Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft
File:                     ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft (raw, json)
Hash identifier:          zHlf5ZAZPZb4iDEXlI8Hxw5gJ2fVwkO5W1jGRQviCa4=
Subject key identifier:   E1:55:67:94:EB:B5:86:8F:1A:93:FC:ED:6C:39:73:5C:82:2F:E4:70
Authority key identifier: AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D
Certificate issuer:       /CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
Certificate serial:       66E67B6EF100020B4BAF84CA8D5EC1CF87DFB6CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft
Manifest number:          027B
Signing time:             Mon 21 Jul 2025 21:30:50 +0000
Manifest this update:     Mon 21 Jul 2025 21:25:50 +0000
Manifest next update:     Tue 22 Jul 2025 22:12:50 +0000
Files and hashes:         1: 34352e36352e3232302e302f32322d3234203d3e20323636353339.roa (hash: j5xWu/EVFW9ukhAiwi1QRme12gZvEGiS4HhsB66VLnM=)
                          2: 34352e36352e3232302e302f32322d3234203d3e20323033.roa (hash: cxO6IIL9FYl/S1JcP9ekX/bKJPpyhULDj81eVK4QpIQ=)
                          3: 323830343a336439303a3a2f33322d3438203d3e20323033.roa (hash: AQPHdJljAdhG/wYm9Kot+1Yr85ejt19heQzyn2Qy5Ok=)
                          4: ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl (hash: pJ/T3zoXYziGKyVZ6VOjzLOYmom6yK13olT5Dd8zsAE=)
                          5: 323830343a336439303a3a2f33322d3438203d3e2033333536.roa (hash: 0px9Lv1h7cxoSy8j5wudsGRlY6Kz+2CKHSBfVhfTFkw=)
                          6: 323830343a336439303a3a2f33322d3438203d3e20323636353339.roa (hash: x6VNtV4ozQq6MxJ5N63q7B16Gfy4nJWVWTksz+Uj+30=)
                          7: 323830343a336439303a3a2f33322d3438203d3e20323032.roa (hash: WpFnDTmY8zk59PrfyxW6Djzy0QYg50QAK1Hv57G5E+A=)
                          8: 34352e36352e3232302e302f32322d3234203d3e2033333536.roa (hash: dvS242K1P5rfv1OZRochVJr2gdCVE0YeATLaOsdgA6k=)
                          9: 34352e36352e3232302e302f32322d3234203d3e20323032.roa (hash: EUR7GzFQIh4+jSMjrVmtA4e+ZAoGf+CFRWmkwFMVmWU=)
                          10: 3137372e3232332e33322e302f32302d3234203d3e20323636353339.roa (hash: 9rNjQfR82W+oS90D8d3ALwDPX0Y2XfhUQX8gBYC9pwI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl
                          rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Jul 2025 22:12:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e6:7b:6e:f1:00:02:0b:4b:af:84:ca:8d:5e:c1:cf:87:df:b6:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
        Validity
            Not Before: Jul 21 21:25:50 2025 GMT
            Not After : Jul 22 22:12:50 2025 GMT
        Subject: CN=E1556794EBB5868F1A93FCED6C39735C822FE470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:82:56:76:7d:2e:1b:f6:f8:9b:dc:35:90:e6:
                    f0:4a:60:99:a2:9f:ba:7d:79:e6:ab:b5:e4:c7:a8:
                    86:80:c5:07:b5:07:7c:d9:55:cb:92:5c:cc:de:4a:
                    42:be:c5:e8:85:4e:a3:f4:ff:9f:37:c3:98:13:e8:
                    b4:71:45:0e:8a:2b:4b:08:fa:d2:d4:45:d4:b7:f0:
                    b2:97:33:21:52:0d:59:98:fa:57:c4:ee:1e:cc:ac:
                    f6:ff:08:83:c5:83:53:e5:cf:e9:08:7e:2c:7c:7b:
                    d2:d5:0f:89:16:f7:a6:c8:08:09:88:b8:94:21:5b:
                    4c:9b:86:fa:84:ae:ff:91:d5:47:46:66:6e:35:65:
                    23:84:61:e9:e4:02:25:ff:46:76:bc:48:b2:87:af:
                    22:9d:ef:2f:a9:7f:f6:32:96:d9:6b:16:85:a1:49:
                    68:96:94:94:b2:68:e3:ff:17:7e:50:a3:c7:2f:c1:
                    50:b3:7f:c1:48:17:01:e3:18:35:54:02:e4:ec:ef:
                    53:3a:02:1f:07:fc:7b:02:57:d5:63:d0:ee:d6:32:
                    b6:59:27:79:66:fe:49:5c:c2:f5:43:a6:b3:1f:31:
                    ea:4b:6e:39:24:a5:c6:ad:a8:15:92:ba:33:f9:cb:
                    a1:74:21:f5:a1:8f:a6:ad:82:c3:da:c8:3e:b8:c4:
                    43:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:55:67:94:EB:B5:86:8F:1A:93:FC:ED:6C:39:73:5C:82:2F:E4:70
            X509v3 Authority Key Identifier:
                keyid:AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:66:cd:15:df:a8:1a:8e:30:c1:bb:9e:ad:a7:02:cf:8a:d6:
         1b:93:7e:f9:b9:aa:32:a0:45:18:51:b6:fb:e8:5e:a0:f8:c7:
         df:eb:a0:a9:71:3d:e3:53:e1:99:d4:bf:60:2b:fa:0b:da:e5:
         dd:b9:8d:34:e3:3a:e9:a4:0e:ca:17:61:5d:07:4d:2f:b1:ef:
         7c:20:cb:a3:2a:0b:df:30:fa:75:3f:c2:0e:4c:6f:87:8b:58:
         aa:6d:cb:fb:44:07:0c:e6:ce:78:04:c4:15:eb:0a:32:83:ce:
         56:73:6c:18:42:bb:fb:11:74:ba:aa:08:25:71:6b:77:7f:3c:
         74:14:01:50:94:82:72:dc:71:6f:5e:6a:6c:f0:3d:46:ac:00:
         eb:86:bf:4d:4f:e3:09:51:42:2d:17:5b:87:4d:22:51:64:dc:
         fd:eb:24:50:6b:a1:1e:9c:a4:cb:60:60:79:df:85:3d:0b:2b:
         37:9c:3f:c0:04:b4:13:eb:56:76:d5:21:2b:63:0d:27:44:b9:
         0b:8a:e0:b3:13:7d:07:13:8c:07:16:b5:08:8b:58:d0:c2:a5:
         d2:ae:0f:61:6e:48:cf:49:6b:61:5c:94:6a:4c:d3:d9:4f:4a:
         1f:80:dd:6a:a5:f5:a3:86:59:ca:25:f7:54:24:ba:ae:44:83:
         f6:23:3a:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZuZ7bvEAAgtLr4TKjV7Bz4ffts4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUNFQ0FBRDI5QUFGNzUxMjZEOEQyRjU5NEZDNDNBQjBF
N0IzQTEwRDAeFw0yNTA3MjEyMTI1NTBaFw0yNTA3MjIyMjEyNTBaMDMxMTAvBgNV
BAMTKEUxNTU2Nzk0RUJCNTg2OEYxQTkzRkNFRDZDMzk3MzVDODIyRkU0NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqglZ2fS4b9vib3DWQ5vBKYJmi
n7p9eearteTHqIaAxQe1B3zZVcuSXMzeSkK+xeiFTqP0/583w5gT6LRxRQ6KK0sI
+tLURdS38LKXMyFSDVmY+lfE7h7MrPb/CIPFg1Plz+kIfix8e9LVD4kW96bICAmI
uJQhW0ybhvqErv+R1UdGZm41ZSOEYenkAiX/Rna8SLKHryKd7y+pf/YyltlrFoWh
SWiWlJSyaOP/F35Qo8cvwVCzf8FIFwHjGDVUAuTs71M6Ah8H/HsCV9Vj0O7WMrZZ
J3lm/klcwvVDprMfMepLbjkkpcatqBWSujP5y6F0IfWhj6atgsPayD64xENvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU4VVnlOu1ho8ak/ztbDlzXIIv5HAwHwYDVR0j
BBgwFoAUrOyq0pqvdRJtjS9ZT8Q6sOezoQ0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG1mSmlVOHVSdmpvNWlKWVFwUnhLMWVaNms0eHhKNVcyc1FNRjgxSGYy
blovMi9BQ0VDQUFEMjlBQUY3NTEyNkQ4RDJGNTk0RkM0M0FCMEU3QjNBMTBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDRUNBQUQyOUFBRjc1MTI2
RDhEMkY1OTRGQzQzQUIwRTdCM0ExMEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SG1mSmlVOHVSdmpvNWlKWVFwUnhLMWVaNms0eHhKNVcyc1FNRjgxSGYyblovMi9B
Q0VDQUFEMjlBQUY3NTEyNkQ4RDJGNTk0RkM0M0FCMEU3QjNBMTBELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW2bNFd+oGo4wwbueracCz4rWG5N++bmqMqBFGFG2++heoPjH3+ugqXE941Ph
mdS/YCv6C9rl3bmNNOM66aQOyhdhXQdNL7HvfCDLoyoL3zD6dT/CDkxvh4tYqm3L
+0QHDObOeATEFesKMoPOVnNsGEK7+xF0uqoIJXFrd388dBQBUJSCctxxb15qbPA9
RqwA64a/TU/jCVFCLRdbh00iUWTc/eskUGuhHpyky2Bged+FPQsrN5w/wAS0E+tW
dtUhK2MNJ0S5C4rgsxN9BxOMBxa1CItY0MKl0q4PYW5Iz0lrYVyUakzT2U9KH4Dd
aqX1o4ZZyiX3VCS6rkSD9iM6BQ==
-----END CERTIFICATE-----
Generated at Tue Jul 22 05:13:02 2025 by rpki-client