Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/1/EE5C96CB0ABBBD6C866C20583C9CBBE2F21F4CA1.mft
File:                     EE5C96CB0ABBBD6C866C20583C9CBBE2F21F4CA1.mft (raw, json)
Hash identifier:          EOJ7jNHmckNT50wj+27ufPME1zba78nuNSmMV4647j0=
Subject key identifier:   85:A8:C4:8C:75:26:EE:99:82:85:AE:98:0C:F5:4C:70:49:0D:17:5A
Authority key identifier: EE:5C:96:CB:0A:BB:BD:6C:86:6C:20:58:3C:9C:BB:E2:F2:1F:4C:A1
Certificate issuer:       /CN=EE5C96CB0ABBBD6C866C20583C9CBBE2F21F4CA1
Certificate serial:       6BA3E9A3F5A13B5C38D16B02E3260214BA3565F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE5C96CB0ABBBD6C866C20583C9CBBE2F21F4CA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/1/EE5C96CB0ABBBD6C866C20583C9CBBE2F21F4CA1.mft
Manifest number:          0440
Signing time:             Thu 26 Mar 2026 04:45:06 +0000
Manifest this update:     Thu 26 Mar 2026 04:40:06 +0000
Manifest next update:     Fri 27 Mar 2026 08:18:06 +0000
Files and hashes:         1: 323830343a383437383a3a2f33322d3332203d3e20323732323632.roa (hash: y5A4BN7j/9K98tl3UsUj4QcIlWDvcJNqxTdM9C1LYhE=)
                          2: EE5C96CB0ABBBD6C866C20583C9CBBE2F21F4CA1.crl (hash: nf2esXhOzy4z2vlJgkAuhTiAhPSEv+1VhYWmB1xX56c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/1/EE5C96CB0ABBBD6C866C20583C9CBBE2F21F4CA1.crl
                          rsync://rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/1/EE5C96CB0ABBBD6C866C20583C9CBBE2F21F4CA1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE5C96CB0ABBBD6C866C20583C9CBBE2F21F4CA1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 08:18:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a3:e9:a3:f5:a1:3b:5c:38:d1:6b:02:e3:26:02:14:ba:35:65:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE5C96CB0ABBBD6C866C20583C9CBBE2F21F4CA1
        Validity
            Not Before: Mar 26 04:40:06 2026 GMT
            Not After : Mar 27 08:18:06 2026 GMT
        Subject: CN=85A8C48C7526EE998285AE980CF54C70490D175A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:9c:c0:1a:7d:ef:33:0e:a9:40:10:3e:91:ee:
                    5f:ec:81:22:63:a0:35:6e:52:bb:67:14:85:90:70:
                    4c:d7:26:42:76:f0:ef:f5:c7:92:15:50:83:41:71:
                    bb:60:58:bd:32:08:e3:52:68:cc:46:4b:6d:6c:b7:
                    f9:05:19:16:47:8a:7c:e5:6f:15:e9:d6:ad:3c:fc:
                    72:6f:6e:ef:a7:48:24:60:55:b2:be:69:c4:ad:62:
                    f2:97:2b:1c:44:3f:c3:43:c1:50:9a:40:df:e0:53:
                    c9:6f:e5:41:6a:6e:41:22:e9:ad:09:44:42:74:f3:
                    b5:6d:96:e4:dc:6d:e1:39:d5:9c:0e:17:aa:5a:67:
                    17:47:d8:03:87:80:01:3b:fb:d9:27:67:a0:45:0f:
                    7c:91:29:db:7e:69:fc:a1:5b:10:be:46:f7:19:2c:
                    fd:59:a6:3e:50:0b:03:b7:fe:cf:5c:c6:9b:01:ef:
                    4d:02:c6:d0:d6:16:ae:d9:d8:80:04:42:a3:ad:46:
                    d3:0f:c6:d4:5b:d2:da:30:1a:4b:3b:d4:52:4a:cc:
                    1a:ed:02:d0:f8:5b:5a:10:22:10:5a:3a:18:6f:70:
                    20:be:61:d3:56:cb:9d:01:4e:28:b5:5c:b1:72:3a:
                    2e:2a:13:75:4e:2b:7c:0e:6e:39:a0:cc:31:a3:a2:
                    4b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A8:C4:8C:75:26:EE:99:82:85:AE:98:0C:F5:4C:70:49:0D:17:5A
            X509v3 Authority Key Identifier:
                keyid:EE:5C:96:CB:0A:BB:BD:6C:86:6C:20:58:3C:9C:BB:E2:F2:1F:4C:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/1/EE5C96CB0ABBBD6C866C20583C9CBBE2F21F4CA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE5C96CB0ABBBD6C866C20583C9CBBE2F21F4CA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/1/EE5C96CB0ABBBD6C866C20583C9CBBE2F21F4CA1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:25:ad:a7:b7:e3:2b:34:c7:e5:d1:75:9a:3e:67:a9:9e:98:
         99:b0:9c:45:6a:59:6e:23:54:e7:01:66:c2:49:49:97:2d:8c:
         92:67:8c:b3:e4:b5:a1:12:5e:c3:d4:43:be:f6:99:4a:9d:e9:
         29:69:fc:6e:bb:1c:c6:d2:a8:92:32:2c:22:0f:25:d5:bc:1f:
         2d:eb:4a:d6:b6:a3:c7:9a:a4:b0:01:f1:83:93:2c:9a:3f:e7:
         cc:ef:95:a2:89:08:e7:46:e4:2d:5f:59:d3:36:c7:da:c5:f0:
         41:12:34:a1:82:83:2b:60:0f:32:2c:77:f6:2f:33:f4:b6:64:
         c6:18:b9:d8:ee:1c:73:d0:f1:ac:d5:55:1d:f5:c7:21:db:e3:
         64:05:54:5d:5d:0f:cc:14:85:7f:1f:91:cd:e0:3b:24:f9:66:
         07:1b:8d:8e:82:76:b9:3e:27:69:e2:a4:73:d3:56:c9:8c:08:
         49:26:9f:71:40:d4:f6:bc:73:34:a8:95:9f:35:49:af:45:56:
         d4:ed:51:68:35:20:fc:42:7a:79:c5:c0:9a:94:43:ef:5f:8d:
         6c:4b:03:7d:9e:b1:9d:8b:49:c3:3e:b0:0c:6b:cb:b9:21:39:
         ae:13:04:d2:4e:3d:c6:64:66:38:92:6f:21:4f:6f:d2:64:63:
         57:67:15:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:25:23 2026 by rpki-client