Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft
File:                     ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft (raw, json)
Hash identifier:          AecVXknXzbkHdunP0AXEwkE/UGl1ReWpfKWkPcKkhyA=
Subject key identifier:   F5:DF:C4:D5:BB:E8:8D:9A:D1:55:2C:D6:D3:23:77:B3:92:85:1D:CC
Authority key identifier: AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D
Certificate issuer:       /CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
Certificate serial:       7639902377FBD7909B94492C141BD5F786AB98AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft
Manifest number:          021C
Signing time:             Sun 11 May 2025 12:34:41 +0000
Manifest this update:     Sun 11 May 2025 12:29:41 +0000
Manifest next update:     Mon 12 May 2025 14:10:41 +0000
Files and hashes:         1: 34352e36352e3232302e302f32322d3234203d3e20323033.roa (hash: cxO6IIL9FYl/S1JcP9ekX/bKJPpyhULDj81eVK4QpIQ=)
                          2: 323830343a336439303a3a2f33322d3438203d3e20323032.roa (hash: WpFnDTmY8zk59PrfyxW6Djzy0QYg50QAK1Hv57G5E+A=)
                          3: 34352e36352e3232302e302f32322d3234203d3e2033333536.roa (hash: dvS242K1P5rfv1OZRochVJr2gdCVE0YeATLaOsdgA6k=)
                          4: 34352e36352e3232302e302f32322d3234203d3e20323032.roa (hash: EUR7GzFQIh4+jSMjrVmtA4e+ZAoGf+CFRWmkwFMVmWU=)
                          5: 3137372e3232332e33322e302f32302d3234203d3e20323636353339.roa (hash: 9rNjQfR82W+oS90D8d3ALwDPX0Y2XfhUQX8gBYC9pwI=)
                          6: ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl (hash: vH+mDzviPXI0c4jz0ilWMZWJvyyDsxX+JdevGGVCOgY=)
                          7: 34352e36352e3232302e302f32322d3234203d3e20323636353339.roa (hash: j5xWu/EVFW9ukhAiwi1QRme12gZvEGiS4HhsB66VLnM=)
                          8: 323830343a336439303a3a2f33322d3438203d3e2033333536.roa (hash: 0px9Lv1h7cxoSy8j5wudsGRlY6Kz+2CKHSBfVhfTFkw=)
                          9: 323830343a336439303a3a2f33322d3438203d3e20323033.roa (hash: AQPHdJljAdhG/wYm9Kot+1Yr85ejt19heQzyn2Qy5Ok=)
                          10: 323830343a336439303a3a2f33322d3438203d3e20323636353339.roa (hash: x6VNtV4ozQq6MxJ5N63q7B16Gfy4nJWVWTksz+Uj+30=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl
                          rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 14:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:39:90:23:77:fb:d7:90:9b:94:49:2c:14:1b:d5:f7:86:ab:98:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
        Validity
            Not Before: May 11 12:29:41 2025 GMT
            Not After : May 12 14:10:41 2025 GMT
        Subject: CN=F5DFC4D5BBE88D9AD1552CD6D32377B392851DCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2c:59:34:3c:75:f9:5d:98:50:57:5e:32:54:
                    91:10:ae:44:ca:c7:64:7b:26:dd:3b:b0:61:a7:88:
                    de:67:8e:75:ee:f5:45:60:f2:63:ef:89:30:6f:bc:
                    63:3e:01:e5:c4:77:80:1d:47:90:ad:c0:8a:28:37:
                    6c:98:08:16:0f:e2:70:b5:67:df:4c:e3:4c:53:b8:
                    07:f2:e5:de:05:01:b1:76:e8:21:86:e0:d1:82:8e:
                    30:e6:f6:33:1b:a3:2d:ba:11:ec:1a:56:35:47:97:
                    b7:cf:6d:3b:b5:ab:44:bf:88:fd:e8:11:15:0d:6a:
                    88:74:2d:b2:28:0c:0c:de:1b:5a:45:a4:49:98:01:
                    f9:3b:92:20:97:69:6c:69:a1:49:90:38:5c:52:de:
                    6b:a4:23:c4:af:a6:2c:79:10:19:e3:5e:84:fb:6f:
                    3d:8a:ab:1c:e7:7e:57:ba:07:62:a0:fe:7b:40:3e:
                    df:a6:c4:21:56:73:f7:bb:40:76:dd:1c:c0:33:2c:
                    70:7b:65:ed:2b:31:e4:83:bd:01:65:43:01:a6:fb:
                    0d:ab:26:da:28:db:2f:fc:01:ea:53:48:0f:33:19:
                    40:83:c9:eb:2b:4f:4c:ed:cc:05:d5:8d:80:a0:8f:
                    7f:d4:15:41:8d:71:36:1e:af:c2:a3:6b:95:83:54:
                    b4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:DF:C4:D5:BB:E8:8D:9A:D1:55:2C:D6:D3:23:77:B3:92:85:1D:CC
            X509v3 Authority Key Identifier:
                keyid:AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ef:2e:df:1b:9b:f3:65:da:a4:0f:51:f4:0f:1c:d4:fb:42:
         18:21:42:2b:f2:0e:c8:93:9b:2a:b8:c3:b7:be:3f:aa:af:28:
         8e:bf:de:6f:89:5c:bc:af:df:ea:f3:bb:0d:76:01:3d:39:68:
         4d:47:96:df:bd:3d:01:17:1a:cb:8d:ab:0b:1d:ec:6d:6a:93:
         b9:a5:1d:44:c0:8d:66:26:f8:8c:31:96:1f:fc:c6:00:85:4c:
         4f:8e:94:c9:e8:cd:dc:0a:1a:86:60:c0:a9:64:75:45:56:56:
         8c:fe:26:ce:33:47:f6:ad:14:6b:2d:23:33:5b:16:75:a3:8f:
         4f:ee:30:6f:89:36:85:d0:ee:75:d1:47:5e:e1:c5:0e:8a:38:
         90:6e:51:a4:76:8b:70:14:f6:fd:b9:c9:72:62:a3:b2:b8:1d:
         70:8d:48:a3:35:2d:b8:cd:0a:63:ec:24:a6:0f:d0:e3:81:da:
         31:0d:d5:c5:29:eb:2e:23:62:99:2d:0e:45:99:e0:26:a3:8f:
         2d:89:8d:64:34:d0:54:dd:5e:6d:95:5a:95:34:cd:df:8a:de:
         c2:b1:4d:e9:2f:6c:39:63:ba:e8:77:59:47:93:b4:89:16:2a:
         42:2b:1e:38:39:57:55:1a:5d:70:b7:d3:ee:57:8f:97:45:af:
         a0:a5:81:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:34:08 2025 by rpki-client