Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/126CBB2E01C90415CAD8020379862F937CB88B35.mft
File:                     126CBB2E01C90415CAD8020379862F937CB88B35.mft (raw, json)
Hash identifier:          OyatKbtm6cT3bno7hucKKbnLx76BX3IcGtBOX5Zt+oU=
Subject key identifier:   6D:B0:C0:7F:5B:83:89:9C:A1:EA:F9:46:3C:48:81:C5:05:DA:A2:B6
Authority key identifier: 12:6C:BB:2E:01:C9:04:15:CA:D8:02:03:79:86:2F:93:7C:B8:8B:35
Certificate issuer:       /CN=126CBB2E01C90415CAD8020379862F937CB88B35
Certificate serial:       13C8F762EB96CE3BD8F7FA6323241BDBB06199C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/126CBB2E01C90415CAD8020379862F937CB88B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/126CBB2E01C90415CAD8020379862F937CB88B35.mft
Manifest number:          2A
Signing time:             Sat 23 Aug 2025 10:07:37 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:37 +0000
Manifest next update:     Sun 24 Aug 2025 12:57:37 +0000
Files and hashes:         1: 323830343a333936343a3a2f33332d3333203d3e20323636303238.roa (hash: uvLsp01ZJV5v2o5N1IaspoTZ/1mMkFxIn1B0jLUX6Mk=)
                          2: 323830343a333936343a343030303a3a2f33342d3334203d3e20323636303238.roa (hash: lyOVIWopD/U4VYm/24megMd6C+F+iVG9wxeVKa66OEE=)
                          3: 323830343a333936343a633030303a3a2f33342d3334203d3e20323636303238.roa (hash: rVBWEFVuSvnI4q5gAj1rUxS5ZJxURfemIiuVl7W/ZAA=)
                          4: 323830343a333936343a3a2f33322d3332203d3e20323636303238.roa (hash: ST3SFkbglICdRzLq7ccJpm+WWKmfL9rXv94rQcpxD0w=)
                          5: 3137302e3234352e3232322e302f32332d3233203d3e20323636303238.roa (hash: NIhefazeEgoZDpKvk1MVwoTA8dOv1H//xpsP1zn/73M=)
                          6: 323830343a333936343a3a2f33342d3334203d3e20323636303238.roa (hash: N33yQFo1TBE9ioBs5JdubJEBRK4lAPW5z4QImUtnzg8=)
                          7: 126CBB2E01C90415CAD8020379862F937CB88B35.crl (hash: GYL+4BnqLwwaCCJyLWXKcGzuqrFY5DQjyuA5XvMF+X8=)
                          8: 3137302e3234352e3232302e302f32322d3232203d3e20323636303238.roa (hash: P7tlqqUJnTE0Q36FAqk2PFxOZZFzaUO8SVBOTxegoOA=)
                          9: 323830343a333936343a383030303a3a2f33342d3334203d3e20323636303238.roa (hash: wRMHsM5neL6KCuqltu6OZoTRtvEh/kipJk388D1G10Q=)
                          10: 3137302e3234352e3232302e302f32332d3233203d3e20323636303238.roa (hash: WzIvs5qZadchOlY3gErU3xAU8pqs6k/mDtexxZXvAVo=)
                          11: 323830343a333936343a383030303a3a2f33332d3333203d3e20323636303238.roa (hash: xskHuIvCM+qxfhPnwc17rPhcutcM23p3DYxm99Na2Bg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/126CBB2E01C90415CAD8020379862F937CB88B35.crl
                          rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/126CBB2E01C90415CAD8020379862F937CB88B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/126CBB2E01C90415CAD8020379862F937CB88B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 12:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c8:f7:62:eb:96:ce:3b:d8:f7:fa:63:23:24:1b:db:b0:61:99:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=126CBB2E01C90415CAD8020379862F937CB88B35
