Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft
File:                     ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft (raw, json)
Hash identifier:          4yMNQ+5F9Rm7NKcmor93YG6SoM1vNbHQZQQcloDZQXM=
Subject key identifier:   0F:79:17:24:EF:35:A2:B9:3A:49:71:BD:45:B4:C4:F0:E7:36:A2:75
Authority key identifier: AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D
Certificate issuer:       /CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
Certificate serial:       40293D25B840F7B5AB54F8FBAADDBA40E3AAF807
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft
Manifest number:          03CF
Signing time:             Thu 26 Mar 2026 20:45:19 +0000
Manifest this update:     Thu 26 Mar 2026 20:40:19 +0000
Manifest next update:     Fri 27 Mar 2026 23:06:19 +0000
Files and hashes:         1: 3137372e3232332e33322e302f32302d3234203d3e20323636353339.roa (hash: 9rNjQfR82W+oS90D8d3ALwDPX0Y2XfhUQX8gBYC9pwI=)
                          2: 34352e36352e3232302e302f32322d3234203d3e20313938393439.roa (hash: Eg8wizHyBV36tEMIqHeuEAio3682XC4xlx1HHWrzu0o=)
                          3: 34352e36352e3232302e302f32322d3234203d3e20323033.roa (hash: ODwpg/AII/qEY0p8rU+CB9MxFm8G5fBI4yy2+swt01c=)
                          4: 323830343a336439303a3a2f33322d3438203d3e20323032.roa (hash: ADA/7Voc0n5kG8bPAn9PB73z6f9tQWKkTLxuDnuw/T4=)
                          5: 34352e36352e3232302e302f32322d3234203d3e2033333536.roa (hash: lsWridZfTREv9FJ4g+cGqvpP2O5h2tERumzVEM4DUMA=)
                          6: 3137372e3230302e33322e302f32302d3234203d3e20323636353339.roa (hash: MPUf4RUd2N54twk8LH4KH+geWPZ8QRgWxi2pB9yPM8U=)
                          7: 3137372e3232332e33322e302f32302d3234203d3e20313938393439.roa (hash: q7gxLcVZHTIQtHYOqS49U6Nt1U0hpo/XvCwttq1QjJ8=)
                          8: 323830343a336439303a3a2f33322d3438203d3e20323033.roa (hash: VKeMbup7PygSLgAdIByZUSznJYDlf0LeJ6qLbaLDb0U=)
                          9: 3137372e3230302e33322e302f32302d3234203d3e20313938393439.roa (hash: ZCEedq7v4nOYaNjdamWUc9nfmq4PawRZdQcZLNQ3Gow=)
                          10: 34352e36352e3232302e302f32322d3234203d3e20323636353339.roa (hash: U9s/Nkj+vk/WMqU2aGm3ThELfHhvZYWh/QnuA+dpo3U=)
                          11: ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl (hash: OfmTVggHd0MLfuLkb+xJocKFQijoSV5BUz8dRFiY18s=)
                          12: 323830343a336439303a3a2f33322d3438203d3e20323636353339.roa (hash: UehBtEKLh2WWnAdCaPkuk5tYTOz4GkfkcVCIoMGdaFM=)
                          13: 34352e36352e3232302e302f32322d3234203d3e20323032.roa (hash: UHitj37lU9q2N13Vs/PcSx1u69x011ZXEs+crqnz0Bg=)
                          14: 323830343a336439303a3a2f33322d3438203d3e2033333536.roa (hash: Kits/zuv71a19UtvELQI4DqecwHMXFDEocw4s5otryI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl
                          rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 23:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:29:3d:25:b8:40:f7:b5:ab:54:f8:fb:aa:dd:ba:40:e3:aa:f8:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
        Validity
            Not Before: Mar 26 20:40:19 2026 GMT
            Not After : Mar 27 23:06:19 2026 GMT
        Subject: CN=0F791724EF35A2B93A4971BD45B4C4F0E736A275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:51:38:8d:e2:fb:34:9f:bf:a8:ff:33:79:42:
                    f8:52:00:02:4f:4f:8b:9f:87:f9:ca:a7:98:16:0a:
                    5a:f5:09:10:4c:a6:5c:a7:0f:c7:f7:c0:d0:2f:e0:
                    48:39:99:a6:20:e5:d4:51:8e:14:f8:23:b9:60:3d:
                    db:20:3b:11:32:ac:8b:2f:a0:2a:e8:a4:de:55:54:
                    7f:19:e4:18:6f:d3:14:89:98:8a:70:33:7f:0a:97:
                    03:e9:5d:37:77:20:f3:a6:ee:0e:9a:f2:25:f2:17:
                    40:11:b9:9c:71:9e:c9:49:d1:2e:db:bd:06:c2:30:
                    46:d8:52:c0:76:ca:a6:7f:e7:24:4d:40:92:2b:34:
                    8f:dc:f5:4d:1f:98:73:4e:7c:0d:a5:77:67:25:0b:
                    bc:7f:18:d5:47:90:80:1b:48:c2:3f:88:29:5e:ff:
                    39:d7:16:9e:9e:c0:2b:32:b5:f6:93:12:40:f5:ad:
                    2b:4b:eb:a5:d1:aa:6b:2d:98:e9:ec:dd:ee:01:8d:
                    04:e3:14:1d:c5:28:4f:f1:b9:c7:57:87:fd:91:6f:
                    d6:34:7c:66:53:bc:1f:c5:52:1c:cc:be:62:3e:3a:
                    7f:15:22:84:26:66:74:8d:90:4c:87:55:92:b6:6f:
                    8b:e0:34:f1:40:8e:02:2c:ea:94:72:ec:23:5c:24:
                    76:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:79:17:24:EF:35:A2:B9:3A:49:71:BD:45:B4:C4:F0:E7:36:A2:75
            X509v3 Authority Key Identifier:
                keyid:AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:f4:0d:8c:28:97:a3:76:bf:9b:71:1f:00:e6:22:f8:72:9d:
         70:02:21:63:fc:69:2d:50:02:a5:82:7b:11:4c:52:78:aa:89:
         1a:b1:3d:b9:0d:98:bd:fe:e6:b7:c7:f9:83:25:19:f7:d0:03:
         54:e6:3c:57:d5:44:f8:2f:53:a9:84:7b:79:4b:c4:70:5a:2b:
         c6:ef:b4:46:a0:6f:54:be:86:b4:46:17:f9:68:1a:06:7b:70:
         6f:9b:11:0f:2a:a3:13:a4:4e:7b:c7:2a:d1:65:ea:19:d1:e8:
         33:63:49:86:19:8c:0e:f2:08:e8:e0:a8:cb:86:b9:4c:29:d6:
         fc:51:4e:0c:5d:e4:7d:1d:42:69:7a:2f:8b:f7:f0:18:59:37:
         c6:b2:e2:99:f7:c6:ca:1f:4f:11:ff:8f:66:6b:2c:eb:37:86:
         15:6a:54:bb:73:a9:be:06:89:76:d5:ae:52:03:dd:1f:90:8a:
         9f:3d:d7:61:a2:28:a5:d8:89:de:61:c4:18:64:49:59:f1:0a:
         23:90:0b:7f:4e:89:bf:2b:da:7c:b6:3a:15:fc:4e:4c:57:dd:
         b6:c4:cf:08:07:99:c0:c2:2d:2a:9a:e1:3b:6b:fe:e2:65:7c:
         25:4e:9d:ea:a2:ea:aa:81:5e:28:aa:37:da:c1:a8:3a:b5:8b:
         c9:d8:9d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:24:03 2026 by rpki-client