Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/EC951EF2EFF92958D0D8637B708E508C6DF31901.mft
File:                     EC951EF2EFF92958D0D8637B708E508C6DF31901.mft (raw, json)
Hash identifier:          fgjBtlSXtEOEdmOK3XLT9cqDTTtYPYWjB8T5pZ8td7I=
Subject key identifier:   49:8E:CE:18:26:3E:81:3C:B6:53:3D:DE:D5:77:27:4C:27:75:8B:7A
Authority key identifier: EC:95:1E:F2:EF:F9:29:58:D0:D8:63:7B:70:8E:50:8C:6D:F3:19:01
Certificate issuer:       /CN=EC951EF2EFF92958D0D8637B708E508C6DF31901
Certificate serial:       2D54FFA4BFAD5680AF8DD04AE0547340EAE982FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC951EF2EFF92958D0D8637B708E508C6DF31901.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/EC951EF2EFF92958D0D8637B708E508C6DF31901.mft
Manifest number:          35
Signing time:             Sat 10 Oct 2026 06:23:08 +0000
Manifest this update:     Sat 10 Oct 2026 06:18:08 +0000
Manifest next update:     Sun 11 Oct 2026 06:53:08 +0000
Files and hashes:         1: 34352e37312e32312e302f32342d3234203d3e20323637353936.roa (hash: UC/SL1rwxIjByGcCMVSZUyzVSR96+Yy0AsUW2hznofo=)
                          2: 323830343a343365303a383030303a3a2f33332d3333203d3e20323637353936.roa (hash: 6Qw6MERbpK708LAHXrop3LiKPgdCtdNlweLCdWS7Ofg=)
                          3: 34352e37312e32322e302f32332d3233203d3e20323637353936.roa (hash: 8hlJ4VAzSb3kqJBkfB3a3AkLkl0nCBfKxTRvgebDEJ4=)
                          4: 323830343a343365303a3a2f33322d3332203d3e20323637353936.roa (hash: 2mGPCBn5FRMGp42vOGIlQKeHlFMvwLUgwO8vFMFIL64=)
                          5: 34352e37312e32302e302f32332d3233203d3e20323637353936.roa (hash: zsQQwHgM6IVcP19CcTxYippI+VLkCUZFWjTMf1HgdXk=)
                          6: EC951EF2EFF92958D0D8637B708E508C6DF31901.crl (hash: 6QXGF98ILPTfYuiQ9G0Ogwe/z5zglP0EnGI0WM4ZmqU=)
                          7: 34352e37312e32302e302f32322d3232203d3e20323637353936.roa (hash: 6b+sdjRXudEBhhAzx83pykScR7IYeVGIUgsFPAc7qh0=)
                          8: 323830343a343365303a3a2f33332d3333203d3e20323637353936.roa (hash: AFhG0lAoPXck0/PtqVfcDmSZn8Qm9jBRPtH4WpCl9UI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/EC951EF2EFF92958D0D8637B708E508C6DF31901.crl
                          rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/EC951EF2EFF92958D0D8637B708E508C6DF31901.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC951EF2EFF92958D0D8637B708E508C6DF31901.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 06:53:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:54:ff:a4:bf:ad:56:80:af:8d:d0:4a:e0:54:73:40:ea:e9:82:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC951EF2EFF92958D0D8637B708E508C6DF31901
        Validity
            Not Before: Oct 10 06:18:08 2026 GMT
            Not After : Oct 11 06:53:08 2026 GMT
        Subject: CN=498ECE18263E813CB6533DDED577274C27758B7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:55:a9:2b:c6:71:6e:e3:64:61:77:e6:ab:08:
                    c2:04:fa:28:db:95:be:3c:e7:ae:90:85:fc:5d:5a:
                    31:4d:de:26:8f:45:99:42:89:c1:4f:d4:af:f5:28:
                    c9:5c:ce:ef:11:b3:ee:fa:90:1f:37:92:8b:99:a8:
                    33:2b:3c:f9:98:c4:ed:04:25:da:c7:15:09:07:c4:
                    0b:0a:72:98:1d:62:0b:44:71:88:33:6b:58:82:44:
                    da:c4:a0:8d:c9:ee:7a:d3:5a:8f:02:db:e2:b7:28:
                    19:66:08:a3:39:40:82:7f:34:78:1e:3c:a0:22:2a:
                    ea:bd:2b:c5:d4:92:88:d2:d2:eb:94:4e:03:ab:77:
                    0d:a1:f5:99:d1:7d:4c:5f:1c:7e:38:e2:9d:00:42:
                    fb:d0:8c:59:2e:a7:93:fa:a5:08:b9:81:e5:6b:8d:
                    55:71:ab:18:46:15:9f:27:2c:31:29:b9:1a:55:ab:
                    68:b7:d7:83:c9:36:ce:cf:9a:90:2a:9c:c7:b1:ab:
                    79:2a:ad:a9:c8:58:55:db:2a:17:ce:5b:5b:c9:fa:
                    fe:5f:52:9e:25:04:b4:82:75:02:ef:b9:6b:1f:9c:
                    be:20:28:b1:55:2e:10:4d:6f:e5:75:ed:83:0b:b2:
                    c9:56:e4:be:9d:cc:b9:80:47:8c:b7:fa:2c:ea:02:
                    a0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8E:CE:18:26:3E:81:3C:B6:53:3D:DE:D5:77:27:4C:27:75:8B:7A
            X509v3 Authority Key Identifier:
                keyid:EC:95:1E:F2:EF:F9:29:58:D0:D8:63:7B:70:8E:50:8C:6D:F3:19:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/EC951EF2EFF92958D0D8637B708E508C6DF31901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC951EF2EFF92958D0D8637B708E508C6DF31901.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/EC951EF2EFF92958D0D8637B708E508C6DF31901.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:09:5f:d6:3d:71:ad:08:3d:f2:ca:d8:7d:18:75:73:08:01:
         66:5b:9f:43:6d:84:f4:be:97:0e:46:5d:8b:e9:94:9f:76:4a:
         d8:36:8a:32:9e:bd:83:ea:71:3e:73:f4:59:9b:3d:d5:29:a4:
         dd:ce:c8:17:71:cd:5e:b3:a4:5f:9f:e7:f8:05:98:b6:4c:03:
         8e:0a:f0:f3:5e:64:4a:86:ad:ef:88:b0:ef:30:4f:f0:ce:bc:
         e7:f4:a1:f9:25:c0:0b:12:5a:f6:ff:29:fa:ff:fd:4a:23:f9:
         b6:05:ee:b2:4f:2e:00:d7:b2:e9:29:0b:e9:7e:e7:c4:5a:a6:
         2a:50:aa:eb:3b:1b:fc:1d:8c:87:9f:ce:5e:eb:b2:64:82:ec:
         7b:82:69:54:50:6b:d6:8f:38:e9:cf:58:a2:03:3f:4b:6e:23:
         05:2f:58:b6:03:6b:cd:51:e8:e4:9f:aa:73:1c:28:b5:ae:90:
         2c:42:b7:8a:a5:49:89:ee:d1:f4:55:40:b2:03:a1:b0:d7:4b:
         f9:c8:41:bf:65:d0:a5:b2:1b:b2:be:b6:a8:b3:28:d1:69:91:
         c4:8b:4a:e3:f0:c9:03:8b:40:c1:d4:ec:ca:94:f0:b1:c8:6a:
         ab:d8:bd:a6:90:89:a1:2a:e6:e8:e1:6a:47:4c:a2:d8:e2:0b:
         f2:50:89:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:12:31 2026 by rpki-client