest number:          7F
Signing time:             Thu 03 Jul 2025 00:51:09 +0000
Manifest this update:     Thu 03 Jul 2025 00:46:09 +0000
Manifest next update:     Fri 04 Jul 2025 03:52:09 +0000
Files and hashes:         1: 34352e3139302e3134302e302f32322d3234203d3e20323633363631.roa (hash: Bb5NpLPjuqkdqdUeTYDe78OyboZ2aPhZ5qQFnbIXgx0=)
                          2: 3136382e3230352e3132342e302f32322d3234203d3e20323633363631.roa (hash: N8dc3gYp2g3051n7CVI0bHZwn/R3ZHhhMHBfAkReMPs=)
                          3: 3138372e36332e3233362e302f32322d3234203d3e20323633363631.roa (hash: AjcZPah8a3K9QHO3PKAima50T48zmIEiNoBCZJf+g98=)
                          4: 323830343a313132383a3a2f33322d313238203d3e20323633363631.roa (hash: B1chl3jLVptW9bcbkDzBRrb63jcTgV+UAwkDj7/27ro=)
                          5: 2CACC99A330A3753D03224139703412FA1CB21D3.crl (hash: ObuKShs2sHVxBKFi5En1cRUta0fBzlW6D35Q9HBpw00=)
                          6: 3137372e3232312e35362e302f32322d3234203d3e20323633363631.roa (hash: JJX++uXhcdD3fYgIzY/7gv2hNTtSNqJ/SE9TSlwtO0c=)
                          7: 34352e3137392e38362e302f32332d3234203d3e20323633363631.roa (hash: OyXNFYG1yMu43sOEnFHfNReINwiVcZQw4o4uS7aUZTA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.crl
                          rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CACC99A330A3753D03224139703412FA1CB21D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 03:52:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:9d:87:b8:16:42:d3:51:ce:0a:13:87:a4:56:5a:9c:cd:ca:04:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CACC99A330A3753D03224139703412FA1CB21D3
        Validity
            Not Before: Jul  3 00:46:09 2025 GMT
            Not After : Jul  4 03:52:09 2025 GMT
        Subject: CN=71D61C6F075D8AB0E00DDDF8359CBFF5B5D051F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:75:dc:c1:55:e4:29:55:a2:3c:c2:29:7d:5b:
                    76:f5:7f:8b:3e:d0:55:72:84:a8:17:d1:2a:5b:af:
                    78:b9:59:3b:c9:94:fe:e8:35:7e:c4:b8:07:f3:ad:
                    42:03:28:a8:ce:98:95:05:f0:0f:50:b8:4a:ec:5e:
                    6c:1a:c8:63:5f:05:68:ed:ea:d8:2e:08:d8:10:e7:
                    83:7f:9e:6b:eb:8c:e9:81:e2:06:5f:11:6d:81:54:
                    25:e4:c3:29:3b:66:dc:92:e3:cd:0f:bf:5c:b1:c1:
                    47:bb:40:2a:7a:f5:4b:8b:68:55:d5:a6:d8:57:55:
                    f1:80:56:45:7d:76:65:2a:ff:a8:d3:a5:08:6a:10:
                    87:86:db:45:bc:be:fc:bd:68:bc:d5:9f:73:13:89:
                    46:52:0c:54:18:60:45:f6:96:da:d3:48:a0:ff:48:
                    e3:61:a6:04:38:0d:6e:46:d8:ae:b4:13:d8:5a:d4:
                    54:fe:83:ff:0c:0a:0a:c9:c0:64:a7:c3:38:b9:c4:
                    49:f8:b5:d5:6f:5b:92:65:92:7d:0a:5d:1b:7b:a3:
                    bb:0a:85:48:06:4a:49:6f:64:52:f6:8d:01:fb:e3:
                    6a:31:40:ed:7a:33:79:f0:b2:d1:56:c9:e0:b7:e8:
                    f3:1d:8b:77:37:1d:81:14:12:2d:12:10:eb:f9:14:
                    6a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D6:1C:6F:07:5D:8A:B0:E0:0D:DD:F8:35:9C:BF:F5:B5:D0:51:F8
            X509v3 Authority Key Identifier:
                keyid:2C:AC:C9:9A:33:0A:37:53:D0:32:24:13:97:03:41:2F:A1:CB:21:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CACC99A330A3753D03224139703412FA1CB21D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:5f:44:e2:8c:f1:4e:30:15:21:fc:d3:3f:91:1a:f6:df:6d:
         f6:3f:3b:93:0a:fd:14:41:8f:82:f0:18:6b:a9:44:ff:b4:76:
         4f:56:2a:8f:f2:6d:4e:26:6d:97:1c:ba:83:e9:d3:25:8b:7e:
         66:47:60:14:b9:e1:e2:b0:f6:cf:7f:fb:85:e3:3f:c5:7e:0c:
         8a:4e:56:4b:0e:50:62:c9:13:76:5f:fa:82:0c:57:37:7d:9a:
         ee:88:03:23:97:c9:1d:65:2e:eb:6f:e1:f5:65:42:75:77:02:
         2e:d5:37:6b:08:70:6d:7c:ab:d1:b2:8f:5c:48:d8:45:c2:77:
         5f:38:ad:6d:74:c4:08:4b:aa:7c:b3:af:46:cf:f2:e2:66:82:
         65:e3:7a:71:a0:16:1c:53:e8:8e:aa:15:f9:2a:7f:db:cf:0e:
         a3:71:c4:81:b4:91:89:f8:08:84:64:b8:ac:ee:ed:d9:08:27:
         61:69:19:7f:18:c4:b5:06:40:00:68:1a:d4:0b:10:52:75:eb:
         42:90:2e:d7:bc:7c:62:56:02:39:0e:33:7b:ce:e4:23:be:7b:
         a5:b9:a5:b9:dc:0d:34:52:4f:2a:e8:96:a3:ba:da:de:e4:42:
         04:b9:b4:6e:23:98:b6:ff:fa:4d:a8:44:54:f6:be:60:c4:e4:
         a4:92:14:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 12:24:45 2025 by rpki-client