Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft
File:                     A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft (raw, json)
Hash identifier:          N8KFVwpSDWYdoizW8zHLHRV81GUumTvPsakB7WK4Ums=
Subject key identifier:   40:25:95:65:E3:93:12:E7:DF:E1:8F:F5:16:C2:11:32:06:B1:CA:80
Authority key identifier: A5:A3:3C:2B:9B:9B:1A:56:83:44:C1:6E:89:CE:84:E7:BC:E5:F0:41
Certificate issuer:       /CN=A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041
Certificate serial:       1593F5583AEB9C517DB49B9EDB4C55AECF16B9BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft
Manifest number:          0388
Signing time:             Mon 02 Mar 2026 07:37:46 +0000
Manifest this update:     Mon 02 Mar 2026 07:32:46 +0000
Manifest next update:     Tue 03 Mar 2026 09:24:46 +0000
Files and hashes:         1: 323830343a386162633a3a2f33322d313238203d3e20323733363839.roa (hash: ItHOB5NSOr3tcfc/B7XnxF4I381M7cjemmgQf3Y+EaI=)
                          2: A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.crl (hash: drBpWRTWsvpag1l8Aowo8p67SeLnwrz3279eNNFtNfg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.crl
                          rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 09:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:93:f5:58:3a:eb:9c:51:7d:b4:9b:9e:db:4c:55:ae:cf:16:b9:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041
        Validity
            Not Before: Mar  2 07:32:46 2026 GMT
            Not After : Mar  3 09:24:46 2026 GMT
        Subject: CN=40259565E39312E7DFE18FF516C2113206B1CA80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5c:c8:cc:fc:2a:ee:57:df:bc:3f:28:8b:cd:
                    84:1a:24:19:c5:48:21:18:13:75:b4:b1:a6:44:77:
                    fb:a2:2d:0f:9f:c5:00:fa:ef:b4:46:2c:a1:10:61:
                    4c:78:3d:e7:af:ba:43:f7:e9:9a:b1:4b:f5:a0:0e:
                    94:0b:ff:11:1c:2b:70:40:db:ec:f1:21:a7:2b:17:
                    f0:03:97:5d:93:10:17:8c:10:33:41:c4:72:f7:ea:
                    98:92:41:83:95:df:0c:f3:71:9a:8a:ca:09:c0:a6:
                    f3:ae:16:7a:1d:ac:84:95:f5:c8:8f:b9:65:d2:d1:
                    95:31:21:04:eb:e6:ae:32:29:e8:0d:0a:80:50:24:
                    5e:04:b8:85:49:58:5d:e6:a7:59:c9:80:e4:8a:e5:
                    a7:c5:cd:8e:16:b0:48:7f:8d:66:bb:ae:b1:c5:ac:
                    8d:be:7f:08:58:14:54:60:1d:e1:96:9a:95:6b:07:
                    84:b4:f3:ca:fa:bf:95:54:37:20:a9:67:c6:74:6e:
                    68:0f:21:f8:08:a0:e6:0d:27:82:aa:21:15:5d:99:
                    7f:64:d8:93:f7:08:7e:23:48:bd:05:64:ab:08:b6:
                    f2:4b:87:45:a5:f2:cc:1f:a1:88:3f:66:f9:ed:c2:
                    d4:86:c5:2a:0f:d7:7d:9a:aa:e1:d0:ef:08:14:4b:
                    c5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:25:95:65:E3:93:12:E7:DF:E1:8F:F5:16:C2:11:32:06:B1:CA:80
