Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.mft
File:                     5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.mft (raw, json)
Hash identifier:          B05zVviqstV1B+FVW6+JJ8xEGl97/NFKGYOGzs76QhU=
Subject key identifier:   4F:AB:E3:A7:83:B3:DE:2F:5F:DC:FE:69:86:27:7C:C4:81:7A:22:47
Authority key identifier: 5A:1A:65:2F:EE:32:8D:6F:3E:1B:47:CD:4C:84:23:2C:B2:EE:F9:5E
Certificate issuer:       /CN=5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E
Certificate serial:       4FA21A07C8FFFE7FDD4427E6664352DFDFAFF584
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.mft
Manifest number:          2B
Signing time:             Sun 11 Oct 2026 06:25:33 +0000
Manifest this update:     Sun 11 Oct 2026 06:20:33 +0000
Manifest next update:     Mon 12 Oct 2026 08:54:33 +0000
Files and hashes:         1: 5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.crl (hash: gJ/gBA6UxfHnM47OV7Lf4oX4EsOVWBPKV17/gH2xhxg=)
                          2: 323830343a313133633a3a2f33322d313238203d3e203533313831.roa (hash: 6NY9ATyBY3IdqLjYE8Odx2PMMBZBmCqgegeZ1lH6lfk=)
                          3: 3230312e33332e3136302e302f32302d3332203d3e203533313831.roa (hash: svh7vG+loC6TCTqm928Y6efCEwb8Muh8IpiBCDcVhlg=)
                          4: 3133382e3230342e36342e302f32322d3332203d3e203533313831.roa (hash: ZGyhoV1J2A8uZUkygdx34b2z1Hf2qpiDs/uZfCCuoFQ=)
                          5: 323830343a353365343a3a2f33322d313238203d3e203533313831.roa (hash: 1VUG7wkMZkKSyAIylNskXB5j6m35Lcl6W/U1PIMag9s=)
                          6: 34352e3136342e3131322e302f32322d3332203d3e203533313831.roa (hash: lGF5OqXw7NaVMb7nXASbgu1J5EKPKDFqcFzGgiI81/E=)
                          7: 3139312e3234312e36342e302f32302d3332203d3e203533313831.roa (hash: /8Zno9g2F8/ldlShR2dUBWfu5Win5hykvvfTfNYxI7k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.crl
                          rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 08:54:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a2:1a:07:c8:ff:fe:7f:dd:44:27:e6:66:43:52:df:df:af:f5:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E
        Validity
            Not Before: Oct 11 06:20:33 2026 GMT
            Not After : Oct 12 08:54:33 2026 GMT
        Subject: CN=4FABE3A783B3DE2F5FDCFE6986277CC4817A2247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c0:1d:68:9b:7c:91:18:96:a2:ec:d1:08:1c:
                    fe:3d:b4:2c:38:a3:eb:1c:86:3a:01:fe:70:37:bb:
                    50:58:5b:aa:d7:be:bf:46:11:fa:e2:6d:ab:55:2f:
                    d5:af:41:1d:50:3f:8d:f9:03:e1:db:7a:c1:4c:76:
                    c7:e8:65:3b:84:54:7b:3b:86:da:cd:42:ba:7f:93:
                    a5:ce:90:e3:d7:c0:ca:57:ed:59:dd:39:8b:62:f4:
                    a8:2b:a7:73:73:d1:17:4e:f6:07:f0:5f:e2:76:0b:
                    14:2f:38:5f:3e:da:08:22:d6:c8:5c:d3:63:81:5f:
                    71:fc:0c:1f:1c:dd:0c:65:2b:a4:55:90:25:69:7e:
                    53:29:f0:7b:4c:cd:40:06:55:41:27:b8:f6:74:e8:
                    8b:86:0b:d5:a3:75:f1:3c:0e:47:36:13:8f:f6:5c:
                    29:0b:74:92:a8:74:c6:d8:28:42:2a:ab:e0:ce:de:
                    5d:3d:6a:96:c0:fc:a0:db:a2:29:89:ec:0b:42:be:
                    c6:74:65:93:de:1f:07:ba:cc:0d:f4:48:f1:f4:94:
                    d6:49:9e:67:26:a4:22:dd:ab:5e:27:3a:ee:32:5c:
                    41:13:ea:f8:b1:d1:f8:fc:3c:33:7e:c9:c9:1b:ab:
                    b4:ba:01:b6:9a:2d:b4:ab:85:49:ff:66:c2:a0:95:
                    ce:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AB:E3:A7:83:B3:DE:2F:5F:DC:FE:69:86:27:7C:C4:81:7A:22:47
            X509v3 Authority Key Identifier:
                keyid:5A:1A:65:2F:EE:32:8D:6F:3E:1B:47:CD:4C:84:23:2C:B2:EE:F9:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:c1:1d:10:99:85:c8:9e:65:6e:62:c6:f6:d2:01:a1:f5:ed:
         d8:f1:b9:97:1f:a5:35:26:90:c9:67:92:fa:c8:07:1a:69:a5:
         32:30:6a:e1:67:dc:45:98:20:8b:22:af:c9:c5:a2:67:37:b1:
         1d:43:05:d9:70:5b:82:a7:6f:bf:9c:9b:a9:ce:8f:cf:39:76:
         2a:3e:2b:b4:59:df:f8:16:06:76:44:93:75:cf:2f:e4:86:25:
         23:0e:a4:c2:68:f4:e3:44:97:3c:66:11:b1:6c:0a:42:82:a7:
         d7:46:d2:32:9c:0a:58:59:dd:ae:85:e7:c4:fd:47:7b:ef:7c:
         bd:35:48:15:09:78:d9:d0:e7:85:2b:21:de:dd:e1:7a:c6:aa:
         fc:4c:55:ff:f0:f1:97:3c:f6:f2:43:26:f0:99:cb:8b:7f:8c:
         08:60:70:1c:a4:c2:bb:2c:c4:d5:f8:08:2d:f3:33:aa:23:a4:
         d3:5c:44:bf:a0:44:eb:26:d7:d3:38:f4:0f:28:2e:c3:60:e4:
         7b:c2:4d:ce:4a:8d:d9:f6:fb:cf:4d:c4:fd:38:82:02:b3:eb:
         9a:77:f7:fd:9c:38:db:7b:96:ba:a1:ec:3c:27:8b:fa:8a:2c:
         4a:7a:e5:72:77:a4:61:a8:6e:9d:da:09:8c:fe:0a:9c:95:30:
         2d:69:56:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:33:09 2026 by rpki-client