Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
File:                     2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft (raw, json)
Hash identifier:          S96PjPSTQxK4Ld75iNEo86RGSieMTmBTpX5M7NStmm8=
Subject key identifier:   E5:7E:8C:EA:8B:8B:C6:6E:96:8B:12:A7:75:83:F8:A5:E0:7B:AC:17
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Certificate issuer:       /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial:       6CC38079DD8DE79ED4E46674FEB7A592674DB30C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
Manifest number:          0385
Signing time:             Mon 20 Oct 2025 03:15:32 +0000
Manifest this update:     Mon 20 Oct 2025 03:10:32 +0000
Manifest next update:     Tue 21 Oct 2025 07:02:32 +0000
Files and hashes:         1: 3230312e34392e3233322e302f32322d3234203d3e20323634383836.roa (hash: mHPFOGNKvdgc/zI811HdfbTjLQWNbiDqxL/El5Lm3fA=)
                          2: 3230312e34392e3233362e302f32322d3234203d3e203532353332.roa (hash: crwNQAzkQgVzyySk2+Vvl5Tz9YU9DHls0pPUE2tU5c8=)
                          3: 3230312e34392e3232372e302f32342d3234203d3e20323634383836.roa (hash: XwZwnGLQtwgwMmBOul4r3/MIGHfpZbt+/M93PODrJok=)
                          4: 2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl (hash: 6IZEZhZsfzpL8BTMinsR4QQBuXP64loT4hmY7JdawTw=)
                          5: 3137392e3130382e34342e302f32322d3234203d3e20323634383836.roa (hash: ZEOE1aModZQn//F6rEGH/N341h+IAF+P3KvayKztGlw=)
                          6: 3230312e34392e3232362e302f32342d3234203d3e20323634383836.roa (hash: /Bqgdv/wF+ru9WBmwhXO8Kmck4O1wcfAaIl22CcZyRo=)
                          7: 3230312e34392e3232342e302f32342d3234203d3e20323634383836.roa (hash: aAcskGlGmP8AQ7qs2cBaT1+bvYjC59f6aR7MspSUM2s=)
                          8: 3230312e34392e3232382e302f32322d3234203d3e203532353332.roa (hash: eXlDeqx/uIJYF2z6711Ka9h3ZAq+z/JbyUI6PROlpnk=)
                          9: 3230312e34392e3232352e302f32342d3234203d3e20323730393539.roa (hash: KiQwHqW4L5k313W7Ix2tqfggra0fzCmTud2HSdaR8Rc=)
                          10: 323830343a326635633a3a2f33322d3332203d3e20323634383836.roa (hash: U7Fi83OtEplHzns2oD2Hh+s6/kT6Yq/unz43USIFpcY=)
                          11: 323830343a326635633a633030303a3a2f34382d3438203d3e20323634383836.roa (hash: ki2z0QvqkXvY8cRdh+JKyr3xxPVJmtBuUDLsDxs1mC0=)
                          12: 3136382e3232372e3138302e302f32322d3234203d3e20323634383836.roa (hash: mvqMiFShrhl429jJZ2MEPX47X4Tu0n+8cbWaLIFXD74=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 07:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c3:80:79:dd:8d:e7:9e:d4:e4:66:74:fe:b7:a5:92:67:4d:b3:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
        Validity
            Not Before: Oct 20 03:10:32 2025 GMT
            Not After : Oct 21 07:02:32 2025 GMT
        Subject: CN=E57E8CEA8B8BC66E968B12A77583F8A5E07BAC17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d5:d4:14:dd:c4:11:12:e6:52:4c:a4:fe:45:
                    97:cd:4e:79:c2:db:06:e2:bc:1e:c1:a4:e9:84:69:
                    07:32:7f:db:de:ee:b5:0c:65:b9:50:c5:b0:be:65:
                    a4:89:91:97:67:6b:e3:a4:83:b7:06:89:fc:30:42:
                    2a:8a:4d:8d:7d:4c:fc:be:43:11:ef:54:3a:db:a9:
                    ea:16:f9:b9:34:70:68:44:13:47:cb:35:7c:96:79:
                    46:b0:d2:d2:ef:66:82:c1:82:1f:38:76:af:f3:f3:
                    ae:f8:7e:09:83:c6:03:75:a9:ad:70:73:22:d6:98:
                    fb:13:37:c1:25:b7:2b:ed:8a:66:57:80:95:aa:d0:
                    5b:62:d3:03:d6:61:79:9f:4f:b3:bc:be:8c:e3:16:
                    51:c4:e0:14:c4:34:78:22:11:3f:4c:43:5a:2d:1a:
                    b6:06:c2:f3:93:85:87:9a:24:fc:4e:15:de:1a:69:
                    79:b1:1b:63:99:b2:9a:2f:2f:58:27:c9:0a:52:94:
                    fb:8e:c9:3c:be:8d:b6:bd:92:d0:bb:d7:bc:1e:d1:
                    b2:e7:5a:70:a2:93:17:53:ee:9c:8a:07:40:85:b6:
                    7f:26:4e:dd:75:da:c9:60:96:28:c9:bd:6c:0e:49:
                    e5:f7:c7:de:ef:43:98:82:f2:f4:5e:41:19:b1:7d:
                    9c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7E:8C:EA:8B:8B:C6:6E:96:8B:12:A7:75:83:F8:A5:E0:7B:AC:17
            X509v3 Authority Key Identifier:
                keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:a6:68:43:6d:6e:9a:5c:f9:27:67:b7:9f:ab:d0:90:d4:39:
         09:70:25:d1:7b:7d:08:70:34:ac:b0:ac:14:fd:19:03:7c:34:
         10:6c:d5:ea:b6:ce:3c:e3:66:9b:81:f8:c6:64:e5:2a:b6:1c:
         8f:39:c5:e4:48:0d:ed:1e:e3:70:66:33:40:db:ff:de:ca:0c:
         8c:e9:ea:5e:ce:94:98:4d:ba:4c:e9:87:84:6b:66:cf:0f:a0:
         d7:c7:83:28:a4:df:42:91:c7:56:27:d8:9b:60:84:ae:a4:bb:
         2d:74:19:64:17:63:59:18:7f:80:13:29:f1:66:f0:da:b0:4b:
         b3:a0:62:9c:d5:ba:ef:2f:b6:6d:10:22:4f:2b:b3:a6:1a:95:
         b6:0f:db:09:b1:15:cf:ad:64:58:ab:d0:ea:74:a2:7e:3b:d1:
         65:a1:ee:fa:ee:d2:02:4a:f2:37:01:8c:47:40:21:ff:d1:65:
         41:65:51:04:e4:53:ea:16:6b:f3:6f:ba:48:af:7e:d0:3e:25:
         6e:77:ea:13:84:80:8f:fa:ee:13:68:91:43:d0:14:fe:fb:c5:
         82:a8:43:e2:70:ad:46:23:0f:ec:33:e1:0f:e5:6d:83:90:8c:
         29:84:ee:03:c2:0a:34:1d:76:75:0a:1e:b9:ae:4a:42:13:09:
         d2:0b:0d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:26:11 2025 by rpki-client