Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/A8AB91CEEE9A5ADCB812E5C76B66DBE1B735692E.mft
File:                     A8AB91CEEE9A5ADCB812E5C76B66DBE1B735692E.mft (raw, json)
Hash identifier:          DqFUaX1DgljmQTA40PQUUqp+CSkKjk2ASW+Eh+HhvPs=
Subject key identifier:   4B:23:9E:DA:FD:1D:FA:F0:AE:1E:5A:09:8A:77:AC:0D:B0:47:8C:DD
Authority key identifier: A8:AB:91:CE:EE:9A:5A:DC:B8:12:E5:C7:6B:66:DB:E1:B7:35:69:2E
Certificate issuer:       /CN=A8AB91CEEE9A5ADCB812E5C76B66DBE1B735692E
Certificate serial:       47099F3F5724CA6FF3D3AAF6A52BA11A8FDADEB2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8AB91CEEE9A5ADCB812E5C76B66DBE1B735692E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/A8AB91CEEE9A5ADCB812E5C76B66DBE1B735692E.mft
Manifest number:          014C
Signing time:             Sun 01 Nov 2026 07:53:29 +0000
Manifest this update:     Sun 01 Nov 2026 07:48:29 +0000
Manifest next update:     Mon 02 Nov 2026 08:25:29 +0000
Files and hashes:         1: 3137392e34382e3134382e302f32322d3332203d3e203631353837.roa (hash: dAfRc1del+M4vYrwafQ4O0HdItYQk2rQtk7KG9DL7Ks=)
                          2: 34352e3136332e3231322e302f32322d3332203d3e203631353837.roa (hash: 0CVXdT7iwOJfz71vfb4izUcJrmrsaaUfwWzxMhhR4Ds=)
                          3: 323830343a343866303a3a2f33342d313238203d3e203631353839.roa (hash: mOVXu+DG8xRc2EYkEyilzUWID0du1Z12nYi55Un/cec=)
                          4: 3133312e3139362e31362e302f32322d3332203d3e203631353837.roa (hash: qPVr66D4kvDVicHTQFxQx00g0QEgmMt1MpfNmGAMPak=)
                          5: 34352e3233302e3130382e302f32342d3332203d3e203631353839.roa (hash: qAOJFRt8FLBSiAOx3XIrzGdaSzsx5RDsE58IQfurkZk=)
                          6: 323830343a333330303a3a2f33322d313238203d3e203631353837.roa (hash: fk+OzvMaAJRRealYqLRQ+C1gMNnPs7TdQk9Uuy0ALos=)
                          7: A8AB91CEEE9A5ADCB812E5C76B66DBE1B735692E.crl (hash: V5RP4V/mL69Uc36oydQz+7FJj5ky9JjEcaFxWmlvbKs=)
                          8: 3137302e3235342e3133362e302f32322d3332203d3e203631353837.roa (hash: eChAgjJU+9xzxtvcVkSnCuq//+HriyAwbNHTmedSuaU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/A8AB91CEEE9A5ADCB812E5C76B66DBE1B735692E.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/A8AB91CEEE9A5ADCB812E5C76B66DBE1B735692E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8AB91CEEE9A5ADCB812E5C76B66DBE1B735692E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 08:25:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:09:9f:3f:57:24:ca:6f:f3:d3:aa:f6:a5:2b:a1:1a:8f:da:de:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8AB91CEEE9A5ADCB812E5C76B66DBE1B735692E
        Validity
            Not Before: Nov  1 07:48:29 2026 GMT
            Not After : Nov  2 08:25:29 2026 GMT
