Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft
File:                     1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft (raw, json)
Hash identifier:          DTKP+owsfoo/h1Lm8b6WU5bnXwjT5n/oxL6a+6Fz/rQ=
Subject key identifier:   F4:03:56:B5:70:64:AC:FE:64:63:CD:4A:8F:4C:E3:FC:F9:64:77:EE
Authority key identifier: 1A:CA:9F:BA:B5:A5:57:98:45:3E:BC:32:81:3B:FF:AB:CB:11:12:C0
Certificate issuer:       /CN=1ACA9FBAB5A55798453EBC32813BFFABCB1112C0
Certificate serial:       29AD4383B5FC21568EB767C4813792D543BE04D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft
Manifest number:          011A
Signing time:             Thu 26 Mar 2026 09:02:20 +0000
Manifest this update:     Thu 26 Mar 2026 08:57:20 +0000
Manifest next update:     Fri 27 Mar 2026 09:14:20 +0000
Files and hashes:         1: 323830343a383237303a3a2f33322d3334203d3e203631363038.roa (hash: uUEwAyOnSKMgNrv6cimHSGDyRpN3j7PzrC2gtxszUfQ=)
                          2: 1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.crl (hash: eFNMPHlaqQ5qPa6VxG4FdG6qX9TvR66Erw7yr9+NS3w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.crl
                          rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 09:14:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ad:43:83:b5:fc:21:56:8e:b7:67:c4:81:37:92:d5:43:be:04:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ACA9FBAB5A55798453EBC32813BFFABCB1112C0
        Validity
            Not Before: Mar 26 08:57:20 2026 GMT
            Not After : Mar 27 09:14:20 2026 GMT
        Subject: CN=F40356B57064ACFE6463CD4A8F4CE3FCF96477EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7c:26:5f:2a:e4:00:f5:23:bf:fe:0a:0a:a3:
                    07:22:34:9e:37:39:0c:03:ea:b7:2f:dc:f4:dd:8d:
                    22:2f:91:32:ee:14:95:47:48:fe:1b:87:26:e8:ff:
                    4e:a0:76:31:df:59:19:f1:2c:a5:43:0e:8f:f6:9e:
                    2d:20:af:80:e1:f1:3c:6e:c6:ba:be:e9:a7:f4:55:
                    8f:23:1a:da:fc:8b:29:a7:56:f0:06:67:c1:94:68:
                    4d:09:ec:f4:5e:29:9d:ca:1b:3d:52:08:d1:89:91:
                    6e:80:68:f6:46:23:8a:0f:b4:de:83:cb:8f:50:5b:
                    32:29:a2:cb:5a:1c:b5:06:8d:1d:e0:da:90:0c:53:
                    fa:dc:1e:13:1e:fb:02:9b:ca:8f:dc:45:88:f6:c5:
                    bb:cf:6f:5a:4a:cb:80:39:35:a3:67:9c:04:a1:8e:
                    06:a9:8b:a5:58:6d:3e:b2:f8:40:0e:c0:fb:7e:90:
                    8f:44:63:28:f2:de:f5:d5:28:ad:ab:08:1f:79:9c:
                    8c:7c:dd:b6:2e:69:bf:11:05:6d:b4:b5:88:c3:df:
                    cb:aa:ba:91:1a:70:2d:17:90:d3:a7:4b:38:26:bb:
                    8f:b2:0b:a2:14:43:e9:fc:ef:be:d5:97:5c:75:bf:
                    88:d5:00:87:99:7b:05:67:2b:73:3d:d9:0f:84:b4:
                    65:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:03:56:B5:70:64:AC:FE:64:63:CD:4A:8F:4C:E3:FC:F9:64:77:EE
            X509v3 Authority Key Identifier:
                keyid:1A:CA:9F:BA:B5:A5:57:98:45:3E:BC:32:81:3B:FF:AB:CB:11:12:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:1d:69:7d:7c:03:a5:05:32:c1:26:eb:92:c5:1c:76:58:9e:
         57:e2:c8:8b:98:08:52:f0:74:b1:48:ab:c7:2a:32:bd:34:e7:
         71:d6:81:d2:93:1b:53:57:fd:fa:99:3a:cf:21:85:2f:80:cb:
         09:73:68:0d:99:db:a5:9d:67:9d:d4:e8:36:59:db:14:42:1f:
         79:61:9e:17:74:27:83:94:9a:40:99:3f:df:3e:e1:9c:d3:28:
         91:e3:52:74:ea:f0:d0:99:97:2a:e1:b7:15:76:e7:c2:08:96:
         f5:8f:8a:c7:64:0b:85:ed:1a:78:9e:7b:2a:5a:c5:49:43:fc:
         f0:56:6d:03:ac:e4:ba:05:eb:34:f5:d7:54:c1:c1:2b:a5:2d:
         92:b7:b9:a5:50:53:0c:87:6b:69:69:09:13:d4:a6:4b:bf:90:
         78:fd:62:b2:b8:b6:88:18:13:e8:ce:76:8a:3e:59:d0:7f:da:
         18:cc:ce:a7:83:3f:a2:52:1f:f3:85:32:61:4f:01:bd:53:b3:
         8c:6a:61:1b:4c:e2:c1:5e:ac:80:ff:09:79:6c:00:e2:68:10:
         92:23:4d:dd:9a:97:30:4e:71:4c:37:c9:05:9d:71:e9:e3:9b:
         8c:e9:7b:73:05:50:a7:12:90:b8:01:e1:00:b1:46:fc:85:00:
         d0:51:a4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:32:51 2026 by rpki-client