Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.mft
File:                     5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.mft (raw, json)
Hash identifier:          H2uLScH1VBFbBaXByOUZQmgXkxxlRpc9zqVKvGhe/S0=
Subject key identifier:   80:8A:63:79:05:12:46:D0:E0:EA:8D:3B:3E:E6:33:A3:73:76:03:35
Authority key identifier: 5A:1A:65:2F:EE:32:8D:6F:3E:1B:47:CD:4C:84:23:2C:B2:EE:F9:5E
Certificate issuer:       /CN=5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E
Certificate serial:       086E8104AE1F04E0F115B3676F91B1D4F7DCE6F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.mft
Manifest number:          30
Signing time:             Wed 14 Oct 2026 23:55:47 +0000
Manifest this update:     Wed 14 Oct 2026 23:50:47 +0000
Manifest next update:     Fri 16 Oct 2026 01:10:47 +0000
Files and hashes:         1: 3133382e3230342e36342e302f32322d3332203d3e203533313831.roa (hash: ZGyhoV1J2A8uZUkygdx34b2z1Hf2qpiDs/uZfCCuoFQ=)
                          2: 5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.crl (hash: SqOHp1V1H/8LRIo6JdhrCWZG75Q7JdvUEBxFDzO3kAU=)
                          3: 3139312e3234312e36342e302f32302d3332203d3e203533313831.roa (hash: /8Zno9g2F8/ldlShR2dUBWfu5Win5hykvvfTfNYxI7k=)
                          4: 323830343a313133633a3a2f33322d313238203d3e203533313831.roa (hash: 6NY9ATyBY3IdqLjYE8Odx2PMMBZBmCqgegeZ1lH6lfk=)
                          5: 3230312e33332e3136302e302f32302d3332203d3e203533313831.roa (hash: svh7vG+loC6TCTqm928Y6efCEwb8Muh8IpiBCDcVhlg=)
                          6: 34352e3136342e3131322e302f32322d3332203d3e203533313831.roa (hash: lGF5OqXw7NaVMb7nXASbgu1J5EKPKDFqcFzGgiI81/E=)
                          7: 323830343a353365343a3a2f33322d313238203d3e203533313831.roa (hash: 1VUG7wkMZkKSyAIylNskXB5j6m35Lcl6W/U1PIMag9s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.crl
                          rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 01:10:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:6e:81:04:ae:1f:04:e0:f1:15:b3:67:6f:91:b1:d4:f7:dc:e6:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E
        Validity
            Not Before: Oct 14 23:50:47 2026 GMT
            Not After : Oct 16 01:10:47 2026 GMT
        Subject: CN=808A6379051246D0E0EA8D3B3EE633A373760335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ad:97:47:cb:a2:1c:c8:f0:7e:49:72:7d:d4:
                    16:30:4c:89:a0:88:69:ac:d5:c3:5e:8f:35:2f:29:
                    77:a9:10:5e:e8:7d:05:90:f0:f6:cd:3e:7d:b3:56:
                    2f:25:3e:fe:d7:af:a4:6b:22:16:7f:f7:e6:20:5b:
                    7e:84:99:a3:0c:61:b9:63:d2:94:fc:bb:91:bd:33:
                    4f:70:86:cf:7e:48:8c:3f:14:7c:e7:46:5a:1a:3d:
                    3a:dc:c0:62:9f:3f:bb:ce:af:ab:06:07:fa:57:02:
                    97:11:67:cb:c7:88:f2:c6:ce:fc:59:64:b0:67:9b:
                    85:50:09:ce:7b:d9:47:9c:de:37:b5:18:7d:a5:42:
                    5b:cd:ef:18:e5:21:d3:84:6e:2f:c1:08:c5:7b:e3:
                    96:82:ab:70:f7:ec:96:dc:fd:f0:39:b7:11:df:b2:
                    39:e6:92:9a:b7:0c:2e:d0:f8:c2:bf:c5:5c:b4:ea:
                    a3:f7:4a:12:83:36:e8:fe:1e:45:e3:69:dc:ba:d5:
                    44:5b:ad:d6:25:9f:e4:21:db:f2:a5:1e:9a:f5:e4:
                    89:b3:73:ff:8a:2e:f3:3f:16:4e:ac:37:39:52:a4:
                    64:a6:c9:3c:49:13:f9:d5:db:c8:38:e5:2f:64:46:
                    18:89:de:07:14:fa:95:87:0e:d6:0d:ba:47:65:dd:
                    c4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8A:63:79:05:12:46:D0:E0:EA:8D:3B:3E:E6:33:A3:73:76:03:35
            X509v3 Authority Key Identifier:
                keyid:5A:1A:65:2F:EE:32:8D:6F:3E:1B:47:CD:4C:84:23:2C:B2:EE:F9:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:7c:d0:31:a5:c3:25:bd:8d:29:68:21:8c:1c:10:22:82:dd:
         73:48:4f:48:6d:c5:ce:ae:bc:3d:d9:5f:3d:d3:4f:4a:0b:a7:
         cd:f5:bd:a1:84:94:23:be:fa:95:2d:19:7f:db:88:82:0b:75:
         55:0c:63:78:d8:c5:f9:bd:7b:44:1c:2f:cd:90:5d:fc:e3:65:
         12:c2:15:76:a1:b0:e2:25:7e:6b:36:ab:e2:51:66:35:4f:33:
         3b:1e:0c:13:7b:42:5f:bb:8d:21:2d:13:00:9d:52:c5:5f:c3:
         b9:3b:88:2f:29:6d:f8:fb:7e:88:ed:27:04:e4:bf:9d:ae:ac:
         86:e6:e2:34:d5:c8:c9:6d:d0:3b:97:31:4b:67:7d:a3:e2:56:
         eb:49:74:8b:83:53:7a:9f:ee:72:48:23:e5:5f:4d:24:e7:95:
         38:57:7d:80:14:41:1f:14:80:33:e4:55:bd:f1:86:a8:78:2b:
         ea:1f:ef:32:c1:45:5c:53:08:73:b0:58:0d:d8:a6:43:00:91:
         8e:ff:a6:1c:3d:22:62:1f:54:ab:18:dd:4c:75:b2:8a:88:20:
         8a:e2:ae:47:b3:c5:3a:e2:cc:62:31:97:79:2b:2c:29:0d:a0:
         dd:b2:84:ad:3a:65:3c:f6:ea:14:fb:a9:0f:c0:5e:99:e3:c0:
         fe:7f:73:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:44:11 2026 by rpki-client