            X509v3 Authority Key Identifier:
                keyid:A5:A3:3C:2B:9B:9B:1A:56:83:44:C1:6E:89:CE:84:E7:BC:E5:F0:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:49:88:20:8e:b5:61:9e:bb:93:ab:bf:ca:78:35:28:07:7c:
         dc:41:a6:2c:d3:a5:2a:78:16:98:a0:b6:ea:7d:13:26:16:d0:
         49:48:7f:a7:32:f5:f0:11:e3:89:e4:36:a1:63:fd:3f:0c:29:
         82:4b:1f:b3:7f:36:7b:6b:7e:4d:5d:9d:08:27:15:ad:64:5e:
         04:29:1e:43:f9:3f:9b:cd:89:59:71:5b:11:c8:3a:49:23:cf:
         3e:3b:dd:93:8a:4b:93:9c:b7:ed:ca:c8:0c:c3:9e:f2:bd:48:
         c9:92:aa:82:8a:e8:47:82:ef:25:46:f2:71:ac:75:dc:0a:c2:
         71:0b:9f:34:12:6e:c9:f6:e1:ab:06:56:b9:14:93:88:bf:53:
         3e:1d:72:dd:a4:fa:34:ce:bd:2b:9c:1f:73:7a:14:b5:81:9d:
         9c:84:33:6f:37:c0:ba:30:f2:a2:9b:f7:2f:91:a2:4c:c0:dc:
         b5:7d:23:c9:e6:8b:ba:9f:80:dd:ec:75:80:bc:fd:79:7d:17:
         9e:e7:5f:ac:d4:91:36:91:26:f0:3d:cc:27:21:5e:a6:97:46:
         3f:21:e7:47:a8:35:4a:54:31:a6:69:8b:a3:61:ea:ea:60:7c:
         87:63:e4:3c:e5:eb:4f:2a:4b:74:c2:e1:d8:0d:a3:d8:05:d2:
         0f:6d:b2:28
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFZP1WDrrnFF9tJue20xVrs8Wub8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVBMzNDMkI5QjlCMUE1NjgzNDRDMTZFODlDRTg0RTdC
Q0U1RjA0MTAeFw0yNjAzMDIwNzMyNDZaFw0yNjAzMDMwOTI0NDZaMDMxMTAvBgNV
BAMTKDQwMjU5NTY1RTM5MzEyRTdERkUxOEZGNTE2QzIxMTMyMDZCMUNBODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8XMjM/CruV9+8PyiLzYQaJBnF
SCEYE3W0saZEd/uiLQ+fxQD677RGLKEQYUx4PeevukP36ZqxS/WgDpQL/xEcK3BA
2+zxIacrF/ADl12TEBeMEDNBxHL36piSQYOV3wzzcZqKygnApvOuFnodrISV9ciP
uWXS0ZUxIQTr5q4yKegNCoBQJF4EuIVJWF3mp1nJgOSK5afFzY4WsEh/jWa7rrHF
rI2+fwhYFFRgHeGWmpVrB4S088r6v5VUNyCpZ8Z0bmgPIfgIoOYNJ4KqIRVdmX9k
2JP3CH4jSL0FZKsItvJLh0Wl8swfoYg/ZvntwtSGxSoP132aquHQ7wgUS8UDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQCWVZeOTEuff4Y/1FsIRMgaxyoAwHwYDVR0j
BBgwFoAUpaM8K5ubGlaDRMFuic6E57zl8EEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUU4bU1yYXBoRXNkR29QVThHSExMSG1rdm5zSGo0Ulp4dERYSktQOHY5
WlUvMC9BNUEzM0MyQjlCOUIxQTU2ODM0NEMxNkU4OUNFODRFN0JDRTVGMDQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1QTMzQzJCOUI5QjFBNTY4
MzQ0QzE2RTg5Q0U4NEU3QkNFNUYwNDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RUU4bU1yYXBoRXNkR29QVThHSExMSG1rdm5zSGo0Ulp4dERYSktQOHY5WlUvMC9B
NUEzM0MyQjlCOUIxQTU2ODM0NEMxNkU4OUNFODRFN0JDRTVGMDQxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATkmIII61YZ67k6u/yng1KAd83EGmLNOlKngWmKC26n0TJhbQSUh/pzL18BHj
ieQ2oWP9Pwwpgksfs382e2t+TV2dCCcVrWReBCkeQ/k/m82JWXFbEcg6SSPPPjvd
k4pLk5y37crIDMOe8r1IyZKqgoroR4LvJUbycax13ArCcQufNBJuyfbhqwZWuRST
iL9TPh1y3aT6NM69K5wfc3oUtYGdnIQzbzfAujDyopv3L5GiTMDctX0jyeaLup+A
3ex1gLz9eX0XnudfrNSRNpEm8D3MJyFeppdGPyHnR6g1SlQxpmmLo2Hq6mB8h2Pk
POXrTypLdMLh2A2j2AXSD22yKA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:31:47 2026 by rpki-client