Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft
File:                     CEA74FF3945E7508599D54A721E47B3BA75706E3.mft (raw, json)
Hash identifier:          eQ3KeqijwqxYcVoJW4UC3yUoz9+M7qr+zuWk0S7Krno=
Subject key identifier:   C6:9C:07:F3:D7:21:8B:26:BB:59:0F:50:15:5C:C5:E2:40:FD:5D:CC
Authority key identifier: CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3
Certificate issuer:       /CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
Certificate serial:       16B2C17C8ED6691E2EDF1DD1BBAB78E77519A271
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft
Manifest number:          0158
Signing time:             Sun 24 May 2026 11:28:23 +0000
Manifest this update:     Sun 24 May 2026 11:23:23 +0000
Manifest next update:     Mon 25 May 2026 15:13:23 +0000
Files and hashes:         1: 323830343a353730633a633030303a3a2f33362d3336203d3e20323638303430.roa (hash: O7Oqr//PpcCqpzqFcZFT9boA2UaSvzJGXYDNBvE/tdI=)
                          2: 323830343a353730633a643030303a3a2f33362d3336203d3e20323638303430.roa (hash: 7tiAzH2T7BZpiBdZ7h8cWjCqszI1cAHqi1AKIdwI+Ns=)
                          3: 323830343a353730633a363030303a3a2f33362d3336203d3e20323638303430.roa (hash: K2v77Gt9NOI7lpPDfVMsT7/UdsiCfs7Bid43RGcyb+8=)
                          4: 34352e3136382e39322e302f32342d3234203d3e20323638303430.roa (hash: K5wxrWM8xGNa7I2Y8rel/TySV+3C7EVkaRe9ditefw4=)
                          5: 323830343a353730633a653030303a3a2f33362d3336203d3e20323638303430.roa (hash: t88Kw7BF7trQ4diDbERO9KwQHVsvIgc6sb+afFk1/oU=)
                          6: CEA74FF3945E7508599D54A721E47B3BA75706E3.crl (hash: MfX/wiW1r2dsJI1oUJH3ual9Q8M308QpPeviHcCZhrg=)
                          7: 34352e3136382e39332e302f32342d3234203d3e20323638303430.roa (hash: IUZPl3HABE+NbxOlmkkLFMZO5STQT9Ai+fogmJfb7iY=)
                          8: 323830343a353730633a323030303a3a2f33362d3336203d3e20323638303430.roa (hash: Q6zbgVZ9/2xEzK0l0oVACRPG06HR5I8bst3e2ItEODc=)
                          9: 323830343a353730633a393030303a3a2f33362d3336203d3e20323638303430.roa (hash: h+Y8VHW8KQwbGe6hDzwUUcFE6gQRTp4SniquNbqCvlw=)
                          10: 34352e3136382e39322e302f32332d3233203d3e20323638303430.roa (hash: vXL3rBnLSmw+J/CZGJUcyYkEUODj5iau3OEYJ2GWr1k=)
                          11: 323830343a353730633a333030303a3a2f33362d3336203d3e20323638303430.roa (hash: tGy459mLNyebpYZY+MbMekDYPXcRxv1h1TrwkkoKkFk=)
                          12: 323830343a353730633a353030303a3a2f33362d3336203d3e20323638303430.roa (hash: xKOZCLzFhIukCU7Ho1bE8l21fKx8oMJdRkB6RP4zOU0=)
                          13: 323830343a353730633a343030303a3a2f33362d3336203d3e20323638303430.roa (hash: 9BWp1l5TIZv7ozJAknPOYmLX23z8eO7kjS9UJR1G2ac=)
                          14: 323830343a353730633a373030303a3a2f33362d3336203d3e20323638303430.roa (hash: qEGTNLA+KBcnLwyZCSUh18M49As5kWTLHnJHsfSSMfE=)
                          15: 323830343a353730633a3a2f33362d3336203d3e20323638303430.roa (hash: cX+NY4bOnb/vgPKQTr/m0/s7d+cdADKZKZxk5MIvTZE=)
                          16: 323830343a353730633a613030303a3a2f33362d3336203d3e20323638303430.roa (hash: T3V/Fz/+CDSWTRlwglp3HyVdgtedfBKa6uhVQvV4HZM=)
                          17: 323830343a353730633a383030303a3a2f33362d3336203d3e20323638303430.roa (hash: NFU0jsGK6nSlrz0zk/uZrUWGBjONw0UGc1cZM4BbMUI=)
                          18: 323830343a353730633a3a2f33322d3332203d3e20323638303430.roa (hash: NPJlZoapyXgbKp6nQrUGfGeQejkrs2Sgotm/M7pu97Q=)
