Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
File:                     85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft (raw, json)
Hash identifier:          sQzWqUGSSV3jaFwUG1dsfMkaNhV0xnU98VPzr+ZGf/w=
Subject key identifier:   87:2C:F4:D9:4F:5F:DD:BB:C2:B9:1A:A6:C4:4A:BD:CC:31:87:2D:3D
Authority key identifier: 85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB
Certificate issuer:       /CN=85EE0CD661887CC88F64F6B4BE9D420426E200DB
Certificate serial:       2272EC84F5F3E612B7B8BFD7DD20DD49300DCDA8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
Manifest number:          0401
Signing time:             Wed 13 May 2026 02:41:08 +0000
Manifest this update:     Wed 13 May 2026 02:36:08 +0000
Manifest next update:     Thu 14 May 2026 05:40:08 +0000
Files and hashes:         1: 323830343a383532303a3a2f33322d3334203d3e20323732353539.roa (hash: 62LOMhvbmOJdbTGkjcygK0r0w7DTO+g8VM0cQfmxQ4g=)
                          2: 85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl (hash: r/wM9szcY20vx5VZhvMxckQWnjdPsI/fv0MyFY8vGj0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl
                          rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:40:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:72:ec:84:f5:f3:e6:12:b7:b8:bf:d7:dd:20:dd:49:30:0d:cd:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85EE0CD661887CC88F64F6B4BE9D420426E200DB
        Validity
            Not Before: May 13 02:36:08 2026 GMT
            Not After : May 14 05:40:08 2026 GMT
        Subject: CN=872CF4D94F5FDDBBC2B91AA6C44ABDCC31872D3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:91:e6:5c:a3:b8:d8:ba:a4:b2:36:6b:0a:f8:
                    80:48:07:3a:4b:31:cd:48:dc:e8:d5:2a:d4:cb:6e:
                    07:93:2a:55:58:e0:3b:e4:37:ef:0f:1b:c9:73:c2:
                    ba:e7:3c:63:92:5e:13:74:80:bd:56:b6:80:11:71:
                    0a:6f:d2:91:8b:f7:04:fa:4e:93:5f:9a:51:df:d6:
                    5b:be:f2:18:fd:59:66:2f:5e:b4:1f:d1:d3:08:75:
                    2b:71:bc:63:fb:ac:c1:19:31:4d:2b:4f:f8:83:ff:
                    42:0a:2e:4b:c5:93:f5:fd:3f:9b:6d:67:44:0a:b3:
                    96:dc:00:92:f7:72:11:95:a0:c5:ac:ad:ef:0a:97:
                    0a:ae:1d:15:ae:38:83:a6:4d:a3:dc:ab:e3:24:4e:
                    ef:5b:89:d9:7d:6c:45:41:ef:1c:48:8a:d5:b2:94:
                    cd:80:c1:30:48:64:0e:e8:a0:6c:32:a0:3b:87:7f:
                    5e:46:1d:86:12:44:b4:ae:a6:da:a1:32:52:82:f1:
                    48:5e:89:cf:64:73:4c:9c:c5:aa:02:b9:d5:9a:fe:
                    2a:92:45:f1:a9:8d:4d:4b:ee:cc:13:d5:b4:15:27:
                    ce:08:b4:dd:78:4b:cd:bf:51:1e:5f:43:4d:9b:7f:
                    79:16:e2:6e:88:23:3a:8b:57:c2:6a:17:28:8d:39:
                    a3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:2C:F4:D9:4F:5F:DD:BB:C2:B9:1A:A6:C4:4A:BD:CC:31:87:2D:3D
            X509v3 Authority Key Identifier:
                keyid:85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:c5:b0:e4:09:c9:c3:c2:e7:75:bc:74:fa:da:6b:e5:2e:f5:
         b5:bf:9e:c1:ef:9e:26:f3:20:82:61:42:ea:71:ab:d3:89:38:
         dc:a4:0e:9c:34:ac:74:fd:71:08:d8:1b:17:2f:7c:26:34:48:
         6c:3b:53:ef:32:fe:06:59:2b:50:74:4b:63:38:f7:4b:4c:42:
         f2:fb:59:22:d5:95:97:42:ac:0f:40:7a:19:c6:a1:1e:33:96:
         65:53:4f:fc:e2:12:51:d0:63:ca:01:fd:b0:9b:64:31:46:76:
         9b:01:89:e6:ae:c5:21:0e:a1:8a:ae:7d:23:c0:93:3c:b0:87:
         ab:ce:47:d3:cc:8e:a4:a3:00:89:d4:e4:e3:51:d4:58:6a:e0:
         f2:4a:a4:69:3c:d9:d8:69:44:cf:42:11:68:e6:9f:38:d0:77:
         8b:d3:f1:76:94:50:de:f1:f6:b1:d0:0c:0b:c0:9b:74:25:fb:
         a2:9b:d0:28:0b:39:eb:44:08:44:d2:93:c8:a9:f3:02:8f:7c:
         ef:14:30:cb:db:5d:0c:d8:b8:f1:73:27:c5:55:43:28:db:34:
         63:eb:bf:b9:a6:53:aa:fa:8a:fb:1b:d8:34:2e:87:7e:9f:34:
         77:df:d9:fc:45:39:0e:3b:84:47:9f:df:ae:ae:a1:36:9d:b4:
         45:0a:cc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:30:22 2026 by rpki-client