Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/254C729A5155256E1BAF89E48E06C4EBA96761EA.mft
File:                     254C729A5155256E1BAF89E48E06C4EBA96761EA.mft (raw, json)
Hash identifier:          a+GIQH98gr88eeOuyXgei+t3FiSQWs1Cr50xFx4IzeQ=
Subject key identifier:   D1:29:7C:B6:C4:78:6C:FC:DD:77:36:45:74:CF:22:E4:E7:15:6C:CD
Authority key identifier: 25:4C:72:9A:51:55:25:6E:1B:AF:89:E4:8E:06:C4:EB:A9:67:61:EA
Certificate issuer:       /CN=254C729A5155256E1BAF89E48E06C4EBA96761EA
Certificate serial:       5E2DF744E6406FED4CC85887D66E1557C6F95D69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/254C729A5155256E1BAF89E48E06C4EBA96761EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/254C729A5155256E1BAF89E48E06C4EBA96761EA.mft
Manifest number:          0228
Signing time:             Sat 14 Jun 2025 04:30:00 +0000
Manifest this update:     Sat 14 Jun 2025 04:25:00 +0000
Manifest next update:     Sun 15 Jun 2025 08:19:00 +0000
Files and hashes:         1: 254C729A5155256E1BAF89E48E06C4EBA96761EA.crl (hash: Wv8k/XnsT3D5ktuZ+oxSRjVYFb/mXXY7ob0spUJ1A2M=)
                          2: 323830343a383030383a3a2f33322d3438203d3e20323731373235.roa (hash: 4rSv5X1Lyr+dKBZWL1W04oXbgppBiMkeed8Lk/UsDh8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/254C729A5155256E1BAF89E48E06C4EBA96761EA.crl
                          rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/254C729A5155256E1BAF89E48E06C4EBA96761EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/254C729A5155256E1BAF89E48E06C4EBA96761EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Jun 2025 07:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:2d:f7:44:e6:40:6f:ed:4c:c8:58:87:d6:6e:15:57:c6:f9:5d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=254C729A5155256E1BAF89E48E06C4EBA96761EA
        Validity
            Not Before: Jun 14 04:25:00 2025 GMT
            Not After : Jun 15 08:19:00 2025 GMT
        Subject: CN=D1297CB6C4786CFCDD77364574CF22E4E7156CCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1f:70:05:74:48:6a:4c:c8:05:e5:5d:1b:e9:
                    f3:d9:77:34:6e:14:f5:b9:2f:a7:7e:6f:e0:97:84:
                    1e:40:47:ed:69:63:09:c4:3a:eb:aa:80:3f:90:bc:
                    73:54:0d:aa:86:c4:aa:c3:b3:b3:02:ad:94:29:86:
                    5e:0c:e7:db:77:eb:72:00:81:68:85:93:cf:a3:c3:
                    50:36:60:38:5b:14:bf:46:9d:1a:d7:2a:64:40:4b:
                    5b:8d:c3:61:ae:d6:07:66:3a:17:ca:02:9d:00:b7:
                    f2:8d:d1:5c:6e:19:3d:9c:d4:fa:6c:5f:ad:82:3e:
                    c5:b3:06:23:ad:54:85:ef:be:45:36:a2:9f:6e:b5:
                    36:37:3a:8f:64:3d:f6:b2:a3:0c:f0:2c:34:43:79:
                    70:c3:54:14:b4:54:dc:ce:3f:7a:f7:19:65:3b:df:
                    74:6b:82:6f:ea:65:0f:b8:8d:0e:5f:71:73:b4:9c:
                    d7:e8:77:9b:3f:03:05:2f:d4:3b:aa:78:53:5b:70:
                    5c:05:c0:f0:cf:16:a5:4d:a3:cf:56:84:9b:bf:b0:
                    d4:f8:ee:36:96:ef:c0:48:25:dd:85:c6:e3:8b:dc:
                    e1:55:4d:22:20:28:76:9b:ce:9e:95:88:d1:82:5a:
                    c9:97:7b:55:77:d3:f2:9f:b7:d7:7b:da:80:d5:69:
                    40:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:29:7C:B6:C4:78:6C:FC:DD:77:36:45:74:CF:22:E4:E7:15:6C:CD
            X509v3 Authority Key Identifier:
                keyid:25:4C:72:9A:51:55:25:6E:1B:AF:89:E4:8E:06:C4:EB:A9:67:61:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/254C729A5155256E1BAF89E48E06C4EBA96761EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/254C729A5155256E1BAF89E48E06C4EBA96761EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/254C729A5155256E1BAF89E48E06C4EBA96761EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:60:28:b4:df:91:26:b5:c7:c3:84:6b:c4:61:51:a9:99:3f:
         fa:cc:47:5a:d7:26:7b:45:5a:4d:19:57:9c:d7:73:24:90:83:
         e0:7e:3d:7d:e9:84:e5:8c:fc:b6:79:26:fe:07:b5:9d:8a:23:
         4e:03:e8:b1:7f:50:8a:16:7b:90:f8:96:58:74:b8:2d:c4:7b:
         73:e4:00:e1:77:56:e4:d0:f2:ac:7d:18:cd:29:5f:ac:46:17:
         e7:f9:77:87:9a:e2:db:35:9e:83:c1:a5:86:e1:29:07:c5:2c:
         27:85:71:8f:10:fa:4a:6a:01:60:d9:ed:2b:8d:23:d2:7f:34:
         b1:1c:40:1a:58:84:07:1e:b7:42:10:32:ff:97:4e:1b:df:c6:
         e4:9f:d9:dc:48:bb:d9:9a:e8:a0:92:f4:18:f5:de:d9:72:c0:
         f2:c3:9f:d3:ed:cf:0d:e5:5b:97:98:e3:3d:be:78:54:5d:08:
         4b:e7:2d:9a:da:11:0a:64:41:68:f3:1c:94:6b:3f:f1:f8:61:
         42:25:9d:7b:3f:9f:b8:a0:95:ee:ae:31:84:30:ab:0c:e3:01:
         2b:6e:f8:72:cf:2f:95:07:b1:56:fd:cc:41:81:ec:19:03:9c:
         ed:f9:33:ab:cb:c5:d4:f5:98:f9:db:98:90:fb:f8:39:d9:a3:
         b3:e4:cc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:02:03 2025 by rpki-client