Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/2D1EF950AB5C855E2D7C436153A72A554B109A82.mft
File:                     2D1EF950AB5C855E2D7C436153A72A554B109A82.mft (raw, json)
Hash identifier:          7BlPlSLTs7ZOKnRSSc7DoJbYUL/8eFktbSYrXqgKRYk=
Subject key identifier:   12:7E:3D:20:2E:A7:37:C8:56:D3:36:00:5F:74:0B:F8:F7:F1:4A:43
Authority key identifier: 2D:1E:F9:50:AB:5C:85:5E:2D:7C:43:61:53:A7:2A:55:4B:10:9A:82
Certificate issuer:       /CN=2D1EF950AB5C855E2D7C436153A72A554B109A82
Certificate serial:       3D5156227E6A3426D0AD5F13629BC153D1B053D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1EF950AB5C855E2D7C436153A72A554B109A82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/2D1EF950AB5C855E2D7C436153A72A554B109A82.mft
Manifest number:          01C4
Signing time:             Tue 27 Oct 2026 04:11:40 +0000
Manifest this update:     Tue 27 Oct 2026 04:06:40 +0000
Manifest next update:     Wed 28 Oct 2026 05:16:40 +0000
Files and hashes:         1: 3137302e3234372e32382e302f32322d3234203d3e20323639313934.roa (hash: dzVjKnvY4D6/mgbxr8RCikLYlxmyGHWD9JG/0o3vhqs=)
                          2: 2D1EF950AB5C855E2D7C436153A72A554B109A82.crl (hash: WwoHK68p8xgTzkul3tgNlzfDUBI1SC8HTzCf3aCn2/4=)
                          3: 3136382e3138312e3235322e302f32322d3234203d3e20323639313934.roa (hash: 7z9pfDO3zWcllc7gDvRrVoSD4FTfzE5uS8dwSIPdchg=)
                          4: 323830343a363064343a3a2f33322d3634203d3e20323639313934.roa (hash: 5wNObrgT4Gr3GJHMt7n2krb8ECYGaPA8UzKFZbXv0Z0=)
                          5: 34352e3137392e3233362e302f32322d3234203d3e20323639313934.roa (hash: 6KwEBShoHq7ogox8kX9OA+yCEirZkHyXx89Miauzu6c=)
                          6: 34352e3233382e3233362e302f32322d3234203d3e20323639313934.roa (hash: Sryd5eJv74QaHerVydEF3jBO/O5wt54KBr4NIOAVWwg=)
                          7: 34352e3138302e3231362e302f32322d3234203d3e20323639313934.roa (hash: FmpkUXJ8epRMGFs+dqEEmCduXMamxRpzAy2XiqQEInY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/2D1EF950AB5C855E2D7C436153A72A554B109A82.crl
                          rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/2D1EF950AB5C855E2D7C436153A72A554B109A82.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1EF950AB5C855E2D7C436153A72A554B109A82.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 05:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:51:56:22:7e:6a:34:26:d0:ad:5f:13:62:9b:c1:53:d1:b0:53:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D1EF950AB5C855E2D7C436153A72A554B109A82
        Validity
            Not Before: Oct 27 04:06:40 2026 GMT
            Not After : Oct 28 05:16:40 2026 GMT
        Subject: CN=127E3D202EA737C856D336005F740BF8F7F14A43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:80:f4:ba:0b:5b:78:c2:fe:22:58:16:38:f8:
                    d8:75:51:d1:54:b1:c4:21:ec:27:ba:92:46:a0:04:
                    57:54:1d:07:44:a7:39:75:7b:15:e5:2b:45:29:f7:
                    8e:bc:95:93:fc:d7:ee:38:aa:5b:88:0d:2e:d5:c3:
                    08:4d:2d:e1:91:40:fd:85:31:92:8e:22:46:d3:8b:
                    11:9f:aa:0d:1a:82:d4:cf:0b:55:23:cc:2b:90:ce:
                    a0:cb:06:32:56:66:38:54:83:a9:28:c6:3c:4a:6f:
                    8d:5f:8c:35:46:2e:b9:37:a2:e5:ef:01:70:85:cd:
                    b7:0a:52:59:b7:b9:09:c8:8a:08:49:15:df:2b:6c:
                    e8:56:c5:6e:36:8b:c7:f4:9b:5e:75:88:8a:81:37:
                    82:60:44:62:5a:a0:d5:0a:b0:71:37:ea:db:0a:d4:
                    ac:5b:d7:bc:c4:61:1b:42:96:88:af:6e:97:4c:42:
                    07:ec:16:c9:05:5c:5f:1e:5e:38:b8:de:5f:ef:fc:
                    63:0b:a0:d1:b8:b4:a8:24:fc:06:e0:e4:86:3c:47:
                    57:09:6a:22:2a:e1:cd:42:11:d8:4b:c9:77:9e:74:
                    7e:5e:8b:91:1c:14:d3:c6:77:e8:53:46:1c:73:f0:
                    12:34:6e:ce:2a:9f:32:41:f7:a7:62:4a:45:f3:a2:
                    25:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:7E:3D:20:2E:A7:37:C8:56:D3:36:00:5F:74:0B:F8:F7:F1:4A:43
            X509v3 Authority Key Identifier:
                keyid:2D:1E:F9:50:AB:5C:85:5E:2D:7C:43:61:53:A7:2A:55:4B:10:9A:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/2D1EF950AB5C855E2D7C436153A72A554B109A82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1EF950AB5C855E2D7C436153A72A554B109A82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/2D1EF950AB5C855E2D7C436153A72A554B109A82.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:51:1c:62:79:8e:cc:3d:30:d9:bf:d0:be:37:40:55:03:75:
         c6:f2:eb:c9:20:d8:8c:5f:83:87:b5:e7:4a:e9:d3:21:fc:44:
         2b:b8:e8:6a:d8:7b:08:61:2b:60:54:07:6e:23:7c:15:ff:95:
         94:46:46:b4:76:1e:8c:50:90:f2:8e:58:bf:df:bc:08:8d:b9:
         28:59:31:f5:8f:4c:a2:56:cc:b1:b0:a5:5c:8c:fd:ac:a6:fb:
         2a:ce:55:0d:04:eb:44:72:fa:fa:73:ab:32:98:c3:53:2d:97:
         13:0d:a4:0b:0d:5c:fa:ff:9b:23:55:fd:24:92:08:44:a5:7e:
         47:f7:39:41:59:7b:4f:50:3a:b3:e4:54:b6:3d:c9:da:d3:e0:
         f3:cc:c6:db:62:e1:4e:e8:5c:18:08:5f:1a:8e:ca:6f:92:29:
         4b:db:1c:e7:56:e2:8a:5d:87:d4:4e:2b:11:63:92:d6:2f:e9:
         a7:dd:a4:fc:de:b5:b8:bb:f9:94:dd:aa:71:4f:11:d7:80:a6:
         dc:43:61:0d:a4:b9:9f:4d:fd:7e:6a:7e:56:ec:92:0c:2a:af:
         7e:3a:bb:44:7d:e0:dc:cf:e6:e9:4e:9b:fa:da:f3:cf:da:c7:
         aa:fb:16:09:d7:08:39:83:08:d9:2a:f8:04:54:39:34:41:2b:
         6d:2a:90:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:55:49 2026 by rpki-client