Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft
File:                     54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft (raw, json)
Hash identifier:          i2GHUV6Oe1thgBgYOUzh1X+OvlTlpJ55g+FxjHLp6Eg=
Subject key identifier:   51:85:78:E0:08:BD:E7:13:11:AF:8C:A1:F6:C9:B5:FA:79:6A:62:3A
Authority key identifier: 54:CE:DD:2E:24:96:0D:E5:89:D4:B1:6E:B4:D6:62:38:4C:CC:0F:AF
Certificate issuer:       /CN=54CEDD2E24960DE589D4B16EB4D662384CCC0FAF
Certificate serial:       7523CEAC77A2EB1A30AE56E017E3794E42851022
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft
Manifest number:          029D
Signing time:             Sat 23 Aug 2025 00:49:13 +0000
Manifest this update:     Sat 23 Aug 2025 00:44:13 +0000
Manifest next update:     Sun 24 Aug 2025 02:40:13 +0000
Files and hashes:         1: 3137392e34382e3134352e302f32342d3234203d3e20323731303930.roa (hash: fw8SJlaekGlraaaZpQXiPAvOULaDRtkLdvR/NyPnhug=)
                          2: 54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl (hash: p7T7OBZWSeObCwIFMwaMBuivPu0I0bXyOeVc5Af/LSs=)
                          3: 323830343a373631633a3a2f33322d3332203d3e20323731303930.roa (hash: eA9JQpYUOIjKTMa0Ts5WPtle/+qIISL4tysml5ZEm7Y=)
                          4: 3137392e34382e3134362e302f32332d3233203d3e20323731303930.roa (hash: Z3hjhOSOcePWNybcSBA3g0+ykOA9m6MBpbXf+2SukPU=)
                          5: 3137392e34382e3134372e302f32342d3234203d3e20323731303930.roa (hash: hHb2owRgb0inSqAzZ1wdGIKsFjd3OtRAyM9r3uSORfQ=)
                          6: 3137392e34382e3134342e302f32332d3233203d3e20323731303930.roa (hash: oOGBgZCGwg/wQ86lGs6RK23qns2p3T0jxzBQEU0i+MU=)
                          7: 3137392e34382e3134362e302f32342d3234203d3e20323731303930.roa (hash: MzKJYbDtjqjhA7Keit+aoDsX/nOzqoYIkfmduf4AngU=)
                          8: 3137392e34382e3134342e302f32322d3232203d3e20323731303930.roa (hash: J+sEjSxJGnp4zYhDqGBs9CxAwAgq++meaT9ocbClk/s=)
                          9: 3137392e34382e3134342e302f32342d3234203d3e20323731303930.roa (hash: Nj/o1k4RMH9Jg51TGhI6gVOZTijebx5LL2j7Y06qSZU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl
                          rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 02:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:23:ce:ac:77:a2:eb:1a:30:ae:56:e0:17:e3:79:4e:42:85:10:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54CEDD2E24960DE589D4B16EB4D662384CCC0FAF
        Validity
            Not Before: Aug 23 00:44:13 2025 GMT
            Not After : Aug 24 02:40:13 2025 GMT
        Subject: CN=518578E008BDE71311AF8CA1F6C9B5FA796A623A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e8:78:eb:c8:ba:92:cb:c5:1d:5a:74:33:8b:
                    41:90:5f:cc:4a:fe:df:64:05:4a:05:1e:d2:c3:b7:
                    76:e9:9b:47:43:3f:e4:71:f4:f5:bf:0a:5c:a4:dc:
                    e3:e5:a8:17:c6:bc:cf:a5:bd:35:a4:67:86:49:f9:
                    88:9f:bc:1e:08:e6:e0:be:8f:5c:08:e9:aa:6a:3b:
                    c4:ac:bb:c9:d4:9c:66:39:bf:60:7a:71:8f:8e:8b:
                    03:be:2e:f0:e0:ef:a2:92:3b:60:86:01:64:11:70:
                    fe:fc:6d:4b:34:e6:a8:1b:52:9d:71:22:c7:e7:ef:
                    03:94:cc:f0:e9:07:52:8f:d5:ef:63:96:01:f0:84:
                    de:42:86:57:ec:17:7b:d9:ee:78:47:e2:3b:ec:d8:
                    1c:7b:81:4d:23:d9:f0:cc:b5:0f:1d:37:98:14:cd:
                    4e:21:e4:95:9b:5c:94:bb:d6:e7:af:fd:61:6e:73:
                    53:3c:96:d4:28:3a:52:cb:11:40:da:af:b6:12:d9:
                    c3:24:03:e4:52:8d:af:38:1f:f2:38:f7:07:0b:78:
                    c4:a1:27:b1:01:ef:07:75:46:81:0d:f7:c7:39:05:
                    af:e3:e3:16:8d:91:2c:3c:fe:20:63:03:73:67:42:
                    10:f8:4b:b6:ef:89:65:73:c4:1d:e7:b3:d1:08:5e:
                    b0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:85:78:E0:08:BD:E7:13:11:AF:8C:A1:F6:C9:B5:FA:79:6A:62:3A
            X509v3 Authority Key Identifier:
                keyid:54:CE:DD:2E:24:96:0D:E5:89:D4:B1:6E:B4:D6:62:38:4C:CC:0F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:7c:21:26:d6:87:92:bf:bf:1b:10:2e:0f:af:58:a7:a4:40:
         62:43:64:51:05:3c:2b:33:a6:8f:f2:c2:42:0c:73:bb:15:de:
         12:00:26:e0:80:e7:d2:3a:cf:91:4a:94:18:78:fb:b2:3e:c8:
         50:47:39:ac:15:df:1a:51:13:17:24:c4:44:ae:60:e7:9a:90:
         fd:13:0d:ea:e6:1a:54:1c:7f:87:de:db:8f:fe:5a:e6:7e:a0:
         93:1b:d9:a2:0f:5f:e4:b0:5c:7d:58:9d:5b:a1:9c:3c:f9:22:
         50:a7:c1:ed:d7:28:8b:d0:d0:22:b6:07:6a:ca:aa:ca:cd:87:
         fb:09:ed:0a:14:57:e6:67:e7:7f:0f:ff:47:2c:08:e1:ee:9f:
         cd:20:27:df:a4:27:98:1a:f7:97:50:d4:3a:97:ad:bd:8e:3b:
         42:8c:3c:4e:51:c7:9a:fa:e2:0e:1a:10:d0:c3:33:ae:6f:13:
         5f:18:fe:c7:1f:78:4c:98:2e:92:d8:75:3e:b4:26:2c:e5:98:
         b8:d7:4a:fe:e9:38:24:3d:79:13:94:14:7b:71:fb:5c:63:0a:
         9c:7e:09:41:9d:64:a4:6c:3f:e2:b8:48:30:bb:49:e1:18:af:
         e5:36:ec:b6:34:31:b9:9a:a3:87:b3:de:af:b3:40:85:9e:8c:
         b9:0a:a1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:31:12 2025 by rpki-client