Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft
File:                     A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft (raw, json)
Hash identifier:          ND0S3z9rHJHEENeyIkP+SA35Ip7tzS02MyeX/c+DN2U=
Subject key identifier:   6A:04:F6:0D:80:48:1C:65:04:48:C4:3D:AA:B1:2C:12:83:77:EB:C8
Authority key identifier: A5:7A:D4:9B:9B:B9:E4:7B:73:27:A3:A5:84:12:17:FB:DC:E5:5F:36
Certificate issuer:       /CN=A57AD49B9BB9E47B7327A3A5841217FBDCE55F36
Certificate serial:       2BB4C0C03A1F85CC8436213E2DB5DDD239C25CF3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft
Manifest number:          0520
Signing time:             Mon 24 Aug 2026 12:40:00 +0000
Manifest this update:     Mon 24 Aug 2026 12:35:00 +0000
Manifest next update:     Tue 25 Aug 2026 12:40:00 +0000
Files and hashes:         1: 34352e3232362e34372e302f32342d3234203d3e20323636393538.roa (hash: tlYFZbHQPZ/om4/9FsVMxYmLyN9Jzix34+Obvi/9ASs=)
                          2: A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.crl (hash: RBCNS/Zcm4zxEmeU8sNDJ1TAuhk6qcYv6HaDizJsau0=)
                          3: 34352e3232362e34362e302f32342d3234203d3e20323636393538.roa (hash: wK9P+kkJH01rBuGX3nHNTZbaXSNXyOOOrK9Qw3Z1og0=)
                          4: 34352e3232362e34352e302f32342d3234203d3e20323636393538.roa (hash: ZCcdS+xrRX6KpA0ohndt7WYWzyxCEtVtqPvNTSkY8qs=)
                          5: 34352e3232362e34342e302f32342d3234203d3e20323636393538.roa (hash: s903/GzX1I8NaZxco4+cw22DeJG6oYpWcs0PLgG8u6o=)
                          6: 323830343a343566383a3a2f33322d3332203d3e20323636393538.roa (hash: vQfyB7xhKSSaAyJa1cF2mTiy4+GxXFyWie4oGgXvrLo=)
                          7: 34352e3232362e34342e302f32322d3232203d3e20323636393538.roa (hash: gbQtUhedEOx9EoUlv5ep2XNhqqNKWsDxLI+7+aw3bfU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.crl
                          rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 12:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b4:c0:c0:3a:1f:85:cc:84:36:21:3e:2d:b5:dd:d2:39:c2:5c:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A57AD49B9BB9E47B7327A3A5841217FBDCE55F36
        Validity
            Not Before: Aug 24 12:35:00 2026 GMT
            Not After : Aug 25 12:40:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ad:bd:76:5a:36:95:8e:2b:01:b7:cd:77:6a:
                    f2:a9:6f:c7:a7:82:56:ea:85:27:4d:77:93:9a:e5:
                    86:00:bf:79:34:60:f7:bc:eb:2b:02:6a:99:22:f7:
                    f9:35:fb:09:0f:ac:71:e3:16:5c:e3:6a:47:2d:9b:
                    4a:10:be:13:0e:38:1c:f5:0c:28:d1:da:ba:02:0b:
                    52:72:d8:25:89:e0:27:6b:c4:f3:d6:7b:d3:c6:e3:
                    8f:0c:6a:e9:fb:ec:47:bb:c6:f3:88:39:e4:5c:f6:
                    e3:2b:72:cc:74:aa:34:81:0c:6e:d3:7e:ef:c0:ff:
                    34:10:5b:9d:12:3d:34:11:3e:83:74:f9:9d:a5:56:
                    94:9d:aa:7d:be:29:68:cc:29:c9:15:3d:a4:2c:30:
                    d8:46:a3:8c:37:32:90:49:7a:6f:76:fe:36:a0:fb:
                    e2:39:b8:66:41:38:d5:60:b4:d9:a3:46:b7:5f:d7:
                    84:e5:02:fd:8a:5c:fd:8a:a5:f4:bf:50:54:9f:2a:
                    b8:fe:3a:8c:4c:e1:77:fc:1c:70:e0:f6:d0:01:bc:
                    06:02:4f:59:43:bd:76:49:2a:ad:11:53:d8:1f:2a:
                    a1:16:49:cb:ad:2e:d9:27:a8:33:c6:19:be:b1:9f:
                    0a:26:31:8e:40:88:c8:45:c4:13:af:39:f8:2c:3a:
                    02:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:04:F6:0D:80:48:1C:65:04:48:C4:3D:AA:B1:2C:12:83:77:EB:C8
            X509v3 Authority Key Identifier:
                keyid:A5:7A:D4:9B:9B:B9:E4:7B:73:27:A3:A5:84:12:17:FB:DC:E5:5F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:a8:05:4b:0f:2b:6c:e5:df:96:c4:9e:9b:fd:f6:19:2f:8a:
         6d:5f:af:fa:6b:39:88:13:ae:b1:0c:b7:a9:6e:05:a8:3f:7e:
         c1:d8:9d:20:ad:6d:cb:b5:bc:41:a8:d8:a6:0b:ae:ff:c5:ca:
         83:10:fd:55:65:a0:a2:ff:31:6b:6e:c5:b6:6c:4e:dc:c8:0d:
         4e:e8:91:41:79:00:41:38:de:5c:81:34:58:5b:3c:65:a4:96:
         f3:5d:f2:32:25:8a:55:2d:b5:4e:35:14:28:c2:6c:03:65:24:
         de:11:88:86:cd:f0:88:d1:50:3f:97:6a:9f:33:70:7e:a9:cf:
         65:f5:e0:6c:f8:a6:d4:29:7d:32:a6:72:f9:b2:25:ff:40:d9:
         00:7d:49:a7:26:ac:8a:0d:ec:28:88:32:7b:a2:10:62:c5:82:
         69:8b:bd:93:c0:93:07:9d:48:11:aa:08:4d:aa:ea:4a:86:cb:
         d1:39:1b:cd:89:9f:f8:e4:0f:b3:2a:bb:df:b8:a6:b5:06:58:
         e4:1c:41:e2:1b:0d:6c:94:d8:8d:a1:59:1d:df:f3:b0:ba:17:
         42:c2:6f:ae:ee:74:f1:53:51:8e:e4:43:3a:35:0d:c9:75:55:
         97:ac:9e:42:38:9b:f5:35:54:17:1e:d1:68:2b:f4:73:0d:16:
         71:da:0f:73
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----