Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.mft
File:                     ACDD408319E526575F0E327DBFC28EC9CECDF412.mft (raw, json)
Hash identifier:          KsUpFlBtYo+DWutQxfFwF4LEXEtWxL668VQ85AW+zDw=
Subject key identifier:   AF:01:F2:F3:9A:AB:24:99:2D:DF:D8:0E:B8:DC:17:C3:05:77:2D:E2
Authority key identifier: AC:DD:40:83:19:E5:26:57:5F:0E:32:7D:BF:C2:8E:C9:CE:CD:F4:12
Certificate issuer:       /CN=ACDD408319E526575F0E327DBFC28EC9CECDF412
Certificate serial:       290FED7D223DBEEF74E7BB4BC79B2C4775AF62E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.mft
Manifest number:          02AA
Signing time:             Fri 22 Aug 2025 23:07:37 +0000
Manifest this update:     Fri 22 Aug 2025 23:02:37 +0000
Manifest next update:     Sun 24 Aug 2025 01:46:37 +0000
Files and hashes:         1: 34352e3136342e31312e302f32342d3234203d3e20323638353835.roa (hash: T2K2agyEH6EHk1tSCNvQb4sBYhelDEcHcJqQ60VwW9c=)
                          2: 323830343a353337343a383030303a3a2f33342d3334203d3e20323638353835.roa (hash: kFgwh+klCTAG9h9ykECRO0XVf5M41Wt8afgD5rPDau4=)
                          3: 34352e3136342e31302e302f32342d3234203d3e20323638353835.roa (hash: xmDdgR04TqBxu7MEmpmuIz19DIQ8rxAWQ5waHyGRjiM=)
                          4: 34352e3136342e382e302f32332d3233203d3e20323638353835.roa (hash: +8aLdTFB0p/SdDEf9cg0sDcXJHnTs+7kAJoY2D7lGu0=)
                          5: 323830343a353337343a3a2f33332d3333203d3e20323638353835.roa (hash: EL46Y9sagnkSEY+rwBZlOspv52g5meHe59XNHqFusMI=)
                          6: ACDD408319E526575F0E327DBFC28EC9CECDF412.crl (hash: rZBFo/hlHLw5t6RZDdvweZXfASgAidgVlfKg1Ko6has=)
                          7: 323830343a353337343a633030303a3a2f33342d3334203d3e20323638353835.roa (hash: 5mnv+ElXZFe46KDOyPnL+awiHtW19Kq5EZeW5IG3sPw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.crl
                          rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 01:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:0f:ed:7d:22:3d:be:ef:74:e7:bb:4b:c7:9b:2c:47:75:af:62:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACDD408319E526575F0E327DBFC28EC9CECDF412
        Validity
            Not Before: Aug 22 23:02:37 2025 GMT
            Not After : Aug 24 01:46:37 2025 GMT
        Subject: CN=AF01F2F39AAB24992DDFD80EB8DC17C305772DE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9d:47:01:29:db:ea:04:40:13:b8:93:27:fb:
                    52:14:2c:da:10:80:ed:90:b1:b5:0b:d5:9e:28:fc:
                    a0:1d:8c:2c:2e:d9:8a:7e:78:0f:d4:d3:cb:e9:d5:
                    a0:29:2c:9f:cd:d8:e8:01:68:a5:54:0a:e1:ad:0c:
                    14:41:a4:15:1e:be:99:16:64:2f:a6:39:ab:b7:80:
                    71:e9:a1:ef:d7:74:1a:7f:27:f8:12:0d:ea:a3:33:
                    c0:a9:62:92:b0:7f:72:d2:31:1c:1b:e1:b1:b3:60:
                    de:ea:68:c8:00:3a:aa:85:43:a5:8e:02:2a:c9:04:
                    ec:40:2b:fa:0b:f4:bd:7c:7b:53:d3:66:73:94:3c:
                    2f:8c:8a:47:e2:e4:f1:c1:9e:71:a8:d5:13:44:e5:
                    79:f2:6a:c8:81:13:c1:59:d3:1d:8b:c0:32:a7:af:
                    c5:a2:23:67:b8:ba:c6:4a:b2:4b:f2:0e:d5:19:80:
                    95:b1:de:1a:07:4b:d8:fa:d9:f4:eb:23:29:14:9f:
                    5c:ea:90:73:96:f3:cb:e6:6a:e3:a1:96:9b:24:17:
                    90:ab:34:27:4c:81:9e:56:a4:25:cf:41:19:59:14:
                    f7:b3:d8:be:cb:ef:8d:0f:87:85:10:ad:a5:f5:99:
                    26:0a:6e:33:99:ad:fd:2b:c3:b0:f8:c4:76:30:5b:
                    af:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:01:F2:F3:9A:AB:24:99:2D:DF:D8:0E:B8:DC:17:C3:05:77:2D:E2
            X509v3 Authority Key Identifier:
                keyid:AC:DD:40:83:19:E5:26:57:5F:0E:32:7D:BF:C2:8E:C9:CE:CD:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:30:c7:ba:db:fc:9f:6d:a5:ed:dd:2a:ab:29:15:ce:62:d6:
         ff:a5:9f:53:d0:38:c0:bd:e9:be:30:29:fb:c3:b1:bb:e3:73:
         37:8d:c2:3f:8c:a1:22:27:1e:cc:9a:12:f2:bf:95:4b:c0:a0:
         6a:24:9f:53:dc:f3:29:ee:56:72:d2:37:9d:08:2b:e6:53:16:
         8a:e6:18:b1:a1:34:f5:b6:76:90:db:f8:b8:ad:38:c7:30:2d:
         02:7a:0a:9b:12:ae:0e:86:1b:7a:c3:6e:e6:ee:a4:94:d0:82:
         a1:f3:da:f6:35:8c:1a:62:d3:f5:90:f2:36:ac:16:f6:1c:e6:
         74:b6:d9:44:8a:64:33:aa:d0:3a:4b:f2:44:19:69:65:5d:c3:
         72:c1:8e:98:2b:7a:88:21:61:cd:ec:19:91:11:f0:5a:3c:d0:
         cd:d4:06:81:8e:c7:65:b7:d8:62:03:cc:d4:8b:fb:67:30:62:
         5f:eb:59:01:c6:e6:a6:ce:6f:56:4c:52:ba:fe:58:8a:4b:86:
         c7:c9:62:53:be:49:90:b4:8e:e1:c7:67:49:b0:4c:90:b0:86:
         ed:04:b5:49:a1:b0:fa:73:2e:4f:e9:ef:01:ca:b2:f0:cf:b4:
         4e:ff:c3:af:78:0e:f7:09:9a:78:41:2c:20:35:0a:fd:8d:a3:
         25:e9:c9:7e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKQ/tfSI9vu9057tLx5ssR3WvYuIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUNERDQwODMxOUU1MjY1NzVGMEUzMjdEQkZDMjhFQzlD
RUNERjQxMjAeFw0yNTA4MjIyMzAyMzdaFw0yNTA4MjQwMTQ2MzdaMDMxMTAvBgNV
BAMTKEFGMDFGMkYzOUFBQjI0OTkyRERGRDgwRUI4REMxN0MzMDU3NzJERTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqnUcBKdvqBEATuJMn+1IULNoQ
gO2QsbUL1Z4o/KAdjCwu2Yp+eA/U08vp1aApLJ/N2OgBaKVUCuGtDBRBpBUevpkW
ZC+mOau3gHHpoe/XdBp/J/gSDeqjM8CpYpKwf3LSMRwb4bGzYN7qaMgAOqqFQ6WO
AirJBOxAK/oL9L18e1PTZnOUPC+Mikfi5PHBnnGo1RNE5XnyasiBE8FZ0x2LwDKn
r8WiI2e4usZKskvyDtUZgJWx3hoHS9j62fTrIykUn1zqkHOW88vmauOhlpskF5Cr
NCdMgZ5WpCXPQRlZFPez2L7L740Ph4UQraX1mSYKbjOZrf0rw7D4xHYwW6+NAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUrwHy85qrJJkt39gOuNwXwwV3LeIwHwYDVR0j
BBgwFoAUrN1AgxnlJldfDjJ9v8KOyc7N9BIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkRlRGNhNlMzZXhYUlZIVmJVdHZYUmp2Mk5EUnVTTGRjclNBOVFUcWZp
NHYvMS9BQ0RENDA4MzE5RTUyNjU3NUYwRTMyN0RCRkMyOEVDOUNFQ0RGNDEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDREQ0MDgzMTlFNTI2NTc1
RjBFMzI3REJGQzI4RUM5Q0VDREY0MTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MkRlRGNhNlMzZXhYUlZIVmJVdHZYUmp2Mk5EUnVTTGRjclNBOVFUcWZpNHYvMS9B
Q0RENDA4MzE5RTUyNjU3NUYwRTMyN0RCRkMyOEVDOUNFQ0RGNDEyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhTDHutv8n22l7d0qqykVzmLW/6WfU9A4wL3pvjAp+8Oxu+NzN43CP4yhIice
zJoS8r+VS8CgaiSfU9zzKe5WctI3nQgr5lMWiuYYsaE09bZ2kNv4uK04xzAtAnoK
mxKuDoYbesNu5u6klNCCofPa9jWMGmLT9ZDyNqwW9hzmdLbZRIpkM6rQOkvyRBlp
ZV3DcsGOmCt6iCFhzewZkRHwWjzQzdQGgY7HZbfYYgPM1Iv7ZzBiX+tZAcbmps5v
VkxSuv5YikuGx8liU75JkLSO4cdnSbBMkLCG7QS1SaGw+nMuT+nvAcqy8M+0Tv/D
r3gO9wmaeEEsIDUK/Y2jJenJfg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:44:21 2025 by rpki-client