Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.mft
File:                     5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.mft (raw, json)
Hash identifier:          P29Ufu3Uw78S7m1MXosVgfOLOa+MfeuaUFznjfRQcOQ=
Subject key identifier:   36:FE:6D:85:D8:6D:97:D0:12:62:50:36:C2:97:2A:8D:96:95:7D:9A
Authority key identifier: 5E:AE:5D:EC:C4:E9:FF:C4:35:7A:90:7E:44:64:0E:D4:04:C2:CF:E8
Certificate issuer:       /CN=5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8
Certificate serial:       1AFE4025A405EF3897408DD6EFF0C9CC4A22754E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.mft
Manifest number:          2F
Signing time:             Thu 09 Apr 2026 08:05:29 +0000
Manifest this update:     Thu 09 Apr 2026 08:00:29 +0000
Manifest next update:     Fri 10 Apr 2026 12:53:29 +0000
Files and hashes:         1: 3134332e3235352e34382e302f32322d3234203d3e203238363532.roa (hash: f66+6ImU9RGk9PziPNZDMyJSxOJZ/RatbC4gKxkvSfQ=)
                          2: 3137372e3135352e39362e302f32322d3234203d3e203238363532.roa (hash: AlZy5iaz2hqtY7ABhh6d0RAqfChvxh7kApxiTiHqluA=)
                          3: 3138372e36302e3131322e302f32302d3234203d3e203238363532.roa (hash: XN3+Ranxc8+PeGI6qjh7pQ93NzXQl4wYmhjd18GBDnU=)
                          4: 3138392e39302e3137362e302f32302d3234203d3e203238363532.roa (hash: PujHOY+g8fLOrnrXrdD2Eoc4MVXYi24fHoii3ACGsFo=)
                          5: 3137372e34372e34382e302f32302d3234203d3e203238363532.roa (hash: bvyC6JaVuol+X1ywjx6dRALbDuwh0+OlOfJGVyPaizg=)
                          6: 3137372e3135352e3130302e302f32332d3234203d3e203238363532.roa (hash: iavDWCf3VqJHKXQWPKPQeLp2D3c60rMEBA179XTla34=)
                          7: 5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.crl (hash: Blxfe8sPaKqMF4sLeHALy899QLtF0JdmrbMexEyB0SI=)
                          8: 3137372e3135352e3130382e302f32322d3234203d3e203238363532.roa (hash: RZp4tQt9x4woH+0o53Y5h1MLhurOjIfcC0xZUrZzZzA=)
                          9: 3137372e34372e33322e302f32302d3234203d3e203238363532.roa (hash: bN0YIEwW+d7JUVK4KcE60p2LbXx7CjeSTIlUWqFuf8A=)
                          10: 3230312e37362e3132382e302f32302d3234203d3e203238363532.roa (hash: g0oDsj4g+Fz5Aal01djrXTGWoItL3YFmyWGY2HYIde0=)
                          11: 323830343a3435633a3a2f33322d3438203d3e203238363532.roa (hash: Xn28fOceRfCDtWR0z2QE7yHd2OeaHTIMqtKeQtkZdOI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.crl
                          rsync://rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 12:53:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:fe:40:25:a4:05:ef:38:97:40:8d:d6:ef:f0:c9:cc:4a:22:75:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8
        Validity
            Not Before: Apr  9 08:00:29 2026 GMT
            Not After : Apr 10 12:53:29 2026 GMT
        Subject: CN=36FE6D85D86D97D012625036C2972A8D96957D9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:60:be:ef:ea:e1:36:01:63:11:66:64:3b:9f:
                    2b:3f:85:9a:85:60:f4:5c:f2:1d:c5:76:14:0a:86:
                    e1:80:90:48:4c:9e:92:5c:52:d0:25:6e:a1:19:42:
                    69:28:8d:15:59:86:ee:79:4b:28:42:c4:50:8b:c2:
                    dd:bb:b7:dd:f7:7f:37:bf:13:c8:b8:80:cd:68:3b:
                    bc:a1:30:9e:13:4b:5b:72:5b:f9:cd:48:98:a5:80:
                    da:b6:ec:a8:d6:25:34:3e:50:65:ce:47:33:91:aa:
                    ad:57:34:d6:2a:95:14:a6:16:e8:7e:d7:07:1f:9a:
                    96:0d:3d:f3:eb:e1:e3:c0:a1:be:2e:01:87:48:b5:
                    a6:f1:ba:8a:82:6c:b5:db:5e:b8:87:a4:23:76:1b:
                    66:76:cf:25:df:76:f1:91:40:ba:d3:e2:ae:c7:d0:
                    ee:37:8c:c7:d5:85:1c:16:98:55:7b:0e:57:e8:67:
                    a2:09:19:6a:9e:21:4c:61:df:29:7f:09:c8:1a:90:
                    20:77:c5:a2:43:fd:7f:3f:20:f4:34:09:5b:2a:92:
                    1b:35:3d:cd:84:7a:90:45:69:06:08:4a:1a:cb:c0:
                    74:81:8f:f1:42:fe:11:65:f8:c7:9f:49:5f:97:f2:
                    cf:c1:5e:78:2b:f2:d8:b2:2c:06:11:08:ef:10:96:
                    33:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:FE:6D:85:D8:6D:97:D0:12:62:50:36:C2:97:2A:8D:96:95:7D:9A
            X509v3 Authority Key Identifier:
                keyid:5E:AE:5D:EC:C4:E9:FF:C4:35:7A:90:7E:44:64:0E:D4:04:C2:CF:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:dd:3d:4e:e3:50:1a:69:c5:ff:73:11:2b:fa:53:e4:e0:ea:
         a9:ab:ee:72:bd:0b:34:32:45:51:74:dc:be:93:2e:0c:96:c2:
         9e:c0:6f:c5:83:db:dc:91:0c:84:1d:c1:69:b4:68:cf:4e:b6:
         84:c0:e3:58:0b:a7:37:e3:d0:ff:15:32:b7:02:a3:44:c2:14:
         22:ed:0c:f5:d5:c4:81:72:e9:0c:d3:e0:c1:43:cf:b3:da:f1:
         fa:41:82:d2:8e:48:fb:15:cb:6f:ad:ec:6e:46:e5:c3:74:2f:
         ac:d3:82:21:88:89:ed:80:78:10:9c:82:1e:14:1f:6b:a7:45:
         73:5b:78:94:2d:8e:10:53:1a:f0:ce:32:b8:04:2b:77:e4:02:
         70:62:05:6f:d3:eb:0f:f2:37:8d:68:66:25:9f:bb:d0:50:d1:
         7b:17:3e:3e:71:52:b7:4b:e2:b9:a6:57:19:86:03:f2:05:02:
         e0:39:a3:a5:46:d2:e9:1c:32:9c:d2:0b:c0:59:f0:96:5a:be:
         d8:88:bf:0b:ef:89:3c:b8:e6:29:43:04:e1:69:2c:17:d5:84:
         f5:9a:5a:c1:8f:45:8e:52:b1:6b:47:94:73:bd:4c:0a:01:68:
         58:fe:ec:d8:44:9f:d4:fc:b8:6e:b6:51:b3:40:42:5c:0c:b9:
         25:56:3e:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGv5AJaQF7ziXQI3W7/DJzEoidU4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUVBRTVERUNDNEU5RkZDNDM1N0E5MDdFNDQ2NDBFRDQw
NEMyQ0ZFODAeFw0yNjA0MDkwODAwMjlaFw0yNjA0MTAxMjUzMjlaMDMxMTAvBgNV
BAMTKDM2RkU2RDg1RDg2RDk3RDAxMjYyNTAzNkMyOTcyQThEOTY5NTdEOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCYL7v6uE2AWMRZmQ7nys/hZqF
YPRc8h3FdhQKhuGAkEhMnpJcUtAlbqEZQmkojRVZhu55SyhCxFCLwt27t933fze/
E8i4gM1oO7yhMJ4TS1tyW/nNSJilgNq27KjWJTQ+UGXORzORqq1XNNYqlRSmFuh+
1wcfmpYNPfPr4ePAob4uAYdItabxuoqCbLXbXriHpCN2G2Z2zyXfdvGRQLrT4q7H
0O43jMfVhRwWmFV7DlfoZ6IJGWqeIUxh3yl/CcgakCB3xaJD/X8/IPQ0CVsqkhs1
Pc2EepBFaQYIShrLwHSBj/FC/hFl+MefSV+X8s/BXngr8tiyLAYRCO8QljOVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUNv5thdhtl9ASYlA2wpcqjZaVfZowHwYDVR0j
BBgwFoAUXq5d7MTp/8Q1epB+RGQO1ATCz+gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDkxZXBxWVhlaGN6dHpBc0dvQ3B3WGZQcm1yQlBlbVQ0QXZQemhIRktG
UngvMC81RUFFNURFQ0M0RTlGRkM0MzU3QTkwN0U0NDY0MEVENDA0QzJDRkU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVFQUU1REVDQzRFOUZGQzQz
NTdBOTA3RTQ0NjQwRUQ0MDRDMkNGRTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RDkxZXBxWVhlaGN6dHpBc0dvQ3B3WGZQcm1yQlBlbVQ0QXZQemhIRktGUngvMC81
RUFFNURFQ0M0RTlGRkM0MzU3QTkwN0U0NDY0MEVENDA0QzJDRkU4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcd09TuNQGmnF/3MRK/pT5ODqqavucr0LNDJFUXTcvpMuDJbCnsBvxYPb3JEM
hB3BabRoz062hMDjWAunN+PQ/xUytwKjRMIUIu0M9dXEgXLpDNPgwUPPs9rx+kGC
0o5I+xXLb63sbkblw3QvrNOCIYiJ7YB4EJyCHhQfa6dFc1t4lC2OEFMa8M4yuAQr
d+QCcGIFb9PrD/I3jWhmJZ+70FDRexc+PnFSt0viuaZXGYYD8gUC4DmjpUbS6Rwy
nNILwFnwllq+2Ii/C++JPLjmKUME4WksF9WE9ZpawY9FjlKxa0eUc71MCgFoWP7s
2ESf1Py4brZRs0BCXAy5JVY+qw==
-----END CERTIFICATE-----
Generated at Thu Apr 9 15:32:51 2026 by rpki-client