Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft
File:                     66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft (raw, json)
Hash identifier:          eL2H9NmTQmj2XGI4mvv2FqmEhgO/bK7IzmHOWpm/gXs=
Subject key identifier:   9D:15:5A:6B:44:50:51:82:3E:48:48:93:A1:5D:D2:A8:5E:7B:63:59
Authority key identifier: 66:D4:FE:79:ED:8A:8E:0D:19:50:41:C3:35:EE:B1:B7:48:A1:2F:0A
Certificate issuer:       /CN=66D4FE79ED8A8E0D195041C335EEB1B748A12F0A
Certificate serial:       7E6AAF93AC10B07E355BF089E1027B2BFBE2FAAC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft
Manifest number:          01E8
Signing time:             Sat 27 Jun 2026 08:56:10 +0000
Manifest this update:     Sat 27 Jun 2026 08:51:10 +0000
Manifest next update:     Sun 28 Jun 2026 09:42:10 +0000
Files and hashes:         1: 323830343a343435343a3a2f33322d3438203d3e20323637363235.roa (hash: paYwLoypIFKXy1lPUpQjU0kmii9owEkl44K65Uh4EX4=)
                          2: 34352e37312e3233382e302f32342d3234203d3e20323637363235.roa (hash: QRTKqbjxncElRjOqahAy3tYtR7nv9TLqE7uexiIN97c=)
                          3: 66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.crl (hash: VjJZ01Cg+aGDi0IyYqCMl7528eHrHnLJFSbt2HMZ2GU=)
                          4: 34352e37312e3233392e302f32342d3234203d3e20323637363235.roa (hash: epbm70oLbMWA9MUpZ3qsXdoMzCAiRyHOeDjmjHaJTh8=)
                          5: 34352e37312e3233362e302f32322d3233203d3e20323637363235.roa (hash: LT5c6jnVzotps881c0JYu4XM6nY0scEavk9ztd8JFL8=)
                          6: 34352e37312e3233362e302f32342d3234203d3e20323637363235.roa (hash: QC3BOEThK/A9mECawEiav2k5ee4Miiqx4Q7Cipnk8zc=)
                          7: 34352e37312e3233372e302f32342d3234203d3e20323637363235.roa (hash: By+JN2UbBQEolCfzkV9Os+i9R26phRqh6G69Kc0k+dg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.crl
                          rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 09:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:6a:af:93:ac:10:b0:7e:35:5b:f0:89:e1:02:7b:2b:fb:e2:fa:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66D4FE79ED8A8E0D195041C335EEB1B748A12F0A
        Validity
            Not Before: Jun 27 08:51:10 2026 GMT
            Not After : Jun 28 09:42:10 2026 GMT
        Subject: CN=9D155A6B445051823E484893A15DD2A85E7B6359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:54:c7:cc:ce:60:a6:8f:4d:6e:9f:7e:60:97:
                    31:f5:4b:d6:e2:5d:e1:dc:27:c6:47:7f:e6:af:5a:
                    04:d5:ee:34:22:9e:10:d4:11:92:45:ed:f6:a7:18:
                    ce:1b:e7:25:da:76:97:bf:71:a5:79:d0:be:db:5d:
                    42:18:e9:11:3b:e5:a4:69:97:47:13:32:f7:27:65:
                    22:81:77:ba:68:49:de:c4:43:1c:0a:b3:2a:2d:c3:
                    c0:36:73:d6:fc:b4:09:60:ce:d7:6b:ae:af:c0:dd:
                    6e:3c:d3:3e:84:80:aa:bb:ef:45:7d:9a:48:54:6d:
                    6c:b1:d3:af:f7:b3:c3:c7:45:a5:60:a4:ab:48:87:
                    20:31:47:58:d9:39:11:31:25:80:24:13:19:be:ee:
                    a2:c4:f6:ec:e7:88:61:b8:55:69:68:5b:67:1f:68:
                    30:99:06:05:f3:05:7c:0e:4c:56:9d:c8:1e:9c:70:
                    1d:2a:5c:8a:d1:ca:a5:f8:36:75:59:35:50:d0:bc:
                    8d:25:01:e9:7f:5e:b0:b9:c6:71:93:10:77:b0:11:
                    ab:0b:2b:a3:7b:eb:cf:c1:a6:dc:67:66:f3:44:b7:
                    a5:7e:3f:2b:3b:e7:32:ff:10:69:0b:4f:1b:a9:97:
                    ea:f0:1f:12:4e:66:64:85:34:65:a7:37:be:4b:00:
                    bf:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:15:5A:6B:44:50:51:82:3E:48:48:93:A1:5D:D2:A8:5E:7B:63:59
            X509v3 Authority Key Identifier:
                keyid:66:D4:FE:79:ED:8A:8E:0D:19:50:41:C3:35:EE:B1:B7:48:A1:2F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:de:c8:5b:de:ef:84:69:13:de:a7:e9:be:5a:0c:a2:fb:5e:
         09:4f:c7:39:d4:1d:e1:1f:96:27:82:f0:f3:e7:46:5c:e8:4c:
         7d:3c:68:29:b2:2e:44:2e:04:3e:49:0f:27:39:6d:10:a1:df:
         da:08:d4:f3:89:47:dc:30:71:a7:14:a9:1c:fa:02:56:21:16:
         c5:0c:0e:b7:4d:d0:27:a9:87:a9:4d:a5:a3:da:87:ea:69:6b:
         55:2c:5d:a9:a7:b4:a4:3e:38:f0:f6:a5:a7:21:47:cf:2e:ab:
         6a:63:ff:18:30:e5:a3:4c:51:22:3d:1e:73:1c:7c:35:a4:1f:
         d8:69:90:ac:af:e9:64:d3:f4:d2:99:5b:91:e9:76:dd:de:dc:
         4d:a5:63:17:37:70:0e:bd:5b:36:62:12:93:06:84:17:50:5f:
         8c:3f:53:b2:57:0e:4d:c5:44:3e:1b:a8:13:f6:70:1a:cc:de:
         49:b1:d1:08:69:5a:4d:17:a7:a8:30:22:05:7b:b6:bd:4c:cb:
         78:25:3f:d3:da:f4:68:8c:98:6d:8f:c7:97:6b:0d:93:e6:08:
         18:de:82:bb:2a:18:2b:45:79:4d:8e:b5:fb:ce:06:f1:f8:04:
         6e:b5:82:00:1a:c6:c4:fe:84:95:d2:26:96:62:f2:7f:e8:85:
         38:fc:f3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 12:16:10 2026 by rpki-client