Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.mft
File:                     91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.mft (raw, json)
Hash identifier:          9f5Lj5GpCNGNSS32EMqEG1zOLKkMQ+XltNgXKa4VXuc=
Subject key identifier:   50:39:8E:F4:AE:C4:99:F6:6C:E9:CA:30:45:E7:9D:53:DD:83:FC:9F
Authority key identifier: 91:CA:9B:A9:DC:2F:A0:AB:D8:0B:8D:D6:2B:48:5E:9B:6F:DB:00:E5
Certificate issuer:       /CN=91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5
Certificate serial:       1BA3C852CE219B6F7A6E4C9FD249E65513A8C6DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.mft
Manifest number:          0149
Signing time:             Sat 13 Jun 2026 15:23:43 +0000
Manifest this update:     Sat 13 Jun 2026 15:18:43 +0000
Manifest next update:     Sun 14 Jun 2026 18:40:43 +0000
Files and hashes:         1: 34352e3136382e3130382e302f32332d3233203d3e20323638303537.roa (hash: 9vYL5fPXoDdwgQtE2kZlNN/tTBgUPtEf9tzpQ8UlkG8=)
                          2: 34352e3136382e3131302e302f32342d3234203d3e20323638303537.roa (hash: P7BljvmuJqNRd9K9Eagn0tAf9y3EeppEZXsh5K18mGI=)
                          3: 34352e3136382e3130382e302f32322d3232203d3e20323638303537.roa (hash: 85SqitAGJseLaiDbvy6VgtxBUkzoy1Wctl0OwXunPFk=)
                          4: 34352e3136382e3130392e302f32342d3234203d3e20323638303537.roa (hash: DtobmpmrtnApTV02VGq+BHOznlqQxzpmMueStXgmZkc=)
                          5: 91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.crl (hash: tKQAmOIOtqJ2NgBCe9ajE739uiZj82Lt41BsvZ9jEPM=)
                          6: 323830343a353734633a3a2f33322d3332203d3e20323638303537.roa (hash: D4fDiQS0N/bSn+j19KOgW9lK2ZaW4wnjU0Y641p5zC4=)
                          7: 34352e3136382e3130382e302f32342d3234203d3e20323638303537.roa (hash: ml4hqc5VvZd1QBGLffQaNw1GMHKb9UPVQavARL51frE=)
                          8: 34352e3136382e3131312e302f32342d3234203d3e20323638303537.roa (hash: sZ1zBvZEpNPVDgv3rXIcpmkK8XtZkjiJBMgdgR+n0NE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.crl
                          rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:40:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:a3:c8:52:ce:21:9b:6f:7a:6e:4c:9f:d2:49:e6:55:13:a8:c6:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5
        Validity
            Not Before: Jun 13 15:18:43 2026 GMT
            Not After : Jun 14 18:40:43 2026 GMT
        Subject: CN=50398EF4AEC499F66CE9CA3045E79D53DD83FC9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:37:82:2b:d3:62:4d:07:e1:c0:af:ae:fe:
                    84:80:9d:9e:79:4a:38:0f:4f:c0:76:b6:76:30:46:
                    94:93:cb:7d:d4:d3:c1:2a:85:f1:dd:e9:3e:86:f9:
                    a8:f1:95:69:7d:bd:10:01:27:b2:4e:24:00:61:a2:
                    0c:13:c2:62:c4:69:87:64:a7:ab:0d:27:5c:f0:0a:
                    ec:a4:27:f6:6d:d8:c3:55:56:e0:1e:94:78:ea:6c:
                    72:77:af:4c:e4:94:eb:7f:33:f4:a3:82:42:9b:97:
                    95:d9:5b:a4:f0:76:3e:bc:aa:93:62:f9:37:88:df:
                    3a:67:12:ad:04:b3:a0:df:ec:81:08:6f:20:99:8d:
                    f9:a7:c2:02:db:36:a3:fa:83:e4:a5:99:fa:39:12:
                    bc:bc:c3:a0:59:b9:c9:36:5b:2d:94:8e:93:2c:57:
                    00:6d:3f:85:71:ad:cd:81:06:9a:74:cf:75:74:9c:
                    a0:19:0d:8d:f6:24:cd:a9:46:4a:d6:d6:f7:c3:5f:
                    4b:73:5b:63:a4:24:7f:45:c8:81:61:8c:d1:02:5c:
                    7c:0e:46:4d:57:48:07:42:03:4f:75:f9:e2:65:32:
                    34:99:7d:ce:ce:b9:5b:1d:61:89:3d:91:27:34:f6:
                    3f:d8:35:41:5c:83:19:26:ee:11:06:ba:28:d0:f8:
                    38:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:39:8E:F4:AE:C4:99:F6:6C:E9:CA:30:45:E7:9D:53:DD:83:FC:9F
            X509v3 Authority Key Identifier:
                keyid:91:CA:9B:A9:DC:2F:A0:AB:D8:0B:8D:D6:2B:48:5E:9B:6F:DB:00:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:f4:3b:b7:77:da:53:9d:c7:34:ea:c2:39:d4:2f:a1:92:58:
         dc:e7:7b:e3:35:74:2b:fa:01:d6:04:ea:94:51:af:f5:c4:03:
         f5:b3:b3:7f:39:5c:fc:79:6a:d5:a6:3c:16:f6:95:ad:ae:88:
         b7:6f:64:e1:f7:89:a6:7f:79:98:c0:a0:84:cd:bf:44:2e:ec:
         23:f5:10:1d:e1:ea:ba:10:72:d2:1b:1b:f0:d2:d5:b9:18:80:
         a5:22:c6:f3:9d:57:2f:6e:8f:00:ce:bb:65:91:31:a9:43:0d:
         2e:b8:ba:9b:40:37:f5:95:40:c6:e0:0c:1f:a8:a8:01:a0:b4:
         b8:f8:22:25:76:36:1d:2e:39:1d:c4:f4:76:6d:99:22:34:b3:
         23:ff:04:31:71:6a:bc:36:61:50:bc:dd:a3:d2:3c:93:90:7c:
         d9:b5:c7:ca:73:f8:64:e5:6c:ca:52:98:cd:f8:b3:d9:d5:17:
         d7:5b:74:4a:d1:d9:1e:c8:6f:77:5a:2f:8c:64:ee:0e:fd:c4:
         36:b0:3f:95:8e:1b:57:46:4f:bb:29:cf:b0:31:93:63:4f:2b:
         1b:3f:21:e4:3c:42:09:74:04:f7:e6:94:7d:d6:15:4d:8d:28:
         dd:2d:e4:c0:2e:3b:4d:1a:34:99:60:60:08:ec:09:d7:f9:8a:
         20:7b:85:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:35:58 2026 by rpki-client