Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.mft
File:                     2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.mft (raw, json)
Hash identifier:          6I4nBhZhiE2nbIWQHJv6pTsK4hjtGc+RoowxtPq5pFM=
Subject key identifier:   92:80:24:BB:7C:58:58:21:7A:06:D0:53:EC:5B:DA:2A:5E:B8:D1:66
Authority key identifier: 2C:C0:B2:2D:7C:2B:5C:28:6F:EA:B5:49:8F:FF:34:11:FE:6C:19:9D
Certificate issuer:       /CN=2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D
Certificate serial:       763C99A820C1A25460D86D14619BEBD6AB1D4F80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.mft
Manifest number:          021C
Signing time:             Tue 13 May 2025 11:57:03 +0000
Manifest this update:     Tue 13 May 2025 11:52:03 +0000
Manifest next update:     Wed 14 May 2025 14:31:03 +0000
Files and hashes:         1: 34352e3138352e3131322e302f32322d3232203d3e20323639333733.roa (hash: gVuQFW9aqxwNIUZzxntnV4SYabJPYtNTPGv66lqkLCg=)
                          2: 323830343a363361303a383030303a3a2f33332d3333203d3e20323639333733.roa (hash: 3WEgfh4OjJ5itl4teE42nWqCKfQDpNMQjz1Z0AdbRgU=)
                          3: 323830343a363361303a3a2f33332d3333203d3e20323639333733.roa (hash: 3xNc3nWAuntIdtLTscKEcHDOA1sAB+/NQ1nD/nr0eRw=)
                          4: 323830343a363361303a3a2f33322d3332203d3e20323639333733.roa (hash: zwbzTYdGwpqQgQwOzPEGgIS7z6KhfZccqXtOvv+wJ5I=)
                          5: 34352e3138352e3131322e302f32332d3233203d3e20323639333733.roa (hash: EMTO2B2dJEONz0J5cX+jW42+BzO5qRXgHWGwpML5egY=)
                          6: 34352e3138352e3131342e302f32332d3233203d3e20323639333733.roa (hash: PXu69AW8ogshnfJ9lVdjONGi+NM820wd5Z219l9oFig=)
                          7: 2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.crl (hash: +J4eyyLgyJaVN2XUhByYPaS7O9zeFLLLFArB7qM6kfQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.crl
                          rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 14:31:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:3c:99:a8:20:c1:a2:54:60:d8:6d:14:61:9b:eb:d6:ab:1d:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D
        Validity
            Not Before: May 13 11:52:03 2025 GMT
            Not After : May 14 14:31:03 2025 GMT
        Subject: CN=928024BB7C5858217A06D053EC5BDA2A5EB8D166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7f:4e:75:1c:67:b7:d1:9b:d2:91:26:81:11:
                    4d:7d:43:31:4b:0c:f0:ef:ce:c6:1c:43:36:8f:6c:
                    41:98:69:48:08:b9:ad:2a:9e:d4:11:ec:7f:5c:80:
                    73:ca:5a:e1:09:21:30:03:6e:dd:18:2e:82:ee:77:
                    0b:ab:37:73:c4:6c:c1:63:8b:bd:e2:88:80:e6:8a:
                    23:fa:f5:eb:f8:92:3e:3b:18:9c:5a:19:b8:91:90:
                    fc:af:62:b4:31:80:82:b1:a7:f7:7d:7d:cf:f8:fa:
                    82:91:cb:68:52:bf:75:4e:4e:ab:e9:aa:4b:4a:32:
                    2c:82:7d:1b:2d:b9:b9:8f:d5:49:1b:30:ac:19:22:
                    c6:23:1d:a5:f6:62:9f:ce:ab:43:7f:60:f1:4f:86:
                    86:d0:1b:ca:ce:ed:e1:5d:3c:30:11:fb:4a:ea:a4:
                    92:6b:94:fc:01:fb:5e:97:71:e6:c4:c1:5d:7d:ce:
                    52:a4:44:cb:67:d2:58:8d:77:c3:4f:40:af:63:18:
                    bc:61:3c:14:32:b6:73:f3:37:6c:4a:e6:77:76:5d:
                    ca:b6:bf:93:42:ae:a8:fb:e1:4a:b9:f6:b8:d7:05:
                    13:0a:01:43:24:30:04:70:fc:cf:19:3b:5d:6a:42:
                    c4:c1:4a:48:f3:30:00:bf:d4:32:b4:e6:d4:c7:0f:
                    37:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:80:24:BB:7C:58:58:21:7A:06:D0:53:EC:5B:DA:2A:5E:B8:D1:66
            X509v3 Authority Key Identifier:
                keyid:2C:C0:B2:2D:7C:2B:5C:28:6F:EA:B5:49:8F:FF:34:11:FE:6C:19:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:80:89:a8:1f:d6:6d:4b:39:e7:1e:9f:4f:86:a9:34:49:c8:
         fb:8b:0a:ca:b0:40:a9:77:1c:ea:09:06:23:0f:66:c4:33:ca:
         e2:95:e4:7e:42:aa:d0:24:e6:aa:95:7b:e9:8c:5a:59:56:0a:
         ab:f8:e8:f0:6c:ff:0f:f3:47:1b:0d:ed:23:9c:f2:73:a7:02:
         9e:c7:d8:a6:70:c1:c4:9c:c6:f8:a0:34:76:03:ee:ff:29:51:
         4b:c5:72:93:62:bf:e1:2d:4b:67:28:8c:36:88:1d:27:cc:1d:
         a8:33:87:9f:89:d6:d6:e2:b9:db:7a:18:a1:72:7e:37:78:67:
         6a:0f:84:fd:4b:5f:b9:da:54:5d:e2:b4:81:98:b8:a8:b0:35:
         67:7b:31:41:0a:c0:00:a1:f7:d8:d9:81:41:d4:f8:fd:6a:c2:
         2a:3a:7e:f7:9f:ef:1d:6c:9e:02:f3:ef:8a:23:7f:64:d1:2d:
         ff:cc:52:4a:b6:42:54:20:5b:77:ba:ff:95:fa:a6:71:5c:f4:
         f6:bd:fe:e7:e8:18:76:d1:d7:04:39:a5:fb:ae:fb:ed:07:05:
         b4:2b:01:e9:f5:53:e2:b9:d3:b5:dc:63:7f:02:32:5b:e6:0b:
         60:be:c8:e2:b2:f0:4a:70:18:c8:ec:81:25:d2:17:0e:aa:07:
         38:f1:fe:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:12:20 2025 by rpki-client