Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.mft
File:                     70BE7503F48CCC14271EE75026EB08184789273F.mft (raw, json)
Hash identifier:          Rrugo6EMCHDD5tXnU75qepEZxLWeOXkvV7Wkeek33d4=
Subject key identifier:   33:57:D2:36:14:40:76:AD:56:E7:8A:13:AF:B1:83:AD:0D:F7:38:BF
Authority key identifier: 70:BE:75:03:F4:8C:CC:14:27:1E:E7:50:26:EB:08:18:47:89:27:3F
Certificate issuer:       /CN=70BE7503F48CCC14271EE75026EB08184789273F
Certificate serial:       17879E8E5AFB91D1DFC775532BF8D39FD9FF3F52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.mft
Manifest number:          01FF
Signing time:             Fri 17 Apr 2026 15:30:10 +0000
Manifest this update:     Fri 17 Apr 2026 15:25:10 +0000
Manifest next update:     Sat 18 Apr 2026 17:00:10 +0000
Files and hashes:         1: 3230312e33332e3136302e302f32302d3332203d3e203533313831.roa (hash: KrhAAU4cNicO+l+hNBnml/thEjeR1pJjbxjixaDlkps=)
                          2: 34352e3136342e3131322e302f32322d3332203d3e203533313831.roa (hash: aJslR/vmDXJnzCKEwTHouZcKOuyOBd8owHk+C/drazo=)
                          3: 323830343a353365343a3a2f33322d313238203d3e203533313831.roa (hash: X7rByr1EHvceWtqQMxQYxECqiiiaE1r9OuQQcclY0RM=)
                          4: 3133382e3230342e36342e302f32322d3332203d3e203533313831.roa (hash: +0lwzybCtoDpeA00IP/e/Nh0SdKI++xNXq5JaNtUODc=)
                          5: 3139312e3234312e36342e302f32302d3332203d3e203533313831.roa (hash: DYuiB7TyLSISWyN3egKqobN0v2AzCzHiYRko+R5xBns=)
                          6: 323830343a313133633a3a2f33322d313238203d3e203533313831.roa (hash: OecBUCYkrKTyWYL4WQ5GWNTtBKsmHjxtNhm4PhIxeGE=)
                          7: 70BE7503F48CCC14271EE75026EB08184789273F.crl (hash: m5e8VdP4ufyIklC9Ok3ZUadvBz3n6zsvEjt1s0kqTf8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.crl
                          rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 17:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:87:9e:8e:5a:fb:91:d1:df:c7:75:53:2b:f8:d3:9f:d9:ff:3f:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70BE7503F48CCC14271EE75026EB08184789273F
        Validity
            Not Before: Apr 17 15:25:10 2026 GMT
            Not After : Apr 18 17:00:10 2026 GMT
        Subject: CN=3357D236144076AD56E78A13AFB183AD0DF738BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7d:9c:92:ab:4c:b8:80:41:c9:3c:aa:31:ec:
                    80:18:a0:5f:2c:b3:53:77:65:7a:28:b8:27:54:86:
                    0f:a0:6c:82:fb:a9:de:f2:01:e0:3f:39:4f:5e:58:
                    1d:c9:59:81:b6:6f:7a:3c:ff:dd:03:12:82:51:84:
                    f6:8a:61:04:5c:8d:d7:1c:aa:82:2f:7d:1d:99:ce:
                    9c:2a:05:d1:3b:ec:e3:d7:d7:2e:3a:ac:66:3b:ff:
                    0b:20:ae:e1:fb:39:c6:90:cd:e0:73:e9:f5:f3:cd:
                    38:45:c9:61:a8:98:82:8e:29:ad:bc:95:02:34:e0:
                    ae:c3:f3:df:57:f0:9d:0b:69:46:65:e9:bc:5d:c3:
                    89:29:78:48:4d:8e:fc:31:bb:cb:37:61:6a:44:38:
                    ee:ce:15:fd:24:c5:c4:cc:93:26:18:61:e0:e8:bf:
                    cf:8c:8a:8a:86:df:fb:a4:bf:ff:06:5a:95:4f:ac:
                    a7:cc:96:c0:84:b5:6f:9d:7d:85:4e:c2:f8:68:47:
                    a9:fd:0b:b9:54:6d:ad:70:9f:15:b2:5e:9b:c7:c0:
                    ef:d3:0c:de:8a:b1:27:88:f7:d8:ef:f1:ce:aa:c5:
                    a8:d9:74:51:fe:d4:5c:d9:92:8d:92:f5:53:fb:13:
                    12:ca:d2:96:44:22:2f:cb:4e:e8:2a:22:91:71:35:
                    65:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:57:D2:36:14:40:76:AD:56:E7:8A:13:AF:B1:83:AD:0D:F7:38:BF
            X509v3 Authority Key Identifier:
                keyid:70:BE:75:03:F4:8C:CC:14:27:1E:E7:50:26:EB:08:18:47:89:27:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:47:7a:23:b7:25:61:fc:88:6d:09:31:80:74:a9:5b:34:0c:
         35:f3:26:c5:4d:b7:54:88:43:54:8d:d1:33:11:32:db:b9:5a:
         c9:b3:6c:c6:49:e1:9c:3d:14:6d:76:31:56:e4:93:c2:d9:52:
         f2:9a:5d:1f:8e:aa:40:f7:a6:92:4b:2f:d5:fc:16:dc:97:d2:
         0b:2b:4a:a4:3b:ab:a0:b5:f5:a1:55:ab:f0:0e:ee:eb:34:31:
         7b:50:10:8a:be:b0:6b:d3:42:33:36:63:9d:a8:e4:dd:5d:a7:
         05:50:d7:ab:d5:c4:81:3c:3b:d7:5b:d2:9b:d7:ae:ab:bb:09:
         4f:89:2c:0d:b8:82:0f:8f:68:5c:c5:dc:bd:de:89:63:7e:28:
         d7:f9:25:88:37:82:1f:62:6f:60:5b:63:77:3e:38:9b:ab:8c:
         a4:ac:31:c3:93:d9:9d:72:90:91:70:77:1c:c8:b6:c3:70:2d:
         9b:8b:b8:e3:b0:b3:b0:e1:b3:42:de:57:3d:58:e2:b0:1f:0b:
         6f:33:26:ae:fb:3b:55:8f:f3:5a:db:ad:6f:fd:ca:0a:ed:b3:
         58:6f:f2:45:af:43:6e:96:90:d0:9f:46:70:45:1b:ff:9e:99:
         d7:d6:ac:07:f7:2a:a2:5d:3a:05:19:16:79:0b:b0:8c:9b:0f:
         6b:62:7b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:46:32 2026 by rpki-client