Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.mft
File:                     E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.mft (raw, json)
Hash identifier:          90h/P7ALdAK8SihVWBmDPAQdtFOunNY0jP9Xv0thkaE=
Subject key identifier:   4B:94:90:32:45:FE:79:8D:6B:A7:12:DF:3B:C3:50:F3:E4:5B:66:84
Authority key identifier: E1:D8:8A:34:12:BF:A4:DB:8D:3C:7F:3C:E9:BD:CA:99:8F:42:B1:50
Certificate issuer:       /CN=E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150
Certificate serial:       325080EC7A859089ED478EF2E285F5BEEF753833
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.mft
Manifest number:          27
Signing time:             Fri 24 Jul 2026 16:43:28 +0000
Manifest this update:     Fri 24 Jul 2026 16:38:28 +0000
Manifest next update:     Sat 25 Jul 2026 16:58:28 +0000
Files and hashes:         1: 3230302e3231352e3136302e302f32322d3234203d3e20323633363536.roa (hash: agAzEIBQii/fLQBWlK1tw3q7jO7PA4TV/yVcX5UOKXY=)
                          2: 3230312e3133392e38342e302f32322d3234203d3e20323633363536.roa (hash: 0cOsvSrDyHKuJ74Y01asJXEjHFYbsyuURLsu37oCAak=)
                          3: E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.crl (hash: 7rMWyvkNb7QEkMUhCaZBQNUvJfx/tsZ24pQH31O9QV0=)
                          4: 323830343a313066633a3a2f33322d3334203d3e20323633363536.roa (hash: YplvbWvmhYXYhTo8Lcmj/5HGe48e5FY06evNKf+ymA4=)
                          5: 3136382e3139372e37362e302f32322d3234203d3e20323633363536.roa (hash: iZTF/qrxHFD+liPsWuW7YWiBgKOV6HGXCXdTIk7EtM0=)
                          6: 3137372e35322e3134342e302f32312d3234203d3e20323633363536.roa (hash: P9Re5UCW/JIFm9Z4CeGRceik9RvcFrvuYyQTRBjLfdo=)
                          7: 3137372e36362e32382e302f32322d3234203d3e20323633363536.roa (hash: DApklLLlpc0KYrrOYvKpgBVs9M7LYkNYHNuR8gHK8gQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.crl
                          rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:50:80:ec:7a:85:90:89:ed:47:8e:f2:e2:85:f5:be:ef:75:38:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150
        Validity
            Not Before: Jul 24 16:38:28 2026 GMT
            Not After : Jul 25 16:58:28 2026 GMT
        Subject: CN=4B94903245FE798D6BA712DF3BC350F3E45B6684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f9:55:4e:8c:01:a8:e0:24:cb:4f:4c:14:9b:
                    eb:c3:58:c8:15:e6:c3:1d:3e:c1:ef:3c:13:0b:41:
                    b7:f6:19:e0:53:86:92:0e:94:a9:7d:a0:c8:3a:19:
                    e7:29:3c:6b:e1:44:03:3c:e1:0b:e6:9a:7f:61:b2:
                    99:4d:02:37:a2:6c:5f:7f:74:85:bf:e9:98:6e:ca:
                    82:16:0c:33:1c:87:7b:24:d5:91:c6:26:6c:5d:dc:
                    6b:76:65:23:3c:94:3b:09:87:2b:95:88:3d:10:ea:
                    a0:e5:eb:b4:ae:69:99:ab:a1:be:fc:f4:69:6c:9d:
                    34:5e:a2:7e:2b:af:e3:49:76:81:1d:91:f4:03:8f:
                    cd:09:45:39:4b:9f:5f:81:14:1a:f3:f4:32:ec:a6:
                    79:d7:d0:6b:a1:c1:4c:5a:6e:57:a4:f7:e9:fd:c5:
                    41:8a:79:60:2a:69:d1:98:aa:ea:77:3f:c9:72:ea:
                    6c:e4:9b:d4:31:5f:b3:5a:18:62:d0:d1:99:01:6f:
                    aa:b4:5e:03:49:7b:9e:94:eb:33:bc:70:d0:59:56:
                    57:7d:82:40:19:d2:de:83:e9:30:9a:0d:67:2f:5e:
                    50:0d:51:48:20:fd:4d:93:2b:63:34:49:52:13:c7:
                    97:65:ea:aa:28:74:fa:d6:22:bf:ba:2d:8e:fa:71:
                    dd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:94:90:32:45:FE:79:8D:6B:A7:12:DF:3B:C3:50:F3:E4:5B:66:84
            X509v3 Authority Key Identifier:
                keyid:E1:D8:8A:34:12:BF:A4:DB:8D:3C:7F:3C:E9:BD:CA:99:8F:42:B1:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:02:5e:93:54:80:bf:fd:55:71:d9:4d:8b:b7:b9:07:bc:bc:
         86:ad:20:03:71:a3:1f:6e:53:b4:ec:3b:a1:e9:be:d7:3d:35:
         36:86:61:9f:05:29:59:2a:61:12:c0:2c:e4:40:90:02:00:7d:
         5c:00:45:f9:36:50:34:26:2f:8c:d7:c1:48:f0:20:cb:26:ad:
         c1:cf:ea:4c:67:a4:41:b3:23:8f:e5:88:dd:d2:23:87:d4:75:
         24:55:1a:7b:39:9b:42:02:b2:e6:4b:58:90:f7:cc:b0:42:6a:
         2b:87:36:61:8c:67:44:71:96:12:d6:dc:47:ce:fb:ed:94:62:
         67:5c:b3:9f:94:41:95:f0:de:1e:01:a0:6e:fd:28:ac:69:16:
         5f:e8:03:15:41:9d:26:1c:7a:fd:e0:9c:06:2a:99:77:5a:39:
         7b:99:69:85:7a:40:da:43:fe:ce:a5:25:c8:2d:97:a8:ab:9d:
         b6:17:28:d9:b9:9c:0d:d4:b0:61:81:1d:bb:1c:72:b7:2e:00:
         f4:b1:4a:c5:62:06:c5:e0:4d:a8:c7:86:42:52:99:de:5d:c5:
         3f:0d:0e:a5:82:83:7a:90:7f:d1:d3:48:a2:8d:9d:1a:4b:fc:
         c1:36:ee:bb:e6:09:d1:19:19:dd:6c:c0:59:c9:83:e0:c0:67:
         47:8b:07:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:44:28 2026 by rpki-client