Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft
File:                     AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft (raw, json)
Hash identifier:          LyA4eO5hlRDmjT9jjf5XeQRey05h0KkjTDXv22kjcac=
Subject key identifier:   3A:1B:12:EA:BD:42:F9:72:92:2A:FB:CD:BD:9C:F1:C4:0A:FE:41:DB
Authority key identifier: AA:3B:5D:BF:29:8A:BA:A4:F8:09:A6:FD:73:52:BE:F9:1F:C7:85:85
Certificate issuer:       /CN=AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585
Certificate serial:       255DF0B68A13290409CACCFBA0DF9932B25D1A9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft
Manifest number:          0123
Signing time:             Wed 13 May 2026 03:59:41 +0000
Manifest this update:     Wed 13 May 2026 03:54:41 +0000
Manifest next update:     Thu 14 May 2026 06:11:41 +0000
Files and hashes:         1: 3136302e31392e3234302e302f32322d3332203d3e20323636313637.roa (hash: JNmyrnJWmOL269NQjAHg0Etu8oD933ZzlQ4sBwx3LWA=)
                          2: 323830343a336262383a3a2f33322d313238203d3e20323636313637.roa (hash: PCBJ5STCzw9+/GFdGErJzANC+sl1s1q/clzXkR0Vk08=)
                          3: AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.crl (hash: /wB2pTO8qL8RJ6sNjTimFY22VL4h+dfW6KZZO4as+Fg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.crl
                          rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 06:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5d:f0:b6:8a:13:29:04:09:ca:cc:fb:a0:df:99:32:b2:5d:1a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585
        Validity
            Not Before: May 13 03:54:41 2026 GMT
            Not After : May 14 06:11:41 2026 GMT
        Subject: CN=3A1B12EABD42F972922AFBCDBD9CF1C40AFE41DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2c:32:e7:c4:54:f0:ea:ff:81:f8:9c:60:8c:
                    a5:18:ad:58:e2:88:17:b1:af:27:b5:35:70:ec:d6:
                    08:6c:2c:61:bd:37:07:9b:5a:3b:70:35:e4:9b:b4:
                    ec:0a:d0:5f:5e:17:f9:ff:5a:df:e1:84:11:39:85:
                    19:52:83:6d:3c:d0:15:51:61:a1:cb:35:e8:20:bb:
                    3e:df:9e:de:55:aa:d9:46:22:2f:68:4a:74:c0:48:
                    33:ec:aa:ea:b1:77:ce:2e:bc:6c:a8:df:8f:42:7a:
                    09:a9:38:9c:f4:53:b7:5b:13:5c:88:46:34:06:47:
                    b0:1d:1f:fb:de:e6:b9:d8:c3:0f:8b:79:30:f0:b6:
                    8e:fc:df:c0:3f:9b:f4:8d:4e:b3:98:65:64:14:37:
                    92:fb:b7:97:04:aa:07:95:02:d2:27:6a:fd:0d:5d:
                    28:36:73:35:f3:58:b0:a6:81:b4:b3:d5:5d:d9:7a:
                    ec:07:fc:e6:5e:99:3f:ef:51:e9:20:48:16:ea:50:
                    15:99:5e:1b:b4:13:5e:b7:6e:12:7c:03:9a:bf:63:
                    ba:21:b4:94:79:a3:ff:96:ec:5c:7f:bc:b3:e7:94:
                    3f:f5:b5:37:b3:10:8e:c8:52:65:d8:15:4e:5e:bb:
                    bd:9f:85:28:fe:d3:b1:af:af:b3:a5:6f:89:fb:1a:
                    6b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:1B:12:EA:BD:42:F9:72:92:2A:FB:CD:BD:9C:F1:C4:0A:FE:41:DB
            X509v3 Authority Key Identifier:
                keyid:AA:3B:5D:BF:29:8A:BA:A4:F8:09:A6:FD:73:52:BE:F9:1F:C7:85:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:ce:09:63:7c:b9:c4:e7:ab:76:81:06:d9:60:66:9e:00:52:
         dc:dc:98:8d:a1:b4:f3:a9:13:30:e5:3f:94:84:45:9a:8e:4c:
         9e:88:3b:cd:8c:83:ab:30:37:ee:15:57:36:dd:9b:9a:13:64:
         94:aa:e6:06:9d:99:a7:7f:6f:4d:94:00:65:dd:c3:bf:56:94:
         dc:be:25:d6:e0:8a:eb:5f:16:80:5e:e0:5e:51:ba:c3:20:91:
         28:79:ba:04:17:8c:21:8b:83:60:31:d6:8c:49:df:59:8a:cb:
         e7:1a:42:df:60:26:85:b8:64:a4:a4:85:d9:e4:67:c5:db:3d:
         cc:34:86:e2:e4:93:a2:06:0e:a4:ba:43:f6:67:88:c5:65:62:
         69:ec:6b:4b:de:9f:42:22:f1:c1:4b:19:13:14:5b:8b:c2:1f:
         bd:d1:dc:5b:f4:28:89:fc:98:ad:0e:f9:8a:d3:7f:95:ad:68:
         25:96:82:2b:4e:e0:bb:dc:f3:30:12:ee:5a:ce:66:12:13:32:
         d7:d4:b0:77:8e:ff:51:8c:ca:cc:c4:32:22:70:3d:08:f5:c9:
         85:4d:4f:13:09:d2:6e:ce:29:1a:92:1c:fb:24:bf:67:b5:16:
         1f:e4:53:af:1d:53:ff:a8:d3:ed:35:00:23:a4:0d:7e:ae:63:
         0f:c6:a9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:23:23 2026 by rpki-client