Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.mft
File:                     2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.mft (raw, json)
Hash identifier:          ECdWyEZKH67oVfAYVQUU6RSpuTXnpLfuDm2w6ec2UKI=
Subject key identifier:   73:2D:BC:39:EA:C1:D3:15:17:A1:4A:79:54:6B:07:7C:8E:60:08:06
Authority key identifier: 2C:C0:B2:2D:7C:2B:5C:28:6F:EA:B5:49:8F:FF:34:11:FE:6C:19:9D
Certificate issuer:       /CN=2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D
Certificate serial:       4D781B71B8CC90F7E5D1CD4EEF0ADE99FBBA1FEB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.mft
Manifest number:          03C1
Signing time:             Thu 26 Mar 2026 12:22:12 +0000
Manifest this update:     Thu 26 Mar 2026 12:17:12 +0000
Manifest next update:     Fri 27 Mar 2026 13:29:12 +0000
Files and hashes:         1: 323830343a363361303a3a2f33322d3332203d3e20323639333733.roa (hash: mKN/PNRQee7YM9pOEKb9MASy+t8WZ+/x6k9bVO/L/iA=)
                          2: 34352e3138352e3131322e302f32322d3232203d3e20323639333733.roa (hash: 4G6i53jx2Vmy17NBd4mN7/8oQ9YsIdjAuzL0FJe0QJI=)
                          3: 323830343a363361303a383030303a3a2f33332d3333203d3e20323639333733.roa (hash: W+rR0EuUeu6xMJDlyFDNlryTu0ycTUnCcpzAEmw/iMw=)
                          4: 323830343a363361303a3a2f33332d3333203d3e20323639333733.roa (hash: cOfHUeR7e3ufYzIZ4pZb2PuoLf1wabX7izjk4oiEA9A=)
                          5: 34352e3138352e3131342e302f32332d3233203d3e20323639333733.roa (hash: KxB6Ij5RRIh/MQMobWqO7cJHVUTJD86vJerMOmXXZXE=)
                          6: 34352e3138352e3131322e302f32332d3233203d3e20323639333733.roa (hash: zs1U/dpsSdlf0woX0P4m5qL0hh/rIYcnS9XLa19Elu4=)
                          7: 2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.crl (hash: gVmfssoUenEZVQb9XUK60b0jIsGIjUzp9deTVcsucBY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.crl
                          rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 13:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:78:1b:71:b8:cc:90:f7:e5:d1:cd:4e:ef:0a:de:99:fb:ba:1f:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D
        Validity
            Not Before: Mar 26 12:17:12 2026 GMT
            Not After : Mar 27 13:29:12 2026 GMT
        Subject: CN=732DBC39EAC1D31517A14A79546B077C8E600806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4b:10:56:d7:98:c0:91:d3:59:b3:87:20:c0:
                    30:a8:46:93:aa:30:6c:50:d6:02:a9:6d:dd:95:19:
                    0e:cc:0a:31:d1:b2:8e:08:84:82:99:10:c7:b0:3c:
                    68:b0:09:dc:bf:26:76:9f:12:b1:0b:5f:3f:83:05:
                    55:c9:a3:b8:9a:3c:2a:67:41:a9:ea:69:ea:d4:e7:
                    3c:e1:0f:61:1b:93:97:2f:97:5a:a1:62:65:ee:06:
                    89:3f:86:f2:d2:34:55:fb:5f:ea:d4:23:04:da:92:
                    89:43:27:50:56:11:9a:74:90:2e:d6:58:a4:15:60:
                    5b:9b:69:72:41:8a:c2:fd:34:6e:46:59:f1:60:28:
                    ca:8e:9f:56:0b:59:da:f9:f1:a1:2c:19:61:76:17:
                    10:9f:a8:bd:de:b0:96:5e:0b:d2:0e:4c:10:08:b3:
                    cf:36:5d:9c:56:c1:6c:06:e2:ba:c9:f0:08:95:bc:
                    49:5b:3e:a2:10:f2:07:7b:5d:19:3a:da:1d:ce:e6:
                    4d:e9:ff:b6:4c:83:a8:10:80:d5:25:52:34:87:f7:
                    db:b5:08:0c:a1:3f:20:01:95:4a:72:7c:9c:4f:6b:
                    5d:e5:9f:91:f3:52:8c:06:94:d4:92:65:1a:b3:b6:
                    79:a7:47:15:0d:9e:06:e4:4c:10:d2:96:b9:b8:2f:
                    32:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2D:BC:39:EA:C1:D3:15:17:A1:4A:79:54:6B:07:7C:8E:60:08:06
            X509v3 Authority Key Identifier:
                keyid:2C:C0:B2:2D:7C:2B:5C:28:6F:EA:B5:49:8F:FF:34:11:FE:6C:19:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:62:cc:2e:23:e3:a6:78:89:d6:52:07:9d:d6:49:46:f2:3b:
         1d:fa:5a:5a:35:e7:a5:4b:3c:e2:bc:cf:96:b5:1e:e0:25:df:
         b9:8b:28:61:1d:4a:40:8f:5e:de:cc:0c:84:1f:29:79:e4:76:
         18:3e:b3:01:34:a4:32:9d:a8:18:f8:64:f4:e6:b7:78:11:c9:
         91:96:12:d6:36:26:51:24:61:da:8f:72:18:bf:2a:3f:d3:5c:
         52:d2:77:5c:a8:1f:0c:1e:cf:27:4a:8c:13:21:56:d6:5b:ce:
         56:ba:81:65:ac:63:9b:2f:39:d2:17:ff:b3:70:d6:cf:12:b9:
         ab:21:51:32:44:44:34:85:de:21:61:0c:8a:35:5c:3b:95:b1:
         7a:cf:f6:22:90:c6:7b:be:11:79:7e:74:9b:b4:3b:92:65:de:
         f2:8c:a8:bc:b7:79:e8:96:bb:98:f7:4c:4a:82:f7:83:be:68:
         27:cc:b8:12:1d:a4:be:68:9f:0e:f8:03:c5:64:1b:8f:2c:bb:
         c1:42:73:6d:25:db:9d:3a:1b:04:13:8a:ac:61:fe:6b:fe:8e:
         81:47:7f:16:73:2b:1d:57:49:19:73:f8:54:3d:f8:b6:15:86:
         32:d7:61:44:c3:f5:23:ec:05:2f:75:14:e3:8a:e9:34:a3:37:
         62:71:07:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:12:21 2026 by rpki-client