Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/C157E5F588C0832A94818A6C0EEC46D363140D95.mft
File:                     C157E5F588C0832A94818A6C0EEC46D363140D95.mft (raw, json)
Hash identifier:          DE1R/cjqQ/p7GUt3VIpfo9AqpI3WGqxqXBRfA3ibeOU=
Subject key identifier:   5A:9F:17:0D:0C:36:0E:C8:D9:1E:2B:7C:F6:08:DF:58:68:C0:05:0F
Authority key identifier: C1:57:E5:F5:88:C0:83:2A:94:81:8A:6C:0E:EC:46:D3:63:14:0D:95
Certificate issuer:       /CN=C157E5F588C0832A94818A6C0EEC46D363140D95
Certificate serial:       73210A49A8540FCCB2FB6876E35F241A157B11A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C157E5F588C0832A94818A6C0EEC46D363140D95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/C157E5F588C0832A94818A6C0EEC46D363140D95.mft
Manifest number:          2B
Signing time:             Sat 23 May 2026 21:32:17 +0000
Manifest this update:     Sat 23 May 2026 21:27:17 +0000
Manifest next update:     Sun 24 May 2026 22:05:17 +0000
Files and hashes:         1: 3137372e3130352e3230302e302f32342d3234203d3e20323731363633.roa (hash: MzYg52YEf5OgKJcaH8V5m6rCqkK+8nQhXLCxd1yHpq0=)
                          2: C157E5F588C0832A94818A6C0EEC46D363140D95.crl (hash: 5v/uZdOmBAlRGBL93PF3+B8dzonFhXe35KyyMCUaDbQ=)
                          3: 3137372e3130352e3230332e302f32342d3234203d3e20323731363633.roa (hash: STJpfeF6BKZUIQUCJLXZ02RFoYtwLBpFq6Jlhx9b0l4=)
                          4: 323830343a376630633a3a2f33342d3334203d3e20323731363633.roa (hash: KnOgaGkm0gudyEXmII6QV/fpEvhRFmK79izJtYt9Gtc=)
                          5: 3137372e3130352e3230312e302f32342d3234203d3e20323731363633.roa (hash: tAd3fKpfj0IdieGMX1sFOod/XAVIEtM5/BMZJQLKNaI=)
                          6: 323830343a376630633a336530303a3a2f34302d3430203d3e20323731363633.roa (hash: SpiIHzqB8x1TINxlw86uwDcFLhykWpedpP0R13nq+dA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/C157E5F588C0832A94818A6C0EEC46D363140D95.crl
                          rsync://rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/C157E5F588C0832A94818A6C0EEC46D363140D95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C157E5F588C0832A94818A6C0EEC46D363140D95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 May 2026 22:05:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:21:0a:49:a8:54:0f:cc:b2:fb:68:76:e3:5f:24:1a:15:7b:11:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C157E5F588C0832A94818A6C0EEC46D363140D95
        Validity
            Not Before: May 23 21:27:17 2026 GMT
            Not After : May 24 22:05:17 2026 GMT
        Subject: CN=5A9F170D0C360EC8D91E2B7CF608DF5868C0050F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d5:bf:fa:15:1a:81:b4:85:c3:9e:a5:d8:4b:
                    55:ae:ce:95:29:98:fa:60:0e:a8:50:a4:62:9f:1b:
                    7e:cc:1c:71:f4:60:cb:0f:b1:92:b9:70:8c:03:66:
                    a5:43:d1:8a:83:e2:37:d8:10:c7:e7:79:5c:34:b3:
                    d6:d7:c4:03:d3:a9:7c:8c:51:28:c2:a5:bb:cb:c4:
                    69:18:ca:c0:33:74:04:f5:de:a9:03:ea:1a:d1:6e:
                    97:68:67:3f:4b:3e:d4:23:e2:5b:89:d6:c0:36:3b:
                    9a:bb:03:93:11:50:b9:b1:08:2e:6d:97:65:06:1e:
                    ed:83:6b:27:96:c8:b9:80:af:2f:91:6a:17:16:63:
                    91:4c:f0:92:c2:d1:43:9e:1d:cf:91:80:8c:da:84:
                    dd:83:a6:b4:a0:79:71:6e:e6:93:19:40:f7:2d:46:
                    ac:87:95:e2:1e:b8:4d:b1:5a:8c:d1:2b:68:67:ff:
                    ac:f1:d1:a7:20:70:61:68:dc:e0:71:85:04:ff:c3:
                    7e:f3:b5:8f:94:c6:47:ad:e2:cd:e3:57:14:32:ca:
                    32:0d:9e:cb:03:60:cb:fd:9b:c0:50:33:5f:d9:48:
                    d2:5b:37:00:31:93:c9:bd:d9:e3:4d:c6:11:3a:96:
                    f7:33:64:dd:2d:5a:38:05:ac:de:5f:eb:f1:b8:0a:
                    3f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9F:17:0D:0C:36:0E:C8:D9:1E:2B:7C:F6:08:DF:58:68:C0:05:0F
            X509v3 Authority Key Identifier:
                keyid:C1:57:E5:F5:88:C0:83:2A:94:81:8A:6C:0E:EC:46:D3:63:14:0D:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/C157E5F588C0832A94818A6C0EEC46D363140D95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C157E5F588C0832A94818A6C0EEC46D363140D95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/C157E5F588C0832A94818A6C0EEC46D363140D95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:9a:e6:7a:fb:5c:35:d6:41:a4:f6:36:b1:f1:76:e4:21:b4:
         f9:ee:88:be:47:72:af:ba:f7:e8:40:3e:74:0b:53:9f:a2:4f:
         e8:2c:44:d0:a3:28:90:aa:a5:c0:6c:57:17:0e:75:95:7b:d4:
         aa:1c:a1:88:77:bf:5f:7b:9f:52:6f:5e:07:93:a0:fb:5a:2b:
         2a:e9:14:2d:df:34:22:83:ea:fa:e8:a2:4d:10:d3:b5:c2:9d:
         fd:6b:78:90:5b:6a:27:14:39:e3:ab:7e:07:ca:05:90:0c:e1:
         3c:22:7b:76:99:58:9c:1c:6b:4e:fa:eb:34:99:a9:c7:63:b7:
         01:b4:9e:37:ea:c9:8c:43:ee:3b:63:8c:b7:77:c2:ec:a8:eb:
         b6:e2:f0:bf:e7:74:bb:cb:8a:b5:51:d1:df:a7:4c:69:84:a8:
         0b:50:dc:bb:1b:8d:50:19:d8:da:2e:d2:3e:c0:67:04:a7:52:
         f6:fc:9c:00:81:81:47:09:c0:79:a4:6e:56:dc:47:9d:5b:f4:
         4b:c4:6d:e1:1b:67:2c:59:3f:62:ba:83:f1:27:95:fd:b6:2f:
         93:f5:42:2f:6b:68:31:31:e4:8e:41:44:db:bc:b3:73:2d:b1:
         6c:60:ae:0b:4e:68:8e:3f:20:d2:95:12:13:02:c3:63:d2:37:
         94:ab:fc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 12:48:05 2026 by rpki-client