Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft
File:                     E623553538E00E63657BFD8F27CC352EDDF522D9.mft (raw, json)
Hash identifier:          8M/nlj1OzejZwc6o3oe93IWntoEz79mmB5teEC2B5V8=
Subject key identifier:   A9:29:D6:69:1B:36:6E:3D:AA:0A:A9:07:31:6F:9E:9D:78:F3:E6:3E
Authority key identifier: E6:23:55:35:38:E0:0E:63:65:7B:FD:8F:27:CC:35:2E:DD:F5:22:D9
Certificate issuer:       /CN=E623553538E00E63657BFD8F27CC352EDDF522D9
Certificate serial:       6F4DC5881E0121A1FFC0C9948A2C8FFE6C7519D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft
Manifest number:          0149
Signing time:             Wed 13 May 2026 01:12:44 +0000
Manifest this update:     Wed 13 May 2026 01:07:44 +0000
Manifest next update:     Thu 14 May 2026 02:30:44 +0000
Files and hashes:         1: 323830343a346439303a3a2f33322d3332203d3e20323638323035.roa (hash: jrLtuRDUfebp+da8gdNc/X5sTzU1URd3o0fTxtDn0u0=)
                          2: 34352e3233362e35312e302f32342d3234203d3e20323638323035.roa (hash: 9m7yPscc1aQcelxqXKrPeemhvynpRkgj0fMDx9qc3dU=)
                          3: 34352e3233362e35302e302f32342d3234203d3e20323638323035.roa (hash: qZKUtAG+JVR2dVS4JiNI+Kw6jfhzxGMb3WwVCawye94=)
                          4: 34352e3233362e34392e302f32342d3234203d3e20323638323035.roa (hash: OLbc1TLVVA2OTpclfERRSJr3cNXPo1t5TO4AZY12WdM=)
                          5: 34352e3233362e34382e302f32342d3234203d3e20323638323035.roa (hash: QCbZMrUKJgBUWwCX4f2grxkhDaOONDhgbpeLvId+Sr8=)
                          6: E623553538E00E63657BFD8F27CC352EDDF522D9.crl (hash: oo5OKS1o0j5I+rNHKR+TDUADXGTdZCOoU97II4DupyQ=)
                          7: 34352e3233362e34382e302f32322d3232203d3e20323638323035.roa (hash: YeQQQga2IPXcQPI4WZR6ySFBpq83/d3HIcA7pJ/zYnk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.crl
                          rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 02:30:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:4d:c5:88:1e:01:21:a1:ff:c0:c9:94:8a:2c:8f:fe:6c:75:19:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E623553538E00E63657BFD8F27CC352EDDF522D9
        Validity
            Not Before: May 13 01:07:44 2026 GMT
            Not After : May 14 02:30:44 2026 GMT
        Subject: CN=A929D6691B366E3DAA0AA907316F9E9D78F3E63E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fa:26:0d:d3:2a:78:d2:b4:b0:55:2b:7b:c8:
                    37:93:d1:4d:9f:58:18:91:32:bf:38:3c:65:8b:2f:
                    a2:55:d7:92:23:66:c1:5a:16:71:16:fd:0c:7b:f3:
                    0c:08:26:50:4c:c2:d7:25:10:8f:f1:ae:8a:9d:99:
                    b1:c6:0d:5e:0a:fd:de:18:41:bc:ad:c4:9f:00:a4:
                    bf:b3:83:80:b0:b1:50:20:dc:25:ef:26:4d:0f:9c:
                    1b:29:c7:bf:4e:56:e5:d0:8c:82:bf:27:10:b9:a1:
                    0c:80:ef:9d:d2:76:2c:ac:4e:55:5e:0b:36:1c:fd:
                    1a:51:a7:00:79:c7:a2:c1:1b:5e:22:11:fe:1e:fb:
                    91:58:17:06:3b:13:ba:e9:af:a5:68:36:e5:4a:25:
                    48:38:3b:32:8e:e0:49:19:c6:03:62:76:13:16:92:
                    5c:07:ee:2b:2e:36:00:14:1f:0c:5f:59:70:ae:f2:
                    06:4b:51:1c:e4:03:66:07:b9:56:e1:e4:33:e4:2a:
                    6d:93:b0:84:87:12:98:1e:cb:88:4f:c0:3f:ff:db:
                    74:9d:64:dd:ec:50:75:74:d2:fd:93:29:13:66:a6:
                    48:b3:8f:02:1e:c0:da:1f:ed:97:58:76:01:e1:b4:
                    21:dd:af:f6:7d:4b:9b:74:7f:e4:b7:f9:65:c0:5d:
                    d1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:29:D6:69:1B:36:6E:3D:AA:0A:A9:07:31:6F:9E:9D:78:F3:E6:3E
            X509v3 Authority Key Identifier:
                keyid:E6:23:55:35:38:E0:0E:63:65:7B:FD:8F:27:CC:35:2E:DD:F5:22:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:c5:fd:e4:53:10:cb:83:1c:22:d8:eb:e2:fa:46:04:a8:34:
         e5:91:82:37:cb:18:eb:a1:3b:a3:14:63:cf:ea:6c:91:23:3e:
         99:cb:38:ec:3f:8b:cb:b4:43:39:56:0a:c6:17:5f:f8:39:f2:
         6b:d8:b2:a3:1b:92:61:b5:66:b1:62:7c:86:d1:cd:b9:43:8e:
         17:44:4e:3b:5a:d0:f5:09:a0:94:f9:f0:88:e8:d9:50:23:f8:
         3b:aa:0a:c4:0e:94:a9:ab:f5:66:2a:c1:1c:7b:a7:b5:aa:1d:
         bf:35:69:36:17:26:7b:39:7d:0d:74:d2:13:23:5f:a1:f1:b8:
         6f:09:2d:22:63:b4:d2:95:ad:4e:26:b0:a7:cb:8b:46:a2:19:
         a7:78:d9:f2:52:ed:33:da:73:39:52:67:44:88:45:f5:ca:4d:
         96:aa:2a:ef:b4:f0:59:0e:6b:7b:2f:82:1a:4c:a5:43:59:e9:
         1b:14:94:43:ef:65:f8:da:36:3a:be:95:77:c8:63:5d:93:89:
         8e:f1:67:bf:06:78:e2:d4:1a:2c:0f:8e:f6:cc:b8:e6:ce:73:
         29:b7:0c:95:de:fb:dc:75:da:0d:3e:57:91:9c:19:45:7b:32:
         eb:f9:76:c5:8e:a5:54:c7:ea:51:bc:8c:c3:75:34:c5:ca:c8:
         06:78:87:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:01:23 2026 by rpki-client