Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.mft
File:                     2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.mft (raw, json)
Hash identifier:          FVQqT5S47kYGtLD3lJJLRKcxJfwZaORfBiwmJBT3+iQ=
Subject key identifier:   F6:5A:A7:EB:DB:A6:D3:C8:AF:72:BD:92:0D:CD:AF:F0:55:9E:07:85
Authority key identifier: 2C:AF:5A:D1:DD:D1:EA:C6:11:8C:9F:84:75:50:6A:FB:2C:BC:2D:25
Certificate issuer:       /CN=2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25
Certificate serial:       196F1C95F5E85D9B36CD6D90C630204B01A8BE7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.mft
Manifest number:          0407
Signing time:             Wed 13 May 2026 09:27:21 +0000
Manifest this update:     Wed 13 May 2026 09:22:21 +0000
Manifest next update:     Thu 14 May 2026 12:38:21 +0000
Files and hashes:         1: 323830343a333264633a3a2f3332203d3e20323632333232.roa (hash: +eqH/MMkuX9wuZRU4OQJYjErjVu3TeYwjUbvr8jZvMM=)
                          2: 3137372e3132342e3131322e302f32312d3234203d3e20313938393439.roa (hash: C91+mf1p8hxh/d285BQtBAiWKg3jMftQf0sBi2hDcEc=)
                          3: 3137302e3235342e3131322e302f32322d3234203d3e20323632333232.roa (hash: nedLm1ZoWxKuG4xCJoM6F+EvP4wTeXZ9fCv7c47/qxU=)
                          4: 2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.crl (hash: J47nx+ty0VihJNTwEWASfAViwN+rEdfaiDKWfIJ2rdU=)
                          5: 3137372e3132342e3131322e302f32312d3234203d3e20323632333232.roa (hash: I0Hvpg+M5XJ1sa8p+JNEyKM6bP5KVFDG068Xkdd6gkw=)
                          6: 3137302e3235342e3131322e302f32322d3234203d3e20313938393439.roa (hash: tm4DhsxHeSlJV5JNGpJrHhKVERq+PG1gxBqe0ATxftw=)
                          7: 323830343a333264633a3a2f33322d3438203d3e20323632333232.roa (hash: 6vxfVHgVfUj99p8SBfA9sr8rujKjnmtDFERhcJnzhO4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.crl
                          rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 12:38:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:6f:1c:95:f5:e8:5d:9b:36:cd:6d:90:c6:30:20:4b:01:a8:be:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25
        Validity
            Not Before: May 13 09:22:21 2026 GMT
            Not After : May 14 12:38:21 2026 GMT
        Subject: CN=F65AA7EBDBA6D3C8AF72BD920DCDAFF0559E0785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f0:03:d4:d9:9c:2c:d5:bd:9d:b5:44:e4:d2:
                    de:af:ef:c9:29:f2:f6:d6:3a:44:ff:b5:25:77:98:
                    62:3e:0f:db:7c:e2:61:8d:ef:78:12:1c:50:ae:3c:
                    74:09:a6:5a:f7:c0:6a:48:b3:e8:04:f4:2c:3e:39:
                    76:18:45:76:cb:03:00:d4:f2:a9:2e:89:8b:73:9a:
                    f4:7c:9e:eb:e0:1f:93:78:23:eb:e4:3c:40:dd:57:
                    22:ee:97:10:e7:e6:6e:c7:bb:64:63:24:2b:c1:fc:
                    5e:b4:f3:24:59:12:fa:c7:e1:a5:75:d6:a7:52:3c:
                    f6:51:6d:c6:5b:9f:a4:fe:81:08:78:14:6d:c2:84:
                    bd:a3:53:4a:0b:4d:7f:2b:b6:d1:23:76:ef:17:f8:
                    b8:63:66:f9:1a:bd:85:31:1e:bf:ed:1a:5e:41:98:
                    b9:7d:a4:f7:b7:e9:19:be:29:70:a8:38:62:9a:d9:
                    b8:6b:2f:c0:9d:39:16:f7:06:d4:19:e1:1a:d9:bd:
                    d5:78:ad:66:6c:bb:6a:bb:0d:49:93:70:d6:84:67:
                    4b:7f:6d:09:f0:b1:fa:22:0a:4b:7a:69:66:01:03:
                    b3:a0:29:4f:40:9c:65:a8:95:07:8e:7d:97:29:9f:
                    ee:ec:fc:f0:bb:bb:2b:68:0e:ee:81:72:d9:dd:5e:
                    f6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5A:A7:EB:DB:A6:D3:C8:AF:72:BD:92:0D:CD:AF:F0:55:9E:07:85
            X509v3 Authority Key Identifier:
                keyid:2C:AF:5A:D1:DD:D1:EA:C6:11:8C:9F:84:75:50:6A:FB:2C:BC:2D:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:1f:1d:de:61:58:e9:9c:b8:32:c4:f8:d0:42:64:81:2d:41:
         9b:82:6e:e5:ef:54:22:37:00:74:6c:19:84:c8:98:5d:ab:f0:
         08:97:d0:08:f2:b2:e3:84:8f:1b:04:22:58:4f:73:2f:50:08:
         45:59:61:65:29:2e:57:4e:81:1f:8a:60:20:0b:c2:fd:11:66:
         5c:b2:ad:99:7f:cc:7e:8b:44:84:05:5a:10:84:dd:5f:d7:67:
         ec:06:b3:6b:87:c0:02:f6:0d:93:96:12:62:4c:c1:0a:78:91:
         d5:b9:a1:30:bf:9d:6b:3a:eb:fd:77:ff:44:49:1a:b0:eb:2b:
         5d:7e:fa:6c:2a:7e:7f:c2:2b:29:a7:08:d0:ce:1b:31:cd:6f:
         45:64:31:b1:ff:2c:7c:5b:d7:38:d9:17:78:11:62:e3:35:e1:
         89:4d:26:21:cd:ed:7f:45:75:1c:53:7e:38:41:61:e4:6b:72:
         8d:27:2e:a0:39:4d:5c:a1:b3:1e:d2:0b:c6:60:ad:3c:f8:31:
         5c:b2:03:0c:09:ec:ea:e0:22:a7:86:12:d9:34:f5:ff:d8:d3:
         f7:84:7d:05:6f:5a:24:1f:32:42:29:24:40:3f:34:ea:6e:24:
         50:79:33:67:1b:ef:f3:c0:17:12:19:fb:f3:6a:3a:88:1c:b6:
         71:30:0e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:10:14 2026 by rpki-client