Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/GzRjPRLMR1hUnhk5C6S9rbawsPTCBmR75ZgD4126rUc8/0/AACEE4867A0C24D908C141EFC783E360667720AB.mft
File:                     AACEE4867A0C24D908C141EFC783E360667720AB.mft (raw, json)
Hash identifier:          ZRUMcR9UIFye4JbWmmmMBSI/7rJ/RquQodCGOJyRfOA=
Subject key identifier:   00:54:A0:20:47:9B:89:2D:E9:09:56:83:58:90:1D:19:AA:12:9A:5D
Authority key identifier: AA:CE:E4:86:7A:0C:24:D9:08:C1:41:EF:C7:83:E3:60:66:77:20:AB
Certificate issuer:       /CN=AACEE4867A0C24D908C141EFC783E360667720AB
Certificate serial:       25EDB6220036FCCE24FB7C3AE00034E891448676
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AACEE4867A0C24D908C141EFC783E360667720AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzRjPRLMR1hUnhk5C6S9rbawsPTCBmR75ZgD4126rUc8/0/AACEE4867A0C24D908C141EFC783E360667720AB.mft
Manifest number:          11
Signing time:             Mon 05 Oct 2026 23:46:26 +0000
Manifest this update:     Mon 05 Oct 2026 23:41:26 +0000
Manifest next update:     Wed 07 Oct 2026 02:12:26 +0000
Files and hashes:         1: 323830343a383530303a3a2f33322d3332203d3e20323732353531.roa (hash: CBIq5+SmYQ+347oARmwE53P6gjlXudiTkX7wOOA4njg=)
                          2: AACEE4867A0C24D908C141EFC783E360667720AB.crl (hash: QD05wF5sDM4RbAyKKXfimguJxcDYTIdclvGXmqIzIwE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GzRjPRLMR1hUnhk5C6S9rbawsPTCBmR75ZgD4126rUc8/0/AACEE4867A0C24D908C141EFC783E360667720AB.crl
                          rsync://rpki-repo.registro.br/repo/GzRjPRLMR1hUnhk5C6S9rbawsPTCBmR75ZgD4126rUc8/0/AACEE4867A0C24D908C141EFC783E360667720AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AACEE4867A0C24D908C141EFC783E360667720AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 07 Oct 2026 02:12:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ed:b6:22:00:36:fc:ce:24:fb:7c:3a:e0:00:34:e8:91:44:86:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AACEE4867A0C24D908C141EFC783E360667720AB
        Validity
            Not Before: Oct  5 23:41:26 2026 GMT
            Not After : Oct  7 02:12:26 2026 GMT
        Subject: CN=0054A020479B892DE909568358901D19AA129A5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:69:fd:42:01:db:97:09:77:04:03:4d:66:77:
                    fb:78:cf:b1:1d:3d:9c:08:8d:d4:c8:6f:57:79:34:
                    e9:31:37:0e:d3:be:06:f2:55:24:9e:57:9d:0b:d1:
                    b3:43:43:ad:06:31:da:2c:6e:fb:48:e5:d4:ee:d9:
                    e3:3c:d9:4e:44:73:53:7d:91:ce:72:6c:8f:13:0c:
                    76:d5:11:64:d4:00:11:8b:3e:a0:65:38:39:e2:a0:
                    b3:6f:93:f1:bd:1a:c0:6f:e7:1e:cc:cc:5f:47:52:
                    e3:ea:76:92:40:dc:43:da:a9:01:d0:d3:08:fe:09:
                    2d:b6:e2:cf:ae:e9:87:8c:54:62:a2:d7:dc:33:88:
                    f9:d2:86:86:b2:62:d3:00:34:81:e8:93:29:1d:39:
                    40:e6:52:ab:a5:b1:e8:ed:89:45:3b:ab:87:65:13:
                    7d:bf:15:cb:b8:c3:a2:79:39:33:9d:ed:24:24:ee:
                    1a:77:a7:d4:ba:96:34:c7:aa:48:59:cc:e2:ce:63:
                    63:44:da:a1:43:f0:28:f0:41:7e:36:a3:05:24:3d:
                    99:5d:25:c3:48:27:82:a4:1d:3b:2d:53:d0:61:ac:
                    67:3a:f2:89:99:42:f1:5e:b6:7a:26:29:6e:4a:1e:
                    16:93:4e:d5:b7:db:bc:c9:a4:ed:67:de:8b:c8:bc:
