Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/9D38422B911C6A812AD0D3598391A062B2B872FD.mft
File:                     9D38422B911C6A812AD0D3598391A062B2B872FD.mft (raw, json)
Hash identifier:          +FZixnCzItBDwJZP010f3F2TbghGzsV7Gm73+5vX6Gw=
Subject key identifier:   02:93:28:65:F3:E6:34:55:88:66:03:4D:C8:8C:44:AC:EB:C3:58:E9
Authority key identifier: 9D:38:42:2B:91:1C:6A:81:2A:D0:D3:59:83:91:A0:62:B2:B8:72:FD
Certificate issuer:       /CN=9D38422B911C6A812AD0D3598391A062B2B872FD
Certificate serial:       7F6A64C675C6095ECA8DA2C8BCED59DE6CFBE0A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D38422B911C6A812AD0D3598391A062B2B872FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/9D38422B911C6A812AD0D3598391A062B2B872FD.mft
Manifest number:          7F
Signing time:             Wed 13 May 2026 00:07:03 +0000
Manifest this update:     Wed 13 May 2026 00:02:03 +0000
Manifest next update:     Thu 14 May 2026 01:24:03 +0000
Files and hashes:         1: 3133312e3139362e34302e302f32322d3234203d3e20323637333838.roa (hash: A7LrFlN/0lrqZ1RJBe9SMRUDvQRIszFDDEU7V86K/Oo=)
                          2: 34352e3233342e3234382e302f32322d3234203d3e20323637333838.roa (hash: KTCfbPa1IQvcmi9u67/Wr1Wt4EqvWWiGFgnElt/8xhM=)
                          3: 34352e372e302e302f32322d3234203d3e20323637333838.roa (hash: pRqIS97XQzTkWPLfKQTMdHjgLlJptdxuoCK/zNVPItE=)
                          4: 34352e342e3135362e302f32322d3234203d3e20323637333838.roa (hash: vu9x64qm/S0P5PxBd+Txmcw6QslPxgfUXJ4Cq8Q2uk0=)
                          5: 9D38422B911C6A812AD0D3598391A062B2B872FD.crl (hash: SwZ15U/u4VGW6oqKSnwi18V2nzV4+prXjk007E6IZ8s=)
                          6: 34352e3137342e3230382e302f32322d3234203d3e20323637333838.roa (hash: noMJ+YMXgx/Oad1w9Gic+LzyQReBr8aIFAu1hX8OPg4=)
                          7: 3133322e3235352e34342e302f32322d3234203d3e20323637333838.roa (hash: SmKw5ghX5A3BY7LfeffC0O1mEWfFvxe5e9TkGH6vQOc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/9D38422B911C6A812AD0D3598391A062B2B872FD.crl
                          rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/9D38422B911C6A812AD0D3598391A062B2B872FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D38422B911C6A812AD0D3598391A062B2B872FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 01:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:6a:64:c6:75:c6:09:5e:ca:8d:a2:c8:bc:ed:59:de:6c:fb:e0:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D38422B911C6A812AD0D3598391A062B2B872FD
        Validity
            Not Before: May 13 00:02:03 2026 GMT
            Not After : May 14 01:24:03 2026 GMT
        Subject: CN=02932865F3E634558866034DC88C44ACEBC358E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:47:b0:e7:ab:d1:3e:d3:b6:11:a5:ed:b1:6a:
                    0f:94:8f:31:ea:de:b0:76:85:23:6e:97:6a:18:f5:
                    37:4b:32:a5:f4:41:27:8d:27:60:4d:46:6d:22:99:
                    43:5f:d4:61:9a:d8:21:fc:4d:87:e8:83:22:02:1e:
                    39:94:2c:63:71:34:6c:f4:07:04:d0:a9:15:8d:8a:
                    cc:6d:44:ab:e4:04:c1:90:89:e7:48:28:f0:bf:d2:
                    b8:20:a1:ae:03:db:89:64:4e:3f:7f:01:06:47:7c:
                    5d:d0:dd:9b:95:f2:be:04:5e:23:60:e5:f8:44:5d:
                    57:08:a5:cc:29:14:c0:c0:28:6d:c8:89:e7:f9:00:
                    8d:cb:3e:21:bf:09:28:4b:2f:20:a3:5a:cb:1f:71:
                    17:9f:86:d1:c7:33:c4:f1:80:28:e5:a3:d0:e0:d2:
                    cb:6e:c0:71:3b:a3:47:3a:a4:5e:cd:24:a8:a6:a7:
                    82:3f:32:e2:84:62:48:0c:20:fc:e4:12:95:1b:4a:
                    63:06:6a:11:73:cf:5b:62:4f:a6:85:71:df:40:dd:
                    ec:c3:c9:86:67:47:07:f9:d4:34:5f:8d:ba:73:00:
                    07:63:be:19:95:67:f7:44:cb:0e:05:d4:c8:d2:1e:
                    c7:1b:73:2c:67:66:e9:a2:ab:13:b7:72:6c:a9:9b:
                    e0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:93:28:65:F3:E6:34:55:88:66:03:4D:C8:8C:44:AC:EB:C3:58:E9
            X509v3 Authority Key Identifier:
                keyid:9D:38:42:2B:91:1C:6A:81:2A:D0:D3:59:83:91:A0:62:B2:B8:72:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/9D38422B911C6A812AD0D3598391A062B2B872FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D38422B911C6A812AD0D3598391A062B2B872FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/9D38422B911C6A812AD0D3598391A062B2B872FD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:0c:73:1f:91:b6:9b:c1:42:4f:00:31:18:b8:67:0d:0f:78:
         ef:47:40:c7:6b:22:fe:e0:7e:53:b1:62:92:37:35:bc:ee:a0:
         36:58:f9:28:45:80:d0:80:19:cb:ec:d6:ef:97:4b:13:26:a1:
         04:10:f5:fa:75:61:67:06:87:c8:56:01:26:1e:9b:eb:4c:b3:
         db:49:02:91:77:de:61:db:fc:2f:cc:5a:97:9d:a2:58:53:28:
         fd:a1:18:d3:ce:be:81:bf:40:b5:96:53:2a:e1:3b:b8:43:5f:
         cd:44:e1:3d:16:c2:c6:88:27:65:75:60:07:f4:1f:49:b9:77:
         95:a1:2e:5f:ef:90:7c:be:41:aa:b7:ab:b7:6c:a0:04:2d:98:
         36:b8:8c:ae:61:3f:22:37:52:63:41:54:a4:34:e0:c7:6b:09:
         c4:4a:f1:6f:88:a4:18:6f:8c:79:66:76:9c:df:90:14:ed:36:
         8c:f9:4a:4b:ef:e8:e1:52:08:6b:bb:ec:10:ee:bd:0e:c5:00:
         57:8d:bf:17:6c:ab:3b:f9:da:57:1a:a8:b3:01:3b:39:8a:d5:
         50:64:27:e8:d7:b3:5f:cc:71:ae:5f:47:7b:0c:34:f7:62:d1:
         26:06:2e:8e:6a:d7:0e:8d:fd:36:31:cb:04:af:4d:37:37:52:
         fe:1d:e2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:43:57 2026 by rpki-client