Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/65ZL4bbJtYd8Z8Da7MCrNCnroSbHuWkx7eVSXZbBYkus/0/ED138B01F4B95F1ECC64354CC310BF641EEADEE3.mft
File:                     ED138B01F4B95F1ECC64354CC310BF641EEADEE3.mft (raw, json)
Hash identifier:          FqMtuzHdb+LmGPc9BZ7p/IapOnd7KH/gWnZbKsmAvX0=
Subject key identifier:   59:71:A3:A1:54:CC:71:C6:27:CF:F4:AF:06:0E:04:A9:64:AA:89:92
Authority key identifier: ED:13:8B:01:F4:B9:5F:1E:CC:64:35:4C:C3:10:BF:64:1E:EA:DE:E3
Certificate issuer:       /CN=ED138B01F4B95F1ECC64354CC310BF641EEADEE3
Certificate serial:       3BE0586BC626729DE05A1B985A9C5CD64E3F08D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED138B01F4B95F1ECC64354CC310BF641EEADEE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/65ZL4bbJtYd8Z8Da7MCrNCnroSbHuWkx7eVSXZbBYkus/0/ED138B01F4B95F1ECC64354CC310BF641EEADEE3.mft
Manifest number:          2C
Signing time:             Fri 17 Apr 2026 13:31:46 +0000
Manifest this update:     Fri 17 Apr 2026 13:26:46 +0000
Manifest next update:     Sat 18 Apr 2026 16:02:46 +0000
Files and hashes:         1: 323830343a366131343a3130303a3a2f34302d3430203d3e203631363031.roa (hash: 199PRRPG7dmMP+nmknz1Vr9JlWDGG4nRUGzZSwOMrtA=)
                          2: 3230312e37372e3135312e302f32342d3234203d3e203631363031.roa (hash: Uq8VxOL2/2IMvrzc7yUK/qsOc2qMMlVznThR8tJFLxM=)
                          3: 3230312e37372e3134382e302f32342d3234203d3e203631363031.roa (hash: OrEcNmXCc8gsCY9PKAHkve2JpFnvfcRFUr5RbmYQh3A=)
                          4: 3230312e37372e3134392e302f32342d3234203d3e203631363031.roa (hash: vZZ47hwNmVoUzuQl61aYopCoEjibo32AFIa0Kx0ees4=)
                          5: ED138B01F4B95F1ECC64354CC310BF641EEADEE3.crl (hash: SBUivmgtq6aqNyGYoNFZd/oiosHTGWrbXwKwztp/M24=)
                          6: 323830343a366131343a3a2f33322d3332203d3e203631363031.roa (hash: 90ctsaNpGsG8cDUdUuDjTCWfOjSFheHdwBljA78VkFU=)
                          7: 3230312e37372e3135302e302f32342d3234203d3e203631363031.roa (hash: /fWDnAWy8gDZyiA3J6m3z5bkdol+KD+zED85B/x3Exo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/65ZL4bbJtYd8Z8Da7MCrNCnroSbHuWkx7eVSXZbBYkus/0/ED138B01F4B95F1ECC64354CC310BF641EEADEE3.crl
                          rsync://rpki-repo.registro.br/repo/65ZL4bbJtYd8Z8Da7MCrNCnroSbHuWkx7eVSXZbBYkus/0/ED138B01F4B95F1ECC64354CC310BF641EEADEE3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED138B01F4B95F1ECC64354CC310BF641EEADEE3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 16:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e0:58:6b:c6:26:72:9d:e0:5a:1b:98:5a:9c:5c:d6:4e:3f:08:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED138B01F4B95F1ECC64354CC310BF641EEADEE3
        Validity
            Not Before: Apr 17 13:26:46 2026 GMT
            Not After : Apr 18 16:02:46 2026 GMT
