Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft
File:                     E623553538E00E63657BFD8F27CC352EDDF522D9.mft (raw, json)
Hash identifier:          aHE62R2j07EWaJVxOPCM/zSAFaxzxtS81dJ5p7gN+fw=
Subject key identifier:   2A:55:84:73:76:C8:1E:F1:8F:E0:4F:2D:48:DA:DB:D1:C6:9A:B6:BC
Authority key identifier: E6:23:55:35:38:E0:0E:63:65:7B:FD:8F:27:CC:35:2E:DD:F5:22:D9
Certificate issuer:       /CN=E623553538E00E63657BFD8F27CC352EDDF522D9
Certificate serial:       7F9655B67C94AC22487DB92B9DCF6E5441DC8519
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft
Manifest number:          0158
Signing time:             Sun 24 May 2026 03:18:25 +0000
Manifest this update:     Sun 24 May 2026 03:13:25 +0000
Manifest next update:     Mon 25 May 2026 06:27:25 +0000
Files and hashes:         1: 34352e3233362e35312e302f32342d3234203d3e20323638323035.roa (hash: 9m7yPscc1aQcelxqXKrPeemhvynpRkgj0fMDx9qc3dU=)
                          2: 34352e3233362e35302e302f32342d3234203d3e20323638323035.roa (hash: qZKUtAG+JVR2dVS4JiNI+Kw6jfhzxGMb3WwVCawye94=)
                          3: 34352e3233362e34382e302f32322d3232203d3e20323638323035.roa (hash: YeQQQga2IPXcQPI4WZR6ySFBpq83/d3HIcA7pJ/zYnk=)
                          4: 34352e3233362e34382e302f32342d3234203d3e20323638323035.roa (hash: QCbZMrUKJgBUWwCX4f2grxkhDaOONDhgbpeLvId+Sr8=)
                          5: E623553538E00E63657BFD8F27CC352EDDF522D9.crl (hash: ZmF48E7oaYwFovwfKyQK4rFasVU/WE7QOWB9IczYzFc=)
                          6: 34352e3233362e34392e302f32342d3234203d3e20323638323035.roa (hash: OLbc1TLVVA2OTpclfERRSJr3cNXPo1t5TO4AZY12WdM=)
                          7: 323830343a346439303a3a2f33322d3332203d3e20323638323035.roa (hash: jrLtuRDUfebp+da8gdNc/X5sTzU1URd3o0fTxtDn0u0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.crl
                          rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 06:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:96:55:b6:7c:94:ac:22:48:7d:b9:2b:9d:cf:6e:54:41:dc:85:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E623553538E00E63657BFD8F27CC352EDDF522D9
        Validity
            Not Before: May 24 03:13:25 2026 GMT
            Not After : May 25 06:27:25 2026 GMT
        Subject: CN=2A55847376C81EF18FE04F2D48DADBD1C69AB6BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:44:ec:a0:59:a7:f1:9b:6a:f3:a3:f9:7f:b7:
                    35:3d:ad:10:52:c4:cc:26:d1:e4:da:25:a1:5b:c8:
                    4a:38:b3:ca:f9:ab:8f:42:c7:0a:09:71:73:24:72:
                    d6:3b:43:09:68:ed:c2:c4:af:20:85:d3:c3:06:6a:
                    38:70:f8:4a:45:90:28:b2:f8:b2:3c:a9:e0:96:7d:
                    4b:72:99:b0:ea:50:fe:34:f5:0e:37:29:42:5b:ca:
                    c4:72:2d:1f:f4:95:41:94:e3:f3:bf:42:6c:64:e8:
                    20:26:c9:25:d6:20:44:6b:cd:79:6b:b7:95:c1:3f:
                    d0:46:d9:fc:6e:00:36:ef:81:0b:f7:29:9f:e4:99:
                    30:7c:d7:8b:9a:e3:2c:f6:19:a4:e2:38:bc:3c:e8:
                    a1:35:7d:2f:cc:f9:68:64:a4:86:fc:de:df:16:aa:
                    a5:87:dd:d3:85:ce:7b:47:dc:a7:c8:f9:98:47:36:
                    2f:4b:69:b6:9f:7d:6f:ae:e4:0c:a3:80:0f:97:8a:
                    93:27:7a:ff:35:b7:a9:b6:0d:03:b3:13:55:eb:f1:
                    db:f5:0b:64:99:3f:27:33:3c:89:80:55:60:df:4d:
                    a6:f0:c8:e2:7f:a6:50:59:89:63:a7:ee:8b:3b:63:
                    1d:9c:78:57:e8:00:e8:7e:d0:4b:80:d3:76:d1:ec:
                    f2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:55:84:73:76:C8:1E:F1:8F:E0:4F:2D:48:DA:DB:D1:C6:9A:B6:BC
            X509v3 Authority Key Identifier:
                keyid:E6:23:55:35:38:E0:0E:63:65:7B:FD:8F:27:CC:35:2E:DD:F5:22:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:c7:ec:ec:56:9f:72:17:f8:bb:78:3d:45:17:d2:bd:d3:3a:
         86:58:0f:be:67:3f:3d:2f:c8:44:f7:60:f3:c0:32:96:2b:43:
         59:06:36:1b:82:e2:e0:ab:e9:96:7e:72:57:02:87:99:95:ec:
         2f:8e:d4:27:a8:df:16:ce:73:58:26:b5:7e:a7:ca:76:42:88:
         9c:e0:64:ae:fa:1f:63:54:b2:a6:40:c6:b3:d5:1c:03:ea:fb:
         73:f1:79:55:90:ec:3f:5f:01:bc:0f:08:3f:30:11:2f:e5:f4:
         aa:d0:34:89:d1:b8:41:dc:e3:3b:7a:b9:fb:10:af:bb:04:ad:
         79:b7:fd:7a:1c:66:53:28:5e:56:6c:2a:6b:e0:1b:bb:99:54:
         3d:13:4a:34:94:77:fa:2c:52:07:90:9e:35:5e:57:78:e1:4d:
         51:93:47:bd:da:e4:46:9d:77:d1:be:e0:a6:dd:09:d4:af:ed:
         ce:32:f0:48:66:d9:be:78:ad:29:5c:0e:79:ef:51:2b:07:ce:
         87:37:0d:1a:e3:70:0e:a4:7b:01:cc:07:22:51:8d:08:fe:66:
         d5:a6:19:af:d3:29:0e:fe:82:57:19:96:69:01:0e:76:a7:34:
         42:f1:cf:af:19:3a:ed:b5:7f:49:a4:56:9b:aa:6f:c4:13:cb:
         e8:cf:6c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 15:28:40 2026 by rpki-client