Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
File:                     85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft (raw, json)
Hash identifier:          1zkztixMZ6MA7ou+uglS6jdQLDKtkt1EbZxYe+pAyS0=
Subject key identifier:   EE:60:89:7D:E1:6C:FD:24:57:5B:CC:5D:B2:DA:BE:06:8C:71:59:30
Authority key identifier: 85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB
Certificate issuer:       /CN=85EE0CD661887CC88F64F6B4BE9D420426E200DB
Certificate serial:       2E26C991B6B436E702B9355B7D8A44285C50FBDA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
Manifest number:          03E0
Signing time:             Fri 17 Apr 2026 14:43:30 +0000
Manifest this update:     Fri 17 Apr 2026 14:38:30 +0000
Manifest next update:     Sat 18 Apr 2026 16:20:30 +0000
Files and hashes:         1: 323830343a383532303a3a2f33322d3334203d3e20323732353539.roa (hash: 62LOMhvbmOJdbTGkjcygK0r0w7DTO+g8VM0cQfmxQ4g=)
                          2: 85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl (hash: Srd1pjsJvYtWPmUSiNRoUpMcscESorOVPvUySBKYHhY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl
                          rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 16:20:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:26:c9:91:b6:b4:36:e7:02:b9:35:5b:7d:8a:44:28:5c:50:fb:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85EE0CD661887CC88F64F6B4BE9D420426E200DB
        Validity
            Not Before: Apr 17 14:38:30 2026 GMT
            Not After : Apr 18 16:20:30 2026 GMT
        Subject: CN=EE60897DE16CFD24575BCC5DB2DABE068C715930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:28:9d:8f:db:83:51:4d:a8:4d:93:cf:03:16:
                    77:37:8b:83:af:9e:d1:96:42:73:38:12:fe:45:8e:
                    85:1a:aa:ad:dc:a4:2d:ae:5b:96:d1:aa:92:47:57:
                    40:aa:38:62:00:fa:0f:d0:14:fd:c5:aa:48:06:9b:
                    7f:5e:21:dd:ed:fc:e2:5a:23:e1:ed:50:0a:ad:38:
                    5a:ac:1b:fb:9b:d1:9d:4f:7f:14:83:47:f4:84:1c:
                    0e:27:5a:0d:b8:45:6f:79:dc:5b:e5:1b:50:c0:c7:
                    0b:52:0f:59:47:ab:a5:ad:40:2f:78:93:43:ca:93:
                    9a:35:d6:0a:39:e5:f4:c3:cc:35:15:8e:7c:55:45:
                    ff:86:17:47:22:e4:f8:5e:55:15:81:00:cd:48:d3:
                    11:20:0c:e4:c6:3b:99:b1:7d:21:cb:58:b8:5d:44:
                    74:5e:16:1f:eb:b9:1e:7f:92:34:68:41:28:db:0b:
                    18:30:5c:d8:be:83:1e:37:28:20:25:6c:19:a5:b5:
                    c5:80:8b:1d:ce:46:8c:ec:9d:31:c1:2f:83:59:12:
                    1c:99:c0:a8:f3:e9:80:2a:92:0f:65:44:dc:a6:a3:
                    66:1c:cd:a8:ca:3c:79:7e:b3:28:8a:d0:ae:af:2d:
                    dc:46:b9:1a:17:58:ae:97:59:a7:37:8d:b6:d3:4c:
                    65:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:60:89:7D:E1:6C:FD:24:57:5B:CC:5D:B2:DA:BE:06:8C:71:59:30
