Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/5A04500F2CCC3AD327B65C082F00942A95A22666.mft
File:                     5A04500F2CCC3AD327B65C082F00942A95A22666.mft (raw, json)
Hash identifier:          KGnvRYSr86+i/6/G9kmDaTw/8qclhxQZNzNHv5hiTGs=
Subject key identifier:   27:A8:3D:BE:75:20:95:29:62:7A:6A:60:CD:B1:11:98:99:A6:7F:CA
Authority key identifier: 5A:04:50:0F:2C:CC:3A:D3:27:B6:5C:08:2F:00:94:2A:95:A2:26:66
Certificate issuer:       /CN=5A04500F2CCC3AD327B65C082F00942A95A22666
Certificate serial:       7E13C9AEE15C4A9652A897664F93069B59E321BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A04500F2CCC3AD327B65C082F00942A95A22666.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/5A04500F2CCC3AD327B65C082F00942A95A22666.mft
Manifest number:          A2
Signing time:             Wed 25 Mar 2026 15:52:17 +0000
Manifest this update:     Wed 25 Mar 2026 15:47:17 +0000
Manifest next update:     Thu 26 Mar 2026 18:39:17 +0000
Files and hashes:         1: 3133312e3130382e36362e302f32342d3234203d3e203631363830.roa (hash: VMeY3+PxEzc0KZa1mg2jSREQplk9aK6QB1Uv/ggia00=)
                          2: 3133312e3130382e36352e302f32342d3234203d3e203631363830.roa (hash: Qdw93tl+TCbNykxLXfQHIoAWoQK/FSDMwkVFQNTk4IM=)
                          3: 323830343a316365303a3a2f33322d3332203d3e203631363830.roa (hash: tP1DxaWxNTnrv2iksiYlm6Hre5HJet9d9sM8h3bagdo=)
                          4: 5A04500F2CCC3AD327B65C082F00942A95A22666.crl (hash: frdgSwHd5f1WAjuChzXG9tc3cALjO0MyY4M5p6l35zQ=)
                          5: 3133312e3130382e36342e302f32342d3234203d3e203631363830.roa (hash: 2pwwpILl1hQZwjkbSJqlu7VIDtZ+6rER/b7eoVkwBiw=)
                          6: 3133312e3130382e36372e302f32342d3234203d3e203631363830.roa (hash: nisYoQyTzdv/1XgIi2TF6GlQWjZe1Y1WvN0U8JznDWU=)
                          7: 3133312e3130382e36342e302f32322d3232203d3e203631363830.roa (hash: reustH0IN5Jvtd0mkq9tZiJS+VJ3xGKKbbgtRnG73+A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/5A04500F2CCC3AD327B65C082F00942A95A22666.crl
                          rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/5A04500F2CCC3AD327B65C082F00942A95A22666.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A04500F2CCC3AD327B65C082F00942A95A22666.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 18:39:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:13:c9:ae:e1:5c:4a:96:52:a8:97:66:4f:93:06:9b:59:e3:21:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A04500F2CCC3AD327B65C082F00942A95A22666
        Validity
            Not Before: Mar 25 15:47:17 2026 GMT
            Not After : Mar 26 18:39:17 2026 GMT
        Subject: CN=27A83DBE75209529627A6A60CDB1119899A67FCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:ac:9f:da:c4:76:ce:d3:60:d6:53:99:d1:0f:
                    77:c4:12:a1:f0:53:c0:c6:cf:e4:6b:e8:b6:ba:33:
                    42:ea:a5:a0:4d:61:6d:f9:dc:10:ab:55:df:8b:92:
                    29:57:b4:87:31:66:6e:0e:da:3f:02:5d:d4:67:97:
                    25:e3:96:7e:6f:42:34:c4:b9:65:36:fa:32:11:35:
                    8a:af:df:d3:db:43:1a:65:25:41:5a:df:61:e1:83:
                    de:94:96:37:cf:27:4e:28:9b:a4:da:30:84:12:c3:
                    75:41:77:d2:75:2a:a0:36:62:82:48:8a:b6:b4:34:
                    69:f8:09:50:30:7d:6c:58:a6:b5:58:7f:bd:16:73:
                    03:c6:ec:23:6d:8e:d6:bd:62:d1:08:88:26:d0:71:
                    a8:eb:10:fa:20:d7:ca:52:fd:7e:e4:74:3f:5d:e4:
                    52:b7:cd:f6:4f:e5:f8:01:39:54:bd:bb:9d:9c:ff:
                    0b:b7:0f:92:c9:34:3e:0a:de:2c:12:4d:44:d9:9e:
                    08:e9:c4:d8:34:c5:e1:7e:6e:e7:7e:ff:7c:09:5a:
                    87:fe:25:02:84:c5:0d:66:8d:b3:82:ce:50:14:48:
                    05:e5:f2:a7:a3:b7:b3:e8:8a:4a:51:13:92:42:de:
                    68:63:61:d9:42:1a:a8:ab:4b:da:41:6b:32:83:13:
                    fd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A8:3D:BE:75:20:95:29:62:7A:6A:60:CD:B1:11:98:99:A6:7F:CA
            X509v3 Authority Key Identifier:
                keyid:5A:04:50:0F:2C:CC:3A:D3:27:B6:5C:08:2F:00:94:2A:95:A2:26:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/5A04500F2CCC3AD327B65C082F00942A95A22666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A04500F2CCC3AD327B65C082F00942A95A22666.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/5A04500F2CCC3AD327B65C082F00942A95A22666.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:10:28:36:cb:71:b4:a6:d1:00:f7:f6:8e:0c:56:76:58:11:
         a8:f7:66:a7:85:bc:cf:87:c2:f9:13:07:ed:a9:ea:19:3f:39:
         72:13:ce:e7:2f:6f:43:45:65:ca:08:fb:aa:74:4b:b2:5d:93:
         61:3d:8d:05:d7:42:3e:41:a0:ab:8c:8b:0d:e7:97:ec:d7:a8:
         25:a3:48:6f:ee:a6:5a:40:93:78:c9:3e:f6:8d:e3:b1:bc:c1:
         a0:f2:55:63:c2:ae:e6:19:11:24:11:f1:45:91:b5:4a:57:cc:
         97:db:16:e1:de:4f:15:53:4b:51:91:11:eb:c1:f3:b0:c9:e5:
         e7:7f:e8:83:d3:8d:aa:2b:3d:b6:73:23:34:99:0b:d2:c7:75:
         b8:57:09:30:fc:2f:6e:0a:84:9d:9d:1f:36:87:f1:3a:23:e6:
         76:e3:9a:1e:07:c1:3d:bd:f7:d8:06:fb:98:26:6c:67:d8:2e:
         c2:8c:1e:cf:8f:31:7c:5a:70:a9:86:ee:43:b7:64:9b:bc:ea:
         82:7c:de:86:b3:a1:2f:e4:96:d1:bf:95:47:95:5a:90:8a:82:
         51:b4:f7:b2:bc:19:26:02:79:ed:1a:ab:93:ff:3b:2d:23:18:
         85:83:e1:26:2a:ac:f5:4d:90:87:e2:84:3e:d7:aa:a1:0a:93:
         10:5d:e6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:23:45 2026 by rpki-client