Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
File:                     CA2ED340034D0368230850867C30E245990118A2.mft (raw, json)
Hash identifier:          UB3ZL3iOL/lSnN0XhJY3cqxVd5hbtoBAk3iWFe9Ky6o=
Subject key identifier:   B5:8D:A0:C5:DB:B8:F0:0E:6B:E9:0D:46:07:D2:A1:DA:1A:34:26:92
Authority key identifier: CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2
Certificate issuer:       /CN=CA2ED340034D0368230850867C30E245990118A2
Certificate serial:       705BC2860170BA659287EF8F195BB7AC6E5ED4D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
Manifest number:          0447
Signing time:             Thu 26 Mar 2026 15:40:00 +0000
Manifest this update:     Thu 26 Mar 2026 15:35:00 +0000
Manifest next update:     Fri 27 Mar 2026 15:40:00 +0000
Files and hashes:         1: CA2ED340034D0368230850867C30E245990118A2.crl (hash: N8WxQkTiM/hHl9hTM2CJtR83EqLamYRsIB+TDkIXXjw=)
                          2: 3136302e3233382e3136312e302f32342d3234203d3e20323636353335.roa (hash: bECPbuRuBrIOnjdoBKScCAXjGsCP8o1jcCme3zamF0s=)
                          3: 323830343a336438303a3a2f33332d3333203d3e20323636353335.roa (hash: z9igj7MGsmtf/1Sy9zcE0T7tcBaO8/e+SL2nDBel2m8=)
                          4: 323830343a336438303a3a2f33342d3334203d3e20323636353335.roa (hash: Ya6TTh4UGpO9OA9I2t2ljb687rAyfDeWzm8gruldMvY=)
                          5: 3136302e3233382e3136302e302f32342d3234203d3e20323636353335.roa (hash: TxlG0812plpjPhvcX/d0Olltq3zIPufdkiSuAoXprqk=)
                          6: 3136302e3233382e3136322e302f32332d3233203d3e20323636353335.roa (hash: ZciEocyNThB8Dt9USSnp55XhUpsQwG4rnTD6Z4ERIeo=)
                          7: 3136302e3233382e3136302e302f32332d3233203d3e20323636353335.roa (hash: mnXKGK0Sb3JfSD9qwtiqL+zB6Uxf7pRYFU72tIF3RgE=)
                          8: 3136302e3233382e3136322e302f32342d3234203d3e20323636353335.roa (hash: Mpe5/idJmRp1cNXJYCyARrtABVfhbdPKne04ORvkzmY=)
                          9: 323830343a336438303a383030303a3a2f33332d3333203d3e20323636353335.roa (hash: h97iUgEEBkr3O+lUMEj/QD+0mK6bNS7G42zz0AhsaHM=)
                          10: 3136302e3233382e3136332e302f32342d3234203d3e20323636353335.roa (hash: DqP5mf5U6YxJGBly2hzV6Uavn9AYJNW8SE/1OzFbx28=)
                          11: 323830343a336438303a3a2f33322d3332203d3e20323636353335.roa (hash: qACtYGAGjQIYzRF9TbvLGtYIE8yVLT/zZZ6QQjlw7Tc=)
                          12: 3136302e3233382e3136302e302f32322d3232203d3e20323636353335.roa (hash: wHbI+HZw0d0+VVKI2O6UiIL7xxlmxDe0dzs6WnffOtM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl
