Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.mft
File:                     AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.mft (raw, json)
Hash identifier:          3zjvEDGTQ9sfGPxwnyu98IgoT4qBSCEEoG3cmjtYs0I=
Subject key identifier:   5C:C5:43:9E:60:B5:9A:8B:55:FF:B7:90:B6:F2:8C:F2:43:14:A7:41
Authority key identifier: AC:36:29:F0:60:4D:B8:D2:00:6C:F0:F4:9A:CF:2A:8B:7A:E8:73:4B
Certificate issuer:       /CN=AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B
Certificate serial:       35BAEFC2DA4A91C7419E6FF96B722C0274D5687B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.mft
Manifest number:          5D
Signing time:             Sun 19 Oct 2025 19:56:42 +0000
Manifest this update:     Sun 19 Oct 2025 19:51:42 +0000
Manifest next update:     Mon 20 Oct 2025 23:06:42 +0000
Files and hashes:         1: 34352e3136362e3136302e302f32342d3234203d3e20323637393835.roa (hash: ANOX5RNOAj0VlP1p4A8/MfXSVnKJFxykCYSqPh0IL+E=)
                          2: AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.crl (hash: c0OKo/rPbcarPyuNE1niEBAMKyt41QoR/F0JQVBjlw0=)
                          3: 34352e3136362e3136302e302f32322d3232203d3e20323637393835.roa (hash: h7L6GkNU/OyNow9H63ViVgR/8dQE/boYky+AS8CF/QI=)
                          4: 323830343a353633633a3a2f33322d3332203d3e20323637393835.roa (hash: LROcD+tDs9MR6QkrWhGGZ3GqYK6zcXtsD8X4uBrtoh8=)
                          5: 34352e3136362e3136332e302f32342d3234203d3e20323637393835.roa (hash: yawP4G/X45WxHSHmzXNI13pBAL/44P9LR5GEYp5D2ys=)
                          6: 34352e3136362e3136322e302f32342d3234203d3e20323637393835.roa (hash: RFp+ERH8JRcpop+BMusWcds84S2PsLeR2TWZfDfEpAg=)
                          7: 34352e3136362e3136312e302f32342d3234203d3e20323637393835.roa (hash: 7lEgUdTmMbygr9aOy0YeXwYU6RLt//gyV5lJPML1/Z8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.crl
                          rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 23:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ba:ef:c2:da:4a:91:c7:41:9e:6f:f9:6b:72:2c:02:74:d5:68:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B
        Validity
            Not Before: Oct 19 19:51:42 2025 GMT
            Not After : Oct 20 23:06:42 2025 GMT
        Subject: CN=5CC5439E60B59A8B55FFB790B6F28CF24314A741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:76:b2:a6:c7:1d:cc:19:ea:e2:f6:d5:89:07:
                    66:6b:b5:f0:45:23:d8:b4:4d:5b:54:c8:c7:49:f2:
                    c5:dd:10:fa:70:4b:53:c0:e9:68:b3:86:87:9f:c9:
                    94:37:ea:af:92:55:47:da:c3:9e:ad:c2:d4:a5:43:
                    ec:e6:32:9b:d3:1d:0b:56:59:9e:e4:8c:4d:eb:0b:
                    62:34:01:ce:2b:95:13:e6:1c:5b:44:bd:1e:e6:ad:
                    e0:0d:86:0c:4b:45:4e:d6:55:13:3b:6e:66:16:e4:
                    15:85:28:6d:23:6a:d2:e0:f0:15:8e:a7:dc:6e:9d:
                    5b:b4:66:6f:13:a4:29:da:88:7f:f2:da:0f:fc:34:
                    1d:6a:de:14:2a:d8:a8:9f:f8:49:ea:51:eb:55:d1:
                    b0:dd:27:7b:42:24:89:8e:db:dd:6c:f5:f0:f4:2e:
                    f2:a3:38:e3:51:45:54:00:98:ba:3b:63:97:10:cf:
                    44:21:b7:86:28:cd:15:02:0f:56:71:c9:ef:97:bb:
                    80:b1:fd:ec:4f:68:aa:72:c6:a0:67:cf:24:fa:fe:
                    b6:bb:93:07:cf:a3:4a:b4:c8:1d:fb:03:23:e3:1a:
                    f4:2d:51:f9:7d:8a:3f:a8:1d:a6:52:c6:bf:50:89:
                    e4:e3:ce:5f:2b:57:60:66:15:3b:b9:7c:b1:1e:6e:
                    29:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C5:43:9E:60:B5:9A:8B:55:FF:B7:90:B6:F2:8C:F2:43:14:A7:41
            X509v3 Authority Key Identifier:
                keyid:AC:36:29:F0:60:4D:B8:D2:00:6C:F0:F4:9A:CF:2A:8B:7A:E8:73:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:0a:4d:f4:63:d6:97:34:58:d2:8a:37:a8:a6:f1:e4:13:a0:
         e0:37:44:37:80:c8:b5:13:71:ca:1b:80:9f:2a:cb:8f:30:e3:
         02:62:c9:3d:1d:20:0d:72:49:8c:2e:9f:09:d9:70:e9:d1:8b:
         c1:01:ed:e7:b0:69:c3:5e:22:b4:0a:ac:aa:c2:84:4e:ee:82:
         62:1b:dd:c6:5a:6b:09:50:af:40:62:aa:dc:25:38:5b:2d:44:
         96:18:3a:8e:9e:1d:e3:92:b8:14:c4:3f:82:64:55:46:4c:aa:
         a5:36:22:24:de:fc:18:ce:44:2f:69:cc:f5:03:97:40:0e:68:
         54:d4:a2:b4:4b:c8:93:3e:b6:51:a4:7a:b5:ce:f7:ed:00:45:
         a5:26:39:d0:d6:05:c9:94:c3:09:de:e1:cd:05:c7:c3:62:48:
         00:3a:8d:b0:3d:10:84:96:ad:e9:f6:f7:7c:9b:ab:e8:b7:64:
         fc:07:34:7b:c5:91:e1:f4:fc:cb:c7:19:ba:bc:e2:cb:f2:08:
         0c:bd:d5:d3:d0:7b:58:24:f9:6f:b9:ac:d8:0a:41:46:02:dc:
         e0:5a:8c:ee:c6:9f:49:33:8c:03:37:67:1c:56:6a:0f:59:99:
         05:21:fc:e1:03:85:a1:4e:b1:cd:9d:82:06:a3:1e:4d:58:0e:
         5a:2f:79:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:01:51 2025 by rpki-client