Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/0/2ACA728EC56979778198C92FEFFB2A62A9A6CA70.mft
File:                     2ACA728EC56979778198C92FEFFB2A62A9A6CA70.mft (raw, json)
Hash identifier:          5JlWB7M5R6zktRzrg25gkNfJjTqCx5zspw2s8t3qA9w=
Subject key identifier:   FD:99:FF:5E:39:7F:71:18:6C:CD:60:AA:61:AB:76:A0:DF:31:9D:0D
Authority key identifier: 2A:CA:72:8E:C5:69:79:77:81:98:C9:2F:EF:FB:2A:62:A9:A6:CA:70
Certificate issuer:       /CN=2ACA728EC56979778198C92FEFFB2A62A9A6CA70
Certificate serial:       3720981E328897BCBB5B28591C5A44D17E2C7276
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA728EC56979778198C92FEFFB2A62A9A6CA70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/0/2ACA728EC56979778198C92FEFFB2A62A9A6CA70.mft
Manifest number:          5C
Signing time:             Wed 25 Mar 2026 13:59:12 +0000
Manifest this update:     Wed 25 Mar 2026 13:54:12 +0000
Manifest next update:     Thu 26 Mar 2026 17:46:12 +0000
Files and hashes:         1: 34352e3137392e39382e302f32342d3234203d3e20323639303734.roa (hash: r4i8DVNFSvhsgNVrt/7ucI4S9kiSPNT5ijqR+rgySd8=)
                          2: 2ACA728EC56979778198C92FEFFB2A62A9A6CA70.crl (hash: fSREFStTkgcs4DVM3ikodLlmm2BZspdWokMLeea9SYw=)
                          3: 34352e3137392e39362e302f32342d3234203d3e20323639303734.roa (hash: 84uPP+rS6Tt4zc8MwblwOGpKugnqvBPEagV4eQX0xoQ=)
                          4: 323830343a356631303a383030303a3a2f33332d3333203d3e20323639303734.roa (hash: Cbk3eZl8k4dKdpAmbej/lAw2FneYAvPhFLnt4N4Hgtw=)
                          5: 34352e3137392e39372e302f32342d3234203d3e20323639303734.roa (hash: KMkP34geEyrEVPoj4aRRG2Yz16X91WmMIBu6RXX3/oc=)
                          6: 323830343a356631303a3a2f33332d3333203d3e20323639303734.roa (hash: A7ObP0hyv5uSxZmAehtmeuFG7SSyNa5IrwisD4gZ4BQ=)
                          7: 34352e3137392e39392e302f32342d3234203d3e20323639303734.roa (hash: 7s1eFvntNx+A3Ofx0JOlia67GoOECPjLvZxcpUDfiA4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/0/2ACA728EC56979778198C92FEFFB2A62A9A6CA70.crl
                          rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/0/2ACA728EC56979778198C92FEFFB2A62A9A6CA70.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA728EC56979778198C92FEFFB2A62A9A6CA70.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 17:46:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:20:98:1e:32:88:97:bc:bb:5b:28:59:1c:5a:44:d1:7e:2c:72:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACA728EC56979778198C92FEFFB2A62A9A6CA70
        Validity
            Not Before: Mar 25 13:54:12 2026 GMT
            Not After : Mar 26 17:46:12 2026 GMT
        Subject: CN=FD99FF5E397F71186CCD60AA61AB76A0DF319D0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a1:b6:fa:d8:38:90:65:4b:8d:9c:99:61:3e:
                    3b:52:c1:08:a9:12:29:dc:66:e3:a1:ae:01:ae:38:
                    41:95:0a:a8:be:6b:ab:cb:fc:e6:59:64:d8:fe:34:
                    1e:6d:82:72:a7:9b:92:6e:89:d1:05:64:df:69:3a:
                    48:61:00:6b:f4:b9:1e:eb:2a:55:7b:1b:4c:d4:5f:
                    a5:2e:b4:d0:f1:ed:c2:8a:91:74:60:d3:78:fb:dc:
                    db:23:f2:7c:7c:51:13:0f:4a:fc:45:ae:2b:11:9a:
                    0e:4b:a9:7c:a8:9a:82:10:eb:83:b2:1e:68:39:28:
                    ff:3e:18:7b:c9:d9:f1:74:10:57:44:85:5a:d2:3d:
                    58:39:0d:89:15:92:88:44:ef:5d:72:68:b0:82:a3:
                    fa:c6:9c:f4:b9:74:54:7b:a2:af:60:49:18:84:93:
                    8a:8e:ca:f5:b7:4a:42:3e:2f:a8:1a:04:68:25:18:
                    19:38:c7:50:11:18:72:1a:77:16:e2:fb:05:f4:5c:
                    2d:8b:8b:ae:ab:18:72:8b:26:e6:40:e5:a3:0a:c9:
                    ab:97:c0:3e:df:c6:ff:b3:48:3f:f0:f6:2f:ac:cf:
                    e2:3a:83:a8:4d:0a:8e:3f:bb:4d:c1:cc:95:bf:51:
                    e5:4b:a0:9e:58:49:e2:3d:ad:19:fe:41:ca:83:57:
                    9c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:99:FF:5E:39:7F:71:18:6C:CD:60:AA:61:AB:76:A0:DF:31:9D:0D
            X509v3 Authority Key Identifier:
                keyid:2A:CA:72:8E:C5:69:79:77:81:98:C9:2F:EF:FB:2A:62:A9:A6:CA:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/0/2ACA728EC56979778198C92FEFFB2A62A9A6CA70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA728EC56979778198C92FEFFB2A62A9A6CA70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/0/2ACA728EC56979778198C92FEFFB2A62A9A6CA70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:aa:66:73:66:7e:5d:c2:8a:83:81:fb:0d:e8:cc:37:cc:7e:
         21:20:39:f2:f8:16:8a:04:3f:52:9f:ce:e1:12:06:7e:6d:a4:
         e3:08:23:0d:6a:7f:73:91:65:b7:ee:e6:fb:b3:87:94:89:b0:
         87:51:90:bb:55:c4:10:7b:df:a2:87:ae:7d:0b:9e:97:93:e1:
         ef:8c:21:8d:8c:70:ee:f3:39:96:0e:65:32:d8:0f:d1:6d:f9:
         4f:ce:f2:9f:bf:03:fb:f1:a9:57:55:d2:ec:9e:ea:22:3b:f7:
         dd:f5:e2:ad:a1:49:36:31:b2:91:ed:38:e0:d2:82:09:c6:85:
         c3:4e:a4:0f:cb:57:5f:43:33:fd:35:3f:d3:1b:e0:e2:73:25:
         7b:52:c3:22:f5:d8:f2:9d:f5:09:a7:09:6f:8d:cd:b4:47:f8:
         c9:08:a0:67:54:5e:61:60:e5:15:99:c3:db:6e:e6:57:b4:61:
         d7:38:2a:76:59:f8:80:1a:bb:22:0a:4f:a4:5c:3b:06:79:e0:
         8f:55:d0:b9:ab:cb:40:56:cd:af:98:a3:19:e3:f8:d4:2b:9a:
         7b:6e:dd:ef:fd:fc:7a:e4:20:9d:d8:09:53:da:c9:41:34:e6:
         b8:e6:cd:57:8d:fa:7c:ef:0c:23:e5:d2:1e:0c:b3:59:65:87:
         c4:88:21:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:21:19 2026 by rpki-client