Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.mft
File:                     3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.mft (raw, json)
Hash identifier:          akk9W8eRDRhYOadqV+WOWqXFlAQz2gTkeWEhrPg2vLg=
Subject key identifier:   EB:B9:5A:1C:4B:EA:0E:3F:8D:89:73:2C:AB:DA:A8:44:94:50:A9:EC
Authority key identifier: 3A:CA:CB:0D:E5:9E:3F:7F:5D:3F:B4:9A:B3:DF:C4:C9:80:8D:CA:ED
Certificate issuer:       /CN=3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED
Certificate serial:       66E992E8BF5DF45C4037685A8A16DF31737713BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.mft
Manifest number:          4E
Signing time:             Wed 20 Aug 2025 02:48:19 +0000
Manifest this update:     Wed 20 Aug 2025 02:43:19 +0000
Manifest next update:     Thu 21 Aug 2025 05:44:19 +0000
Files and hashes:         1: 34352e3233302e32392e302f32342d3234203d3e20323637313435.roa (hash: 2NM85Vs2nVN0gzy5hDe3TkuUDADgxb95JdpNTfwTJFo=)
                          2: 34352e3233302e33312e302f32342d3234203d3e20323637313435.roa (hash: WM3UE/aleCwA2X4QZQpV09N15uiKdGc4NjOTrLav7mY=)
                          3: 34352e3233302e33302e302f32342d3234203d3e20323637313435.roa (hash: HtF4NuFnVBsi6nCSys4LOtR3ffP/O1dMnNM3cO2FUxs=)
                          4: 3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.crl (hash: MI150x8G4yVKq+qaTfXI+mDrLec7R/rbjHRgmFU/CL8=)
                          5: 34352e3233302e33302e302f32332d3233203d3e20323637313435.roa (hash: P9E4CSTIzR8ub3UjYPuD3ojXiSHsSzq/hJMmZe1qwVs=)
                          6: 323830343a343863633a3a2f33332d3333203d3e20323637313435.roa (hash: L2eax2W/p0AzDbU62q45YCkXbId03LyLtEs/c9sfyQY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.crl
                          rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 05:44:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e9:92:e8:bf:5d:f4:5c:40:37:68:5a:8a:16:df:31:73:77:13:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED
        Validity
            Not Before: Aug 20 02:43:19 2025 GMT
            Not After : Aug 21 05:44:19 2025 GMT
        Subject: CN=EBB95A1C4BEA0E3F8D89732CABDAA8449450A9EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d4:fa:0b:39:0e:4d:0b:c7:80:8a:d1:e9:df:
                    38:90:87:c1:35:64:4c:05:ad:8f:e9:d8:35:9c:f6:
                    0e:a4:27:35:e9:39:be:70:8a:c7:89:44:5e:1e:e9:
                    e2:1b:68:37:42:89:3e:c8:87:57:3b:c3:31:e6:05:
                    5d:a4:89:9b:56:4f:bc:c1:90:cb:34:d0:6e:36:d3:
                    22:14:a1:d6:06:03:fa:15:e4:e0:12:d8:6d:32:a0:
                    d9:a0:16:41:5c:a1:91:be:40:d1:a5:0d:85:a1:2b:
                    a5:75:82:95:16:61:f3:d5:2d:0b:28:0d:8f:1c:fe:
                    3f:5a:c7:cc:2b:61:d2:b1:6d:62:c0:98:ce:72:df:
                    c4:84:ff:1a:d4:b6:a9:82:e3:82:a5:24:06:38:bd:
                    64:f5:ba:36:1d:86:6b:0e:13:c7:b3:2a:15:f2:12:
                    62:0d:7d:1e:b7:02:4f:af:60:fc:48:f5:c6:3b:76:
                    6e:31:89:52:3b:81:1b:3d:f4:7e:4a:ba:87:6f:d4:
                    db:fa:04:1f:02:86:f8:19:50:03:65:c5:bf:06:5d:
                    6c:25:19:24:29:23:b0:e7:14:b2:30:55:ef:9a:78:
                    78:66:4f:e3:ee:cf:db:65:66:b1:c5:b5:b3:52:0b:
                    42:be:86:9f:c8:4f:1a:cd:f2:50:c1:dc:5d:06:a1:
                    b8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B9:5A:1C:4B:EA:0E:3F:8D:89:73:2C:AB:DA:A8:44:94:50:A9:EC
            X509v3 Authority Key Identifier:
                keyid:3A:CA:CB:0D:E5:9E:3F:7F:5D:3F:B4:9A:B3:DF:C4:C9:80:8D:CA:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:b9:c9:85:ca:be:97:fe:c6:5d:06:17:ac:86:c9:c7:5f:18:
         28:4d:22:b5:5f:05:45:e0:ab:eb:f1:8f:c0:e9:ca:3b:c3:7f:
         4e:1e:1b:7d:46:5e:56:da:55:9f:61:f8:e3:c1:ba:cb:c1:d9:
         d3:7e:3e:7a:9d:19:36:1d:8d:a0:b0:c6:92:57:6b:07:a6:da:
         ef:8d:99:fc:6c:ec:4b:fd:9f:8d:62:2a:f2:74:41:54:7d:aa:
         31:86:02:96:fd:2c:76:ec:1b:01:5a:54:ae:ee:1f:e3:49:4c:
         64:de:67:6e:2d:8c:0d:72:66:e8:bf:b9:93:f7:90:28:1e:e0:
         ea:2c:05:29:c1:7d:55:ad:51:22:b4:7d:c2:ec:ae:3f:36:9b:
         87:e0:dd:62:a7:d2:38:5c:34:c9:50:4f:40:65:bf:a3:fa:ab:
         d1:0d:bb:bb:e3:51:37:03:03:4d:45:84:51:4a:e7:90:38:b7:
         fb:65:c7:8c:7d:91:8f:a5:a7:fd:8b:0c:8f:50:36:df:2b:f4:
         f3:6c:29:fa:b2:ef:c8:46:a9:68:e8:93:ad:ad:40:57:06:1e:
         d9:34:e4:2b:c0:8e:b5:f8:7b:1c:18:ee:5d:6a:a4:b2:21:d5:
         dc:08:c6:90:3c:05:79:54:b2:f6:1c:98:b1:10:fc:b5:4e:a2:
         33:8b:42:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:31:59 2025 by rpki-client