Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft
File:                     5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft (raw, json)
Hash identifier:          P9YPOvzFscmdk4g3AAwVg5SVuaVuoHOpwQmjtzYhB+M=
Subject key identifier:   60:0E:C5:05:A3:DB:3B:4B:80:A8:CD:7F:55:DC:2B:73:93:15:AF:F8
Authority key identifier: 5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
Certificate issuer:       /CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Certificate serial:       5CF2EF1F28CCA5A2123338CB346631EE90B4690E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft
Manifest number:          029C
Signing time:             Wed 11 Jun 2025 14:04:04 +0000
Manifest this update:     Wed 11 Jun 2025 13:59:04 +0000
Manifest next update:     Thu 12 Jun 2025 16:44:04 +0000
Files and hashes:         1: 323830343a3830343a3a2f33322d3438203d3e20323632333338.roa (hash: ymdJP8Nbk9jRmYyOWMHk1THgRAKhTi9mQg1JwV1w5V8=)
                          2: 3137372e3132362e36342e302f32302d3234203d3e20323632333338.roa (hash: JHu+YEvSyZhTF52NbNsxoKk1ovrHwWDZ7McbbiRag8I=)
                          3: 5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl (hash: Y/y4Pomf15bEnKzvT/4jMYogPnp2xjjX0f1+48SkPH0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl
                          rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 16:44:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f2:ef:1f:28:cc:a5:a2:12:33:38:cb:34:66:31:ee:90:b4:69:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
        Validity
            Not Before: Jun 11 13:59:04 2025 GMT
            Not After : Jun 12 16:44:04 2025 GMT
        Subject: CN=600EC505A3DB3B4B80A8CD7F55DC2B739315AFF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d3:5e:31:c6:c1:aa:79:66:02:cb:9a:5f:26:
                    2d:23:87:84:56:89:ef:e2:09:94:97:cc:99:25:ce:
                    c8:a6:2f:d7:a4:48:95:38:5e:09:7b:04:6d:27:ee:
                    b1:7c:55:a3:91:6c:d0:b1:49:7e:25:cb:ba:78:61:
                    4e:30:b6:cc:c0:33:3a:26:d4:d8:dd:3b:83:0d:fe:
                    f8:d0:af:68:92:e4:1d:13:b5:bb:45:86:55:45:0f:
                    96:00:8b:06:18:05:60:00:70:95:d0:86:ac:e3:44:
                    d2:74:99:47:88:1d:77:0c:16:09:7a:0b:49:20:f2:
                    ea:a9:de:34:42:89:cd:5d:07:d2:79:6d:00:0c:f8:
                    ab:f8:56:dc:ed:f6:0c:74:89:68:3f:8e:2b:73:26:
                    25:61:a7:b4:eb:af:41:21:96:64:9d:88:56:41:94:
                    c0:8d:d2:50:f1:2c:01:6e:18:aa:ed:dc:94:d1:9d:
                    aa:40:e1:cd:a4:d8:23:4e:f4:4d:54:ef:ce:61:98:
                    56:2a:14:ab:f8:7f:30:8c:a3:6d:11:04:fa:5b:23:
                    9b:09:94:0d:96:37:e3:90:b5:a3:fe:99:a0:90:13:
                    c2:03:ea:e5:4a:1a:2e:39:00:71:16:ca:1e:c0:79:
                    74:cd:f7:71:99:73:21:89:96:81:6e:50:d3:4c:53:
                    c4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0E:C5:05:A3:DB:3B:4B:80:A8:CD:7F:55:DC:2B:73:93:15:AF:F8
            X509v3 Authority Key Identifier:
                keyid:5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:29:5d:de:5e:f9:b7:ca:e4:5d:c5:08:09:d5:cf:49:66:ae:
         63:9b:7e:a7:bb:89:8b:b6:ee:59:cd:18:27:f3:5b:c7:59:b2:
         8c:96:b0:13:ca:01:d7:5b:ae:90:18:cc:56:76:e0:3d:26:d8:
         72:d6:6a:cd:ff:65:a6:4c:68:70:eb:00:23:04:f5:cd:33:a3:
         f8:35:9c:16:86:fc:f9:43:bd:37:ca:c4:51:ed:32:b7:6d:85:
         d1:7e:1a:19:94:36:25:92:28:48:f6:ba:14:87:04:25:c4:2f:
         ab:bf:10:a5:cf:f5:ea:05:ba:94:98:23:42:6b:f3:e0:a2:a3:
         77:df:8c:92:24:61:59:17:b6:c2:7d:f1:3a:7d:a5:13:03:5a:
         ff:21:0a:63:f7:38:d0:10:cc:00:b1:b0:2e:69:33:22:51:46:
         70:9a:6f:eb:a0:60:6d:4b:d8:7f:f7:bd:12:45:f8:e5:59:0f:
         be:db:e9:55:13:17:31:18:4f:37:27:7c:39:9d:4f:31:27:91:
         0c:5c:46:b5:f0:85:01:30:8d:97:28:a2:2b:05:9c:6f:53:77:
         ef:a9:ff:f2:17:bf:4b:88:ec:f4:11:6a:2b:17:c7:01:e9:ae:
         74:78:bb:a0:12:64:4e:f7:52:dd:3b:76:a7:b2:d0:1a:f6:77:
         ae:b6:a0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:20:48 2025 by rpki-client