        Validity
            Not Before: Aug 23 10:02:37 2025 GMT
            Not After : Aug 24 12:57:37 2025 GMT
        Subject: CN=6DB0C07F5B83899CA1EAF9463C4881C505DAA2B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d4:10:b6:34:f9:f7:44:be:45:78:c7:96:59:
                    31:e7:7d:54:9d:ca:36:5b:b0:79:0a:7e:e7:5f:b0:
                    32:64:38:27:a8:49:92:fc:46:5a:76:be:2d:d1:a1:
                    a0:fb:b9:dc:9f:a7:d8:c5:22:3a:cd:e1:db:b5:c0:
                    6a:25:70:11:fc:12:23:c4:5e:78:42:20:54:80:7a:
                    c3:07:59:d6:b6:52:94:22:aa:6a:e4:4e:1c:e1:59:
                    32:33:d3:21:01:67:46:25:34:c4:04:cb:cc:22:83:
                    af:b6:0a:32:a4:f9:0d:d9:95:c9:fb:14:24:6d:36:
                    4b:c5:b7:33:e8:19:60:bb:b0:b8:49:85:d4:dd:11:
                    7f:c4:e0:6a:c0:c5:7e:e1:91:73:4c:11:8f:d5:a1:
                    9f:7f:e5:0c:48:e5:13:d0:aa:e0:f9:da:26:84:a9:
                    0e:9b:38:e9:b9:0b:1f:38:64:9c:f0:0b:fb:53:20:
                    37:67:36:dc:88:52:d6:f5:7e:97:3d:2e:df:df:60:
                    5d:7b:09:96:78:87:23:f0:7c:0d:d3:a6:a4:65:f3:
                    24:16:72:ae:35:a2:2d:01:5b:90:0d:2d:86:1d:a6:
                    c7:4a:12:fc:6a:f6:d2:99:cb:1c:85:9c:09:bb:65:
                    d2:d8:59:b9:85:44:da:07:37:25:a4:d9:56:f7:f2:
                    bb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B0:C0:7F:5B:83:89:9C:A1:EA:F9:46:3C:48:81:C5:05:DA:A2:B6
            X509v3 Authority Key Identifier:
                keyid:12:6C:BB:2E:01:C9:04:15:CA:D8:02:03:79:86:2F:93:7C:B8:8B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/126CBB2E01C90415CAD8020379862F937CB88B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/126CBB2E01C90415CAD8020379862F937CB88B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/126CBB2E01C90415CAD8020379862F937CB88B35.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:99:32:d8:aa:1c:75:dd:52:e2:30:23:db:5f:cf:71:a8:fa:
         96:55:62:1d:c8:7c:ca:dd:35:69:b8:b2:09:af:c9:e4:95:93:
         81:03:b1:34:c7:8c:31:39:11:32:b1:1b:1c:ef:8d:a2:74:f2:
         f9:c2:1c:1a:60:a0:92:60:e7:79:c9:1f:a8:fe:f6:62:76:6f:
         80:92:a7:4d:ec:56:5e:92:da:ff:02:c5:7f:94:e8:0e:e4:f0:
         4a:e8:e0:14:ce:bf:66:31:a5:be:12:0b:4f:d8:5c:6d:65:c8:
         34:fe:dc:3f:1d:4f:31:66:6e:0f:66:b0:e9:d2:6e:a1:50:36:
         b1:04:60:f8:d5:7b:b9:40:81:ac:6e:74:2a:db:47:a7:ef:23:
         ca:8c:e3:34:2c:28:6a:9e:d2:02:dd:29:e2:d2:ca:02:a9:5e:
         de:22:14:63:36:0b:4e:c8:06:61:dd:fa:0b:32:2c:b7:5a:85:
         11:22:5b:cf:86:6a:98:52:ad:ed:69:74:cd:20:66:2e:e4:0d:
         70:99:4d:11:37:34:20:5f:bb:a1:23:3d:6d:04:71:c2:d2:23:
         ee:89:cf:27:df:4a:9f:81:e7:ca:90:74:51:c8:65:45:a4:99:
         93:a0:67:08:85:18:35:7d:85:f1:0a:cb:3f:58:84:36:45:79:
         95:84:1c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:58:12 2025 by rpki-client