Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/51rP7fVEa68Yk92mfRznp8gYveqQ7bzTNZWogh8asGwd/0/2A17BA4545BE1F2D2EACE11546AB40974E43C371.mft
File:                     2A17BA4545BE1F2D2EACE11546AB40974E43C371.mft (raw, json)
Hash identifier:          9fR8o8M12ZwoyXwT49gWVkFdXR7kP+LZTeM4LqVd7P0=
Subject key identifier:   D5:9D:BD:0D:0E:0E:35:88:CB:CD:E2:87:D3:95:A3:7C:3C:3C:77:05
Authority key identifier: 2A:17:BA:45:45:BE:1F:2D:2E:AC:E1:15:46:AB:40:97:4E:43:C3:71
Certificate issuer:       /CN=2A17BA4545BE1F2D2EACE11546AB40974E43C371
Certificate serial:       30E223A9B2E853833BDEA272D00298BF2048838D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A17BA4545BE1F2D2EACE11546AB40974E43C371.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51rP7fVEa68Yk92mfRznp8gYveqQ7bzTNZWogh8asGwd/0/2A17BA4545BE1F2D2EACE11546AB40974E43C371.mft
Manifest number:          84
Signing time:             Sun 23 Aug 2026 21:56:25 +0000
Manifest this update:     Sun 23 Aug 2026 21:51:25 +0000
Manifest next update:     Tue 25 Aug 2026 01:55:25 +0000
Files and hashes:         1: 323830343a393562633a3a2f33322d313238203d3e20323734353432.roa (hash: FQaZooBpoVFpZserhejOUp1JZLGHQv8t4h6uUH6ilCo=)
                          2: 2A17BA4545BE1F2D2EACE11546AB40974E43C371.crl (hash: JWXUsQ7lskn0Y4xUK01Ta6aBHwneFPAy5ILIiz2h3Tk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51rP7fVEa68Yk92mfRznp8gYveqQ7bzTNZWogh8asGwd/0/2A17BA4545BE1F2D2EACE11546AB40974E43C371.crl
                          rsync://rpki-repo.registro.br/repo/51rP7fVEa68Yk92mfRznp8gYveqQ7bzTNZWogh8asGwd/0/2A17BA4545BE1F2D2EACE11546AB40974E43C371.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A17BA4545BE1F2D2EACE11546AB40974E43C371.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 23:58:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e2:23:a9:b2:e8:53:83:3b:de:a2:72:d0:02:98:bf:20:48:83:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A17BA4545BE1F2D2EACE11546AB40974E43C371
        Validity
            Not Before: Aug 23 21:51:25 2026 GMT
            Not After : Aug 25 01:55:25 2026 GMT
        Subject: CN=D59DBD0D0E0E3588CBCDE287D395A37C3C3C7705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f7:ce:c4:6d:56:4b:f6:a1:29:8a:56:32:0f:
                    76:a7:a6:f0:6d:72:7a:7b:e9:4f:e3:d4:04:57:aa:
                    9d:65:53:22:13:70:33:a7:2b:b6:13:7d:ab:4b:bd:
                    85:58:1e:10:01:52:37:3c:52:e0:9d:8e:21:c4:c5:
                    be:84:a4:b7:8e:d1:d4:9f:0f:22:21:05:b0:eb:10:
                    ac:d9:e6:c0:02:e1:25:51:09:c1:e6:0c:aa:b7:4c:
                    7b:f4:91:3c:0c:80:34:a8:e2:a1:14:81:4c:2e:b8:
                    b4:d1:f4:1a:8d:27:4a:92:b3:b4:3d:f6:10:67:8f:
                    bb:8a:9a:5e:c4:64:68:b2:e3:e4:21:6d:11:01:26:
                    14:da:83:4a:99:eb:aa:b2:97:b8:0c:88:18:ad:3e:
                    1b:3f:0d:10:ab:f5:d7:0e:ed:14:31:c9:9e:d5:e0:
                    ba:e9:69:88:11:c2:d7:3c:13:de:27:00:bc:ee:52:
                    63:9d:a3:86:f5:0f:a9:6b:e9:61:b6:ba:20:a6:2f:
                    d6:bd:f3:fe:6d:de:1c:d6:91:39:67:22:3c:2a:96:
                    22:59:53:22:98:f3:e1:1f:5e:70:11:56:00:9a:bb:
                    4b:3a:c0:94:72:75:45:97:3f:f7:b7:93:af:eb:c7:
                    a1:7c:40:d8:f9:40:63:2b:60:58:82:21:91:97:14:
