Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.mft
File:                     70BE7503F48CCC14271EE75026EB08184789273F.mft (raw, json)
Hash identifier:          aQkYBKxPR76p0eE7ujTmIpFjyBxuwbypkZkhP1YFMJg=
Subject key identifier:   AA:49:8B:A0:14:BC:59:7B:B2:A1:A5:20:D5:50:02:F0:6F:A5:92:59
Authority key identifier: 70:BE:75:03:F4:8C:CC:14:27:1E:E7:50:26:EB:08:18:47:89:27:3F
Certificate issuer:       /CN=70BE7503F48CCC14271EE75026EB08184789273F
Certificate serial:       5B17881A89D29CC75A2D839684E7DB90D147A809
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.mft
Manifest number:          01C1
Signing time:             Mon 02 Mar 2026 10:35:05 +0000
Manifest this update:     Mon 02 Mar 2026 10:30:05 +0000
Manifest next update:     Tue 03 Mar 2026 13:10:05 +0000
Files and hashes:         1: 3139312e3234312e36342e302f32302d3332203d3e203533313831.roa (hash: GnaFMFJMItjMD48L6aTqrOzJUKteHuSGOsSUDz/lric=)
                          2: 3230312e33332e3136302e302f32302d3332203d3e203533313831.roa (hash: RSdKeQglPgtopD8BJEGkCpkbirujqQSQj4MlN2LDu/o=)
                          3: 3133382e3230342e36342e302f32322d3332203d3e203533313831.roa (hash: wyl4HwDk9SAF88SAhsmqolpBK40MpFDUT27xQj1gA1Q=)
                          4: 323830343a353365343a3a2f33322d313238203d3e203533313831.roa (hash: QJ4HiBHxsCQQPRAtx+xxKlZCua3P1Dk8tHsptc5rspI=)
                          5: 323830343a313133633a3a2f33322d313238203d3e203533313831.roa (hash: ozqJWRXyGQb9byfX9zSPxp1Hhcod/DSMtaO1jZwvMiw=)
                          6: 34352e3136342e3131322e302f32322d3332203d3e203533313831.roa (hash: k/hN6TA+OFbKdFdz77MEM9ytllTB/QKnmxnXWeZa6qY=)
                          7: 70BE7503F48CCC14271EE75026EB08184789273F.crl (hash: FEScIJW+AgTYguNenaQk+UfY2LyaSMQbNywEtODCBBE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.crl
                          rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 13:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:17:88:1a:89:d2:9c:c7:5a:2d:83:96:84:e7:db:90:d1:47:a8:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70BE7503F48CCC14271EE75026EB08184789273F
        Validity
            Not Before: Mar  2 10:30:05 2026 GMT
            Not After : Mar  3 13:10:05 2026 GMT
        Subject: CN=AA498BA014BC597BB2A1A520D55002F06FA59259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:71:27:29:c7:24:83:50:e1:75:35:1e:0f:b7:
                    93:3e:06:5f:71:f9:48:39:3c:0f:9b:2b:ab:82:87:
                    70:03:51:63:77:10:ba:ea:d1:a4:58:b1:9e:fa:8b:
                    b3:0d:ee:dd:c8:20:a9:6e:df:6b:89:31:e9:4c:73:
                    69:42:86:c4:87:48:1a:c1:1a:6b:84:b7:29:dc:ed:
                    0d:e7:0e:f5:f6:03:97:71:7e:47:a4:f0:d0:96:41:
                    da:f7:91:68:f7:5d:81:44:25:d8:db:9b:5c:e6:5c:
                    38:f2:0d:d7:1c:c7:4f:c8:99:80:74:68:70:3d:35:
                    82:38:7b:ac:67:4f:b7:09:0d:4e:ae:87:28:40:6d:
                    02:95:a9:04:23:9d:45:07:7d:ea:76:b6:1c:c1:fa:
                    c8:43:50:7a:25:17:0e:43:0a:ff:5b:df:6c:37:c8:
                    c0:04:b1:e0:78:5d:25:31:55:75:18:53:d8:93:fc:
                    5d:d4:99:16:4a:ab:33:4e:78:5e:79:2f:0d:80:95:
                    85:53:03:ec:1d:28:20:06:bc:8d:5d:bc:17:6b:ad:
