Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/C801EAA1CC457717CBCC481FD7FD0E452AF6A583.mft
File:                     C801EAA1CC457717CBCC481FD7FD0E452AF6A583.mft (raw, json)
Hash identifier:          oW/0NnPK6/p1hFygZmJOwSWORqBk0zFUuzsoXwn0TBk=
Subject key identifier:   CA:8C:44:9B:18:5D:FA:D3:99:17:24:68:6E:A9:CE:C1:A0:33:E9:E6
Authority key identifier: C8:01:EA:A1:CC:45:77:17:CB:CC:48:1F:D7:FD:0E:45:2A:F6:A5:83
Certificate issuer:       /CN=C801EAA1CC457717CBCC481FD7FD0E452AF6A583
Certificate serial:       082E8FBB6B11F99702617F3858789642D17FD6F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C801EAA1CC457717CBCC481FD7FD0E452AF6A583.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/C801EAA1CC457717CBCC481FD7FD0E452AF6A583.mft
Manifest number:          40
Signing time:             Mon 02 Mar 2026 09:12:32 +0000
Manifest this update:     Mon 02 Mar 2026 09:07:32 +0000
Manifest next update:     Tue 03 Mar 2026 13:07:32 +0000
Files and hashes:         1: 3137372e33362e3139322e302f31392d3332203d3e203532393637.roa (hash: 1fX1kR9ByoBM7HXoquU/urhODlNbXcubnDf2gA1iqTA=)
                          2: C801EAA1CC457717CBCC481FD7FD0E452AF6A583.crl (hash: weyA69QAsYqplnHNM7gFv1KgxwFPJWRPJxtRKzq38o4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/C801EAA1CC457717CBCC481FD7FD0E452AF6A583.crl
                          rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/C801EAA1CC457717CBCC481FD7FD0E452AF6A583.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C801EAA1CC457717CBCC481FD7FD0E452AF6A583.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 13:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:2e:8f:bb:6b:11:f9:97:02:61:7f:38:58:78:96:42:d1:7f:d6:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C801EAA1CC457717CBCC481FD7FD0E452AF6A583
        Validity
            Not Before: Mar  2 09:07:32 2026 GMT
            Not After : Mar  3 13:07:32 2026 GMT
        Subject: CN=CA8C449B185DFAD3991724686EA9CEC1A033E9E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:11:c0:03:42:99:11:08:e1:c1:5c:91:52:ae:
                    e2:e3:a0:19:26:05:1f:29:a6:f0:c2:9f:56:6c:be:
                    72:d7:a8:6d:05:c3:84:db:27:f6:82:a0:cc:f5:48:
                    29:3f:f0:59:30:85:fc:0a:27:b5:ac:88:20:d3:03:
                    bb:ae:71:ce:9f:29:38:c1:93:e9:3a:3c:e8:00:a5:
                    d7:3d:8a:f5:6c:ec:3f:8e:93:10:6e:47:d4:57:1c:
                    af:b3:ee:cc:71:7c:12:84:63:92:79:7d:a1:a6:b9:
                    28:48:54:e5:14:fe:28:dc:e5:f4:f5:f6:fd:a7:76:
                    9f:35:4d:a7:4d:d2:a9:3b:a7:d2:62:30:6a:45:1f:
                    6e:40:55:ce:58:f3:26:fd:04:a0:a8:88:b5:07:87:
                    23:e3:c7:ef:dc:78:4f:03:f3:8c:ce:3f:9b:5e:0d:
                    c5:3f:58:17:45:80:fc:c2:54:de:dd:21:1f:a3:58:
                    a2:ad:a5:e3:cf:3a:b7:ff:e0:78:28:5a:76:cd:75:
                    af:02:b5:06:0d:86:fe:97:45:e4:e9:68:3a:17:d7:
                    fa:b3:e2:c7:dd:85:11:0c:3e:c4:25:b0:c3:63:09:
                    10:bb:24:fc:7d:f1:f4:9e:c8:24:e6:7d:90:d9:d8:
                    07:be:a4:de:fc:76:38:17:77:40:d2:da:fa:3f:3e:
                    e8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8C:44:9B:18:5D:FA:D3:99:17:24:68:6E:A9:CE:C1:A0:33:E9:E6
            X509v3 Authority Key Identifier:
                keyid:C8:01:EA:A1:CC:45:77:17:CB:CC:48:1F:D7:FD:0E:45:2A:F6:A5:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/C801EAA1CC457717CBCC481FD7FD0E452AF6A583.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C801EAA1CC457717CBCC481FD7FD0E452AF6A583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/C801EAA1CC457717CBCC481FD7FD0E452AF6A583.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:52:c5:23:ac:13:cb:9a:0c:9c:f3:d6:b6:4a:04:3a:15:0e:
         27:2f:b0:2c:01:57:eb:9d:d1:bb:f3:80:49:3a:00:72:8d:53:
         7c:5d:67:f8:3d:24:6b:bc:8f:f4:21:ed:1a:27:7b:04:34:f0:
         f0:c3:b2:52:d8:08:67:22:0e:5e:e0:ab:3d:ff:16:7a:68:45:
         88:2b:91:d8:87:95:8a:2d:4f:68:cb:db:2c:8c:5f:9e:93:40:
         a5:87:e0:99:60:f3:34:c5:54:b0:f8:52:7c:72:6a:4e:82:e2:
         ec:af:35:a8:38:d4:f6:7f:d2:c0:30:c6:b7:6b:26:5e:ba:3a:
         2d:51:95:e4:3c:63:14:77:d9:11:08:7a:4b:88:33:65:8a:de:
         b7:4d:60:04:33:8d:42:02:a8:f7:42:5b:df:cd:99:31:73:00:
         b9:ef:2d:14:57:09:67:c4:ba:dd:1d:cb:40:03:17:e9:28:58:
         ee:b3:3b:8a:1e:18:57:d7:b3:ab:5e:fa:fc:c6:a7:e0:68:6a:
         87:e1:cd:b1:cf:c1:a2:89:4a:cd:68:94:c3:5e:ec:2d:a7:61:
         70:b4:5b:51:82:63:ac:e9:39:f9:f7:24:2f:55:31:05:ce:57:
         e2:f3:29:88:c1:e6:bd:89:34:9e:af:a0:a5:c2:74:08:f2:ca:
         92:f1:9a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:25:29 2026 by rpki-client