                    d1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9D:BD:0D:0E:0E:35:88:CB:CD:E2:87:D3:95:A3:7C:3C:3C:77:05
            X509v3 Authority Key Identifier:
                keyid:2A:17:BA:45:45:BE:1F:2D:2E:AC:E1:15:46:AB:40:97:4E:43:C3:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51rP7fVEa68Yk92mfRznp8gYveqQ7bzTNZWogh8asGwd/0/2A17BA4545BE1F2D2EACE11546AB40974E43C371.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A17BA4545BE1F2D2EACE11546AB40974E43C371.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51rP7fVEa68Yk92mfRznp8gYveqQ7bzTNZWogh8asGwd/0/2A17BA4545BE1F2D2EACE11546AB40974E43C371.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:29:52:e4:18:f1:df:4e:03:68:46:2d:9a:f2:4a:0f:cc:ff:
         8f:a9:ca:cc:10:6c:cc:48:5c:e3:0b:6a:74:e2:88:24:36:4d:
         5c:b8:2a:57:1c:ec:46:27:c2:c2:44:ea:72:ae:5b:cc:fb:a0:
         aa:17:b9:c7:a7:e3:88:44:ac:79:6a:6d:94:c7:7c:81:d7:8f:
         4f:37:b8:24:58:03:34:c1:58:b3:98:66:0f:00:93:e3:a9:1e:
         af:75:c6:3e:26:4e:21:07:3e:86:64:d0:af:b6:6e:11:a2:80:
         ee:48:fb:b0:79:01:7a:c7:ea:9b:1e:67:45:68:66:5d:7c:27:
         c2:e8:16:97:07:ac:45:39:dd:46:57:b1:7c:d3:95:69:e4:b5:
         91:e7:5e:2c:b7:d1:e8:55:96:c6:f0:64:ea:4f:3d:91:84:c6:
         6a:db:e0:dd:f2:2a:8e:b0:3d:0c:2e:48:9b:bc:e9:24:91:cf:
         da:5d:1f:79:9a:32:eb:8d:b5:3b:dc:d5:60:69:4e:69:1d:f0:
         0b:8e:33:ae:db:30:77:32:06:4f:9d:6f:7a:fb:a5:2b:50:fb:
         81:71:33:94:28:74:b5:09:bd:ec:81:ee:d2:ab:24:62:b1:8b:
         ab:1c:f2:be:da:3a:3e:5c:39:dc:2c:f2:46:7d:bb:24:c8:4d:
         87:48:dc:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMOIjqbLoU4M73qJy0AKYvyBIg40wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkExN0JBNDU0NUJFMUYyRDJFQUNFMTE1NDZBQjQwOTc0
RTQzQzM3MTAeFw0yNjA4MjMyMTUxMjVaFw0yNjA4MjUwMTU1MjVaMDMxMTAvBgNV
BAMTKEQ1OURCRDBEMEUwRTM1ODhDQkNERTI4N0QzOTVBMzdDM0MzQzc3MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP987EbVZL9qEpilYyD3anpvBt
cnp76U/j1ARXqp1lUyITcDOnK7YTfatLvYVYHhABUjc8UuCdjiHExb6EpLeO0dSf
DyIhBbDrEKzZ5sAC4SVRCcHmDKq3THv0kTwMgDSo4qEUgUwuuLTR9BqNJ0qSs7Q9
9hBnj7uKml7EZGiy4+QhbREBJhTag0qZ66qyl7gMiBitPhs/DRCr9dcO7RQxyZ7V
4LrpaYgRwtc8E94nALzuUmOdo4b1D6lr6WG2uiCmL9a98/5t3hzWkTlnIjwqliJZ
UyKY8+EfXnARVgCau0s6wJRydUWXP/e3k6/rx6F8QNj5QGMrYFiCIZGXFNFnAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1Z29DQ4ONYjLzeKH05WjfDw8dwUwHwYDVR0j
BBgwFoAUKhe6RUW+Hy0urOEVRqtAl05Dw3EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTFyUDdmVkVhNjhZazkybWZSem5wOGdZdmVxUTdielROWldvZ2g4YXNH
d2QvMC8yQTE3QkE0NTQ1QkUxRjJEMkVBQ0UxMTU0NkFCNDA5NzRFNDNDMzcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBMTdCQTQ1NDVCRTFGMkQy
RUFDRTExNTQ2QUI0MDk3NEU0M0MzNzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NTFyUDdmVkVhNjhZazkybWZSem5wOGdZdmVxUTdielROWldvZ2g4YXNHd2QvMC8y
QTE3QkE0NTQ1QkUxRjJEMkVBQ0UxMTU0NkFCNDA5NzRFNDNDMzcxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqClS5Bjx304DaEYtmvJKD8z/j6nKzBBszEhc4wtqdOKIJDZNXLgqVxzsRifC
wkTqcq5bzPugqhe5x6fjiESseWptlMd8gdePTze4JFgDNMFYs5hmDwCT46ker3XG
PiZOIQc+hmTQr7ZuEaKA7kj7sHkBesfqmx5nRWhmXXwnwugWlwesRTndRlexfNOV
aeS1kedeLLfR6FWWxvBk6k89kYTGatvg3fIqjrA9DC5Im7zpJJHP2l0feZoy6421
O9zVYGlOaR3wC44zrtswdzIGT51vevulK1D7gXEzlCh0tQm97IHu0qskYrGLqxzy
vto6Plw53CzyRn27JMhNh0jcKg==
-----END CERTIFICATE-----
Generated at Sun Aug 23 23:30:13 2026 by rpki-client