Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.mft
File:                     2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.mft (raw, json)
Hash identifier:          hZs9DX2Ge+9+A53Lj/0NSFmaf9uaid+1JjgThWcV2qc=
Subject key identifier:   B8:3B:A8:B5:18:D9:8E:B7:1C:8B:77:39:14:C4:B4:99:CE:E7:87:3F
Authority key identifier: 2E:B5:29:B0:ED:AE:44:7E:3F:0B:C4:18:52:21:ED:03:94:CF:C7:DC
Certificate issuer:       /CN=2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC
Certificate serial:       2A3F0DA655128D7B8AF992EF491D256B90546469
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.mft
Manifest number:          01F2
Signing time:             Sun 23 Aug 2026 11:37:26 +0000
Manifest this update:     Sun 23 Aug 2026 11:32:26 +0000
Manifest next update:     Mon 24 Aug 2026 13:39:26 +0000
Files and hashes:         1: 34352e3136342e3130362e302f32332d3233203d3e20323633333238.roa (hash: u/vopGCJFzIgr4pM4mboT2fF7srQmhjjZoCuTYSTkSw=)
                          2: 2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.crl (hash: FAm0CJou1D/oYmATBzq0BgC3Sz+lV52nyJqIr5ZlDE0=)
                          3: 34352e3136342e3130342e302f32322d3232203d3e20323633333238.roa (hash: XYaGRbxo6wrGy2KGeIuScyrSvu8sxfpitGCnVNG9W7s=)
                          4: 323830343a313436383a3a2f33322d313238203d3e20323633333238.roa (hash: 3wQeAdzNFRAqy0OxmQOWNuALdsmlCWNOFTk9fw4LTMw=)
                          5: 3137302e302e35362e302f32322d3332203d3e20323633333238.roa (hash: hHSpMVhFDWQiH+udMM1R1Pwsh/by1H9CoXHNhzXZL4I=)
                          6: 34352e3136342e3130342e302f32332d3233203d3e20323633333238.roa (hash: HBn5VaMhlqrTmJpKT+PRo6qs2/VuvKi2qwEb9jVf8O0=)
                          7: 3139312e372e3138342e302f32322d3332203d3e20323633333238.roa (hash: 7ggHqaf4fKkXPZNeQVOV3TOjhb/c3HcEGUiehvmCjkE=)
                          8: 34352e3136342e3130342e302f32322d3332203d3e20323633333238.roa (hash: +X7u6whcCRGbI9LnftQ/MZpKdzaYeOOJOmdNgLJmTlI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.crl
                          rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 12:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:3f:0d:a6:55:12:8d:7b:8a:f9:92:ef:49:1d:25:6b:90:54:64:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC
        Validity
            Not Before: Aug 23 11:32:26 2026 GMT
            Not After : Aug 24 13:39:26 2026 GMT
        Subject: CN=B83BA8B518D98EB71C8B773914C4B499CEE7873F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:88:61:cf:03:ef:9d:26:4a:6a:11:81:dc:97:
                    17:85:b3:02:7d:57:f2:2b:52:43:69:89:16:b1:f7:
                    5b:04:80:f8:72:e3:3c:8e:a9:40:e8:03:a5:0f:0f:
                    5d:40:1b:64:a0:2e:a4:8c:47:1b:52:30:3b:87:fb:
                    72:08:64:bc:06:dd:6f:6e:4a:7c:45:ca:4a:b8:41:
                    a0:93:3a:89:4c:eb:f8:41:c1:f9:97:aa:71:7e:6c:
                    f9:60:0b:c7:09:b9:14:f1:bc:60:2e:cf:1f:83:21:
                    81:5d:93:09:55:b4:63:03:c2:b4:c6:34:71:21:cc:
                    05:df:4f:4d:79:fc:ef:a7:b3:b6:bb:af:3c:5b:8e:
                    5d:a1:b7:d6:86:dd:49:16:d7:23:63:37:1c:2f:32:
                    74:14:dd:98:a6:2a:59:3b:27:f3:50:d5:3d:75:8f:
                    74:1a:30:b9:0b:b8:5e:fc:ea:b6:fa:16:e8:db:59:
                    05:2f:d1:8e:46:31:ac:9b:13:d1:ef:7e:83:74:ef:
                    d7:4a:a5:16:92:f5:cb:c3:a4:68:c1:ab:59:68:7c:
                    6d:39:ee:cd:11:89:25:15:10:7d:35:42:dc:67:57:
                    db:5f:55:ce:a6:c4:2a:52:b9:d9:72:73:45:c1:88:
                    65:93:66:84:49:4c:cb:0b:98:99:26:06:c9:04:45:
                    c6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3B:A8:B5:18:D9:8E:B7:1C:8B:77:39:14:C4:B4:99:CE:E7:87:3F
            X509v3 Authority Key Identifier:
                keyid:2E:B5:29:B0:ED:AE:44:7E:3F:0B:C4:18:52:21:ED:03:94:CF:C7:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:8e:75:e2:1e:7f:25:31:76:98:5a:3d:7e:34:fe:ec:fa:dd:
         99:8b:ec:8a:f0:9d:95:a4:44:f4:e7:b2:dd:31:f0:64:46:ba:
         83:c9:ab:39:82:68:20:9e:63:1a:2c:1b:7e:2d:94:c5:fb:da:
         1d:e2:17:5f:27:48:f4:5f:be:36:71:90:b6:4c:28:00:10:bf:
         48:f5:ab:97:a6:56:70:ad:bc:e6:ae:d1:a9:5c:52:09:aa:29:
         f3:3d:da:46:3d:ef:16:cd:6c:f9:e0:54:38:3a:d7:05:24:a0:
         76:fc:cd:1b:9c:2e:07:ad:7d:92:a7:11:13:59:e8:c9:53:09:
         02:e4:5b:f6:11:21:9d:15:8e:42:a3:f3:f4:62:0a:0c:91:90:
         86:2e:93:d9:9f:4d:bb:c9:6e:95:b0:e4:98:02:26:91:e7:4d:
         5f:7c:d2:51:a9:e9:f8:c3:ad:da:60:f2:4e:5d:e5:0d:e9:1a:
         0a:16:5f:49:1f:70:60:b8:b5:2c:76:d9:5a:d9:a3:56:fc:00:
         a7:e8:de:fc:e3:87:14:bb:65:f8:ce:54:14:bd:4a:7f:c5:78:
         b6:2c:05:24:a4:06:ea:db:67:18:34:8b:ba:13:40:4d:1a:0d:
         69:98:69:fa:bb:24:3a:16:c8:f1:b8:50:bb:2e:08:f2:65:18:
         a5:a2:6f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 13:43:23 2026 by rpki-client