Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.mft
File:                     AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.mft (raw, json)
Hash identifier:          cNLtuGCN2AhIf+CE0EifrqnnjxkVvjcXvEwxVp7X+sQ=
Subject key identifier:   B1:BB:05:FB:D0:45:41:C9:8F:A7:36:96:DD:17:6D:04:2F:BB:F6:D1
Authority key identifier: AF:69:F9:77:A8:FB:5F:1C:A9:67:05:D6:2E:BE:EA:CE:46:BF:D9:D6
Certificate issuer:       /CN=AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6
Certificate serial:       66B45B359BB18F128C21F85B92C3E4B6DFD20943
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.mft
Manifest number:          022D
Signing time:             Wed 08 Apr 2026 04:59:16 +0000
Manifest this update:     Wed 08 Apr 2026 04:54:16 +0000
Manifest next update:     Thu 09 Apr 2026 08:43:16 +0000
Files and hashes:         1: 323830343a376533343a3a2f33322d3438203d3e20323731363039.roa (hash: nPRuI94igBJx6U2HfzJUzoSEPIf/jwPwFyi43PPI/UA=)
                          2: 34352e3138332e3137362e302f32332d3234203d3e20323731363039.roa (hash: umFa4GC/duQRvjfsWVEOD57TA6aUaq8a96tJwmW0d8M=)
                          3: AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.crl (hash: punP1ZjUk8tUchPj63hZ1BzLC94Oz3xGcGpFIkdznuA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.crl
                          rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 08:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b4:5b:35:9b:b1:8f:12:8c:21:f8:5b:92:c3:e4:b6:df:d2:09:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6
        Validity
            Not Before: Apr  8 04:54:16 2026 GMT
            Not After : Apr  9 08:43:16 2026 GMT
        Subject: CN=B1BB05FBD04541C98FA73696DD176D042FBBF6D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a2:b9:18:03:6e:21:9c:2d:a8:9c:c6:f4:de:
                    de:ec:5b:ac:d1:a7:76:99:16:ac:ce:98:92:43:39:
                    41:9c:48:6f:9f:83:c9:b6:f3:b3:f7:40:bb:9e:19:
                    4f:14:9c:91:30:9d:0e:ac:1d:05:61:e2:4e:df:a9:
                    32:b6:c7:28:eb:02:8f:69:cd:7d:75:05:3c:35:32:
                    44:95:79:d0:e0:2d:75:87:99:87:64:11:da:d8:3c:
                    96:1f:b3:d0:a1:32:d4:1f:74:dd:c7:90:c8:3d:a9:
                    95:ab:c6:9c:d9:14:95:56:53:a0:b6:66:a3:14:96:
                    78:41:56:70:9f:90:fe:b4:3e:bf:bc:09:3b:f4:c0:
                    d0:8b:ca:5f:a1:c0:d5:fd:92:c8:52:29:d1:fb:d8:
                    62:48:e7:68:f4:40:0e:56:76:7d:29:37:9c:1b:de:
                    15:c2:d9:79:e7:a5:95:d0:5b:79:0d:21:f5:89:6c:
                    5a:73:c1:ea:d1:82:6f:5b:03:35:be:59:e1:40:18:
                    20:0a:e3:b5:ad:ef:40:dc:b2:cc:f8:e1:fa:7e:ec:
                    b6:dd:cb:d0:8e:ec:3c:28:4d:3f:97:25:91:d5:fb:
                    56:ad:d3:84:79:4e:77:5b:ff:d6:9b:63:c5:81:e2:
                    b1:b3:ea:5e:bf:f1:52:82:be:b6:66:92:24:88:98:
                    ef:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BB:05:FB:D0:45:41:C9:8F:A7:36:96:DD:17:6D:04:2F:BB:F6:D1
            X509v3 Authority Key Identifier:
                keyid:AF:69:F9:77:A8:FB:5F:1C:A9:67:05:D6:2E:BE:EA:CE:46:BF:D9:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:f1:af:85:13:8e:18:5e:1c:70:8d:3f:41:4c:8d:fd:19:91:
         c0:95:e6:7a:e2:e3:de:4a:63:c7:e9:d4:32:9b:c9:05:a5:d4:
         21:e8:48:f4:d3:62:51:84:09:aa:a6:6e:aa:8a:e5:54:b7:fb:
         7d:1c:a8:2d:ff:5d:e9:fc:0c:de:ad:38:99:c0:25:0b:00:f6:
         4c:36:bf:d1:89:ac:4d:5f:f2:5c:18:5c:79:8a:7b:f6:28:ac:
         35:29:33:eb:95:a9:6b:10:ab:18:02:f9:b8:62:80:49:fd:ff:
         d2:38:4f:86:14:b0:c2:c3:0a:0e:12:15:62:00:8b:bd:69:2e:
         83:58:01:17:d4:be:ee:0d:1a:89:f2:b6:e8:3d:1f:90:14:35:
         42:b0:4d:66:0f:19:f2:2e:da:24:c7:67:a4:c9:87:ea:6b:f9:
         83:cf:dc:bf:4a:7f:60:fa:1d:9a:04:16:57:cf:02:ef:e3:d3:
         da:b2:dd:4b:32:71:63:54:6d:30:b3:f5:a7:c1:f8:e4:00:5a:
         f6:a6:5b:d8:bc:5f:fb:e0:3c:d4:85:13:f7:00:f7:b8:f4:c1:
         f2:76:f4:41:59:07:c5:bd:be:72:a0:1d:af:79:9a:8d:c8:cf:
         91:af:e8:f1:73:f2:6a:21:c0:20:09:8a:6f:da:ef:d8:22:0e:
         ad:ad:d8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 11:17:39 2026 by rpki-client