Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.mft
File:                     70BE7503F48CCC14271EE75026EB08184789273F.mft (raw, json)
Hash identifier:          gk3gElec9I27j5d6r31qUsvn/9IfKtyBRg5EOrgA9k0=
Subject key identifier:   8B:EF:EB:C6:29:76:AB:11:98:FE:70:62:3F:A4:E6:2F:5B:61:CA:57
Authority key identifier: 70:BE:75:03:F4:8C:CC:14:27:1E:E7:50:26:EB:08:18:47:89:27:3F
Certificate issuer:       /CN=70BE7503F48CCC14271EE75026EB08184789273F
Certificate serial:       35390955AA0DF7D120B989FF3F0B292B7B706268
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.mft
Manifest number:          0230
Signing time:             Sun 24 May 2026 12:41:30 +0000
Manifest this update:     Sun 24 May 2026 12:36:30 +0000
Manifest next update:     Mon 25 May 2026 14:02:30 +0000
Files and hashes:         1: 34352e3136342e3131322e302f32322d3332203d3e203533313831.roa (hash: aJslR/vmDXJnzCKEwTHouZcKOuyOBd8owHk+C/drazo=)
                          2: 3139312e3234312e36342e302f32302d3332203d3e203533313831.roa (hash: DYuiB7TyLSISWyN3egKqobN0v2AzCzHiYRko+R5xBns=)
                          3: 3133382e3230342e36342e302f32322d3332203d3e203533313831.roa (hash: +0lwzybCtoDpeA00IP/e/Nh0SdKI++xNXq5JaNtUODc=)
                          4: 323830343a313133633a3a2f33322d313238203d3e203533313831.roa (hash: OecBUCYkrKTyWYL4WQ5GWNTtBKsmHjxtNhm4PhIxeGE=)
                          5: 323830343a353365343a3a2f33322d313238203d3e203533313831.roa (hash: X7rByr1EHvceWtqQMxQYxECqiiiaE1r9OuQQcclY0RM=)
                          6: 3230312e33332e3136302e302f32302d3332203d3e203533313831.roa (hash: KrhAAU4cNicO+l+hNBnml/thEjeR1pJjbxjixaDlkps=)
                          7: 70BE7503F48CCC14271EE75026EB08184789273F.crl (hash: J7EDkS3Bg7bOs5qNrHcfcD4YioVyPvtm5Hll6++aQ9Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.crl
                          rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 14:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:39:09:55:aa:0d:f7:d1:20:b9:89:ff:3f:0b:29:2b:7b:70:62:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70BE7503F48CCC14271EE75026EB08184789273F
        Validity
            Not Before: May 24 12:36:30 2026 GMT
            Not After : May 25 14:02:30 2026 GMT
        Subject: CN=8BEFEBC62976AB1198FE70623FA4E62F5B61CA57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dd:47:42:3b:83:f9:e3:ef:0d:22:f2:ab:9f:
                    94:3f:74:d8:8b:2d:de:4c:78:89:55:22:95:57:cf:
                    39:31:fa:02:cc:ca:7c:8c:bf:d5:cd:d8:7b:de:dc:
                    63:11:7c:30:36:57:57:0f:c4:31:52:ae:d6:a4:5c:
                    fe:ae:c8:c2:11:be:11:7e:8b:3a:6a:2d:1d:d3:c8:
                    6e:62:82:34:95:94:f9:05:b8:23:ed:b0:88:5c:a3:
                    ef:b6:fe:1d:46:4d:b8:94:ed:c5:8d:02:6e:00:1a:
                    69:0f:04:5d:6d:a4:46:5b:6e:f5:dc:30:12:af:e3:
                    08:8e:ea:5e:71:c8:18:8a:b0:f5:6c:65:61:15:40:
                    db:56:3a:09:e2:09:fb:a8:8f:78:19:5b:26:8c:2e:
                    ce:da:b8:7f:36:94:fd:e7:33:3c:8e:a4:c8:55:a3:
                    b4:55:3b:35:0d:6b:62:df:06:46:d8:2d:a5:e8:c2:
                    7c:59:ef:20:52:0e:21:c1:47:11:83:9b:20:18:1d:
                    7a:a6:a1:b0:c3:f9:97:ab:f6:0f:57:8d:63:62:11:
                    f8:6f:70:1f:6a:6d:d8:8a:40:0c:b2:6c:c5:bf:33:
                    c8:86:64:d3:0d:d7:56:3d:54:b4:ba:44:7d:95:d5:
                    d8:21:66:50:60:16:8e:d3:78:ce:e6:3e:78:37:b2:
                    00:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:EF:EB:C6:29:76:AB:11:98:FE:70:62:3F:A4:E6:2F:5B:61:CA:57
            X509v3 Authority Key Identifier:
                keyid:70:BE:75:03:F4:8C:CC:14:27:1E:E7:50:26:EB:08:18:47:89:27:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:2d:a9:0e:bc:b0:c1:a8:be:92:3b:81:f1:97:0b:df:ea:e4:
         28:8d:f5:99:12:27:b4:50:f1:94:f8:65:4b:09:e6:dd:38:b8:
         34:aa:67:09:f1:a2:b6:6b:93:79:5c:10:c1:ad:69:75:99:8c:
         fb:30:73:84:77:6e:e5:4b:2b:a2:db:da:6d:b8:e0:48:07:da:
         dd:0c:4b:ce:be:dd:d4:fb:84:1a:4a:a6:71:2f:03:d0:16:c9:
         9b:c4:04:3f:79:3e:ba:ee:6a:66:fb:bb:ac:e5:d7:bf:a2:78:
         e2:34:8f:5c:9a:bc:bd:ea:2c:8f:d2:2a:af:4e:07:8d:3e:ba:
         77:fe:83:34:71:ed:34:fb:4e:27:f3:45:2e:69:b5:7d:77:12:
         a7:c4:9f:fc:1a:3c:ad:f1:2d:87:ec:00:31:f8:fb:74:5f:1d:
         e1:cf:3c:da:cd:78:04:aa:d2:e3:9a:40:c7:f1:53:88:d4:90:
         02:a4:3e:1a:34:67:b5:c4:cd:3a:4c:5b:03:06:08:47:19:e4:
         d5:3e:32:3c:c6:7e:c5:45:7d:fb:98:61:97:84:7d:26:d6:fe:
         dc:1a:2c:50:1b:ff:d4:9f:7b:3a:c3:54:92:f0:e3:e8:77:d5:
         46:7a:c0:a4:ac:b7:97:f8:61:2c:cb:cd:d7:26:00:d4:0f:d1:
         9b:3a:65:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:45:31 2026 by rpki-client