Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/2A1E293AF462BBB064E158DF90216CA118423530.mft
File:                     2A1E293AF462BBB064E158DF90216CA118423530.mft (raw, json)
Hash identifier:          gpQFNsAFwVxqNjfFYD21nYYQyhjcWvluS6vgUInal44=
Subject key identifier:   A6:AE:58:B3:40:CB:6D:6C:6C:37:9D:F1:F8:0C:86:AE:8D:AF:AD:0D
Authority key identifier: 2A:1E:29:3A:F4:62:BB:B0:64:E1:58:DF:90:21:6C:A1:18:42:35:30
Certificate issuer:       /CN=2A1E293AF462BBB064E158DF90216CA118423530
Certificate serial:       0582F216CFFE7EE11ECAA32E79201225A006D664
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A1E293AF462BBB064E158DF90216CA118423530.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/2A1E293AF462BBB064E158DF90216CA118423530.mft
Manifest number:          AC
Signing time:             Wed 08 Jul 2026 15:20:29 +0000
Manifest this update:     Wed 08 Jul 2026 15:15:29 +0000
Manifest next update:     Thu 09 Jul 2026 16:27:29 +0000
Files and hashes:         1: 323830343a383136633a3a2f33322d313238203d3e20323732343533.roa (hash: 5nuQh5d5QZe/oLs556NO5nS+62Gs/Ht+YQIGa7+sGMg=)
                          2: 2A1E293AF462BBB064E158DF90216CA118423530.crl (hash: h1E8JRMDCJvKbIy2xSh3UuPpOlQYgTscmV6OWCYPiPU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/2A1E293AF462BBB064E158DF90216CA118423530.crl
                          rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/2A1E293AF462BBB064E158DF90216CA118423530.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A1E293AF462BBB064E158DF90216CA118423530.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 16:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:82:f2:16:cf:fe:7e:e1:1e:ca:a3:2e:79:20:12:25:a0:06:d6:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A1E293AF462BBB064E158DF90216CA118423530
        Validity
            Not Before: Jul  8 15:15:29 2026 GMT
            Not After : Jul  9 16:27:29 2026 GMT
        Subject: CN=A6AE58B340CB6D6C6C379DF1F80C86AE8DAFAD0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:67:46:c8:ce:b9:4d:f2:ca:b7:fb:2d:d9:21:
                    70:08:0e:5e:2d:c4:67:cd:84:f9:ff:ed:02:35:de:
                    89:1a:54:3b:3c:25:a5:e2:4f:c6:81:37:59:0a:70:
                    26:e1:4a:57:47:a4:33:dc:d5:d2:04:c4:3b:2e:89:
                    c0:05:18:2e:2c:15:19:8c:e1:43:8f:b6:44:b1:b3:
                    16:0a:65:68:db:43:73:fd:2f:e6:0b:6d:3d:d3:94:
                    1e:cd:bf:aa:50:bc:c8:91:d7:28:90:ec:2b:69:55:
                    48:84:30:1e:f5:10:f1:e8:1a:12:74:f0:1a:21:96:
                    2b:db:3d:9f:bd:17:a7:bc:0a:55:51:cd:36:7d:2d:
                    0f:26:ae:1d:81:b9:00:a9:10:56:0a:3e:be:99:c9:
                    4f:45:a9:80:84:29:31:76:90:82:8a:fa:29:9e:07:
                    96:03:e0:17:b0:19:e1:ec:c5:b5:bb:bf:6a:8a:a5:
                    d9:45:3d:90:0d:e1:81:c6:0f:f0:9d:87:3e:5a:b6:
                    44:5f:97:b2:98:a7:5e:33:72:56:5e:e7:bf:26:6c:
                    0e:8e:44:67:44:f3:87:92:0d:9f:3a:dd:a1:b2:e1:
                    4b:01:77:02:58:f5:bc:61:f9:eb:9a:a7:72:fa:73:
                    19:26:63:74:d5:0b:16:b0:05:c6:66:7a:61:73:a4:
                    b5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:AE:58:B3:40:CB:6D:6C:6C:37:9D:F1:F8:0C:86:AE:8D:AF:AD:0D
            X509v3 Authority Key Identifier:
                keyid:2A:1E:29:3A:F4:62:BB:B0:64:E1:58:DF:90:21:6C:A1:18:42:35:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/2A1E293AF462BBB064E158DF90216CA118423530.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A1E293AF462BBB064E158DF90216CA118423530.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/2A1E293AF462BBB064E158DF90216CA118423530.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:43:04:0b:01:55:c3:90:b4:44:e7:d4:c0:d2:d9:80:74:78:
         cd:56:72:ac:3a:47:d1:ca:d8:af:66:80:76:fb:0b:db:45:2e:
         88:fa:8f:68:15:b8:79:b5:5f:85:37:92:9e:36:cf:38:01:6c:
         57:a9:98:3b:90:70:10:fe:6d:54:a0:6c:15:7f:c5:97:c4:ac:
         49:61:56:25:40:db:ce:20:e1:5a:ce:23:15:e6:cd:e3:42:28:
         0d:b9:eb:00:de:8e:e1:73:ac:19:46:35:51:9e:83:76:41:7e:
         16:79:29:7b:ee:72:77:54:7e:e2:9c:d3:9f:76:b0:9c:e6:92:
         a5:27:61:44:1c:14:b7:97:a5:92:03:62:19:d8:85:22:16:c1:
         37:cf:93:52:8f:eb:d7:2e:6e:bb:a6:45:76:36:7f:c0:96:ce:
         e0:8d:6e:bf:a8:64:fe:d2:65:12:2c:5a:35:4b:56:4e:b0:60:
         2f:e1:83:70:e5:fc:8e:81:15:8d:6d:fb:e2:68:2d:a9:29:70:
         6d:13:48:5b:6e:38:17:26:26:0a:50:55:b2:d2:f6:6e:67:b3:
         6b:02:5f:70:f8:45:10:02:c3:ab:1e:5a:5c:4c:a3:a3:44:a4:
         80:cd:8d:bb:e3:74:7c:c8:1b:ae:22:b6:78:16:ef:a5:1d:77:
         29:f6:11:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:18:08 2026 by rpki-client