Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/0/3AE1B9E2F2BD28C6EF015D7304750C61B2491BFA.mft
File:                     3AE1B9E2F2BD28C6EF015D7304750C61B2491BFA.mft (raw, json)
Hash identifier:          D6OHhAW7yRLen8v1nVz3ihzr7B0QYNyvkqnyfrJLr4E=
Subject key identifier:   EC:49:41:16:E5:6F:55:7D:F5:1F:BB:9C:53:24:53:64:81:66:C3:4C
Authority key identifier: 3A:E1:B9:E2:F2:BD:28:C6:EF:01:5D:73:04:75:0C:61:B2:49:1B:FA
Certificate issuer:       /CN=3AE1B9E2F2BD28C6EF015D7304750C61B2491BFA
Certificate serial:       1B7A92ECC65B4469786C870D44F09A974AB89F54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AE1B9E2F2BD28C6EF015D7304750C61B2491BFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/0/3AE1B9E2F2BD28C6EF015D7304750C61B2491BFA.mft
Manifest number:          26
Signing time:             Sun 23 Aug 2026 08:39:28 +0000
Manifest this update:     Sun 23 Aug 2026 08:34:28 +0000
Manifest next update:     Mon 24 Aug 2026 12:23:28 +0000
Files and hashes:         1: 3AE1B9E2F2BD28C6EF015D7304750C61B2491BFA.crl (hash: tr908FCdljQkpdNTM8CuX1T25DSohdftYsHn3xuzg/g=)
                          2: 34352e3233332e34342e302f32322d3235203d3e20323637323933.roa (hash: wkrz3rn9UVZHVUrFlQO7VqyJ+OKXJlqT44+0OaTmxJk=)
                          3: 323830343a346234303a3a2f33322d3438203d3e20323637323933.roa (hash: z8qpHDa1wXka6HHthipx/1/1Jk8PjkG/tRYSF7GDKCw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/0/3AE1B9E2F2BD28C6EF015D7304750C61B2491BFA.crl
                          rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/0/3AE1B9E2F2BD28C6EF015D7304750C61B2491BFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AE1B9E2F2BD28C6EF015D7304750C61B2491BFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 12:23:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:7a:92:ec:c6:5b:44:69:78:6c:87:0d:44:f0:9a:97:4a:b8:9f:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AE1B9E2F2BD28C6EF015D7304750C61B2491BFA
        Validity
            Not Before: Aug 23 08:34:28 2026 GMT
            Not After : Aug 24 12:23:28 2026 GMT
        Subject: CN=EC494116E56F557DF51FBB9C532453648166C34C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:65:47:15:3f:47:53:fe:7f:7e:8c:7a:01:ac:
                    94:53:75:e4:a8:1c:35:96:31:87:55:92:2b:44:a7:
                    6a:9f:fd:bf:9b:9c:e2:83:cf:d8:7b:af:51:79:0d:
                    5d:b1:94:0b:38:22:5c:12:4b:8d:27:4b:6c:7e:2c:
                    3a:2e:b2:a8:0e:d7:ac:b2:57:0f:d6:03:52:57:61:
                    cf:99:cf:90:0f:e5:28:4a:0b:b9:63:30:20:04:ea:
                    44:91:d1:d5:b7:e5:2a:43:33:7b:0b:c6:4d:79:9f:
                    93:9e:01:46:e9:b9:84:c3:57:d1:9f:e8:24:9e:d5:
                    60:41:8c:62:ed:68:cf:2d:9e:9d:ce:29:22:7c:3e:
                    70:6f:1e:df:c0:fc:84:39:78:d2:e7:76:43:bf:7f:
                    6d:8e:d5:7b:62:33:75:73:26:a6:44:2a:21:9e:d4:
                    f9:a2:4e:af:8c:b4:78:a2:bd:44:f4:f9:a4:a6:3a:
                    ce:b6:b2:9f:58:93:ab:da:65:78:dd:58:ac:ef:a3:
                    0d:ce:f1:c3:14:1f:b7:31:79:f9:fb:61:65:9f:81:
                    4a:4a:fd:c3:65:b1:1e:83:69:89:a9:cc:ff:b9:f1:
                    b8:f3:a5:6b:ce:d6:6a:c9:0d:e1:96:f7:78:60:73:
                    4f:62:aa:0e:5f:2f:fa:8a:fc:06:5b:e0:7b:cb:25:
                    69:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:49:41:16:E5:6F:55:7D:F5:1F:BB:9C:53:24:53:64:81:66:C3:4C
            X509v3 Authority Key Identifier:
                keyid:3A:E1:B9:E2:F2:BD:28:C6:EF:01:5D:73:04:75:0C:61:B2:49:1B:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/0/3AE1B9E2F2BD28C6EF015D7304750C61B2491BFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AE1B9E2F2BD28C6EF015D7304750C61B2491BFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/0/3AE1B9E2F2BD28C6EF015D7304750C61B2491BFA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:2c:2f:be:62:7a:07:ae:75:0b:08:1c:ca:da:f5:d8:d0:b0:
         7c:25:31:26:cc:24:af:44:23:ca:fe:af:a8:9e:09:43:69:80:
         82:da:7a:79:81:b1:63:6f:7e:cb:f4:2b:71:12:28:0d:99:42:
         73:1f:e8:5d:cd:5f:b1:20:93:8a:c2:11:59:9a:0a:5b:a9:2b:
         93:7d:89:50:a4:13:d3:3d:30:1f:4c:6e:86:34:c6:74:c8:ec:
         df:5d:24:6d:7b:40:13:94:b3:cd:2e:dd:4b:cf:92:01:fd:98:
         4c:c9:d7:ba:ac:ea:53:b1:c8:ee:85:e1:18:d9:71:7e:f8:36:
         12:c6:dd:90:46:cf:5a:59:aa:78:9f:74:77:85:66:33:ac:1b:
         4a:7b:79:89:ff:0b:a9:12:d5:16:f6:a6:5d:44:69:a5:bf:7a:
         ed:c1:90:b4:37:89:fd:ae:25:09:bf:c9:36:87:b5:87:b5:d4:
         f6:04:51:65:37:10:3d:b8:4b:55:b0:80:e9:f8:03:24:73:24:
         ab:eb:0a:46:ab:c5:72:fb:cf:52:20:b8:5d:db:86:12:0f:f8:
         5a:8f:c7:95:9d:05:4f:49:75:17:12:b7:8d:e6:06:fc:f2:10:
         9a:e3:b2:db:15:8a:e3:a8:50:09:1f:c2:94:c7:c8:39:e7:ed:
         36:db:ee:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:11:45 2026 by rpki-client