                          rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 15:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:5b:c2:86:01:70:ba:65:92:87:ef:8f:19:5b:b7:ac:6e:5e:d4:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA2ED340034D0368230850867C30E245990118A2
        Validity
            Not Before: Mar 26 15:35:00 2026 GMT
            Not After : Mar 27 15:40:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:82:13:b1:82:4f:c0:70:9f:b1:c0:86:95:c5:
                    a6:80:33:02:2b:13:74:d4:ee:99:dd:b2:3f:34:99:
                    18:dc:75:f6:b1:fd:4d:56:3e:f5:25:d1:9e:69:50:
                    77:8f:27:35:4f:0c:eb:de:8e:75:52:0a:70:4b:e0:
                    3a:5c:aa:04:84:8b:ea:f3:2c:56:0f:b2:c2:24:67:
                    13:a6:19:ac:5f:49:b9:f0:89:6b:30:d1:ef:30:32:
                    c1:3b:33:1b:e0:12:d9:7e:58:ff:a3:cc:95:6c:b5:
                    25:37:36:ce:c0:cf:dd:46:91:21:59:db:d9:38:4f:
                    88:c6:07:b9:a6:b1:87:0c:af:c7:64:5f:f6:88:5a:
                    79:ec:60:b8:02:84:00:5d:8c:a2:21:0e:ce:79:b9:
                    e4:23:72:f4:0f:ca:53:4e:f5:04:68:ed:62:55:68:
                    ab:ad:2d:4f:a2:40:36:d9:f0:ac:00:4a:6d:81:5c:
                    08:87:fa:a6:51:f3:96:16:cd:96:48:65:bb:88:89:
                    c9:51:68:38:cd:5f:23:a8:80:3c:5e:24:50:e5:0d:
                    59:b2:3f:58:c2:07:86:e2:95:29:01:53:94:8c:9b:
                    c9:59:5d:8a:5d:ab:1e:8e:c5:7e:29:23:78:b6:1b:
                    8d:c7:b4:c1:a2:d9:a3:9c:52:c0:2e:67:1e:fe:e6:
                    71:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8D:A0:C5:DB:B8:F0:0E:6B:E9:0D:46:07:D2:A1:DA:1A:34:26:92
            X509v3 Authority Key Identifier:
                keyid:CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:dd:46:d5:d3:44:2a:5c:87:c5:c9:3d:59:9a:e5:d2:e1:2d:
         e0:ec:fd:96:00:a1:9b:4d:60:37:1e:df:93:dc:73:b6:e2:6a:
         95:bb:62:6e:aa:45:c9:e7:ad:91:27:20:b6:68:7a:ac:4e:d2:
         fc:34:35:e7:76:a1:aa:92:9c:60:24:8c:66:46:02:3a:bc:19:
         51:92:25:1f:40:2d:51:61:da:82:bd:bc:46:74:3c:4d:23:ae:
         97:25:cf:ae:46:0a:1c:9a:27:d5:62:ff:ae:2f:6d:d6:1a:b1:
         97:65:35:22:21:c9:0b:62:da:6f:fd:d0:a3:9a:74:eb:f0:e0:
         10:c5:49:a4:c3:0a:df:e2:c2:1d:c1:c1:c5:23:ce:cf:06:9a:
         77:b9:63:1b:53:cd:d3:ef:a2:2b:c4:ca:34:5b:e4:50:e8:59:
         a6:0c:be:8d:c8:77:b3:0e:fe:0a:2d:02:75:91:cc:c6:3c:86:
         02:e4:47:d2:cb:44:89:94:e8:15:2d:d3:f0:0f:2f:ee:64:4d:
         9f:a1:c6:f4:e1:c8:ce:10:43:62:e5:3f:39:47:05:fb:58:fa:
