Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.mft
File:                     5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.mft (raw, json)
Hash identifier:          RsYiob4lgs7rCQDp2m8GgjwGxIiNOZlhxMNR+tnh0oI=
Subject key identifier:   A1:E5:B0:AC:AF:EA:87:B4:0B:A0:5E:EE:B8:DC:F8:19:D9:3F:0F:43
Authority key identifier: 5A:B6:40:91:91:BC:25:DA:93:A8:6C:B1:B7:9F:23:A5:B4:7F:AA:BE
Certificate issuer:       /CN=5AB6409191BC25DA93A86CB1B79F23A5B47FAABE
Certificate serial:       0EC21D7BC40B7B35D42F30924E18C8203F69BE6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.mft
Manifest number:          30
Signing time:             Sun 01 Mar 2026 19:18:16 +0000
Manifest this update:     Sun 01 Mar 2026 19:13:16 +0000
Manifest next update:     Mon 02 Mar 2026 23:02:16 +0000
Files and hashes:         1: 3137372e38342e34322e302f32332d3233203d3e203532373038.roa (hash: aigx5YHZ2LGYrbiKJU/rCwNvliN+FENooEnp3miAS5o=)
                          2: 5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.crl (hash: tQM+OaNpEuoekZVOVSfWswpzhqw7COPxpmGEDfHjBFc=)
                          3: 3137372e38342e34302e302f32332d3233203d3e203532373038.roa (hash: TodcrLb+sxMQvWrO7huELyDwb+vVjjgErqOtkRhra0Y=)
                          4: 3133382e3131382e3130302e302f32332d3233203d3e203532373038.roa (hash: pQ5en1dEPybHn3WkfvRYmcU85ClCfx2AmsKKQ2TaBz8=)
                          5: 323830343a323530343a3a2f33322d3332203d3e203532373038.roa (hash: 89gd5KOOEEbsHFUPQa6V6Rceb2Ock6gfZSHuLxlzph8=)
                          6: 3133382e3131382e3130322e302f32332d3233203d3e203532373038.roa (hash: mXlWsnNl6DaiIw+Xl/HfhoLmtwwTFHKJPvH+nyhg7xs=)
                          7: 3137372e38342e34302e302f32322d3232203d3e203532373038.roa (hash: wZ0yXVykZMLbD6s2rpH7sbXkIStBzV2jV1aITe64uRc=)
                          8: 3133382e3131382e3130302e302f32322d3232203d3e203532373038.roa (hash: HmXMINvYuED9jEOP1Wf0teHPDFCTLwqcS18Z41EqCf8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.crl
                          rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 23:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c2:1d:7b:c4:0b:7b:35:d4:2f:30:92:4e:18:c8:20:3f:69:be:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB6409191BC25DA93A86CB1B79F23A5B47FAABE
        Validity
            Not Before: Mar  1 19:13:16 2026 GMT
            Not After : Mar  2 23:02:16 2026 GMT
        Subject: CN=A1E5B0ACAFEA87B40BA05EEEB8DCF819D93F0F43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:de:e6:c1:94:ec:2b:e1:1c:92:a8:d9:c8:07:
                    bf:32:6d:96:f4:2d:7f:30:52:71:1e:ad:e0:57:fc:
                    6a:bb:67:52:fc:b4:7d:2b:c9:3b:70:44:d3:94:bb:
                    59:ba:a3:6b:22:9a:a8:92:b4:0c:ba:0d:99:28:f2:
                    11:66:09:46:36:50:19:9c:18:a2:d1:97:98:af:f6:
                    1e:92:ec:77:ef:f6:c1:c4:d7:9f:ad:fd:cf:85:a8:
                    32:91:fb:d7:77:65:0c:a0:4e:d7:e9:c1:67:2d:93:
                    2c:d8:23:98:a9:97:e3:d7:cd:46:47:e0:54:0d:3d:
                    79:d1:99:7e:78:43:6f:08:6d:1f:d7:60:1a:c5:fe:
                    29:fa:99:28:c5:4f:64:a5:98:ac:66:32:51:d4:25:
                    99:89:fc:4e:9b:86:05:d8:4f:a1:2d:ef:2b:4c:a7:
                    45:bb:38:18:2e:77:f8:77:69:d0:5f:3b:9b:a3:6d:
                    56:a2:0e:17:d7:17:7e:db:c3:e4:51:60:9b:af:e3:
                    07:e2:e5:8b:4f:62:67:a9:4b:03:1e:57:7a:21:5b:
                    03:ef:aa:ce:ec:9e:4c:32:23:26:ac:ff:30:8f:f2:
                    10:d0:46:c1:7c:a7:9e:37:a1:85:f6:37:37:84:aa:
                    58:af:1c:09:35:86:df:21:4a:2a:1e:55:c5:f8:9e:
                    1a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E5:B0:AC:AF:EA:87:B4:0B:A0:5E:EE:B8:DC:F8:19:D9:3F:0F:43
            X509v3 Authority Key Identifier:
                keyid:5A:B6:40:91:91:BC:25:DA:93:A8:6C:B1:B7:9F:23:A5:B4:7F:AA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:a6:7f:48:15:3d:f4:0c:ed:90:af:a7:0e:7f:e3:f5:f1:56:
         39:11:17:72:0b:3c:00:16:e8:36:63:d5:99:2c:ea:f1:64:d1:
         fc:b8:66:82:9d:1d:e9:b7:98:4d:2a:b4:67:22:ad:d1:7b:42:
         17:51:aa:95:57:40:2c:a9:8a:99:7f:b2:3d:5c:39:33:9c:b1:
         43:6e:34:29:f0:20:a4:16:de:c4:02:40:b6:0a:9c:58:d7:93:
         bd:74:53:af:c8:62:da:0a:e2:cb:0b:91:04:be:28:85:e3:70:
         1e:01:48:fe:21:30:0a:06:ea:78:76:68:d4:68:a0:6a:11:f2:
         4f:b6:11:3f:1a:2a:07:30:fe:59:3c:ae:fa:12:17:3d:19:42:
         42:be:ed:60:b9:5d:16:7e:f6:1b:96:b7:dc:b6:1a:1a:6b:ce:
         39:3d:1e:1b:ec:be:66:85:73:3b:0e:29:15:1f:0d:e5:91:6a:
         1e:6c:5f:92:ed:c6:de:96:d6:ba:98:68:9e:17:e5:8a:73:92:
         f4:06:5b:04:8d:a3:9f:b2:c3:09:0e:19:8c:fc:79:83:56:5c:
         7b:d8:ad:da:67:84:2c:19:b4:36:f1:71:ef:02:47:74:55:09:
         8b:66:2a:d6:50:84:c7:89:03:8a:91:49:3b:4a:9f:07:31:b0:
         34:ed:90:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:01:30 2026 by rpki-client