Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/GzRjPRLMR1hUnhk5C6S9rbawsPTCBmR75ZgD4126rUc8/0/AACEE4867A0C24D908C141EFC783E360667720AB.mft
File:                     AACEE4867A0C24D908C141EFC783E360667720AB.mft (raw, json)
Hash identifier:          tagJoBT8wTw0iYO2sDKwMM+gDUdCvyXEhSaj0fRUH/c=
Subject key identifier:   87:2F:0C:7F:67:51:41:67:0C:74:60:19:E9:CD:38:B4:3B:18:EA:89
Authority key identifier: AA:CE:E4:86:7A:0C:24:D9:08:C1:41:EF:C7:83:E3:60:66:77:20:AB
Certificate issuer:       /CN=AACEE4867A0C24D908C141EFC783E360667720AB
Certificate serial:       217733F98BB6E1E363D8518CACEBF0247FCE2084
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AACEE4867A0C24D908C141EFC783E360667720AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzRjPRLMR1hUnhk5C6S9rbawsPTCBmR75ZgD4126rUc8/0/AACEE4867A0C24D908C141EFC783E360667720AB.mft
Manifest number:          19
Signing time:             Mon 12 Oct 2026 01:36:47 +0000
Manifest this update:     Mon 12 Oct 2026 01:31:47 +0000
Manifest next update:     Tue 13 Oct 2026 03:03:47 +0000
Files and hashes:         1: 323830343a383530303a3a2f33322d3332203d3e20323732353531.roa (hash: CBIq5+SmYQ+347oARmwE53P6gjlXudiTkX7wOOA4njg=)
                          2: AACEE4867A0C24D908C141EFC783E360667720AB.crl (hash: 8UYdx3U8h4UytqNKY0BSBdQbztV1hBYsacGNfAkhi/Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GzRjPRLMR1hUnhk5C6S9rbawsPTCBmR75ZgD4126rUc8/0/AACEE4867A0C24D908C141EFC783E360667720AB.crl
                          rsync://rpki-repo.registro.br/repo/GzRjPRLMR1hUnhk5C6S9rbawsPTCBmR75ZgD4126rUc8/0/AACEE4867A0C24D908C141EFC783E360667720AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AACEE4867A0C24D908C141EFC783E360667720AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 03:03:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:77:33:f9:8b:b6:e1:e3:63:d8:51:8c:ac:eb:f0:24:7f:ce:20:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AACEE4867A0C24D908C141EFC783E360667720AB
        Validity
            Not Before: Oct 12 01:31:47 2026 GMT
            Not After : Oct 13 03:03:47 2026 GMT
        Subject: CN=872F0C7F675141670C746019E9CD38B43B18EA89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:14:5e:c6:1f:b5:67:5a:04:ad:4c:4a:0d:d4:
                    82:2f:03:dc:21:25:0b:13:54:27:b9:d9:a5:74:a0:
                    eb:c5:fa:6a:76:ce:ba:49:2e:22:30:2e:be:08:01:
                    34:7b:da:77:e5:92:60:db:ed:34:53:fb:0b:6c:ca:
                    66:27:8f:2f:7c:7a:85:09:86:c6:e3:97:43:49:e8:
                    00:41:49:ab:20:15:80:71:f3:2b:6d:6c:e2:89:96:
                    69:26:b7:83:c3:70:4e:0b:93:06:b4:cb:e1:b0:8b:
                    72:65:e9:74:2b:19:14:76:9c:67:0e:2e:a7:a7:8d:
                    20:58:22:c2:83:30:88:ac:6a:57:96:47:75:93:91:
                    a8:41:d3:6f:d1:e4:7c:5d:14:8f:4a:7b:0d:f8:48:
                    57:8e:e4:15:98:3f:46:d1:ca:88:45:0f:9c:e8:df:
                    dd:2f:34:26:fe:3c:94:8f:16:18:43:1e:88:73:e3:
                    6c:6b:08:c8:1d:f8:1d:90:d2:7b:eb:57:49:7a:a3:
                    f8:bd:05:4a:47:ba:31:59:5c:d5:a5:06:0c:c4:ff:
                    b0:95:69:cf:a3:39:03:69:6a:eb:36:9a:73:d1:1b:
                    73:9f:86:33:8e:8c:93:5a:0d:6a:7f:88:7d:c2:99:
                    e0:6b:20:ef:fc:2a:36:9c:5a:e8:af:b2:9b:f7:70:
                    1b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:2F:0C:7F:67:51:41:67:0C:74:60:19:E9:CD:38:B4:3B:18:EA:89
            X509v3 Authority Key Identifier:
                keyid:AA:CE:E4:86:7A:0C:24:D9:08:C1:41:EF:C7:83:E3:60:66:77:20:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzRjPRLMR1hUnhk5C6S9rbawsPTCBmR75ZgD4126rUc8/0/AACEE4867A0C24D908C141EFC783E360667720AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AACEE4867A0C24D908C141EFC783E360667720AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzRjPRLMR1hUnhk5C6S9rbawsPTCBmR75ZgD4126rUc8/0/AACEE4867A0C24D908C141EFC783E360667720AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:3b:c4:08:ee:dc:f3:ad:6f:dd:cd:bd:b9:cb:67:3a:5e:31:
         33:49:ba:f7:db:ef:c9:12:f6:c1:b7:65:64:39:4e:19:00:ed:
         79:bb:7e:50:78:26:20:7f:34:3c:11:5c:27:27:7e:ef:03:36:
         5b:37:c1:21:d8:22:5e:42:39:90:8f:05:84:2f:a7:54:1d:cf:
         51:e3:45:ea:bf:20:ae:de:24:5d:bc:57:b5:7e:96:1e:d3:95:
         6d:6f:ae:6f:78:9b:34:56:8c:09:8e:c7:26:aa:28:17:0c:e8:
         bd:2a:63:72:3c:98:37:75:c8:a5:bf:76:7c:ea:aa:4b:bf:2d:
         43:e3:55:17:85:68:43:0f:bc:95:ab:03:53:b6:1d:b9:f3:64:
         e7:bb:d7:6e:07:48:03:7e:7b:e6:d1:7e:b3:53:b8:07:c0:e0:
         1c:2e:d5:30:72:91:b4:fc:8b:66:90:76:55:90:5d:3c:08:61:
         04:75:4c:b9:3f:2e:5d:58:f2:88:11:3b:b1:95:20:cc:fa:0a:
         6f:8d:ba:42:3f:ad:8f:b2:69:0d:79:ec:58:5a:be:10:46:e0:
         22:bc:4b:13:54:79:c5:bb:e1:60:9d:e1:8e:1e:12:4d:a1:5f:
         fc:12:ae:e7:6e:f2:c1:eb:ce:bb:36:44:98:7e:13:e2:be:3c:
         79:49:00:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 10:55:57 2026 by rpki-client