                          19: 323830343a353730633a623030303a3a2f33362d3336203d3e20323638303430.roa (hash: VbbGJ8kXVWVaWgkpRfTJcqYFKwhfCrLnwCzYQO9WjaY=)
                          20: 323830343a353730633a663030303a3a2f33362d3336203d3e20323638303430.roa (hash: DDqiXH4DdttjGY2bJj8hMTSCzoazExdYreFMNjG5kNw=)
                          21: 323830343a353730633a313030303a3a2f33362d3336203d3e20323638303430.roa (hash: XX4RgqWrgK0cN07dELop4PmkV3SAb55I/eZ0jEmBII0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl
                          rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 12:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b2:c1:7c:8e:d6:69:1e:2e:df:1d:d1:bb:ab:78:e7:75:19:a2:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
        Validity
            Not Before: May 24 11:23:23 2026 GMT
            Not After : May 25 15:13:23 2026 GMT
        Subject: CN=C69C07F3D7218B26BB590F50155CC5E240FD5DCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b8:03:c7:34:c6:78:2e:1d:2b:74:79:c8:40:
                    4c:4e:af:e2:8b:a8:1e:1a:0c:d2:55:71:14:31:71:
                    73:c9:33:5f:2b:04:d2:58:dd:7c:04:46:77:f3:52:
                    26:ae:fb:b4:ca:89:7d:57:e4:12:1a:69:6a:a3:bb:
                    ca:d5:64:aa:6c:92:10:3d:a4:99:51:c7:f7:8b:3e:
                    bc:e9:22:37:99:0b:33:57:f6:dc:3b:45:bd:51:fc:
                    54:d5:50:d7:9b:74:0c:f3:33:2b:62:12:b6:08:07:
                    c1:75:54:87:f8:c4:a9:02:fb:6c:95:a1:d7:a2:91:
                    a6:ff:fe:97:c1:ac:c6:ba:7b:e2:53:d7:6a:a4:33:
                    f7:23:45:39:07:e8:79:b5:f0:cc:51:ca:06:da:77:
                    39:35:23:ab:38:e2:74:fb:9c:f6:72:6e:52:b3:2b:
                    e8:d2:c9:95:90:42:18:1a:ea:20:49:1d:c9:9b:11:
                    75:da:a8:74:8a:80:62:f6:5d:9a:0d:0f:71:03:74:
                    b1:51:45:6d:c5:e3:62:6f:7f:ef:c1:e8:fa:c1:3f:
                    68:b1:70:cd:71:25:19:2c:e7:02:af:4a:58:ae:01:
                    13:f2:39:38:89:1d:bb:ff:fb:b5:7a:09:b3:90:a0:
                    44:88:dc:e1:2f:f3:e5:fb:3f:31:15:21:43:19:c5:
                    d3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9C:07:F3:D7:21:8B:26:BB:59:0F:50:15:5C:C5:E2:40:FD:5D:CC
            X509v3 Authority Key Identifier:
                keyid:CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:c9:ad:4d:3b:b8:f6:c7:63:73:73:7b:4f:65:2a:61:a2:f7:
         0c:7a:2c:3b:9d:47:69:5a:ba:15:44:ef:1b:a7:ee:94:a6:20:
         97:9e:01:d7:9c:0f:bd:96:66:0c:02:a8:fc:9b:1c:fb:b8:fb:
         de:f5:04:10:1b:d1:60:00:ec:d0:b0:bc:36:76:e2:e3:d2:30:
         2e:42:bf:90:95:28:0d:02:8b:a5:b7:ad:3c:d7:5d:7d:80:83:
         9e:cd:05:51:4a:d7:e8:82:1c:6c:75:53:bc:eb:10:9f:c9:85:
         02:13:9a:7b:a7:91:14:8f:da:7a:d1:0a:1b:5f:0e:97:ad:1d:
         07:41:66:a4:54:73:97:21:80:ef:58:f6:a0:b9:ad:02:3d:1a:
         62:a0:5a:7a:07:ea:d0:70:fd:11:79:cc:ea:92:3b:ad:eb:75:
         39:66:b4:5a:b4:f6:7a:66:bc:49:e4:9b:78:f3:f6:88:94:9a:
         b9:a7:ab:cb:4e:63:19:e9:a4:ed:c2:88:85:87:a3:aa:9c:d8:
         28:84:b9:c7:8c:38:c1:d9:7c:aa:f1:a9:03:02:35:7d:3a:9d:
         a2:f7:e0:7f:77:4b:c4:7d:d8:7f:a7:81:e0:9e:c2:94:89:a6:
         2c:0d:15:07:33:34:45:32:bb:04:d2:f8:d2:a2:ec:e0:6c:2c:
         40:75:2b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:17:34 2026 by rpki-client