                    1e:30:3d:4b:dd:7d:da:0a:7e:f1:f4:b2:be:25:48:
                    18:56:70:ed:2e:48:4f:83:f2:2e:8a:ab:17:81:81:
                    d5:96:d4:74:5f:f0:fc:96:50:55:18:2b:3d:5b:d1:
                    9b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:49:8B:A0:14:BC:59:7B:B2:A1:A5:20:D5:50:02:F0:6F:A5:92:59
            X509v3 Authority Key Identifier:
                keyid:70:BE:75:03:F4:8C:CC:14:27:1E:E7:50:26:EB:08:18:47:89:27:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:06:54:aa:0c:7e:6b:b1:f1:f6:24:10:0a:e5:c9:e6:a5:0c:
         42:bb:5f:a9:b0:7c:4e:76:c9:52:46:25:a9:5f:da:0a:09:7f:
         ea:76:c6:76:6b:a1:6d:02:49:aa:48:4a:82:fe:77:69:6a:5d:
         11:c9:b4:d5:7b:7b:3b:f8:5f:70:27:72:37:54:c4:4f:5e:cd:
         e0:54:7d:fc:06:e7:d0:88:34:b9:0a:9f:7d:e7:72:0a:ee:b6:
         6a:b5:9d:a0:1b:89:48:86:71:20:50:1a:e6:96:6c:b9:3f:71:
         1e:5d:28:79:63:d5:f3:b8:64:13:ea:6d:ba:3c:05:c5:11:35:
         c9:8f:97:98:5f:4e:c0:41:af:10:34:39:c2:2b:87:37:e4:64:
         3c:b1:9b:55:67:ae:cc:65:99:bb:c2:b2:be:cd:b9:4b:7e:10:
         16:e7:40:33:6f:84:0d:fd:2c:c9:75:33:88:35:c9:20:04:06:
         5a:a6:a5:31:1f:77:30:95:db:6d:5e:03:fc:fd:0b:ec:8b:c4:
         9b:b9:df:4d:51:16:04:cb:61:d7:00:7f:3e:57:27:c5:84:2c:
         3e:c0:68:82:03:0a:04:f6:d4:55:75:4a:2f:d4:de:4d:bd:f1:
         4a:94:ff:a3:44:91:22:89:71:6e:53:76:85:9a:0a:3f:ec:5e:
         3e:a5:32:71
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWxeIGonSnMdaLYOWhOfbkNFHqAkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBCRTc1MDNGNDhDQ0MxNDI3MUVFNzUwMjZFQjA4MTg0
Nzg5MjczRjAeFw0yNjAzMDIxMDMwMDVaFw0yNjAzMDMxMzEwMDVaMDMxMTAvBgNV
BAMTKEFBNDk4QkEwMTRCQzU5N0JCMkExQTUyMEQ1NTAwMkYwNkZBNTkyNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwcScpxySDUOF1NR4Pt5M+Bl9x
+Ug5PA+bK6uCh3ADUWN3ELrq0aRYsZ76i7MN7t3IIKlu32uJMelMc2lChsSHSBrB
GmuEtync7Q3nDvX2A5dxfkek8NCWQdr3kWj3XYFEJdjbm1zmXDjyDdccx0/ImYB0
aHA9NYI4e6xnT7cJDU6uhyhAbQKVqQQjnUUHfep2thzB+shDUHolFw5DCv9b32w3
yMAEseB4XSUxVXUYU9iT/F3UmRZKqzNOeF55Lw2AlYVTA+wdKCAGvI1dvBdrrR4w
PUvdfdoKfvH0sr4lSBhWcO0uSE+D8i6KqxeBgdWW1HRf8PyWUFUYKz1b0Zt7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUqkmLoBS8WXuyoaUg1VAC8G+lklkwHwYDVR0j
BBgwFoAUcL51A/SMzBQnHudQJusIGEeJJz8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVV5NGF3Q202QUhBUk1kYllFMVo3aHNTaXlRNnF6UU5OQ2lLczZ4RHBO
ZDgvMC83MEJFNzUwM0Y0OENDQzE0MjcxRUU3NTAyNkVCMDgxODQ3ODkyNzNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwQkU3NTAzRjQ4Q0NDMTQy
NzFFRTc1MDI2RUIwODE4NDc4OTI3M0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RVV5NGF3Q202QUhBUk1kYllFMVo3aHNTaXlRNnF6UU5OQ2lLczZ4RHBOZDgvMC83
MEJFNzUwM0Y0OENDQzE0MjcxRUU3NTAyNkVCMDgxODQ3ODkyNzNGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKAZUqgx+a7Hx9iQQCuXJ5qUMQrtfqbB8TnbJUkYlqV/aCgl/6nbGdmuhbQJJ
qkhKgv53aWpdEcm01Xt7O/hfcCdyN1TET17N4FR9/Abn0Ig0uQqffedyCu62arWd
oBuJSIZxIFAa5pZsuT9xHl0oeWPV87hkE+ptujwFxRE1yY+XmF9OwEGvEDQ5wiuH
N+RkPLGbVWeuzGWZu8Kyvs25S34QFudAM2+EDf0syXUziDXJIAQGWqalMR93MJXb
bV4D/P0L7IvEm7nfTVEWBMth1wB/PlcnxYQsPsBoggMKBPbUVXVKL9TeTb3xSpT/
o0SRIolxblN2hZoKP+xePqUycQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:14:27 2026 by rpki-client