Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.mft
File:                     CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.mft (raw, json)
Hash identifier:          1rmqJvRd4bnnx094Guhq13QDX3PoLnDxBB4bMgyuTCo=
Subject key identifier:   58:10:16:95:BE:54:F6:EA:94:EE:41:DA:80:43:08:A8:B2:64:E2:E9
Authority key identifier: CE:A8:51:8E:6D:0B:35:AA:61:2E:2F:3C:93:75:0E:C0:B5:28:6E:20
Certificate issuer:       /CN=CEA8518E6D0B35AA612E2F3C93750EC0B5286E20
Certificate serial:       590D0529E5AFD85C43A5AB46FA62E1C823D277A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.mft
Manifest number:          0120
Signing time:             Tue 21 Jul 2026 00:00:58 +0000
Manifest this update:     Mon 20 Jul 2026 23:55:58 +0000
Manifest next update:     Wed 22 Jul 2026 03:59:58 +0000
Files and hashes:         1: 323830343a393732633a3a2f33322d313238203d3e20323734333839.roa (hash: kTr6CKpzTKUFfgoDsLlDzKHFTQvHPRxo2ersppPwDCk=)
                          2: CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.crl (hash: zgvR+OoPNjiwD5bO//yHRWZ48yrSQL+kqtufnzSqJYU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.crl
                          rsync://rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Jul 2026 03:59:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:0d:05:29:e5:af:d8:5c:43:a5:ab:46:fa:62:e1:c8:23:d2:77:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEA8518E6D0B35AA612E2F3C93750EC0B5286E20
        Validity
            Not Before: Jul 20 23:55:58 2026 GMT
            Not After : Jul 22 03:59:58 2026 GMT
        Subject: CN=58101695BE54F6EA94EE41DA804308A8B264E2E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f6:b9:46:d6:6f:7a:58:5e:c9:03:78:50:52:
                    14:e3:25:69:40:63:d4:68:e5:04:1a:3e:fb:b7:cd:
                    a8:90:ad:3d:07:66:f1:54:c1:c3:7c:2e:30:b0:c6:
                    3e:e5:cd:b4:03:83:d0:be:76:5b:32:0a:0c:c5:ad:
                    ad:5c:bf:1c:c3:5e:60:fc:ca:ce:23:70:72:8b:ab:
                    0f:27:16:1c:30:93:c4:3a:f5:a2:db:34:3b:31:c7:
                    5b:a9:21:2a:fc:d1:3b:2a:a8:6d:17:ac:c3:0a:5f:
                    67:cf:9d:24:1c:4b:2e:7d:dd:17:84:b0:04:94:2c:
                    08:f8:42:4d:c6:32:b2:c1:a2:a5:5f:c4:b8:82:fa:
                    ac:8f:bf:82:7d:cc:56:1f:24:5c:92:9b:eb:34:08:
                    d3:46:f5:fd:9c:1a:78:b3:57:ef:73:26:90:cc:cd:
                    0b:f3:6f:a0:70:eb:c3:a3:3e:53:d5:1b:ef:bb:df:
                    56:f6:44:53:59:09:52:ee:e2:92:96:f9:6a:92:89:
                    54:db:5e:56:9a:b5:24:48:9b:c8:ba:ab:44:75:90:
                    39:cf:44:50:c0:94:79:f9:31:72:6e:f1:49:b3:c6:
                    eb:06:20:4c:65:e0:b0:d3:78:69:ef:d1:5c:71:6b:
                    af:f5:49:15:91:59:2c:13:ae:8a:f8:ad:8d:73:cb:
                    aa:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:10:16:95:BE:54:F6:EA:94:EE:41:DA:80:43:08:A8:B2:64:E2:E9
            X509v3 Authority Key Identifier:
                keyid:CE:A8:51:8E:6D:0B:35:AA:61:2E:2F:3C:93:75:0E:C0:B5:28:6E:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:cb:df:cf:63:ed:07:55:85:70:ca:b2:99:07:88:93:da:a0:
         23:3d:04:03:b7:46:69:24:74:da:eb:66:c2:72:13:dd:5d:a0:
         60:73:21:03:26:67:6f:0b:22:31:dd:6f:22:63:4f:30:db:06:
         28:c0:e2:cc:37:66:e6:58:6d:b7:7f:59:00:f3:cd:3e:b8:7c:
         d3:b4:23:16:ac:79:6b:6f:8e:4e:97:1c:71:91:68:8c:89:7a:
         0d:b6:7a:8e:14:92:1a:fb:23:f8:6e:be:77:8d:77:26:2d:63:
         90:ee:1f:35:23:89:30:59:29:78:c0:c9:bf:8d:44:33:97:ac:
         c5:fb:55:30:1d:e7:00:2f:66:ab:8a:3a:46:e1:4b:4a:e5:3d:
         f6:49:6f:c9:17:9c:be:38:8a:2a:a1:b4:5a:68:2a:68:b3:3a:
         fa:05:ca:80:6e:e7:2f:b8:69:e0:10:2b:12:2a:11:2e:08:0b:
         6d:a0:33:06:4e:a8:95:9a:20:d3:52:cc:79:35:5f:6c:f0:21:
         cc:17:4e:f8:e9:8c:e5:1e:36:21:f4:f8:f0:d9:00:f9:75:72:
         d8:6c:27:4b:9d:2b:13:2b:65:50:cc:0e:d5:20:ec:f6:bb:56:
         ef:45:e8:7e:49:37:1a:de:11:49:e9:b4:b5:60:bf:86:f9:c4:
         ec:58:0b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:37:58 2026 by rpki-client