Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft
File:                     CEA74FF3945E7508599D54A721E47B3BA75706E3.mft (raw, json)
Hash identifier:          zIj+adlNEF0MG2wskWiWmNOCLQf0VIhykHjUPhvjQnE=
Subject key identifier:   B5:0C:96:A3:6B:8B:AC:3C:5D:40:3A:EB:CC:54:23:DA:B5:5A:BE:BD
Authority key identifier: CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3
Certificate issuer:       /CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
Certificate serial:       21DB36FA3F51803E7D5218152A880DB2E5CBAE65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft
Manifest number:          EA
Signing time:             Mon 02 Mar 2026 09:03:23 +0000
Manifest this update:     Mon 02 Mar 2026 08:58:23 +0000
Manifest next update:     Tue 03 Mar 2026 10:09:23 +0000
Files and hashes:         1: 323830343a353730633a313030303a3a2f33362d3336203d3e20323638303430.roa (hash: XX4RgqWrgK0cN07dELop4PmkV3SAb55I/eZ0jEmBII0=)
                          2: 34352e3136382e39322e302f32342d3234203d3e20323638303430.roa (hash: K5wxrWM8xGNa7I2Y8rel/TySV+3C7EVkaRe9ditefw4=)
                          3: 323830343a353730633a383030303a3a2f33362d3336203d3e20323638303430.roa (hash: NFU0jsGK6nSlrz0zk/uZrUWGBjONw0UGc1cZM4BbMUI=)
                          4: 323830343a353730633a373030303a3a2f33362d3336203d3e20323638303430.roa (hash: qEGTNLA+KBcnLwyZCSUh18M49As5kWTLHnJHsfSSMfE=)
                          5: 323830343a353730633a623030303a3a2f33362d3336203d3e20323638303430.roa (hash: VbbGJ8kXVWVaWgkpRfTJcqYFKwhfCrLnwCzYQO9WjaY=)
                          6: 323830343a353730633a613030303a3a2f33362d3336203d3e20323638303430.roa (hash: T3V/Fz/+CDSWTRlwglp3HyVdgtedfBKa6uhVQvV4HZM=)
                          7: CEA74FF3945E7508599D54A721E47B3BA75706E3.crl (hash: eVruM6M6NRLZ85uTZ8E9+Na+pDurH3OQNOJb3FzRVoI=)
                          8: 323830343a353730633a663030303a3a2f33362d3336203d3e20323638303430.roa (hash: DDqiXH4DdttjGY2bJj8hMTSCzoazExdYreFMNjG5kNw=)
                          9: 323830343a353730633a633030303a3a2f33362d3336203d3e20323638303430.roa (hash: O7Oqr//PpcCqpzqFcZFT9boA2UaSvzJGXYDNBvE/tdI=)
                          10: 323830343a353730633a323030303a3a2f33362d3336203d3e20323638303430.roa (hash: Q6zbgVZ9/2xEzK0l0oVACRPG06HR5I8bst3e2ItEODc=)
                          11: 34352e3136382e39322e302f32332d3233203d3e20323638303430.roa (hash: vXL3rBnLSmw+J/CZGJUcyYkEUODj5iau3OEYJ2GWr1k=)
                          12: 323830343a353730633a653030303a3a2f33362d3336203d3e20323638303430.roa (hash: t88Kw7BF7trQ4diDbERO9KwQHVsvIgc6sb+afFk1/oU=)
                          13: 323830343a353730633a643030303a3a2f33362d3336203d3e20323638303430.roa (hash: 7tiAzH2T7BZpiBdZ7h8cWjCqszI1cAHqi1AKIdwI+Ns=)
                          14: 323830343a353730633a333030303a3a2f33362d3336203d3e20323638303430.roa (hash: tGy459mLNyebpYZY+MbMekDYPXcRxv1h1TrwkkoKkFk=)
                          15: 34352e3136382e39332e302f32342d3234203d3e20323638303430.roa (hash: IUZPl3HABE+NbxOlmkkLFMZO5STQT9Ai+fogmJfb7iY=)
                          16: 323830343a353730633a393030303a3a2f33362d3336203d3e20323638303430.roa (hash: h+Y8VHW8KQwbGe6hDzwUUcFE6gQRTp4SniquNbqCvlw=)
                          17: 323830343a353730633a3a2f33322d3332203d3e20323638303430.roa (hash: NPJlZoapyXgbKp6nQrUGfGeQejkrs2Sgotm/M7pu97Q=)
                          18: 323830343a353730633a353030303a3a2f33362d3336203d3e20323638303430.roa (hash: xKOZCLzFhIukCU7Ho1bE8l21fKx8oMJdRkB6RP4zOU0=)