                    20:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:54:A0:20:47:9B:89:2D:E9:09:56:83:58:90:1D:19:AA:12:9A:5D
            X509v3 Authority Key Identifier:
                keyid:AA:CE:E4:86:7A:0C:24:D9:08:C1:41:EF:C7:83:E3:60:66:77:20:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzRjPRLMR1hUnhk5C6S9rbawsPTCBmR75ZgD4126rUc8/0/AACEE4867A0C24D908C141EFC783E360667720AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AACEE4867A0C24D908C141EFC783E360667720AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzRjPRLMR1hUnhk5C6S9rbawsPTCBmR75ZgD4126rUc8/0/AACEE4867A0C24D908C141EFC783E360667720AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:b8:52:47:19:45:f4:09:55:7d:bf:7f:32:f0:56:6e:0c:3c:
         9f:6f:e0:55:1f:77:57:39:9c:90:fa:d4:4e:d4:b0:f5:38:b3:
         71:09:37:f6:3a:a7:b0:55:2d:f4:e8:66:8f:58:fd:a5:2d:4a:
         55:25:c9:97:b1:69:a3:20:39:56:15:bb:ce:8d:7c:86:78:19:
         c7:14:80:7f:3c:a0:4b:2d:b2:ac:d7:22:48:24:bc:df:e8:8d:
         c3:02:6a:e3:92:df:a8:a6:04:89:d2:c5:33:ad:47:cc:10:55:
         84:49:33:cc:89:f7:3b:f6:f0:96:ee:83:d7:b3:7c:31:9e:24:
         49:07:73:81:5a:ac:f5:8c:27:b1:6c:19:e0:af:c8:10:e6:22:
         4f:70:96:29:3c:8b:a3:ff:e5:d3:0d:b5:b4:c3:ad:f0:e1:d0:
         4e:99:c9:6d:16:26:83:b1:da:7b:2b:ab:5d:2b:92:72:7d:48:
         d8:ef:bd:c3:c8:dd:23:47:48:5d:a2:d8:63:c2:f3:be:e9:8e:
         d8:53:7b:91:f7:39:f8:07:e0:42:35:3d:56:70:bc:f0:f4:72:
         3a:11:31:df:68:36:92:b7:37:f0:c6:94:03:d6:7d:5e:67:11:
         23:ee:f9:57:64:c5:a8:83:30:a9:58:bf:a6:dc:98:38:dc:b8:
         da:f9:0b:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJe22IgA2/M4k+3w64AA06JFEhnYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUFDRUU0ODY3QTBDMjREOTA4QzE0MUVGQzc4M0UzNjA2
Njc3MjBBQjAeFw0yNjEwMDUyMzQxMjZaFw0yNjEwMDcwMjEyMjZaMDMxMTAvBgNV
BAMTKDAwNTRBMDIwNDc5Qjg5MkRFOTA5NTY4MzU4OTAxRDE5QUExMjlBNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChaf1CAduXCXcEA01md/t4z7Ed
PZwIjdTIb1d5NOkxNw7TvgbyVSSeV50L0bNDQ60GMdosbvtI5dTu2eM82U5Ec1N9
kc5ybI8TDHbVEWTUABGLPqBlODnioLNvk/G9GsBv5x7MzF9HUuPqdpJA3EPaqQHQ
0wj+CS224s+u6YeMVGKi19wziPnShoayYtMANIHokykdOUDmUqulsejtiUU7q4dl
E32/Fcu4w6J5OTOd7SQk7hp3p9S6ljTHqkhZzOLOY2NE2qFD8CjwQX42owUkPZld
JcNIJ4KkHTstU9BhrGc68omZQvFetnomKW5KHhaTTtW327zJpO1n3ovIvCD7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUAFSgIEebiS3pCVaDWJAdGaoSml0wHwYDVR0j
BBgwFoAUqs7khnoMJNkIwUHvx4PjYGZ3IKswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3pSalBSTE1SMWhVbmhrNUM2UzlyYmF3c1BUQ0JtUjc1WmdENDEyNnJV
YzgvMC9BQUNFRTQ4NjdBMEMyNEQ5MDhDMTQxRUZDNzgzRTM2MDY2NzcyMEFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBQ0VFNDg2N0EwQzI0RDkw
OEMxNDFFRkM3ODNFMzYwNjY3NzIwQUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R3pSalBSTE1SMWhVbmhrNUM2UzlyYmF3c1BUQ0JtUjc1WmdENDEyNnJVYzgvMC9B
QUNFRTQ4NjdBMEMyNEQ5MDhDMTQxRUZDNzgzRTM2MDY2NzcyMEFCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlLhSRxlF9AlVfb9/MvBWbgw8n2/gVR93VzmckPrUTtSw9TizcQk39jqnsFUt
9Ohmj1j9pS1KVSXJl7FpoyA5VhW7zo18hngZxxSAfzygSy2yrNciSCS83+iNwwJq
45LfqKYEidLFM61HzBBVhEkzzIn3O/bwlu6D17N8MZ4kSQdzgVqs9YwnsWwZ4K/I
EOYiT3CWKTyLo//l0w21tMOt8OHQTpnJbRYmg7HaeyurXSuScn1I2O+9w8jdI0dI
XaLYY8LzvumO2FN7kfc5+AfgQjU9VnC88PRyOhEx32g2krc38MaUA9Z9XmcRI+75
V2TFqIMwqVi/ptyYONy42vkLPA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 08:49:26 2026 by rpki-client