Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
File:                     CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft (raw, json)
Hash identifier:          kGKUFokF3m8jYy3qpVcmop64bk1yIUXkcBd9ROioXvo=
Subject key identifier:   05:C2:49:F6:86:77:55:18:44:CD:9A:C1:19:DD:41:9B:21:A0:36:14
Authority key identifier: CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2
Certificate issuer:       /CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
Certificate serial:       2166C981970A41935E5EB6C2F638C0A916108F0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
Manifest number:          0247
Signing time:             Mon 28 Apr 2025 06:10:00 +0000
Manifest this update:     Mon 28 Apr 2025 06:05:00 +0000
Manifest next update:     Tue 29 Apr 2025 06:10:00 +0000
Files and hashes:         1: CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl (hash: px3eTqBpwpKyAUNdJ9ZnF2cDbh45YEA3h9ApHstfFo8=)
                          2: 3133312e3130302e38302e302f32332d3233203d3e203631373539.roa (hash: saQrKmND7jKCXcVCbLOZM0vGaAcVwgazmSq+F43U55s=)
                          3: 3133312e3130302e38312e302f32342d3234203d3e203631373539.roa (hash: qfzvsq2B1akHghZtIkDDQUyJbG4XgSSAx8hZTS7m9ho=)
                          4: 3133312e3130302e38322e302f32342d3234203d3e203631373539.roa (hash: AqaGJdnfVDnrDs9o4pa1x/Ggk3ojfJEIZ+CuPIpO/f8=)
                          5: 3133312e3130302e38332e302f32342d3234203d3e203631373539.roa (hash: vczHRbOFgEoCsKktD7VO871LT80N+PPbRvSy0Rgv0cQ=)
                          6: 3133312e3130302e38302e302f32342d3234203d3e203631373539.roa (hash: wPCUlOTJfcrvxENWWp8r1HLX+/zoXRBc20kKp+zUs+s=)
                          7: 3133312e3130302e38302e302f32322d3232203d3e203631373539.roa (hash: TIKPLBcgVkAqPb7AvJ7y3qnvaIg8at7tJhRtw5vlZcA=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl
                          rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:66:c9:81:97:0a:41:93:5e:5e:b6:c2:f6:38:c0:a9:16:10:8f:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
        Validity
            Not Before: Apr 28 06:05:00 2025 GMT
            Not After : Apr 29 06:10:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f7:ed:fd:ea:01:7b:3e:f9:2b:cb:9f:0b:6a:
                    67:10:b4:66:2d:2e:c1:e5:8f:27:54:0e:2b:16:b5:
                    81:2b:cc:0f:f1:ab:2a:24:e4:7f:49:e5:e8:68:d5:
                    b3:46:81:13:05:76:fd:79:75:d9:65:da:e1:17:d5:
                    cb:c9:14:d2:74:e8:cd:34:3f:e2:c6:66:fc:5d:56:
                    fa:3c:b5:87:48:f6:c0:32:4f:98:e5:57:4e:a1:76:
                    68:67:b1:72:df:28:8f:ef:e3:11:65:a3:b4:2b:e5:
                    a8:05:61:a0:bc:ee:80:f4:00:eb:61:c3:3d:d2:32:
                    99:4c:db:8d:23:dd:55:ed:ed:dc:e2:3c:95:04:d3:
                    a2:e1:40:2f:b6:6f:30:57:6a:41:68:0b:31:aa:e6:
                    64:cc:0c:b2:eb:20:12:10:dc:b9:f2:14:ca:05:6e:
                    96:a3:b2:d2:d6:a1:1a:d7:6f:c4:1d:c5:97:c7:e3:
                    24:52:1f:46:18:90:eb:2c:ec:e0:5b:fe:d9:b3:51:
                    3c:3d:fd:83:05:f5:a1:23:59:51:89:d1:66:97:40:
                    2d:09:86:7e:90:6f:ab:47:74:92:32:d4:07:f2:c3:
                    47:9b:73:69:01:2e:bf:ac:95:18:e4:2c:a1:a3:6a:
                    8b:3e:26:3d:61:27:de:e4:24:e6:33:fd:9f:f3:ad:
                    28:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C2:49:F6:86:77:55:18:44:CD:9A:C1:19:DD:41:9B:21:A0:36:14
            X509v3 Authority Key Identifier:
                keyid:CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:31:da:1e:50:65:ab:e1:89:93:10:27:fc:bf:d1:9f:3c:6b:
         74:47:b8:3a:a7:4d:f2:79:e2:fd:03:8f:fa:0b:ef:aa:b2:3e:
         0a:0d:52:e1:ed:9c:68:ae:72:b8:35:cf:28:ab:b2:67:d8:19:
         68:6b:f7:c8:15:92:7c:fa:f3:31:04:a4:c5:9c:f5:83:1e:0f:
         70:e5:4b:21:bc:d2:b3:75:c0:f8:a2:fc:7f:67:a3:ec:d4:b5:
         5d:f9:24:d8:9f:44:c2:ea:9b:ce:6d:41:8c:06:eb:a1:e9:cc:
         85:db:03:22:a2:e1:e7:dc:05:f8:56:ad:12:1e:6a:75:be:07:
         c1:9d:99:34:eb:f6:c7:0d:64:43:88:f6:94:ba:48:92:aa:7d:
         cb:bd:36:2c:d6:29:24:e6:f6:02:b6:43:0a:2e:84:1b:22:7b:
         40:65:00:08:d4:ad:e8:70:63:2e:cc:83:44:6d:23:bb:09:62:
         ac:90:f5:47:fd:7a:55:53:7f:8e:db:0e:58:fb:bf:70:67:97:
         6f:fb:c5:08:46:60:7b:2f:a0:ad:a7:c9:ec:33:f9:1d:0a:80:
         3b:d2:5e:1b:32:ab:84:1e:88:31:2a:65:89:0c:d3:d1:1a:6e:
         3d:bb:5f:aa:cd:d7:f1:82:98:d8:18:96:0d:11:8c:73:a7:51:
         c4:d3:8d:35
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:38 2025 by rpki-client on console.sobornost.net