Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft
File:                     E623553538E00E63657BFD8F27CC352EDDF522D9.mft (raw, json)
Hash identifier:          CILPgB+KQmj4JcZ9tV7j7yVKeorzYuTTxGW1piWyDHA=
Subject key identifier:   2E:E5:FD:B2:43:70:89:0C:0B:CC:A3:89:00:22:7A:2B:A4:62:EF:DC
Authority key identifier: E6:23:55:35:38:E0:0E:63:65:7B:FD:8F:27:CC:35:2E:DD:F5:22:D9
Certificate issuer:       /CN=E623553538E00E63657BFD8F27CC352EDDF522D9
Certificate serial:       628F412066CF656FE15AF7F55A5387B369A6FD41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft
Manifest number:          0108
Signing time:             Wed 25 Mar 2026 05:25:06 +0000
Manifest this update:     Wed 25 Mar 2026 05:20:06 +0000
Manifest next update:     Thu 26 Mar 2026 08:44:06 +0000
Files and hashes:         1: 34352e3233362e34382e302f32342d3234203d3e20323638323035.roa (hash: QCbZMrUKJgBUWwCX4f2grxkhDaOONDhgbpeLvId+Sr8=)
                          2: 34352e3233362e35312e302f32342d3234203d3e20323638323035.roa (hash: 9m7yPscc1aQcelxqXKrPeemhvynpRkgj0fMDx9qc3dU=)
                          3: 34352e3233362e34382e302f32322d3232203d3e20323638323035.roa (hash: YeQQQga2IPXcQPI4WZR6ySFBpq83/d3HIcA7pJ/zYnk=)
                          4: 34352e3233362e35302e302f32342d3234203d3e20323638323035.roa (hash: qZKUtAG+JVR2dVS4JiNI+Kw6jfhzxGMb3WwVCawye94=)
                          5: 34352e3233362e34392e302f32342d3234203d3e20323638323035.roa (hash: OLbc1TLVVA2OTpclfERRSJr3cNXPo1t5TO4AZY12WdM=)
                          6: E623553538E00E63657BFD8F27CC352EDDF522D9.crl (hash: AoEA3Xv/Imm0jZB4yoPT7/j8slp/sAiwBKy1E4GX+Xg=)
                          7: 323830343a346439303a3a2f33322d3332203d3e20323638323035.roa (hash: jrLtuRDUfebp+da8gdNc/X5sTzU1URd3o0fTxtDn0u0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.crl
                          rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 08:44:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:8f:41:20:66:cf:65:6f:e1:5a:f7:f5:5a:53:87:b3:69:a6:fd:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E623553538E00E63657BFD8F27CC352EDDF522D9
        Validity
            Not Before: Mar 25 05:20:06 2026 GMT
            Not After : Mar 26 08:44:06 2026 GMT
        Subject: CN=2EE5FDB24370890C0BCCA38900227A2BA462EFDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:32:1a:57:d1:44:4f:f7:d0:a8:11:3f:71:d3:
                    0c:8b:5e:a8:8b:be:f8:ef:a6:b0:3b:f0:dd:0b:ff:
                    38:28:6d:b0:17:3d:4c:0b:2d:91:f7:af:bd:49:93:
                    19:cc:a7:58:30:6b:86:ad:d2:09:51:d1:26:ce:0f:
                    82:c5:95:0e:2d:56:2c:e5:5e:b9:0f:83:3c:8d:82:
                    47:c4:ff:91:3c:f6:25:8c:f0:16:cf:f8:f5:14:e1:
                    14:af:f1:7d:c1:dd:2b:c0:58:c4:f7:ec:57:e9:d9:
                    78:78:e9:22:df:f7:68:8e:00:b0:f1:e8:ae:39:cb:
                    c2:e5:d4:a9:ba:82:b0:14:3c:6b:4f:e4:6a:81:42:
                    69:b2:2c:83:49:52:93:0e:33:99:4a:37:1b:b6:f3:
                    9b:45:f3:db:3d:16:d8:ad:62:af:fe:8d:52:b6:21:
                    02:2f:04:2d:8d:30:59:47:09:cd:41:c8:6d:fa:c0:
                    fb:be:dc:88:39:9d:c1:22:2b:6e:0c:26:0b:93:ae:
                    07:b0:3e:78:33:27:fa:dd:a6:df:c0:df:bb:a6:1b:
                    7d:f0:e4:88:6b:3d:2a:18:0e:7a:17:8f:b4:22:a8:
                    0b:35:87:ba:e8:3a:b6:db:70:97:9b:c9:24:29:7f:
                    17:94:9b:ff:07:f6:fc:88:cc:c2:6f:0e:0c:51:02:
                    ce:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E5:FD:B2:43:70:89:0C:0B:CC:A3:89:00:22:7A:2B:A4:62:EF:DC
            X509v3 Authority Key Identifier:
                keyid:E6:23:55:35:38:E0:0E:63:65:7B:FD:8F:27:CC:35:2E:DD:F5:22:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ff:c9:a2:a2:f7:2c:69:98:c7:89:f7:6a:9c:4e:77:39:fb:
         a7:32:13:27:3d:eb:50:c9:13:c8:35:51:b7:f1:0e:0b:42:fc:
         de:71:50:3d:8a:50:dd:70:80:1b:51:1a:2e:91:14:4c:79:ca:
         4d:9c:95:3a:19:08:8c:ba:96:d6:e8:fc:66:30:85:c8:af:71:
         e0:a8:a0:c1:87:78:09:3d:96:ae:d2:de:97:2e:17:03:83:cd:
         a7:ae:ae:3f:cc:c6:6c:b3:1c:37:f8:4f:5a:ed:42:1a:6d:f5:
         26:3c:62:83:5c:6b:75:72:29:0a:31:af:1a:a9:2e:e2:49:e9:
         0a:72:59:84:93:1f:78:a9:68:7f:b9:7e:ed:b8:a0:0c:57:07:
         61:a0:20:a4:f2:16:c9:3c:58:34:9a:27:90:b8:16:da:be:f9:
         b5:00:80:29:a4:10:a8:88:e0:62:3c:19:72:00:eb:c0:2a:b6:
         e4:03:22:54:82:a1:6f:ad:ce:f2:d8:e6:b5:ee:f0:10:c1:ab:
         e9:70:36:90:0d:0b:a4:07:a7:25:90:18:38:99:f3:27:a7:c0:
         0c:0c:73:ea:72:9a:75:0e:bc:3d:3c:57:af:f1:a0:04:f1:f0:
         bb:6a:f8:6b:7e:51:8c:e6:c2:97:bf:46:d6:07:25:a0:ae:25:
         d4:b0:9e:bb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYo9BIGbPZW/hWvf1WlOHs2mm/UEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYyMzU1MzUzOEUwMEU2MzY1N0JGRDhGMjdDQzM1MkVE
REY1MjJEOTAeFw0yNjAzMjUwNTIwMDZaFw0yNjAzMjYwODQ0MDZaMDMxMTAvBgNV
BAMTKDJFRTVGREIyNDM3MDg5MEMwQkNDQTM4OTAwMjI3QTJCQTQ2MkVGREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChMhpX0URP99CoET9x0wyLXqiL
vvjvprA78N0L/zgobbAXPUwLLZH3r71JkxnMp1gwa4at0glR0SbOD4LFlQ4tVizl
XrkPgzyNgkfE/5E89iWM8BbP+PUU4RSv8X3B3SvAWMT37Ffp2Xh46SLf92iOALDx
6K45y8Ll1Km6grAUPGtP5GqBQmmyLINJUpMOM5lKNxu285tF89s9FtitYq/+jVK2
IQIvBC2NMFlHCc1ByG36wPu+3Ig5ncEiK24MJguTrgewPngzJ/rdpt/A37umG33w
5IhrPSoYDnoXj7QiqAs1h7roOrbbcJebySQpfxeUm/8H9vyIzMJvDgxRAs4pAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQULuX9skNwiQwLzKOJACJ6K6Ri79wwHwYDVR0j
BBgwFoAU5iNVNTjgDmNle/2PJ8w1Lt31ItkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSERKWlhMWVBkMURMekRwemU0ZmJTeUZWMlMxTGk5dDRWZXFhWWtKSjdU
NEcvMC9FNjIzNTUzNTM4RTAwRTYzNjU3QkZEOEYyN0NDMzUyRURERjUyMkQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2MjM1NTM1MzhFMDBFNjM2
NTdCRkQ4RjI3Q0MzNTJFRERGNTIyRDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SERKWlhMWVBkMURMekRwemU0ZmJTeUZWMlMxTGk5dDRWZXFhWWtKSjdUNEcvMC9F
NjIzNTUzNTM4RTAwRTYzNjU3QkZEOEYyN0NDMzUyRURERjUyMkQ5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAL//JoqL3LGmYx4n3apxOdzn7pzITJz3rUMkTyDVRt/EOC0L83nFQPYpQ3XCA
G1EaLpEUTHnKTZyVOhkIjLqW1uj8ZjCFyK9x4KigwYd4CT2WrtLely4XA4PNp66u
P8zGbLMcN/hPWu1CGm31Jjxig1xrdXIpCjGvGqku4knpCnJZhJMfeKlof7l+7big
DFcHYaAgpPIWyTxYNJonkLgW2r75tQCAKaQQqIjgYjwZcgDrwCq25AMiVIKhb63O
8tjmte7wEMGr6XA2kA0LpAenJZAYOJnzJ6fADAxz6nKadQ68PTxXr/GgBPHwu2r4
a35RjObCl79G1gcloK4l1LCeuw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:08:18 2026 by rpki-client