Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.mft
File:                     2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.mft (raw, json)
Hash identifier:          sJP4u6PxOxrYnU7Y000ecWAFOfqvUMldJ3zK+rKrfbY=
Subject key identifier:   A3:78:A3:1D:CC:3F:3D:85:A5:29:A8:59:4F:D3:DA:EF:A6:8B:4B:BC
Authority key identifier: 2E:B5:29:B0:ED:AE:44:7E:3F:0B:C4:18:52:21:ED:03:94:CF:C7:DC
Certificate issuer:       /CN=2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC
Certificate serial:       65463AE6BFF68ADF467658653C009688EB784E4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.mft
Manifest number:          013B
Signing time:             Wed 08 Apr 2026 17:32:16 +0000
Manifest this update:     Wed 08 Apr 2026 17:27:16 +0000
Manifest next update:     Thu 09 Apr 2026 20:52:16 +0000
Files and hashes:         1: 34352e3136342e3130342e302f32332d3233203d3e20323633333238.roa (hash: HBn5VaMhlqrTmJpKT+PRo6qs2/VuvKi2qwEb9jVf8O0=)
                          2: 3137302e302e35362e302f32322d3332203d3e20323633333238.roa (hash: c+6ShT2cDj596tzwAJb1tGtN0z8WzEUZhQJVwZUg4LE=)
                          3: 2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.crl (hash: UGsy8wkZXymfnIGhM9pMmZenwR4iW0iyDCx7cpqbRLg=)
                          4: 34352e3136342e3130362e302f32332d3233203d3e20323633333238.roa (hash: u/vopGCJFzIgr4pM4mboT2fF7srQmhjjZoCuTYSTkSw=)
                          5: 323830343a313436383a3a2f33322d313238203d3e20323633333238.roa (hash: lIWoaWPRD7cTnw+iHZt+t0X5Bt1zi7EWPtPHof7Zl3k=)
                          6: 3139312e372e3138342e302f32322d3332203d3e20323633333238.roa (hash: pGVVnpwA9IoAsZgnwmaJqp55ATa2ZJZ30/bAb0g1/sw=)
                          7: 34352e3136342e3130342e302f32322d3232203d3e20323633333238.roa (hash: XYaGRbxo6wrGy2KGeIuScyrSvu8sxfpitGCnVNG9W7s=)
                          8: 34352e3136342e3130342e302f32322d3332203d3e20323633333238.roa (hash: +X7u6whcCRGbI9LnftQ/MZpKdzaYeOOJOmdNgLJmTlI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.crl
                          rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 20:52:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:46:3a:e6:bf:f6:8a:df:46:76:58:65:3c:00:96:88:eb:78:4e:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC
        Validity
            Not Before: Apr  8 17:27:16 2026 GMT
            Not After : Apr  9 20:52:16 2026 GMT
        Subject: CN=A378A31DCC3F3D85A529A8594FD3DAEFA68B4BBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:17:11:b3:24:f6:95:ce:c4:86:0e:39:1e:f8:
                    3f:f6:3d:24:90:89:7b:ec:48:16:67:74:58:4c:69:
                    05:98:30:04:40:ad:0d:06:a6:07:26:a4:77:8e:aa:
                    64:fb:d3:68:d4:a3:bd:00:1a:44:40:b8:ff:03:c7:
                    81:e4:a4:26:cb:e6:6e:c4:1d:fd:46:a8:41:fd:7e:
                    28:69:b9:31:29:d5:04:db:56:c2:e7:74:a5:c6:43:
                    2e:aa:5a:c2:3f:69:7d:3f:03:72:8c:a4:05:c3:2e:
                    09:ae:1c:65:32:c1:d0:15:54:c4:30:94:21:27:36:
                    01:48:0c:2c:74:30:98:6a:70:59:cc:ef:da:a5:e4:
                    8b:12:f4:cb:c7:15:ee:15:2c:71:1d:0e:e1:38:50:
                    12:a8:03:94:8c:c7:38:b1:82:96:9c:5a:1e:01:67:
                    cd:27:90:de:9b:22:be:a5:83:9a:c5:39:24:e6:4d:
                    24:ba:4c:c9:2f:e6:07:7f:79:30:aa:1f:d5:79:45:
                    ac:76:2f:1a:6d:b5:2b:58:d7:5d:89:31:93:c6:6e:
                    9a:1f:98:fe:a1:ce:ce:50:47:cf:eb:a7:e2:f4:aa:
                    2c:fb:bc:4a:a8:65:8b:d0:02:9a:71:5e:31:12:25:
                    17:59:e9:f4:3a:e2:aa:d2:8a:08:4c:34:f6:e8:8d:
                    ed:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:78:A3:1D:CC:3F:3D:85:A5:29:A8:59:4F:D3:DA:EF:A6:8B:4B:BC
            X509v3 Authority Key Identifier:
                keyid:2E:B5:29:B0:ED:AE:44:7E:3F:0B:C4:18:52:21:ED:03:94:CF:C7:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:dc:b0:ed:14:67:a6:d3:ec:d2:7a:80:77:28:35:9b:f7:78:
         a5:8f:d3:6b:79:bf:d2:de:14:7b:48:a2:be:df:04:38:8e:fb:
         64:fb:59:c9:d2:02:4c:f1:3c:0f:07:49:d6:85:36:7f:43:2c:
         51:e1:cc:fc:c0:34:71:cd:42:da:62:54:01:b8:32:01:5d:b8:
         b0:6b:76:e5:93:d6:4e:50:d6:26:75:93:c9:bc:2f:2e:fb:4e:
         c9:00:33:ba:26:d9:85:2b:fd:fa:0f:a9:0e:be:dc:de:ee:c2:
         41:8b:a0:e5:cb:18:bd:29:c2:61:60:d3:70:21:ad:55:88:0f:
         28:1d:4d:91:fe:6f:b9:29:f0:aa:32:ca:10:3c:b6:8e:66:b2:
         e9:0d:a3:e3:a8:a8:f1:86:a1:b9:63:26:f6:76:fd:3d:00:18:
         3f:45:ed:e6:78:e7:df:4e:c2:73:71:51:b9:71:e8:ed:ed:2b:
         ed:5b:9d:ca:26:a0:5c:bf:38:55:3c:ed:fb:c5:a7:50:f6:cf:
         fc:0f:0f:7f:d6:7e:6f:eb:6d:44:c7:55:1d:4e:a5:9b:06:9c:
         e0:0b:ce:93:99:11:1a:50:8f:b9:12:16:d7:fb:12:93:86:f1:
         1b:ec:1e:0e:61:c0:2c:f0:15:28:fb:a1:15:65:09:fc:80:b8:
         57:df:d4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 11:11:13 2026 by rpki-client