Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft
File:                     54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft (raw, json)
Hash identifier:          LcSX+8l1PR9y+nBaHJN2fdO4FhFzIPRHgpSLR24oNbM=
Subject key identifier:   52:D6:03:B4:45:36:08:BC:C5:83:06:CC:F7:EC:42:35:62:55:BE:15
Authority key identifier: 54:CE:DD:2E:24:96:0D:E5:89:D4:B1:6E:B4:D6:62:38:4C:CC:0F:AF
Certificate issuer:       /CN=54CEDD2E24960DE589D4B16EB4D662384CCC0FAF
Certificate serial:       0CFA86265EACEAFAFE794ABDD1A312385C6C50D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft
Manifest number:          039C
Signing time:             Mon 02 Mar 2026 14:02:09 +0000
Manifest this update:     Mon 02 Mar 2026 13:57:09 +0000
Manifest next update:     Tue 03 Mar 2026 17:03:09 +0000
Files and hashes:         1: 3137392e34382e3134342e302f32322d3232203d3e20323731303930.roa (hash: STAv4LccjL0wfTvHBr3skoUwBopW5Q5YujwZDA5P95s=)
                          2: 3137392e34382e3134352e302f32342d3234203d3e20323731303930.roa (hash: l8ijLlFxDy4VTXeWkaKe5ejxtJ1VxDg7WWtuhDxEgOo=)
                          3: 323830343a373631633a3a2f33322d3332203d3e20323731303930.roa (hash: dP0fvZDik0ht9qX9QxmLkY1B8KC93f4JzY89YB5hxrc=)
                          4: 3137392e34382e3134362e302f32332d3233203d3e20323731303930.roa (hash: hD2d1DFucZOY2ODRVe2+eXov2N0kC4IZnCcz+mydabQ=)
                          5: 3137392e34382e3134342e302f32332d3233203d3e20323731303930.roa (hash: t53mNfrpGicVjfQ3PiMcXxnSeXT3llEP6nmMQ92ODP4=)
                          6: 3137392e34382e3134362e302f32342d3234203d3e20323731303930.roa (hash: egXOAoJKr508qK+sG0c7BRTeN4mTGviVXi/4r9H1tFw=)
                          7: 3137392e34382e3134372e302f32342d3234203d3e20323731303930.roa (hash: w0fas5m2q4kM+mLqSEyt0jbe16RXzLHXREUTRvROfGQ=)
                          8: 3137392e34382e3134342e302f32342d3234203d3e20323731303930.roa (hash: aiHmLe3rkXTA639zVGdnSxYb8WGv4hPPepinqLU7uiE=)
                          9: 54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl (hash: yNQNyT29n7y2JMvEuvUxV5GNDNIffH9dN/5T00QZjgs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl
                          rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 17:03:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:fa:86:26:5e:ac:ea:fa:fe:79:4a:bd:d1:a3:12:38:5c:6c:50:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54CEDD2E24960DE589D4B16EB4D662384CCC0FAF
        Validity
            Not Before: Mar  2 13:57:09 2026 GMT
            Not After : Mar  3 17:03:09 2026 GMT
        Subject: CN=52D603B4453608BCC58306CCF7EC42356255BE15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:af:50:fd:8f:06:7f:ad:b3:1e:21:a9:3d:92:
                    a9:17:ca:71:87:30:ba:05:e1:aa:b3:52:99:87:c1:
                    22:08:5d:b4:f1:81:81:bf:53:33:23:b7:c0:ea:67:
                    58:73:e6:b4:ef:c3:95:0f:30:ca:36:e4:ce:45:bf:
                    4d:09:55:b5:67:93:b6:6b:71:8d:27:e4:49:f8:18:
                    79:20:76:51:ec:f3:f5:55:d9:90:70:a2:00:6b:60:
                    36:0b:75:f3:44:7e:61:00:7a:de:45:3d:2f:20:85:
                    13:f7:ec:fa:db:14:ae:ca:0b:84:e1:09:1d:a7:1f:
                    81:ab:e6:23:0b:2c:10:a8:99:82:c8:54:53:20:fe:
                    e2:3a:a3:47:55:3d:00:c3:d0:69:e0:1e:35:48:a5:
                    72:49:5f:63:08:f0:09:97:55:45:59:07:07:a7:55:
                    00:a9:8c:eb:57:77:df:c2:fb:7f:18:ef:13:4c:77:
                    31:a6:f9:a5:05:f5:c6:f9:ce:0f:e9:b5:72:60:4a:
                    2e:4a:bf:59:0c:75:34:0a:80:c8:4d:8d:b9:fc:a3:
                    ea:e6:79:97:49:4e:32:b1:c1:ec:f9:53:db:ab:85:
                    06:a9:55:c8:fa:19:91:69:15:e9:b8:08:76:33:b2:
                    cf:a4:1d:94:ee:ac:cd:0a:8c:ba:44:fd:20:8e:81:
                    a7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D6:03:B4:45:36:08:BC:C5:83:06:CC:F7:EC:42:35:62:55:BE:15
            X509v3 Authority Key Identifier:
                keyid:54:CE:DD:2E:24:96:0D:E5:89:D4:B1:6E:B4:D6:62:38:4C:CC:0F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:b7:8f:b1:99:a5:18:05:b0:35:ac:f0:8c:7f:49:23:da:87:
         8e:ff:0e:7b:87:79:8a:2c:9b:46:0e:40:7a:b9:6b:dd:3c:dd:
         df:15:6d:7b:c9:11:ec:10:ce:22:fe:e5:e2:3c:f0:04:be:a9:
         ae:48:5f:a3:03:f8:0c:56:45:34:b2:b9:13:d5:88:77:b5:1f:
         a2:f4:96:78:45:92:d9:25:37:22:7b:e1:d0:6d:0d:99:9e:af:
         3c:21:71:ef:79:c3:18:c9:a5:ac:c3:1b:88:30:02:2b:1b:e3:
         93:85:13:f3:ea:af:8d:6c:b4:ef:64:82:72:31:74:40:05:79:
         60:36:ad:37:7f:6e:97:b1:ab:14:46:ae:08:c1:c6:79:05:55:
         8b:9e:b5:33:60:58:a4:1a:81:f6:8c:af:ba:de:2b:52:5d:a0:
         66:93:ee:d8:fa:66:1b:d3:24:fa:27:72:00:f2:9a:46:a6:88:
         23:6c:0f:c5:2e:2c:ef:c0:70:44:b2:fc:8c:87:a9:08:d3:d4:
         54:21:d3:ed:35:fc:1e:4f:8d:15:d4:d6:d7:dd:9d:3f:08:6f:
         7c:58:6c:f7:05:b4:c2:5c:62:42:1c:68:ff:ae:46:3e:a5:89:
         a0:62:f1:e6:27:c9:fc:16:7d:d0:c3:63:a8:85:60:5a:2a:f7:
         64:5c:f8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:34:40 2026 by rpki-client