        Subject: CN=5971A3A154CC71C627CFF4AF060E04A964AA8992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cc:52:90:87:25:e3:5f:ca:66:95:68:f4:bc:
                    e4:83:f7:4c:3b:17:09:26:9e:9f:c1:23:51:21:d2:
                    c1:c4:7e:35:0c:e6:3a:36:12:d4:2d:9a:ab:08:5e:
                    5f:3e:10:b3:45:a9:2e:aa:d5:33:16:2e:c4:a0:dd:
                    5d:69:fa:78:a1:bf:31:9a:80:58:6a:e2:bd:30:9a:
                    bb:c3:0c:21:4a:22:5b:6a:8e:b4:71:31:91:18:46:
                    0f:1c:4d:ea:81:96:27:6f:9a:00:f7:1a:6e:62:2a:
                    ae:b6:77:20:ad:0a:a3:de:01:73:9b:9e:8f:6b:cd:
                    54:cd:72:36:ec:6d:50:51:7b:1f:8a:4d:5f:aa:73:
                    51:bd:43:33:c9:82:bb:9a:a6:d7:8a:ed:36:30:80:
                    79:65:74:45:9b:1e:67:7d:37:85:c6:6b:bf:c9:0a:
                    da:7b:90:f1:b0:72:10:0c:6a:c1:55:e0:c5:f9:7e:
                    54:a3:fe:2b:c4:71:3b:cc:57:cc:04:b2:17:57:0d:
                    d3:9e:ba:65:94:7a:17:d5:2d:1d:55:3b:5a:dc:75:
                    cc:6c:9f:a4:44:3a:01:bd:2b:87:20:2d:dc:28:a0:
                    76:4b:5e:39:32:3f:9e:aa:d2:06:6c:c5:fb:5d:6a:
                    eb:8b:d6:94:ef:d1:12:9b:3e:f7:ad:94:fd:9d:47:
                    f0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:71:A3:A1:54:CC:71:C6:27:CF:F4:AF:06:0E:04:A9:64:AA:89:92
            X509v3 Authority Key Identifier:
                keyid:ED:13:8B:01:F4:B9:5F:1E:CC:64:35:4C:C3:10:BF:64:1E:EA:DE:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/65ZL4bbJtYd8Z8Da7MCrNCnroSbHuWkx7eVSXZbBYkus/0/ED138B01F4B95F1ECC64354CC310BF641EEADEE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED138B01F4B95F1ECC64354CC310BF641EEADEE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/65ZL4bbJtYd8Z8Da7MCrNCnroSbHuWkx7eVSXZbBYkus/0/ED138B01F4B95F1ECC64354CC310BF641EEADEE3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:e4:b2:dc:f7:0f:98:44:91:d6:df:73:7a:20:e7:87:ff:ba:
         db:e9:86:a2:1d:5d:60:a4:29:52:bf:68:6c:6f:57:da:72:dc:
         27:6c:d4:b8:cc:a8:69:d2:57:8a:48:fd:85:96:71:af:01:f7:
         ec:c7:ff:c7:b9:9c:db:3e:d9:ff:71:ca:20:98:dd:ae:a7:ac:
         1e:3c:f4:81:48:b4:e7:38:43:29:88:78:de:63:f3:3c:30:fa:
         ac:48:60:95:66:ce:e7:9e:c9:ca:85:51:fe:d5:8e:19:0e:a9:
         b8:97:3f:39:00:f3:71:79:ea:6d:6d:74:cd:6e:e9:35:b6:82:
         d8:dc:c9:ec:4f:e8:c6:43:26:a3:52:2b:7d:6d:71:c1:86:ff:
         ce:09:e5:f9:c3:ef:a1:4d:fd:86:8a:59:f4:07:53:cc:8a:d6:
         b1:ee:0f:2d:8c:75:5c:05:54:b6:d2:7e:99:f5:7b:3b:3f:ba:
         d3:e5:c5:8d:74:11:8e:0b:23:53:11:1d:29:01:b5:78:da:08:
         ea:a8:34:d0:b4:92:23:15:00:de:5b:69:77:33:18:7a:b0:69:
         e6:68:31:79:b3:0d:c1:c7:e5:07:8b:9c:2f:c9:f8:02:3d:f7:
         05:fa:da:24:39:4b:35:20:6a:1c:f2:6e:64:9a:15:94:29:87:
         30:9c:46:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:22:17 2026 by rpki-client