Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.mft
File:                     2CACC99A330A3753D03224139703412FA1CB21D3.mft (raw, json)
Hash identifier:          IrwHE6wW7i6AzwohV7IVIcX7WjoTLiUus87ibUws0oY=
Subject key identifier:   12:B8:C4:28:34:61:0C:5E:02:A6:CE:CC:28:DF:43:10:BE:E5:D2:52
Authority key identifier: 2C:AC:C9:9A:33:0A:37:53:D0:32:24:13:97:03:41:2F:A1:CB:21:D3
Certificate issuer:       /CN=2CACC99A330A3753D03224139703412FA1CB21D3
Certificate serial:       0CDF1545CA5221939AD9C6E14093B2F9AB72727D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CACC99A330A3753D03224139703412FA1CB21D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.mft
Manifest number:          C3
Signing time:             Sat 23 Aug 2025 05:02:11 +0000
Manifest this update:     Sat 23 Aug 2025 04:57:11 +0000
Manifest next update:     Sun 24 Aug 2025 06:33:11 +0000
Files and hashes:         1: 3138372e36332e3233362e302f32322d3234203d3e20323633363631.roa (hash: AjcZPah8a3K9QHO3PKAima50T48zmIEiNoBCZJf+g98=)
                          2: 3137372e3232312e35362e302f32322d3234203d3e20323633363631.roa (hash: JJX++uXhcdD3fYgIzY/7gv2hNTtSNqJ/SE9TSlwtO0c=)
                          3: 3136382e3230352e3132342e302f32322d3234203d3e20323633363631.roa (hash: N8dc3gYp2g3051n7CVI0bHZwn/R3ZHhhMHBfAkReMPs=)
                          4: 34352e3139302e3134302e302f32322d3234203d3e20323633363631.roa (hash: Bb5NpLPjuqkdqdUeTYDe78OyboZ2aPhZ5qQFnbIXgx0=)
                          5: 2CACC99A330A3753D03224139703412FA1CB21D3.crl (hash: fxdZ0SPdZ9ahNShG9V+00QxAIAfIIcV4xCLv3c4W7Ug=)
                          6: 323830343a313132383a3a2f33322d313238203d3e20323633363631.roa (hash: B1chl3jLVptW9bcbkDzBRrb63jcTgV+UAwkDj7/27ro=)
                          7: 34352e3137392e38362e302f32332d3234203d3e20323633363631.roa (hash: OyXNFYG1yMu43sOEnFHfNReINwiVcZQw4o4uS7aUZTA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.crl
                          rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CACC99A330A3753D03224139703412FA1CB21D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 06:33:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:df:15:45:ca:52:21:93:9a:d9:c6:e1:40:93:b2:f9:ab:72:72:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CACC99A330A3753D03224139703412FA1CB21D3
        Validity
            Not Before: Aug 23 04:57:11 2025 GMT
            Not After : Aug 24 06:33:11 2025 GMT
        Subject: CN=12B8C42834610C5E02A6CECC28DF4310BEE5D252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ad:50:42:b5:8d:ab:81:dc:f4:00:9e:ff:e0:
                    b9:d9:c1:4a:1a:4e:56:98:8c:20:03:da:40:f0:bd:
                    29:87:32:c1:e8:fe:36:c0:73:e9:dd:47:de:60:cd:
                    a4:53:ad:2e:76:2a:07:cc:80:fc:a6:90:ed:eb:6f:
                    58:ba:3f:ca:9b:16:00:91:3c:8d:31:53:4c:ad:5d:
                    cf:69:1a:88:1b:3b:5d:0c:75:87:ea:2d:0e:40:66:
                    95:3a:ef:a0:99:65:cc:1b:84:05:08:d0:39:dd:2f:
                    e2:89:0b:13:30:b6:fa:5c:7c:7d:21:43:f9:39:88:
                    f2:0a:ae:e2:ec:f2:8d:b0:fd:25:21:97:61:76:de:
                    83:48:96:ac:ee:7c:e8:75:f6:f8:86:fc:0e:81:84:
                    dd:08:7b:db:08:a7:f0:e6:f2:df:16:01:07:8d:39:
                    07:80:8e:07:ff:1e:1d:79:0d:cc:b7:04:96:fb:f4:
                    c4:9c:ed:03:7b:fd:8e:44:e0:f0:0c:27:69:b0:68:
                    9a:1c:55:46:47:14:43:81:2b:18:91:d9:a2:42:f5:
                    8f:f2:de:ff:7f:b2:6a:7d:9e:03:62:ac:f9:22:d1:
                    6b:de:fe:20:08:7a:04:83:de:fd:36:5b:62:6a:54:
                    92:41:39:e7:aa:d2:6a:88:5e:6d:15:e0:bb:52:e3:
                    37:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B8:C4:28:34:61:0C:5E:02:A6:CE:CC:28:DF:43:10:BE:E5:D2:52
            X509v3 Authority Key Identifier:
                keyid:2C:AC:C9:9A:33:0A:37:53:D0:32:24:13:97:03:41:2F:A1:CB:21:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CACC99A330A3753D03224139703412FA1CB21D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:0e:85:4f:19:f1:ea:3d:32:b2:e8:91:8e:88:96:50:14:b6:
         8c:00:42:e7:fb:63:8e:c3:41:7e:d5:19:cc:c5:00:d4:26:27:
         98:06:99:ed:77:4b:ae:a0:bd:22:7e:f3:5a:74:f5:e8:89:5d:
         6d:97:52:91:3e:a1:1f:12:0b:1b:fe:99:d7:84:95:0d:32:b3:
         2b:cd:b3:6e:d3:21:9d:11:7c:fe:b0:f9:c0:4e:e4:38:aa:56:
         5a:f7:29:45:f6:ce:02:24:3f:7a:b7:96:7f:0a:35:ab:49:54:
         66:25:7e:79:2d:39:15:fc:c6:df:cb:b6:d2:28:be:a7:b9:fb:
         16:48:2d:4e:97:6b:bf:9d:9d:4a:4f:4c:17:c4:18:dd:75:6c:
         e5:c3:3a:3f:47:44:15:72:bd:44:19:9d:15:ce:e6:bd:38:81:
         00:17:6f:e1:07:cd:f0:48:f0:04:1d:2a:28:7a:b8:c0:72:c0:
         10:7c:10:63:8e:e5:06:e1:bd:ed:26:24:bd:69:8f:17:a1:73:
         eb:40:ab:85:cf:c2:21:f6:6d:81:a4:8f:37:01:a0:29:c2:17:
         90:55:f6:03:3b:f1:37:22:28:19:a7:8b:20:4f:2e:68:b5:96:
         7d:65:ee:70:00:cd:4d:47:aa:41:05:f3:a8:b2:01:88:f1:74:
         f0:39:cd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:00:20 2025 by rpki-client