        Subject: CN=4B239EDAFD1DFAF0AE1E5A098A77AC0DB0478CDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2f:1e:ae:a7:f8:5b:9c:d2:29:7d:8f:52:d1:
                    b6:1d:e1:ed:50:fd:50:9c:3c:a5:3a:cd:5c:cf:48:
                    b0:fa:8a:f6:8a:13:5e:db:c0:cb:ba:f5:78:5a:c3:
                    fa:9c:e4:a8:99:e6:67:f0:9e:a1:ac:65:da:1e:a2:
                    83:7e:80:c2:5b:b6:dd:28:9f:19:ba:2c:2f:18:b5:
                    fb:a3:5a:88:41:df:fc:fc:4a:4e:70:e8:80:dc:1b:
                    20:df:99:fd:8c:60:12:48:27:46:29:3f:ea:9e:cb:
                    f1:44:5c:04:9f:87:6c:f4:03:32:74:0e:da:61:ba:
                    95:3d:82:68:dc:c8:aa:9a:c0:2b:dc:dd:68:8e:83:
                    e3:67:7d:a7:71:19:08:24:12:b5:2b:fe:e6:8e:1c:
                    58:6a:99:7d:f9:c4:fd:f2:68:22:3d:78:24:e3:69:
                    c3:eb:16:74:bf:8a:c1:a0:b6:4e:90:2d:c0:69:92:
                    33:18:6e:e1:f7:31:5c:03:51:2c:c2:8e:71:72:42:
                    2b:07:8d:ed:ad:64:45:0a:40:fa:48:53:68:82:47:
                    db:43:20:04:ed:84:f0:a6:c4:f7:a7:a4:34:aa:97:
                    dd:ce:43:79:20:3f:7b:3c:ce:93:53:1e:4c:18:81:
                    f4:ae:c2:24:07:c1:36:8d:cf:0b:e8:21:42:3f:41:
                    cf:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:23:9E:DA:FD:1D:FA:F0:AE:1E:5A:09:8A:77:AC:0D:B0:47:8C:DD
            X509v3 Authority Key Identifier:
                keyid:A8:AB:91:CE:EE:9A:5A:DC:B8:12:E5:C7:6B:66:DB:E1:B7:35:69:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/A8AB91CEEE9A5ADCB812E5C76B66DBE1B735692E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8AB91CEEE9A5ADCB812E5C76B66DBE1B735692E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/A8AB91CEEE9A5ADCB812E5C76B66DBE1B735692E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:1b:b3:34:80:5f:f6:03:b6:3b:36:83:fb:24:b4:7a:2c:2d:
         57:3f:c5:7c:99:bd:16:ec:df:07:ce:06:35:c9:cf:09:be:08:
         82:36:ad:b7:b0:c4:e5:c9:a6:39:ee:81:57:97:a8:3c:a1:52:
         2e:ab:70:4e:c3:fe:c8:38:b0:8c:21:e7:be:00:f6:ae:7f:5d:
         1e:e0:7f:7b:70:cd:b4:be:89:d5:84:09:31:d8:80:c6:78:00:
         f9:f8:c1:b3:b3:bb:16:9c:d9:ba:10:ed:9f:64:b5:47:ae:ce:
         82:98:20:94:d3:27:b3:33:26:78:0a:da:fb:04:57:d2:e4:c6:
         d5:c7:31:49:81:1d:72:6e:76:0d:35:ec:eb:05:00:b0:16:23:
         a9:81:ec:42:d7:a7:82:ca:91:ca:09:b7:d7:41:ae:30:4a:b8:
         58:8e:a3:2c:da:03:a6:e1:2f:c1:cf:05:2d:75:84:57:8f:e3:
         82:62:fe:34:45:5f:db:73:e9:7d:62:73:87:20:fc:d9:60:28:
         68:40:86:84:61:c2:aa:ae:5a:a8:d5:14:4f:2a:a1:e6:26:22:
         96:ab:37:c0:89:ef:08:86:aa:97:6c:0e:db:82:9d:f7:ba:d5:
         e9:03:d5:f4:2c:55:6a:cf:c1:f8:11:43:50:56:68:b3:9a:01:
         7f:17:87:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 11:35:58 2026 by rpki-client