         8e:99:1d:56:50:6e:1e:33:30:12:09:52:9e:a5:80:9d:e9:e8:
         fe:1a:c4:ce:ae:47:76:84:29:5c:d1:8f:27:9f:89:15:4a:37:
         af:ce:c8:11
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUcFvChgFwumWSh++PGVu3rG5e1NYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0EyRUQzNDAwMzREMDM2ODIzMDg1MDg2N0MzMEUyNDU5
OTAxMThBMjAeFw0yNjAzMjYxNTM1MDBaFw0yNjAzMjcxNTQwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzg4MjEzQjE4MjRGQzA3MDlG
QjFDMDg2OTVDNUE2ODAzMzAyMkIxMzc0RDRFRTk5RERCMjNGMzQ5OTE4REM3NUY2
QjFGRDRENTYzRUY1MjVEMTlFNjk1MDc3OEYyNzM1NEYwQ0VCREU4RTc1NTIwQTcw
NEJFMDNBNUNBQTA0ODQ4QkVBRjMyQzU2MEZCMkMyMjQ2NzEzQTYxOUFDNUY0OUI5
RjA4OTZCMzBEMUVGMzAzMkMxM0IzMzFCRTAxMkQ5N0U1OEZGQTNDQzk1NkNCNTI1
MzczNkNFQzBDRkRENDY5MTIxNTlEQkQ5Mzg0Rjg4QzYwN0I5QTZCMTg3MENBRkM3
NjQ1RkY2ODg1QTc5RUM2MEI4MDI4NDAwNUQ4Q0EyMjEwRUNFNzlCOUU0MjM3MkY0
MEZDQTUzNEVGNTA0NjhFRDYyNTU2OEFCQUQyRDRGQTI0MDM2RDlGMEFDMDA0QTZE
ODE1QzA4ODdGQUE2NTFGMzk2MTZDRDk2NDg2NUJCODg4OUM5NTE2ODM4Q0Q1RjIz
QTg4MDNDNUUyNDUwRTUwRDU5QjIzRjU4QzIwNzg2RTI5NTI5MDE1Mzk0OEM5QkM5
NTk1RDhBNURBQjFFOEVDNTdFMjkyMzc4QjYxQjhEQzdCNEMxQTJEOUEzOUM1MkMw
MkU2NzFFRkVFNjcxRkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyIITsYJPwHCfscCGlcWmgDMCKxN01O6Z3bI/NJkY3HX2sf1NVj71
JdGeaVB3jyc1Twzr3o51UgpwS+A6XKoEhIvq8yxWD7LCJGcTphmsX0m58IlrMNHv
MDLBOzMb4BLZflj/o8yVbLUlNzbOwM/dRpEhWdvZOE+Ixge5prGHDK/HZF/2iFp5
7GC4AoQAXYyiIQ7OebnkI3L0D8pTTvUEaO1iVWirrS1PokA22fCsAEptgVwIh/qm
UfOWFs2WSGW7iInJUWg4zV8jqIA8XiRQ5Q1Zsj9YwgeG4pUpAVOUjJvJWV2KXase
jsV+KSN4thuNx7TBotmjnFLALmce/uZx/QIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FLWNoMXbuPAOa+kNRgfSodoaNCaSMB8GA1UdIwQYMBaAFMou00ADTQNoIwhQhnww
4kWZARiiMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VSbXpFdnpidTFlTWk4
RXZIVEhXaWtrQXhQQVQ4SlpBamNvY2MyZExqUkx5LzEvQ0EyRUQzNDAwMzREMDM2
ODIzMDg1MDg2N0MzMEUyNDU5OTAxMThBMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9DQTJFRDM0MDAzNEQwMzY4MjMwODUwODY3QzMwRTI0NTk5MDEx
OEEyLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VSbXpFdnpidTFlTWk4RXZIVEhX
aWtrQXhQQVQ4SlpBamNvY2MyZExqUkx5LzEvQ0EyRUQzNDAwMzREMDM2ODIzMDg1
MDg2N0MzMEUyNDU5OTAxMThBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABHdRtXTRCpch8XJPVma5dLh
LeDs/ZYAoZtNYDce35Pcc7biapW7Ym6qRcnnrZEnILZoeqxO0vw0Ned2oaqSnGAk
jGZGAjq8GVGSJR9ALVFh2oK9vEZ0PE0jrpclz65GChyaJ9Vi/64vbdYasZdlNSIh
yQti2m/90KOadOvw4BDFSaTDCt/iwh3BwcUjzs8Gmne5YxtTzdPvoivEyjRb5FDo
WaYMvo3Id7MO/gotAnWRzMY8hgLkR9LLRImU6BUt0/APL+5kTZ+hxvThyM4QQ2Ll
PzlHBftY+o6ZHVZQbh4zMBIJUp6lgJ3p6P4axM6uR3aEKVzRjyefiRVKN6/OyBE=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:58:54 2026 by rpki-client