Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.mft
File:                     E533674BA5C26CC97186C54907220754478B1596.mft (raw, json)
Hash identifier:          YKtzmAa9k6sx3QrOQbXXRpN63i1uR/VWNpj/G3pmG4A=
Subject key identifier:   5B:61:DA:01:EA:14:15:19:04:36:7D:55:20:50:37:A7:28:4F:D4:0F
Authority key identifier: E5:33:67:4B:A5:C2:6C:C9:71:86:C5:49:07:22:07:54:47:8B:15:96
Certificate issuer:       /CN=E533674BA5C26CC97186C54907220754478B1596
Certificate serial:       1FA6D74071B8BA155C9559ED821A13DE53F5922F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E533674BA5C26CC97186C54907220754478B1596.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.mft
Manifest number:          033E
Signing time:             Wed 08 Apr 2026 07:24:36 +0000
Manifest this update:     Wed 08 Apr 2026 07:19:36 +0000
Manifest next update:     Thu 09 Apr 2026 10:07:36 +0000
Files and hashes:         1: 34352e3232392e32302e302f32322d3232203d3e20323637303931.roa (hash: +dIrHKkTsm3GkByCyul3aX/JY4WjRr2NWyGtU4+6BYk=)
                          2: 323830343a343830303a3a2f33322d3332203d3e20323637303931.roa (hash: GssHwwFGmDOvLZ4GZwo2OiueQ1zLNWk5Uza50Ow5YfY=)
                          3: 34352e3232392e32332e302f32342d3234203d3e20323637303931.roa (hash: iqwOFTQ5wIkf8n0sPor3aYMmt0/voAhe0nVNPjjKIfw=)
                          4: 34352e3232392e32302e302f32342d3234203d3e20323637303931.roa (hash: fUdbu70RdfDpRf1imMX/NHDfHC0BngbLoXTvCnBaaPw=)
                          5: 34352e3232392e32312e302f32342d3234203d3e20323637303931.roa (hash: LTxMVxuyuFOaNOXhApn2D15ag0sYq+F355Y7AyypI1k=)
                          6: E533674BA5C26CC97186C54907220754478B1596.crl (hash: zkRMZfN8gDXrERCkeBSu2wJNHWiPVeZySm18uj7QJNA=)
                          7: 34352e3232392e32322e302f32342d3234203d3e20323637303931.roa (hash: OufUszNAwdTkYGGkoMrVbhlvse4wLzgSyBoffAkDg18=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.crl
                          rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E533674BA5C26CC97186C54907220754478B1596.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 09:23:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a6:d7:40:71:b8:ba:15:5c:95:59:ed:82:1a:13:de:53:f5:92:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E533674BA5C26CC97186C54907220754478B1596
        Validity
            Not Before: Apr  8 07:19:36 2026 GMT
            Not After : Apr  9 10:07:36 2026 GMT
        Subject: CN=5B61DA01EA14151904367D55205037A7284FD40F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bc:d2:41:07:59:3e:61:cf:e3:af:c3:0a:0d:
                    84:22:3b:52:49:e7:2a:dd:c4:8f:71:16:14:0f:5f:
                    92:49:52:2b:33:44:ba:41:bf:99:db:a6:cb:47:a0:
                    02:d1:3c:cf:8d:b8:61:96:62:fc:4c:65:7f:75:b3:
                    62:c9:80:fb:3b:f2:2e:b3:0e:42:f1:9b:a6:b2:b6:
                    49:a9:52:a3:7e:80:01:85:52:8d:86:9c:56:fe:7c:
                    09:3a:66:db:bd:b9:9e:f9:d5:a2:87:2e:84:4d:ec:
                    18:d7:ac:a4:44:27:fa:27:3f:8a:d5:c2:5a:84:ce:
                    e1:bc:c6:b5:6d:0e:14:33:c9:79:16:42:23:f8:62:
                    23:d5:77:7c:1b:a7:80:54:52:71:ff:83:ea:5d:41:
                    23:4f:63:92:8b:89:b0:da:b2:b2:51:a1:91:52:9f:
                    fe:36:0c:9d:3e:33:cf:1e:ac:0c:de:84:e9:53:3f:
                    9b:70:fb:83:c6:0d:92:49:41:57:ba:b5:ff:74:02:
                    92:23:f0:d3:15:02:2e:d9:3e:96:07:ae:8c:27:f1:
                    63:12:08:d6:1a:da:22:26:66:17:60:9c:07:93:5c:
                    be:37:31:f2:66:cb:95:a5:60:99:ab:3c:ef:18:a7:
                    5c:8e:5f:66:57:71:27:50:e2:01:3c:2c:ea:c7:bb:
                    33:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:61:DA:01:EA:14:15:19:04:36:7D:55:20:50:37:A7:28:4F:D4:0F
            X509v3 Authority Key Identifier:
                keyid:E5:33:67:4B:A5:C2:6C:C9:71:86:C5:49:07:22:07:54:47:8B:15:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E533674BA5C26CC97186C54907220754478B1596.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:11:67:0b:b1:e7:8a:9d:91:e4:16:65:91:3c:93:5b:1a:47:
         75:c2:33:0d:08:21:3a:f9:97:b3:b8:35:a0:40:12:13:70:94:
         e0:52:02:e4:c2:91:0a:d1:fd:9e:b8:b2:73:5b:51:65:99:a7:
         3c:d3:05:3b:40:43:27:83:a5:d1:f9:7e:64:3b:92:69:05:06:
         7a:9a:23:88:8d:c8:18:e6:52:7a:48:14:7a:f4:a8:46:ef:00:
         63:b8:59:eb:1b:71:6b:dc:84:d0:02:c6:4b:49:a8:52:35:4e:
         5b:8c:4b:eb:53:02:0c:02:00:29:12:a7:11:49:1e:f8:3b:c2:
         81:d7:1b:c3:7a:10:12:0a:6b:9a:bf:c3:73:7c:19:8f:16:e8:
         b6:0f:58:ab:05:81:ed:fa:2f:00:d0:70:51:3c:25:c0:95:6a:
         96:e9:5c:88:93:d1:6e:22:a0:ec:d3:04:ba:e0:28:98:56:f4:
         94:eb:33:17:8c:fa:3d:41:2d:a6:e7:20:ce:68:d6:84:53:30:
         31:13:5b:2d:8f:40:f7:59:fd:ef:4b:a2:34:51:e7:d1:a3:5d:
         b3:0c:1a:c5:bc:72:6b:18:75:a1:97:28:55:86:25:20:38:63:
         54:02:6e:e7:a2:f4:16:22:75:29:e7:4d:02:b0:ca:48:03:22:
         80:ff:de:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 11:19:12 2026 by rpki-client