Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.mft
File:                     70BE7503F48CCC14271EE75026EB08184789273F.mft (raw, json)
Hash identifier:          abjqZ6TCqQiH96pd+tdqYmt9lFrPwD/qBJIj8bxIewo=
Subject key identifier:   22:D7:78:84:E3:EC:09:9F:F1:B6:68:57:EC:5F:29:86:BC:FA:91:11
Authority key identifier: 70:BE:75:03:F4:8C:CC:14:27:1E:E7:50:26:EB:08:18:47:89:27:3F
Certificate issuer:       /CN=70BE7503F48CCC14271EE75026EB08184789273F
Certificate serial:       346D4848F7E9ABA2209A4FC2DB0B79B9EC76BB69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.mft
Manifest number:          01F2
Signing time:             Tue 07 Apr 2026 23:59:09 +0000
Manifest this update:     Tue 07 Apr 2026 23:54:09 +0000
Manifest next update:     Thu 09 Apr 2026 01:17:09 +0000
Files and hashes:         1: 70BE7503F48CCC14271EE75026EB08184789273F.crl (hash: wW2Ll0EIdOEdIWSURY0BoJ1d3JVnNDfbShjSfHjQvA4=)
                          2: 323830343a353365343a3a2f33322d313238203d3e203533313831.roa (hash: X7rByr1EHvceWtqQMxQYxECqiiiaE1r9OuQQcclY0RM=)
                          3: 34352e3136342e3131322e302f32322d3332203d3e203533313831.roa (hash: aJslR/vmDXJnzCKEwTHouZcKOuyOBd8owHk+C/drazo=)
                          4: 3133382e3230342e36342e302f32322d3332203d3e203533313831.roa (hash: +0lwzybCtoDpeA00IP/e/Nh0SdKI++xNXq5JaNtUODc=)
                          5: 3230312e33332e3136302e302f32302d3332203d3e203533313831.roa (hash: KrhAAU4cNicO+l+hNBnml/thEjeR1pJjbxjixaDlkps=)
                          6: 323830343a313133633a3a2f33322d313238203d3e203533313831.roa (hash: OecBUCYkrKTyWYL4WQ5GWNTtBKsmHjxtNhm4PhIxeGE=)
                          7: 3139312e3234312e36342e302f32302d3332203d3e203533313831.roa (hash: DYuiB7TyLSISWyN3egKqobN0v2AzCzHiYRko+R5xBns=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.crl
                          rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 01:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:6d:48:48:f7:e9:ab:a2:20:9a:4f:c2:db:0b:79:b9:ec:76:bb:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70BE7503F48CCC14271EE75026EB08184789273F
        Validity
            Not Before: Apr  7 23:54:09 2026 GMT
            Not After : Apr  9 01:17:09 2026 GMT
        Subject: CN=22D77884E3EC099FF1B66857EC5F2986BCFA9111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:75:d7:ea:9b:51:7b:97:3c:a1:fa:a4:eb:ba:
                    93:6e:a8:bb:9c:93:df:7a:b5:5d:ae:bf:ce:fb:e8:
                    78:71:b7:73:dd:c3:1d:2c:87:11:b6:67:71:50:f9:
                    ca:eb:e7:1c:ec:e5:74:66:85:08:65:cd:d5:3c:66:
                    c0:35:cd:46:6b:89:8b:ec:18:6d:b5:7a:d8:ed:d2:
                    b1:f0:4a:46:d8:ff:89:d8:35:3e:53:b1:78:a2:39:
                    3a:7a:19:3b:ec:83:ff:b3:25:ba:03:34:8b:32:66:
                    bf:c4:b9:e4:77:21:a7:76:9e:d1:0d:90:66:f9:a8:
                    e5:fc:30:91:ed:3d:21:3d:39:d9:4d:40:9a:73:af:
                    d5:be:c1:ca:7b:ee:3d:52:17:68:07:6d:ae:df:5e:
                    34:1c:96:05:a1:fc:80:83:2a:3b:ad:d5:0f:09:68:
                    d5:87:14:5e:85:6a:02:d4:67:95:15:13:80:7c:07:
                    24:a8:2f:1e:23:f1:9a:21:b4:7a:1c:98:85:41:d9:
                    6c:61:bd:13:97:0f:bb:9d:22:11:b3:45:2a:05:74:
                    e1:a4:5e:ad:cf:af:f8:03:c0:01:b6:be:69:93:75:
                    81:4a:2c:88:17:6f:d8:a0:95:8b:40:1a:aa:74:0b:
                    58:40:64:d6:8a:35:10:e7:1c:7b:60:99:5d:4b:42:
                    01:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D7:78:84:E3:EC:09:9F:F1:B6:68:57:EC:5F:29:86:BC:FA:91:11
            X509v3 Authority Key Identifier:
                keyid:70:BE:75:03:F4:8C:CC:14:27:1E:E7:50:26:EB:08:18:47:89:27:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:c9:1b:c4:e3:9e:64:a5:c6:f5:4c:fd:2f:3d:15:cd:f4:6f:
         97:4d:0d:75:ea:4e:12:c3:1a:bf:a2:5c:a7:d9:83:0f:48:1b:
         89:e1:dc:f2:61:d5:28:8d:be:4b:c1:47:5f:1e:b6:4a:73:39:
         39:54:3e:89:c1:bb:ce:80:41:c0:ef:09:23:96:25:cb:09:f4:
         04:d7:3b:14:d9:25:55:1a:49:a6:96:0c:e3:42:d5:80:e7:71:
         87:99:98:d5:d6:8d:73:d8:45:71:c9:df:c0:96:81:fc:47:13:
         f7:fd:6e:b2:b4:fe:7d:5a:b8:9c:f0:93:43:d8:e5:fa:01:aa:
         8a:ba:ea:92:86:80:f0:c9:bb:67:ca:92:bd:40:ad:21:88:dd:
         28:a0:1e:8d:02:d4:ff:a7:1d:1c:49:e1:ba:41:3b:25:2a:7c:
         3b:0c:cc:0e:18:90:7c:5a:3d:89:62:83:87:5a:4b:c9:ef:0b:
         24:56:86:c0:06:c4:52:7f:2b:85:6f:eb:e5:6d:29:22:66:ae:
         28:71:8d:86:9b:c5:7c:5d:91:27:4c:84:bb:e2:55:97:fa:dd:
         13:25:e8:f2:5a:38:8d:0d:55:10:fc:14:5b:9b:69:b4:04:f7:
         eb:4b:94:8b:12:9a:91:b5:c3:49:90:f7:0e:32:d7:18:df:be:
         5e:79:ec:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:32:52 2026 by rpki-client