Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.mft
File:                     EC28538427BF2A4CA218209DB9A2008B4E587ABA.mft (raw, json)
Hash identifier:          QLUNU8YNPc347o5D55qvvK8PtcVu14+co4WNhBNCbGg=
Subject key identifier:   A5:DF:70:0E:DD:D7:C9:0F:DB:8C:4D:89:59:4A:06:37:6A:17:12:BB
Authority key identifier: EC:28:53:84:27:BF:2A:4C:A2:18:20:9D:B9:A2:00:8B:4E:58:7A:BA
Certificate issuer:       /CN=EC28538427BF2A4CA218209DB9A2008B4E587ABA
Certificate serial:       73567AF2CE5ABC7ACAA3EF6EA86C8FCB9714216B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC28538427BF2A4CA218209DB9A2008B4E587ABA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.mft
Manifest number:          D7
Signing time:             Wed 25 Mar 2026 19:07:10 +0000
Manifest this update:     Wed 25 Mar 2026 19:02:10 +0000
Manifest next update:     Thu 26 Mar 2026 23:06:10 +0000
Files and hashes:         1: 3137302e3233312e3231362e302f32322d3332203d3e20323633393133.roa (hash: jOmxRKVBVLYE1Ex15DY+LrGk3Oyb+DJa9ko+jW5/phw=)
                          2: 323830343a323739633a3a2f33322d313238203d3e20323633393133.roa (hash: TZ7t9yRt6nYqnrU57K9fhiYScA6XfbXu+v9COLg47bY=)
                          3: 3133382e3230342e3234302e302f32322d3332203d3e20323633393133.roa (hash: x8UabOroN6QkGpYnEDPdNa/H+X5n/UmweHIEJlXFBNo=)
                          4: EC28538427BF2A4CA218209DB9A2008B4E587ABA.crl (hash: 4XGCeCFTmTXHcYpRoBRxn5BwYeYdeWdwwJGkzeOb7YM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.crl
                          rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC28538427BF2A4CA218209DB9A2008B4E587ABA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 23:06:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:56:7a:f2:ce:5a:bc:7a:ca:a3:ef:6e:a8:6c:8f:cb:97:14:21:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC28538427BF2A4CA218209DB9A2008B4E587ABA
        Validity
            Not Before: Mar 25 19:02:10 2026 GMT
            Not After : Mar 26 23:06:10 2026 GMT
        Subject: CN=A5DF700EDDD7C90FDB8C4D89594A06376A1712BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ef:f8:e8:04:dd:18:18:60:44:3b:d2:35:44:
                    13:b7:08:bd:63:44:34:ea:08:76:47:7a:2e:c3:ee:
                    27:c6:46:ab:66:21:e7:8c:94:3d:93:5b:06:57:11:
                    1d:59:e3:44:26:03:49:c5:2a:60:db:fb:ca:fe:fd:
                    70:eb:1a:8b:ce:1b:47:69:a0:00:cc:c3:1c:aa:1a:
                    09:bd:a5:12:85:04:1f:eb:57:19:42:62:96:ca:51:
                    f4:65:cb:4b:fc:38:12:f5:16:b7:10:d1:ff:42:c6:
                    45:ff:eb:49:73:a7:d6:aa:4d:11:fe:3e:fc:bd:06:
                    27:f8:da:67:22:e4:bc:55:8b:69:0f:56:8c:9f:e5:
                    ae:c3:a3:c3:1e:d4:92:c9:e5:52:09:54:c9:8c:d1:
                    85:c6:6a:17:8c:a5:e6:0b:b5:fb:7c:b3:ca:9f:f0:
                    6f:2a:74:04:b4:19:d2:b3:ab:b4:05:ae:e2:a3:d8:
                    b8:e4:9b:3f:3d:c0:0b:8e:40:2a:1b:28:07:3b:e8:
                    73:48:21:33:e4:c7:a1:8d:9a:05:f3:42:51:eb:47:
                    d9:13:54:9a:60:b2:57:d5:65:df:cf:61:08:87:71:
                    b7:98:a2:2f:96:b2:f8:0f:4d:5d:c1:8d:1a:25:f0:
