Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft
File:                     1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft (raw, json)
Hash identifier:          86kyWP+vDhoPihIceni9KL8UYWam7kAdD7ciMVULXH4=
Subject key identifier:   AC:58:57:69:9E:B3:F7:EE:26:F2:27:4F:B7:10:DB:40:F3:F0:93:42
Authority key identifier: 1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89
Certificate issuer:       /CN=1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789
Certificate serial:       20C9D744E81552B933D3F470A48F91DE011292D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft
Manifest number:          0213
Signing time:             Sun 24 May 2026 09:39:26 +0000
Manifest this update:     Sun 24 May 2026 09:34:26 +0000
Manifest next update:     Mon 25 May 2026 11:23:26 +0000
Files and hashes:         1: 323830343a323935343a3a2f33322d3332203d3e20323634303039.roa (hash: yfOypkgVyEWE5M50wVpwzHS/NYMQeFcpydy9ogr30/U=)
                          2: 1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl (hash: ZJ+G2fGW2PQqRDJBmreaLmkd7qdjaLWRU2hBoqgp96k=)
                          3: 3136382e3232372e3133322e302f32322d3234203d3e20323634303039.roa (hash: KGelzP3/GHdrTV9+XaGLTe0PsRYN4cWKkupWgAZHi7c=)
                          4: 3134332e302e3134322e302f32342d3234203d3e20323634303039.roa (hash: n5Ibsg+YKvysu9nOxsE4Nu3EeH5f1muAVkDW2jStiJw=)
                          5: 3134332e302e3134302e302f32322d3232203d3e20323634303039.roa (hash: tF0aUtU8Fd9n2qk8If+GHIC6L3yTklKzqp1ZDspmwEo=)
                          6: 3134332e302e3134332e302f32342d3234203d3e20323634303039.roa (hash: Pt2wXc0Iltg1jzPbjc83sU2BO6z5RaUFVw7hrfFwaVo=)
                          7: 3134332e302e3134312e302f32342d3234203d3e20323634303039.roa (hash: 4RhLsxRWx29c8ZqCxQJlReIjMpBlhApUUyGAeIkRKTc=)
                          8: 3137302e37382e3132302e302f32322d3234203d3e20323634303039.roa (hash: gm7POxu0mBmdHIKR2tVrLpL49gwEJBSUkWyIuJ1KlFo=)
                          9: 3134332e302e3134302e302f32342d3234203d3e20323634303039.roa (hash: 1w5KZVz2d3F7FZkRTr+zJTWr+XLdBuy5PzxxZ/0Ikw8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl
                          rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 11:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c9:d7:44:e8:15:52:b9:33:d3:f4:70:a4:8f:91:de:01:12:92:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789
        Validity
            Not Before: May 24 09:34:26 2026 GMT
            Not After : May 25 11:23:26 2026 GMT
        Subject: CN=AC5857699EB3F7EE26F2274FB710DB40F3F09342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:28:ac:7e:0d:03:91:3b:97:e4:b1:49:ee:10:
                    5d:55:ae:b9:25:18:1b:27:bc:02:77:d5:3e:28:8d:
                    7c:4a:cd:ea:49:b7:0b:38:46:70:87:7b:78:41:ef:
                    c1:d7:3b:2e:d9:77:36:f7:e1:cd:ac:3e:22:b6:26:
                    45:86:83:7c:4f:84:f9:92:2c:04:50:e1:da:fc:41:
                    8c:5d:e5:97:d4:c7:f2:1b:c2:1d:55:10:59:31:df:
                    b5:d7:cc:fb:1e:e1:5a:b0:fa:b8:d2:61:8e:e2:00:
                    b0:a3:78:26:b5:d9:31:c5:fc:9f:54:b1:3f:f9:69:
                    5a:e0:0a:a0:4a:fe:34:eb:e0:8a:61:f8:43:a3:57:
                    4e:64:43:69:60:2e:29:79:95:c5:15:ac:5b:df:a5:
                    61:62:ae:cc:d9:af:61:c9:07:52:e5:ef:3d:43:e3:
                    13:ae:68:66:6a:8e:25:d8:94:b9:7a:65:18:32:0b:
                    f6:95:aa:62:d5:03:b2:1e:e5:00:27:bc:f0:4e:7b:
                    a7:d3:91:11:13:3b:a6:f5:aa:c4:56:3e:97:a8:95:
                    e3:01:2d:15:06:39:22:62:90:04:60:15:0d:02:94:
                    b6:be:81:dc:db:92:d8:36:70:0a:ee:7d:e7:e5:01:
                    ee:3a:bb:26:b3:47:ae:7f:f9:bc:24:c3:7d:ec:c2:
                    ba:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:58:57:69:9E:B3:F7:EE:26:F2:27:4F:B7:10:DB:40:F3:F0:93:42
            X509v3 Authority Key Identifier:
                keyid:1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:22:1c:37:08:47:fb:c4:dc:69:fa:8f:e7:6a:e7:28:03:96:
         ac:dd:4f:7c:02:88:a4:8d:18:6a:04:5c:29:7f:db:6d:cf:f5:
         a8:71:77:92:d3:f7:35:15:e3:60:ca:43:59:b6:af:45:6e:40:
         d1:99:34:d2:4d:77:ac:5d:4f:32:f3:54:73:95:bc:dc:0e:d4:
         12:fd:69:63:4b:98:07:ec:88:6d:a2:52:eb:e1:2e:32:99:b7:
         ed:dc:23:c2:01:a0:50:21:6a:d1:bb:da:e8:24:38:f4:59:fb:
         f3:45:36:10:c2:7f:9b:fa:ab:fc:fe:cb:fb:46:b5:2d:95:c7:
         e5:99:7c:29:ef:ba:40:dc:5f:c2:73:79:c5:b4:e9:fe:64:b8:
         db:0f:fc:60:3e:b0:13:c9:45:d0:16:20:e0:0b:c9:80:4b:32:
         49:02:48:df:3b:5a:5a:ec:5d:81:28:6e:02:2d:2d:51:f7:50:
         ca:27:0a:c7:2b:cf:91:e4:40:61:7f:74:3d:19:5c:1a:70:71:
         d3:d8:85:1e:4a:e0:7a:d9:35:dd:29:b1:1a:c4:1b:97:a9:6d:
         34:d6:8e:55:ce:e2:5e:08:ab:1f:78:62:34:05:5f:81:79:8e:
         a0:41:77:04:c5:e1:20:ea:38:17:e7:f1:82:f6:e1:85:28:2d:
         a4:a4:0c:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIMnXROgVUrkz0/RwpI+R3gESktMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUFGN0JFOEY0RTI5RTFDRUExQTEwQzBCQTA0MzA1NDIx
MjZGRTc4OTAeFw0yNjA1MjQwOTM0MjZaFw0yNjA1MjUxMTIzMjZaMDMxMTAvBgNV
BAMTKEFDNTg1NzY5OUVCM0Y3RUUyNkYyMjc0RkI3MTBEQjQwRjNGMDkzNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtKKx+DQORO5fksUnuEF1Vrrkl
GBsnvAJ31T4ojXxKzepJtws4RnCHe3hB78HXOy7Zdzb34c2sPiK2JkWGg3xPhPmS
LARQ4dr8QYxd5ZfUx/Ibwh1VEFkx37XXzPse4Vqw+rjSYY7iALCjeCa12THF/J9U
sT/5aVrgCqBK/jTr4Iph+EOjV05kQ2lgLil5lcUVrFvfpWFirszZr2HJB1Ll7z1D
4xOuaGZqjiXYlLl6ZRgyC/aVqmLVA7Ie5QAnvPBOe6fTkRETO6b1qsRWPpeoleMB
LRUGOSJikARgFQ0ClLa+gdzbktg2cArufeflAe46uyazR65/+bwkw33swrppAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUrFhXaZ6z9+4m8idPtxDbQPPwk0IwHwYDVR0j
BBgwFoAUGve+j04p4c6hoQwLoEMFQhJv54kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjM0ZzZvb2ZaS2NUU1VvVzRqTDFDeHhHV3JqVmhiWUNXNzE2TTloN0t3
dzMvMC8xQUY3QkU4RjRFMjlFMUNFQTFBMTBDMEJBMDQzMDU0MjEyNkZFNzg5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBRjdCRThGNEUyOUUxQ0VB
MUExMEMwQkEwNDMwNTQyMTI2RkU3ODkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MjM0ZzZvb2ZaS2NUU1VvVzRqTDFDeHhHV3JqVmhiWUNXNzE2TTloN0t3dzMvMC8x
QUY3QkU4RjRFMjlFMUNFQTFBMTBDMEJBMDQzMDU0MjEyNkZFNzg5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKSIcNwhH+8TcafqP52rnKAOWrN1PfAKIpI0YagRcKX/bbc/1qHF3ktP3NRXj
YMpDWbavRW5A0Zk00k13rF1PMvNUc5W83A7UEv1pY0uYB+yIbaJS6+EuMpm37dwj
wgGgUCFq0bva6CQ49Fn780U2EMJ/m/qr/P7L+0a1LZXH5Zl8Ke+6QNxfwnN5xbTp
/mS42w/8YD6wE8lF0BYg4AvJgEsySQJI3ztaWuxdgShuAi0tUfdQyicKxyvPkeRA
YX90PRlcGnBx09iFHkrgetk13SmxGsQbl6ltNNaOVc7iXgirH3hiNAVfgXmOoEF3
BMXhIOo4F+fxgvbhhSgtpKQMOQ==
-----END CERTIFICATE-----
Generated at Sun May 24 12:51:43 2026 by rpki-client