Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
File:                     2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft (raw, json)
Hash identifier:          svy62bVW22ifJCPudkKUvelyTfQtefkWldVwTNEXBms=
Subject key identifier:   BE:75:14:4D:CB:80:50:B0:0E:D1:51:49:0F:0D:16:6E:72:C3:5D:A8
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Certificate issuer:       /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial:       1CD75C31BC1E0995BCB4649B9D990E70F7A8073F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
Manifest number:          02DF
Signing time:             Wed 02 Jul 2025 08:03:23 +0000
Manifest this update:     Wed 02 Jul 2025 07:58:23 +0000
Manifest next update:     Thu 03 Jul 2025 10:08:23 +0000
Files and hashes:         1: 3137392e3130382e34342e302f32322d3234203d3e20323634383836.roa (hash: ZEOE1aModZQn//F6rEGH/N341h+IAF+P3KvayKztGlw=)
                          2: 3230312e34392e3232372e302f32342d3234203d3e20323634383836.roa (hash: XwZwnGLQtwgwMmBOul4r3/MIGHfpZbt+/M93PODrJok=)
                          3: 3230312e34392e3232342e302f32342d3234203d3e20323634383836.roa (hash: aAcskGlGmP8AQ7qs2cBaT1+bvYjC59f6aR7MspSUM2s=)
                          4: 323830343a326635633a3a2f33322d3438203d3e20323634383836.roa (hash: EtAFZVftso22tPfn5dl/88WB9YQ7x3P4uwE8iBRdUJk=)
                          5: 3136382e3232372e3138302e302f32322d3234203d3e20323634383836.roa (hash: mvqMiFShrhl429jJZ2MEPX47X4Tu0n+8cbWaLIFXD74=)
                          6: 3230312e34392e3232382e302f32322d3234203d3e203532353332.roa (hash: eXlDeqx/uIJYF2z6711Ka9h3ZAq+z/JbyUI6PROlpnk=)
                          7: 2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl (hash: BUQjhwVQW7SXHqk1BvmHbZYzarP5zj6vdGhCJHss074=)
                          8: 3230312e34392e3233322e302f32322d3234203d3e203532353332.roa (hash: hiOiVKyPf3+4eoA/8yVg/d6HRMnxKNUSLrn7PiqhtKU=)
                          9: 3230312e34392e3232352e302f32342d3234203d3e20323730393539.roa (hash: KiQwHqW4L5k313W7Ix2tqfggra0fzCmTud2HSdaR8Rc=)
                          10: 3230312e34392e3233362e302f32322d3234203d3e203532353332.roa (hash: crwNQAzkQgVzyySk2+Vvl5Tz9YU9DHls0pPUE2tU5c8=)
                          11: 3230312e34392e3232362e302f32342d3234203d3e20323634383836.roa (hash: /Bqgdv/wF+ru9WBmwhXO8Kmck4O1wcfAaIl22CcZyRo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 10:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d7:5c:31:bc:1e:09:95:bc:b4:64:9b:9d:99:0e:70:f7:a8:07:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
        Validity
            Not Before: Jul  2 07:58:23 2025 GMT
            Not After : Jul  3 10:08:23 2025 GMT
        Subject: CN=BE75144DCB8050B00ED151490F0D166E72C35DA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d5:11:05:de:cb:8c:eb:f6:96:23:35:6a:f6:
                    4e:14:6b:43:06:bf:1c:b3:50:f5:32:94:f9:a9:8f:
                    7a:21:e6:87:e1:fa:56:aa:1d:ce:0d:22:9a:63:36:
                    83:19:b8:5f:a8:6f:39:d8:b7:1f:06:00:1c:36:ba:
                    b9:6b:f6:33:a3:26:d4:3a:f7:97:a9:5e:30:4e:e3:
                    f7:65:3a:26:20:99:78:39:70:0e:e2:3a:8f:68:5e:
                    c1:64:c5:66:2f:b2:f7:80:dc:d2:4a:8d:63:db:e1:
                    6c:85:0a:ab:a1:43:16:88:63:55:3f:19:1c:ee:1f:
                    d3:61:31:94:cd:1c:0c:54:4c:bf:df:99:a5:65:e7:
                    2d:85:e4:89:fc:fe:fa:66:00:7f:ed:64:f7:fd:02:
                    4d:5c:93:46:ae:54:42:42:26:9b:b0:cf:d6:b2:b8:
                    70:1b:94:e7:4c:47:3a:7b:e8:b9:db:38:be:b1:bb:
                    1e:5c:1d:26:1f:cd:35:a1:93:bd:f3:db:10:b3:40:
                    78:2a:bc:ed:ab:81:65:d6:53:e5:5f:bb:90:26:aa:
                    2b:b3:c8:df:2c:96:dd:65:63:10:5c:e0:5d:1e:34:
                    c8:b5:2d:2e:b5:48:2b:3c:4c:1b:04:4c:f5:a7:08:
                    5f:b4:3a:bb:17:17:24:62:4d:2a:ef:c3:cc:0d:23:
                    85:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:75:14:4D:CB:80:50:B0:0E:D1:51:49:0F:0D:16:6E:72:C3:5D:A8
            X509v3 Authority Key Identifier:
                keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:05:d4:3e:95:51:44:f6:79:ba:0a:69:5e:9c:62:5a:b3:3a:
         69:92:4d:52:f0:9b:58:f0:b3:2b:9e:d2:5c:6b:26:b8:f6:b1:
         40:64:ec:39:2e:a6:e2:ee:94:3e:33:4c:97:40:bc:8c:0b:be:
         14:99:99:e8:ee:07:29:a9:ae:ea:58:63:76:99:65:16:36:ac:
         c0:b1:b3:25:e0:53:0c:ed:34:87:9f:da:31:4d:ca:0c:63:81:
         89:72:9a:ac:c2:02:eb:d8:de:15:ce:45:4c:0b:5a:2f:99:7d:
         c5:c5:e3:c2:a3:3f:80:99:8d:d2:1d:0c:3d:1c:db:a0:6f:d7:
         53:36:65:08:1f:8f:45:63:30:74:a4:26:0d:36:5c:ab:b2:f0:
         4f:1b:1d:e1:56:03:b9:bb:91:a4:8a:72:c7:22:46:01:53:37:
         86:ff:12:2b:d9:68:27:d3:9e:99:c4:41:28:93:6b:3e:f4:b3:
         7d:f7:13:53:75:18:da:3b:bf:01:a4:9e:70:55:c3:38:1f:48:
         34:48:b1:57:67:4e:1a:39:67:1f:99:e1:e3:18:97:9a:a0:3e:
         aa:7a:74:82:d0:11:88:5e:2f:b9:aa:76:c2:9c:04:98:36:37:
         31:24:42:1a:23:da:8c:33:4a:36:2c:62:31:3b:cb:3b:07:52:
         55:bc:32:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:10:18 2025 by rpki-client