                          19: 323830343a353730633a343030303a3a2f33362d3336203d3e20323638303430.roa (hash: 9BWp1l5TIZv7ozJAknPOYmLX23z8eO7kjS9UJR1G2ac=)
                          20: 323830343a353730633a363030303a3a2f33362d3336203d3e20323638303430.roa (hash: K2v77Gt9NOI7lpPDfVMsT7/UdsiCfs7Bid43RGcyb+8=)
                          21: 323830343a353730633a3a2f33362d3336203d3e20323638303430.roa (hash: cX+NY4bOnb/vgPKQTr/m0/s7d+cdADKZKZxk5MIvTZE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl
                          rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 10:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:db:36:fa:3f:51:80:3e:7d:52:18:15:2a:88:0d:b2:e5:cb:ae:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
        Validity
            Not Before: Mar  2 08:58:23 2026 GMT
            Not After : Mar  3 10:09:23 2026 GMT
        Subject: CN=B50C96A36B8BAC3C5D403AEBCC5423DAB55ABEBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e0:1b:b2:68:38:3c:ec:82:5e:fd:8f:ad:f8:
                    4a:76:a5:a4:23:74:8a:38:2d:6e:c5:a0:0a:fd:97:
                    d9:58:85:07:de:7c:04:eb:a4:d0:98:40:28:b3:0a:
                    d0:76:27:31:2f:c5:f3:61:23:ae:2b:ca:d3:f7:96:
                    03:e3:30:86:c2:8c:83:12:ee:38:be:89:83:33:b2:
                    17:9f:bf:f4:8e:e2:91:4e:dc:79:d6:d6:06:2e:1d:
                    29:24:4f:c4:f5:db:75:50:c3:f8:c3:ce:68:74:e3:
                    51:49:a6:65:38:a2:45:55:09:9e:c4:60:ad:cc:0f:
                    36:d3:f1:50:03:b5:70:de:6a:6f:a9:e1:8e:c3:66:
                    56:25:ee:53:a6:51:06:56:5b:95:fb:bc:6f:a7:63:
                    20:ee:76:00:d6:3a:4a:9f:91:ce:41:7c:70:a9:be:
                    71:9d:5e:a4:d8:88:4d:49:7d:65:59:4f:e6:f1:8b:
                    00:cd:cb:a2:9d:36:d7:40:03:49:f4:1a:20:42:10:
                    2d:35:0e:d7:b5:65:fe:ce:83:ff:f9:ad:2a:a0:ea:
                    19:d3:2a:4d:22:85:bd:d2:04:9a:ed:68:f8:f4:e4:
                    5b:e6:8e:81:ac:68:fa:32:8b:52:03:a6:04:b8:a5:
                    e8:ba:a9:2c:49:4a:7c:2a:14:6a:8c:a3:25:d5:10:
                    ad:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0C:96:A3:6B:8B:AC:3C:5D:40:3A:EB:CC:54:23:DA:B5:5A:BE:BD
            X509v3 Authority Key Identifier:
                keyid:CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:03:25:cc:51:31:fe:29:2b:29:8a:73:2f:3e:de:ee:16:06:
         67:c2:17:9d:7a:ee:c6:6c:40:15:8a:e8:c5:f9:30:b3:a7:c3:
         c3:64:d0:de:e7:b6:34:d9:7e:cc:b2:d7:92:81:6b:d9:9c:da:
         54:35:a9:3a:51:f6:3b:98:ea:17:56:a9:92:36:ef:2c:b0:e9:
         a8:ce:b0:10:ef:71:89:04:1a:fa:8d:d3:1c:fe:88:7c:12:c9:
         8f:04:7b:d0:b7:a0:6e:56:59:d4:c8:b8:99:91:af:68:23:15:
         ec:37:46:74:57:68:96:a4:61:e0:7b:1c:16:7d:61:22:3a:46:
         f5:35:74:5b:b0:71:3f:e1:41:f0:43:2d:01:52:8c:92:50:e4:
         3d:23:29:0b:27:13:f1:fe:ce:56:7d:7d:f0:44:90:d8:0a:97:
         24:2d:e6:4e:a2:6d:76:17:a7:ff:db:52:ef:07:67:61:de:d2:
         cc:e2:67:89:22:7e:dc:c2:33:df:f2:52:6c:a8:fe:d4:fc:63:
         69:0f:3a:cc:76:f2:70:f0:98:18:1b:13:aa:8e:5a:08:5b:fb:
         30:3a:46:0a:eb:20:26:c2:7a:ad:36:1e:ab:09:d3:27:75:b6:
         6b:2c:f2:57:4e:ef:7d:81:cf:c4:6b:f9:56:8c:e2:f6:bb:f9:
         2c:e1:d2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:12:38 2026 by rpki-client