Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.mft
File:                     1A706BB72455093A32D1C60201116349B90D2EC7.mft (raw, json)
Hash identifier:          m2HtiBo8KJiSMqx1Smw3gBOFoLj14ZzZuh0IG8u0pfQ=
Subject key identifier:   6E:F8:8D:AA:F1:AE:A1:D4:55:B5:CD:6F:43:99:D0:AD:B9:49:24:A8
Authority key identifier: 1A:70:6B:B7:24:55:09:3A:32:D1:C6:02:01:11:63:49:B9:0D:2E:C7
Certificate issuer:       /CN=1A706BB72455093A32D1C60201116349B90D2EC7
Certificate serial:       4A00CE5DB73FF5AE461613DBD433BAC71D3161D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A706BB72455093A32D1C60201116349B90D2EC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.mft
Manifest number:          01CE
Signing time:             Thu 26 Mar 2026 14:40:00 +0000
Manifest this update:     Thu 26 Mar 2026 14:35:00 +0000
Manifest next update:     Fri 27 Mar 2026 18:17:00 +0000
Files and hashes:         1: 323830343a333765633a313130303a3a2f34302d3434203d3e20323636343434.roa (hash: vxg7J+ayziW2WpFieSIKt86ME4sTC7oPiQysjS7/oM8=)
                          2: 323830343a333765633a3130303a3a2f34302d3434203d3e20323636343434.roa (hash: eJBF7oNxTRSs8S/J2O3RiPiTCHVNH3oxEsfhw2XKWVU=)
                          3: 323830343a333765633a313030303a3a2f34302d3434203d3e20323636343434.roa (hash: BdxUw9RAzOaPjb9yOx0KjzWjkiEwg6B/JaTW0VqvhVw=)
                          4: 323830343a333765633a343030303a3a2f34362d3436203d3e20323636343434.roa (hash: TutLMP8ZYd1Ji9EDvmuO1zsPbKLvsqWtYII15UI9xRE=)
                          5: 1A706BB72455093A32D1C60201116349B90D2EC7.crl (hash: DYOIOZSTIiynXPsaFWs2JoIFbKdbe82YUUotHZh/B1A=)
                          6: 3137302e38322e3137322e302f32322d3234203d3e20323636343434.roa (hash: 0wqCfKUqChvraC5cdOVgG58BBRYP4on/7MO4NYgqI7U=)
                          7: 323830343a333765633a343030383a3a2f34362d3436203d3e20323636343434.roa (hash: Fam8nACLX2rkMZcOzlDx1mRrex4XyPGtm2rllwS0pVY=)
                          8: 323830343a333765633a3a2f34302d3434203d3e20323636343434.roa (hash: KYoE76pX5wKfDUzMuYyqrWTQTcRGUTDa9Jj7wjAF1hU=)
                          9: 323830343a333765633a343030343a3a2f34362d3436203d3e20323636343434.roa (hash: iEH1nzgm3m7S8YITUjA+8R/f8vlcDzzWljAB4ACoLyI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.crl
                          rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A706BB72455093A32D1C60201116349B90D2EC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 18:17:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:00:ce:5d:b7:3f:f5:ae:46:16:13:db:d4:33:ba:c7:1d:31:61:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A706BB72455093A32D1C60201116349B90D2EC7
        Validity
            Not Before: Mar 26 14:35:00 2026 GMT
            Not After : Mar 27 18:17:00 2026 GMT
        Subject: CN=6EF88DAAF1AEA1D455B5CD6F4399D0ADB94924A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9f:73:7b:49:b3:ef:a5:51:69:07:01:12:27:
                    2d:82:3e:ce:8b:2f:00:77:1f:c9:b1:81:46:ff:a4:
                    b8:88:52:b7:88:b2:71:aa:8b:25:a9:2a:24:6b:f0:
                    e3:c9:75:84:d8:73:b4:0d:0e:3f:d5:4d:90:46:9c:
                    f1:45:09:8b:93:b7:21:16:38:3d:22:ca:2a:91:fa:
                    d4:c7:54:13:af:d2:55:e2:ab:78:bd:b8:df:22:d4:
                    0d:39:b3:61:92:33:6b:d9:71:02:57:62:fb:18:12:
                    58:31:e6:16:e4:5e:32:85:29:9f:85:b3:37:94:2d:
                    77:54:5c:3d:23:cc:c3:3c:c1:ff:49:f7:95:f7:20:
                    7d:da:f1:38:67:5f:d8:dc:95:cd:89:44:0b:26:ad:
                    b2:82:4f:0b:b5:c6:c5:d5:2c:52:d2:3f:d6:3a:5f:
                    fa:96:d9:11:b5:3a:1c:16:b3:9b:71:cc:45:df:70:
                    8c:49:df:cb:60:9c:78:02:cb:56:3b:8b:17:db:29:
                    b9:c0:68:7c:93:91:77:25:9d:93:3d:f8:0f:b2:d2:
                    bc:ca:ae:37:0e:8b:ad:ed:f0:c6:e0:01:aa:66:d7:
                    31:66:7f:45:0d:74:c6:f7:12:6b:86:0b:9e:2c:d9:
                    8e:bc:9b:7d:b7:a2:6f:8c:7e:7e:f4:7a:31:29:2c:
                    67:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F8:8D:AA:F1:AE:A1:D4:55:B5:CD:6F:43:99:D0:AD:B9:49:24:A8
            X509v3 Authority Key Identifier:
                keyid:1A:70:6B:B7:24:55:09:3A:32:D1:C6:02:01:11:63:49:B9:0D:2E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A706BB72455093A32D1C60201116349B90D2EC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:46:9d:86:b4:74:65:d2:0b:29:e0:6e:34:7b:52:9a:90:0c:
         f8:45:00:7b:b8:7a:30:78:4c:7f:41:74:0f:14:9a:cc:bc:2d:
         d0:03:70:f8:26:7d:ca:70:49:6e:89:0c:e5:09:2f:b0:49:d7:
         a4:c5:40:cc:88:87:5f:2e:ea:86:e2:77:76:f7:f0:6f:1a:ee:
         0e:21:48:a8:d0:79:df:6d:2d:4e:a1:ec:f7:36:11:d0:0f:94:
         cc:cf:be:21:a1:0e:59:3d:8c:8a:33:85:fd:a7:a8:f3:9e:b6:
         a5:9a:5c:6d:a2:ba:4c:6b:60:88:cc:bb:d2:be:db:82:a0:af:
         dd:4a:59:a7:50:e9:a4:2b:87:d5:d5:95:ab:fd:ff:50:f5:4e:
         1a:49:1e:a2:46:9c:62:f8:09:7b:c6:8b:34:69:50:7a:2d:06:
         a2:1e:8a:6c:6b:89:bb:93:32:24:eb:da:e5:7b:13:d7:47:99:
         e5:d4:11:6e:dc:8f:dc:a1:cc:e0:bf:3e:6c:03:79:24:e0:68:
         f3:c4:8f:8f:b3:be:bf:cf:55:1c:dd:36:86:53:14:7f:4e:7e:
         02:59:08:e1:d8:e2:49:c3:ec:fe:54:f8:3c:05:b7:f8:1d:c6:
         92:ce:6a:8e:85:c6:fe:63:47:d5:77:d1:e2:74:4c:5a:8b:99:
         7b:6c:22:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:23:27 2026 by rpki-client