Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.mft
File:                     2CACC99A330A3753D03224139703412FA1CB21D3.mft (raw, json)
Hash identifier:          RNOoGNu+PoijaEJrIRGSC2GEDZ2uJlafggDX6WaWO8s=
Subject key identifier:   E8:7B:00:B5:07:BC:87:49:29:6A:C3:FE:66:E2:EE:33:82:41:83:03
Authority key identifier: 2C:AC:C9:9A:33:0A:37:53:D0:32:24:13:97:03:41:2F:A1:CB:21:D3
Certificate issuer:       /CN=2CACC99A330A3753D03224139703412FA1CB21D3
Certificate serial:       6F041593AEDFBB02720E98A2AF4F1BF9CE077DBE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CACC99A330A3753D03224139703412FA1CB21D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.mft
Manifest number:          0220
Signing time:             Wed 13 May 2026 04:01:57 +0000
Manifest this update:     Wed 13 May 2026 03:56:57 +0000
Manifest next update:     Thu 14 May 2026 04:36:57 +0000
Files and hashes:         1: 3138372e36332e3233362e302f32322d3234203d3e20323633363631.roa (hash: qsIQ7eoS0YN6VNbkY2w77F9RrWulAixs0VqO92MOdKw=)
                          2: 3137372e3232312e35362e302f32322d3234203d3e20323633363631.roa (hash: 0dgfAjZdFY2THoBYgdV2y3D/nsD1UP5IocHa1ixVBvk=)
                          3: 323830343a313132383a3a2f33322d313238203d3e20323633363631.roa (hash: EBg+hygH3tyR1PCkSg1MnXlfxpy3mX3E6KIi9F5Szwk=)
                          4: 2CACC99A330A3753D03224139703412FA1CB21D3.crl (hash: rW4BnofnxC672SQeueGRJAXmb6OkR5P1XZTL9QvalXU=)
                          5: 3136382e3230352e3132342e302f32322d3234203d3e20323633363631.roa (hash: EoVykA/7Art/ZTgGVArTxI4DOHRFURG2IregIPi5OBk=)
                          6: 34352e3137392e38362e302f32332d3234203d3e20323633363631.roa (hash: abQhG1dAzT3jW+P5WDuWLuQlMHWNlM3Uu5P6u/YKUfY=)
                          7: 34352e3139302e3134302e302f32322d3234203d3e20323633363631.roa (hash: q4lJdcaLq2puSiZochBSHuOLkiS6gohdNhEik5FK0XE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.crl
                          rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CACC99A330A3753D03224139703412FA1CB21D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:04:15:93:ae:df:bb:02:72:0e:98:a2:af:4f:1b:f9:ce:07:7d:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CACC99A330A3753D03224139703412FA1CB21D3
        Validity
            Not Before: May 13 03:56:57 2026 GMT
            Not After : May 14 04:36:57 2026 GMT
        Subject: CN=E87B00B507BC8749296AC3FE66E2EE3382418303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4c:f5:37:30:52:62:1f:de:08:7a:99:8c:b5:
                    b8:27:d5:e1:94:98:ac:07:fd:c6:f8:fe:8b:1b:81:
                    68:00:b3:a1:cd:66:a9:fe:cb:f4:d4:78:89:84:71:
                    59:20:d4:06:2f:8f:1f:b9:d9:a0:c9:28:8e:a8:5e:
                    5d:f1:4d:18:64:6b:51:5a:33:f2:b9:36:a2:9d:b0:
                    5b:2e:44:8b:9c:16:0c:e7:38:a3:2f:93:23:08:15:
                    8c:d0:5c:9f:6e:3f:8d:9a:bb:d8:2a:c6:5a:4e:50:
                    f1:77:14:49:d7:5b:3a:08:aa:83:34:4e:97:1c:c2:
                    94:ad:b7:bb:fd:2c:60:35:a5:d7:b2:f8:61:f9:92:
                    c9:4e:ee:ee:eb:1e:b1:58:36:e7:b3:85:03:3e:47:
                    14:1e:30:86:87:28:6e:8d:76:91:25:26:f3:ef:84:
                    c0:a3:49:bc:bb:23:57:07:b7:af:c5:52:50:0a:c9:
                    6d:60:b1:ef:f8:fc:e8:5b:c1:c5:42:0c:a1:6d:96:
                    7f:bf:8d:3e:55:7e:00:d6:c0:c3:3c:40:a6:f1:d0:
                    c8:fe:ff:e9:f6:9e:03:7f:a1:6d:b5:5f:5c:f7:af:
                    84:63:35:90:07:60:c5:b0:78:91:20:a2:51:6c:f0:
                    ef:e3:36:c8:65:bb:6f:8d:97:d5:26:da:06:1d:5a:
                    64:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7B:00:B5:07:BC:87:49:29:6A:C3:FE:66:E2:EE:33:82:41:83:03
            X509v3 Authority Key Identifier:
                keyid:2C:AC:C9:9A:33:0A:37:53:D0:32:24:13:97:03:41:2F:A1:CB:21:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CACC99A330A3753D03224139703412FA1CB21D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:39:fb:40:6b:fd:fa:dd:d7:8a:3d:91:23:99:7f:c5:65:17:
         7e:d2:14:6b:09:6c:89:d6:8b:7a:d6:ba:76:9c:a1:d4:e7:05:
         26:82:03:c1:cf:f9:46:34:e7:87:74:16:22:ef:72:bd:bf:ed:
         e7:c7:ea:92:6e:83:75:20:ef:45:82:5e:13:1b:83:4c:a1:53:
         8e:51:98:62:a6:c4:9f:7e:63:b0:ca:b5:75:13:fb:a1:ff:1a:
         2e:38:eb:0c:e9:f3:99:c4:4a:2c:9c:65:a9:5a:90:94:8f:6e:
         97:1c:00:c5:68:b7:7a:ee:5c:3a:79:78:43:d6:83:e6:8d:a1:
         e9:ca:c1:a0:95:14:64:35:e0:6e:ad:dd:39:6e:a3:2f:26:a9:
         52:57:10:ee:cc:64:5e:ec:90:e8:8c:04:3f:c1:b8:22:e9:1d:
         6f:ee:9d:ea:b8:ba:b1:31:b3:74:bb:01:e9:de:16:93:16:d6:
         cf:09:41:ea:9f:28:a1:8b:91:0d:eb:f5:30:db:e3:20:00:c6:
         de:81:a1:d9:89:bb:27:01:77:ab:5d:d1:e6:bf:7d:fa:c3:a0:
         e6:fd:67:c5:45:ba:26:c3:b1:79:ad:6a:86:ef:66:23:be:12:
         5b:50:48:30:97:53:97:2a:41:7e:83:83:f6:cd:94:09:8d:51:
         44:fa:03:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:57:25 2026 by rpki-client