            X509v3 Authority Key Identifier:
                keyid:85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:e9:f0:e7:b4:eb:1f:ca:c4:6c:19:9c:bb:3f:a4:3e:64:61:
         1f:33:61:3e:77:f0:48:7f:68:74:5c:dc:f1:74:0a:b4:40:52:
         e2:b9:63:b4:7c:66:26:92:78:67:f0:9b:e4:f1:06:63:a3:a0:
         e6:eb:de:39:69:63:97:d1:90:23:2d:1c:bd:b3:0e:40:9f:01:
         97:2c:aa:e5:77:68:1b:5a:ce:5a:66:6b:05:a1:e2:10:32:9b:
         61:d5:ae:9a:54:e3:19:98:ec:ba:cc:aa:35:15:d1:36:80:7d:
         cd:1d:0c:92:f4:f3:fe:08:5a:0e:3f:11:b9:39:46:2d:64:77:
         80:ab:6f:91:33:8f:9b:34:68:e7:00:86:58:aa:ce:dc:f6:68:
         c0:ad:92:6e:a4:95:42:5d:8e:b4:6a:83:6b:92:85:02:3c:92:
         d5:35:fc:0d:d6:66:1e:a5:b4:8d:86:ca:ba:8d:d8:a7:8f:08:
         f6:22:12:72:ed:1f:c9:e6:26:81:6d:71:6a:cf:97:6a:14:91:
         be:9d:7e:cc:76:9d:21:0a:3b:93:07:eb:d8:68:b3:ba:60:25:
         ee:4e:d6:0a:ac:a3:64:d3:a5:82:55:c2:c4:80:59:13:23:3b:
         45:7a:a5:09:c5:0b:02:41:ba:7a:a5:52:85:99:5c:42:7d:8a:
         89:35:ee:62
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULibJkba0NucCuTVbfYpEKFxQ+9owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVFRTBDRDY2MTg4N0NDODhGNjRGNkI0QkU5RDQyMDQy
NkUyMDBEQjAeFw0yNjA0MTcxNDM4MzBaFw0yNjA0MTgxNjIwMzBaMDMxMTAvBgNV
BAMTKEVFNjA4OTdERTE2Q0ZEMjQ1NzVCQ0M1REIyREFCRTA2OEM3MTU5MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZKJ2P24NRTahNk88DFnc3i4Ov
ntGWQnM4Ev5FjoUaqq3cpC2uW5bRqpJHV0CqOGIA+g/QFP3FqkgGm39eId3t/OJa
I+HtUAqtOFqsG/ub0Z1PfxSDR/SEHA4nWg24RW953FvlG1DAxwtSD1lHq6WtQC94
k0PKk5o11go55fTDzDUVjnxVRf+GF0ci5PheVRWBAM1I0xEgDOTGO5mxfSHLWLhd
RHReFh/ruR5/kjRoQSjbCxgwXNi+gx43KCAlbBmltcWAix3ORozsnTHBL4NZEhyZ
wKjz6YAqkg9lRNymo2YczajKPHl+syiK0K6vLdxGuRoXWK6XWac3jbbTTGUpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU7mCJfeFs/SRXW8xdstq+BoxxWTAwHwYDVR0j
BBgwFoAUhe4M1mGIfMiPZPa0vp1CBCbiANswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTdzd2gzOHBUQ3pTZzh4NWJMcHM3WUI2QUF4eUhyNW93YVZIRnNSYjJM
RHAvMS84NUVFMENENjYxODg3Q0M4OEY2NEY2QjRCRTlENDIwNDI2RTIwMERCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1RUUwQ0Q2NjE4ODdDQzg4
RjY0RjZCNEJFOUQ0MjA0MjZFMjAwREIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OTdzd2gzOHBUQ3pTZzh4NWJMcHM3WUI2QUF4eUhyNW93YVZIRnNSYjJMRHAvMS84
NUVFMENENjYxODg3Q0M4OEY2NEY2QjRCRTlENDIwNDI2RTIwMERCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACenw57TrH8rEbBmcuz+kPmRhHzNhPnfwSH9odFzc8XQKtEBS4rljtHxmJpJ4
Z/Cb5PEGY6Og5uveOWljl9GQIy0cvbMOQJ8Blyyq5XdoG1rOWmZrBaHiEDKbYdWu
mlTjGZjsusyqNRXRNoB9zR0MkvTz/ghaDj8RuTlGLWR3gKtvkTOPmzRo5wCGWKrO
3PZowK2SbqSVQl2OtGqDa5KFAjyS1TX8DdZmHqW0jYbKuo3Yp48I9iIScu0fyeYm
gW1xas+XahSRvp1+zHadIQo7kwfr2GizumAl7k7WCqyjZNOlglXCxIBZEyM7RXql
CcULAkG6eqVShZlcQn2KiTXuYg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:33:08 2026 by rpki-client