Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.mft
File:                     ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.mft (raw, json)
Hash identifier:          IbFEGui9Jf7Bsy3a+CNm7BmFuF4DM43H5R9qKEiQvBc=
Subject key identifier:   70:F5:C8:FE:28:89:24:B4:6D:C1:DF:1C:43:44:6C:84:A8:CB:DD:69
Authority key identifier: ED:5B:37:FD:E1:A3:03:C3:A4:BD:5A:1C:26:E0:08:AA:C9:11:35:41
Certificate issuer:       /CN=ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541
Certificate serial:       34D3353689775EA05EA77403ED2D1DFBC0843FC7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.mft
Manifest number:          0403
Signing time:             Tue 12 May 2026 22:34:11 +0000
Manifest this update:     Tue 12 May 2026 22:29:11 +0000
Manifest next update:     Wed 13 May 2026 23:34:11 +0000
Files and hashes:         1: 34352e3138342e3137362e302f32332d3233203d3e20323639333932.roa (hash: AHfHPvEd6pJ7+ew8+MDw961/4ZAx2XTKZXD6+MDoiWs=)
                          2: 34352e3138342e3137392e302f32342d3234203d3e20323639333932.roa (hash: WGcQX6mQ9sZyzuM2Wo7zck9+FBL+AsEv87XjRGpfS6c=)
                          3: 34352e3138342e3137362e302f32342d3234203d3e20323639333932.roa (hash: yt4flrkj2IQqJIVEek32zlyTxZTwXRzp5PDl/5RWQX0=)
                          4: ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.crl (hash: eLBNJwP5BhV7d4SpL24aHXPjazFZIy/i3GR0sWSgdYo=)
                          5: 34352e3138342e3137362e302f32322d3232203d3e20323639333932.roa (hash: 2fGm3RU6J5MMi2lURJQBA5wKnPzaCcs62HqcYVDlays=)
                          6: 34352e3138342e3137382e302f32332d3233203d3e20323639333932.roa (hash: I3k2FU5rjgkyCg8M0pvsts88eHOrvPjWx/m7qdU1BpE=)
                          7: 34352e3138342e3137372e302f32342d3234203d3e20323639333932.roa (hash: bB/go3NHbpvMU8ef1I08zM4O+lUXiwQSfi19JDmqUqU=)
                          8: 34352e3138342e3137382e302f32342d3234203d3e20323639333932.roa (hash: yq51d/I7z/Z7vT+a3exrUETwcj1uhtsAxNUSZQdeC6k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.crl
                          rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 May 2026 23:34:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d3:35:36:89:77:5e:a0:5e:a7:74:03:ed:2d:1d:fb:c0:84:3f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541
        Validity
            Not Before: May 12 22:29:11 2026 GMT
            Not After : May 13 23:34:11 2026 GMT
        Subject: CN=70F5C8FE288924B46DC1DF1C43446C84A8CBDD69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:22:ba:b7:76:e5:e4:a7:90:74:50:79:60:7b:
                    f6:80:58:b2:a9:08:d3:ef:a8:60:08:11:30:f6:12:
                    4d:4c:cf:b3:60:2a:fc:f6:90:6f:a7:96:11:55:ae:
                    65:fc:41:c8:e4:1b:cf:4d:18:89:d5:5e:54:4d:37:
                    0f:fe:3a:5b:b5:cf:bd:3a:aa:97:6e:e0:14:80:f7:
                    1e:b4:f8:06:eb:92:b7:e4:73:a0:73:a4:01:5e:c3:
                    60:d9:00:d3:1b:b9:05:96:26:d7:c3:09:e4:41:d0:
                    d7:a6:b0:7c:90:8c:fd:88:ba:d4:80:60:5e:0a:0d:
                    5d:ed:11:67:ed:f0:e9:ed:75:7e:97:3e:e8:93:65:
                    e5:db:a5:6b:a7:4d:50:73:09:29:1e:61:bc:77:ad:
                    b1:b0:fe:a4:71:ee:16:fd:76:13:c1:9a:8c:8e:7a:
                    2a:30:43:4d:6e:86:10:10:10:65:0c:a8:e0:bb:2d:
                    28:36:9a:78:67:fe:11:e6:e1:3f:c6:4e:23:de:e1:
                    70:ea:7a:ef:0c:9a:0e:52:d4:f2:38:5c:b7:a9:12:
                    cc:c7:95:af:e9:40:30:6f:11:1d:40:4e:94:84:98:
                    a5:50:7e:db:80:a5:a3:2f:0c:cf:b8:8e:25:ed:51:
                    dd:79:40:21:fe:e8:06:46:a3:ac:e5:2f:7f:53:b5:
                    51:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F5:C8:FE:28:89:24:B4:6D:C1:DF:1C:43:44:6C:84:A8:CB:DD:69
            X509v3 Authority Key Identifier:
                keyid:ED:5B:37:FD:E1:A3:03:C3:A4:BD:5A:1C:26:E0:08:AA:C9:11:35:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:99:3d:02:d4:2b:88:44:a7:87:17:a0:f3:c8:ae:9c:15:e5:
         26:a7:5f:21:8b:a2:d0:b7:42:34:ab:f0:c2:69:b9:37:e2:40:
         1f:10:51:f5:03:e5:7e:84:5b:15:e8:7d:17:67:43:fa:1a:18:
         91:32:d5:f8:c1:c9:37:51:11:d1:fc:35:02:86:a8:78:87:61:
         ab:b8:b0:66:d2:4f:7c:70:c6:bf:c5:cd:f3:6a:1c:ce:1d:66:
         af:40:26:c3:41:97:3a:f9:35:23:7d:75:25:ba:fb:c3:6f:61:
         62:2b:72:9d:84:79:0b:29:d4:af:67:b6:bd:05:b7:b2:0b:e2:
         52:d7:3c:3d:c5:58:f8:46:55:20:71:5f:68:f6:d2:9e:b1:db:
         4a:2f:af:bc:a9:d1:a3:aa:f6:e9:da:57:11:27:33:b7:15:97:
         fc:d1:78:f3:6b:27:3c:09:ab:fd:f5:6c:44:ec:d4:a3:bf:76:
         0a:43:83:cb:7b:f7:61:a8:86:c3:db:3b:4f:02:c3:8c:35:22:
         9d:25:f5:27:ef:f9:21:fa:a0:f8:a9:f9:66:da:df:a1:7a:ee:
         2c:d4:0f:cf:e2:7a:de:e8:93:0f:67:c1:76:6b:b1:33:ba:57:
         ea:61:84:fd:78:10:3b:44:83:44:ad:7e:9d:b6:63:45:90:00:
         df:9b:d0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:42:11 2026 by rpki-client