                    68:00:1e:35:02:e5:d7:aa:5b:3f:c4:5b:82:e4:c1:
                    6e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DF:70:0E:DD:D7:C9:0F:DB:8C:4D:89:59:4A:06:37:6A:17:12:BB
            X509v3 Authority Key Identifier:
                keyid:EC:28:53:84:27:BF:2A:4C:A2:18:20:9D:B9:A2:00:8B:4E:58:7A:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC28538427BF2A4CA218209DB9A2008B4E587ABA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:de:63:cf:68:35:b6:ab:2e:99:bd:46:71:fa:61:31:93:6c:
         4b:54:8f:50:ff:a8:98:a0:14:2c:69:36:8d:31:7d:85:eb:8b:
         8a:39:37:0c:60:77:ea:d0:b7:f2:2f:ae:7f:f4:61:56:0d:89:
         8c:3b:22:d5:60:f3:be:4e:68:f1:8f:2a:75:e5:76:fc:16:59:
         10:8b:a7:1d:3a:6c:19:3c:20:f7:62:23:93:25:a4:38:f0:ea:
         06:73:0d:63:a9:20:c6:27:a7:27:43:2b:58:c3:c0:d6:7d:58:
         96:8b:83:99:99:87:c0:e7:bc:fc:38:ec:58:bf:d9:a8:5c:e4:
         f9:bd:ae:bc:4e:ac:4b:34:f8:c4:80:69:7b:72:5d:8a:72:67:
         0a:64:c4:9d:16:f5:57:72:41:7a:c1:15:45:72:1c:ab:3c:78:
         a6:0e:69:61:5b:d0:de:fa:4e:67:47:c9:9c:a0:cd:02:46:9e:
         39:af:b1:fb:58:5a:d8:fa:7c:08:bf:d1:ca:b9:ad:0a:47:3e:
         56:a5:ca:98:b6:fd:99:70:45:94:87:e4:33:ca:c3:12:5d:df:
         ff:7c:cb:4a:c6:b7:0c:93:b5:7f:c1:84:c8:49:9f:87:48:d8:
         84:23:75:82:f8:c7:a3:73:14:ee:8d:b6:a0:d8:ca:81:45:45:
         c2:5c:78:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUc1Z68s5avHrKo+9uqGyPy5cUIWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMyODUzODQyN0JGMkE0Q0EyMTgyMDlEQjlBMjAwOEI0
RTU4N0FCQTAeFw0yNjAzMjUxOTAyMTBaFw0yNjAzMjYyMzA2MTBaMDMxMTAvBgNV
BAMTKEE1REY3MDBFREREN0M5MEZEQjhDNEQ4OTU5NEEwNjM3NkExNzEyQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC07/joBN0YGGBEO9I1RBO3CL1j
RDTqCHZHei7D7ifGRqtmIeeMlD2TWwZXER1Z40QmA0nFKmDb+8r+/XDrGovOG0dp
oADMwxyqGgm9pRKFBB/rVxlCYpbKUfRly0v8OBL1FrcQ0f9CxkX/60lzp9aqTRH+
Pvy9Bif42mci5LxVi2kPVoyf5a7Do8Me1JLJ5VIJVMmM0YXGaheMpeYLtft8s8qf
8G8qdAS0GdKzq7QFruKj2Ljkmz89wAuOQCobKAc76HNIITPkx6GNmgXzQlHrR9kT
VJpgslfVZd/PYQiHcbeYoi+WsvgPTV3BjRol8GgAHjUC5deqWz/EW4LkwW45AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUpd9wDt3XyQ/bjE2JWUoGN2oXErswHwYDVR0j
BBgwFoAU7ChThCe/KkyiGCCduaIAi05YerowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1dUOWlvM3JtTVBOTWVVdURTdW9kaDR6UWM2V282cktXeDZ4OHFzSGh3
aFcvMC9FQzI4NTM4NDI3QkYyQTRDQTIxODIwOURCOUEyMDA4QjRFNTg3QUJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDMjg1Mzg0MjdCRjJBNENB
MjE4MjA5REI5QTIwMDhCNEU1ODdBQkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q1dUOWlvM3JtTVBOTWVVdURTdW9kaDR6UWM2V282cktXeDZ4OHFzSGh3aFcvMC9F
QzI4NTM4NDI3QkYyQTRDQTIxODIwOURCOUEyMDA4QjRFNTg3QUJBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUt5jz2g1tqsumb1GcfphMZNsS1SPUP+omKAULGk2jTF9heuLijk3DGB36tC3
8i+uf/RhVg2JjDsi1WDzvk5o8Y8qdeV2/BZZEIunHTpsGTwg92IjkyWkOPDqBnMN
Y6kgxienJ0MrWMPA1n1YlouDmZmHwOe8/DjsWL/ZqFzk+b2uvE6sSzT4xIBpe3Jd
inJnCmTEnRb1V3JBesEVRXIcqzx4pg5pYVvQ3vpOZ0fJnKDNAkaeOa+x+1ha2Pp8
CL/RyrmtCkc+VqXKmLb9mXBFlIfkM8rDEl3f/3zLSsa3DJO1f8GEyEmfh0jYhCN1
gvjHo3MU7o22oNjKgUVFwlx4mw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:09:24 2026 by rpki-client