Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.mft
File:                     ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.mft (raw, json)
Hash identifier:          JBP8O5p/zOkUND45vi3ZgUZ7WcjAqgQYZ5tIRcV88Sk=
Subject key identifier:   F6:90:0A:34:FA:03:3C:89:BB:7E:2B:21:74:F0:0E:6B:A6:CC:CB:76
Authority key identifier: AC:E8:E0:81:BB:25:25:CD:B1:FC:85:C9:CE:1C:36:67:C8:3E:AC:1F
Certificate issuer:       /CN=ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F
Certificate serial:       7465E60DA503E3EA3EDBC1229ED5F6FCA83448E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.mft
Manifest number:          017F
Signing time:             Wed 08 Apr 2026 09:22:07 +0000
Manifest this update:     Wed 08 Apr 2026 09:17:07 +0000
Manifest next update:     Thu 09 Apr 2026 11:36:07 +0000
Files and hashes:         1: 3134332e302e3133382e302f32332d3233203d3e20323634303131.roa (hash: a5waSVlquwcNa0Nsm6dZUKIcH/5Vp01v3948d0ByAhc=)
                          2: AS264011.asa (hash: aKti5PO3+eKPGpfYq1y92FXs+uyIvP6QJNFiJe6BX4M=)
                          3: ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.crl (hash: Ds+J72FFMzJoVTVKdMKDmPRRRjme4PdclPxzvR4zOJY=)
                          4: 3134332e302e3133362e302f32322d3232203d3e20323634303131.roa (hash: yLdeTcnv1NdbuM/lnH5oQE82RG04eOyAcuE+WQNkhJc=)
                          5: 323830343a323936303a3a2f33322d3332203d3e20323634303131.roa (hash: uwtntgDhZ8NLwZsO5HmD9mt3dlpHQTwDXJ+5+Ywo8ss=)
                          6: 3134332e302e3133362e302f32332d3233203d3e20323634303131.roa (hash: oCCbozumKWHZNHnsrflEH8CMEBxq5kK+7kdgsxrCOpk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.crl
                          rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 11:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:65:e6:0d:a5:03:e3:ea:3e:db:c1:22:9e:d5:f6:fc:a8:34:48:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F
        Validity
            Not Before: Apr  8 09:17:07 2026 GMT
            Not After : Apr  9 11:36:07 2026 GMT
        Subject: CN=F6900A34FA033C89BB7E2B2174F00E6BA6CCCB76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2e:29:5b:30:09:a2:58:59:fe:57:f3:26:26:
                    72:eb:fb:a1:39:a7:75:d9:e9:db:d4:a4:d6:03:27:
                    6e:e6:93:b4:17:bf:65:e5:6d:0a:d3:6e:7e:f8:fa:
                    aa:1e:ff:83:6e:d8:23:8b:f7:70:15:89:7c:a4:a0:
                    54:14:db:2b:77:76:be:45:a1:71:68:e5:18:17:98:
                    6b:84:26:e9:c4:97:71:bb:e7:0e:35:66:12:51:60:
                    6c:35:ac:30:05:e6:eb:86:86:8f:20:66:e4:f0:50:
                    1f:94:4b:71:fd:20:2c:34:eb:c3:08:5f:55:af:bd:
                    32:c5:e5:ce:85:0b:7f:91:bd:ca:85:e8:3e:83:0f:
                    bc:6c:4d:ca:df:b7:42:7d:f8:7f:d3:03:29:4d:94:
                    79:7d:da:58:ac:59:50:ce:d3:89:9a:11:87:e9:c2:
                    aa:9e:16:c6:ee:99:1c:0c:69:6c:00:76:ad:be:f5:
                    72:54:c2:25:85:10:7e:28:21:a8:5e:8a:72:50:41:
                    f1:b9:8a:81:ec:5a:b8:0c:68:52:ba:91:6c:39:93:
                    1c:a9:92:f7:39:e2:d9:f5:a6:a3:d9:e6:63:03:78:
                    1f:f5:43:82:30:09:fc:9f:7c:fb:80:60:be:93:43:
                    3b:6c:ec:37:c5:ed:7b:da:d5:ce:27:75:23:fd:bd:
                    60:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:90:0A:34:FA:03:3C:89:BB:7E:2B:21:74:F0:0E:6B:A6:CC:CB:76
            X509v3 Authority Key Identifier:
                keyid:AC:E8:E0:81:BB:25:25:CD:B1:FC:85:C9:CE:1C:36:67:C8:3E:AC:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:15:b1:6b:0d:19:f6:31:ce:7c:8e:f3:c6:41:51:51:ff:4d:
         a0:cc:01:64:85:84:29:3f:f5:af:fc:56:96:c6:1d:9b:bb:36:
         f0:7c:49:9f:43:e2:6f:25:2c:9c:af:f6:a0:f1:43:8e:d8:64:
         5a:9a:88:4e:2d:20:ea:28:42:bb:d2:2f:a1:fa:6c:37:38:c6:
         8c:90:0b:5e:68:a7:36:1e:e6:5c:b5:62:b1:47:df:2b:af:e7:
         45:b7:13:01:6c:2c:30:0f:3d:36:51:90:ca:e6:41:73:33:e9:
         2e:e4:77:ce:8c:ec:14:e5:27:33:d5:28:d3:48:1b:9e:33:e7:
         d7:d3:da:45:1f:26:95:2c:28:ef:cf:1f:df:ed:f9:70:80:e6:
         a9:36:d9:73:fa:24:c0:ba:f8:00:c4:b3:2c:6a:9a:54:93:b0:
         bf:1d:90:56:ce:c4:bd:c0:61:ef:76:8d:ed:86:97:43:14:4b:
         b9:28:6f:43:10:9a:5e:11:8f:82:51:80:0b:0f:2d:c1:30:ba:
         f8:93:16:93:23:4e:bc:51:7a:07:63:8a:1e:8e:ed:b6:f5:04:
         bd:bf:a9:b3:23:d1:14:b9:94:e8:4d:2e:15:29:8e:1d:98:fe:
         59:63:5f:dc:37:bd:7a:29:8d:82:44:9f:e5:4c:8f:63:8a:32:
         13:cc:53:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 17:28:31 2026 by rpki-client