Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BqQweyCz1SZz59J982Ym2ptUzdjN4rducYWwLtaTAge3/0/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.mft
File:                     C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.mft (raw, json)
Hash identifier:          d4VSCIAtBt5Ma7QAG//Slg2kyzAFadZEXyLBjf9luvQ=
Subject key identifier:   AB:C8:F8:46:D8:B0:CA:CB:5C:76:EE:9C:D6:E3:C6:FE:31:5F:7D:26
Authority key identifier: C5:B4:11:AB:E7:B1:41:FA:A0:BC:5C:F1:DB:F1:99:B8:6D:E2:B2:69
Certificate issuer:       /CN=C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269
Certificate serial:       4D7D37031FC1A4B82E732E56F937DFF53A00BB72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BqQweyCz1SZz59J982Ym2ptUzdjN4rducYWwLtaTAge3/0/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.mft
Manifest number:          18
Signing time:             Thu 26 Mar 2026 05:53:28 +0000
Manifest this update:     Thu 26 Mar 2026 05:48:28 +0000
Manifest next update:     Fri 27 Mar 2026 07:57:28 +0000
Files and hashes:         1: 3230302e342e3131352e302f32342d3234203d3e20323731333332.roa (hash: 0t9bojsvU/HLVT3hLi4c7UaDaxo4OQAGSGuaYTMsRD0=)
                          2: 3230302e342e3131332e302f32342d3332203d3e20323731333332.roa (hash: QkzMBD31USaF+OnUuAfg3IZu/L6GJ6HSc3VBge36gf8=)
                          3: 3230302e342e3131332e302f32342d3234203d3e20323731333332.roa (hash: ebP6g11nfp+jENozSIjo20CNAySLwV/9emqOCw4hFFc=)
                          4: 3230302e342e3131322e302f32342d3234203d3e20323731333332.roa (hash: SclR7jTY5+hknjjOMHHp/801rwcJ7Y9KwjLE0V1noIk=)
                          5: C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.crl (hash: fblEkn1SI666dqfurxDxpCc2V3DZFQSHJAdW/fSCK0M=)
                          6: 3230302e342e3131342e302f32342d3234203d3e20323731333332.roa (hash: Fi1adxzVSDydSMEsPld3pJ2pSeet0X3aZtRxvN+PT8g=)
                          7: 323830343a373964633a3a2f33322d3332203d3e20323731333332.roa (hash: SAFT+N+rNHh+iObkyZm9fu631KeRVOtBjTBnWBAq3ow=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BqQweyCz1SZz59J982Ym2ptUzdjN4rducYWwLtaTAge3/0/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.crl
                          rsync://rpki-repo.registro.br/repo/BqQweyCz1SZz59J982Ym2ptUzdjN4rducYWwLtaTAge3/0/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 07:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:7d:37:03:1f:c1:a4:b8:2e:73:2e:56:f9:37:df:f5:3a:00:bb:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269
        Validity
            Not Before: Mar 26 05:48:28 2026 GMT
            Not After : Mar 27 07:57:28 2026 GMT
        Subject: CN=ABC8F846D8B0CACB5C76EE9CD6E3C6FE315F7D26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1e:43:69:23:67:6f:24:70:38:b7:ce:ce:29:
                    41:7b:ad:29:16:f5:3a:44:5f:17:8e:2a:22:a8:a7:
                    99:51:2b:8e:ac:03:15:ba:a1:93:3c:65:0b:93:3a:
                    50:a3:31:51:da:05:7c:36:8d:0c:d5:bc:2b:37:3f:
                    19:f0:5a:05:67:87:28:d9:7a:bf:80:11:bb:c4:4e:
                    00:14:d5:d6:5c:5f:e6:be:79:c2:ad:01:fa:b3:04:
                    05:b0:ce:05:6d:b2:03:7d:54:a7:9b:0c:a0:67:c0:
                    a9:37:3e:7e:21:72:e7:3a:e3:44:71:6d:06:15:e5:
                    02:37:74:24:6d:80:bb:ac:af:e2:22:55:d3:80:e5:
                    b7:bb:0f:20:d0:ae:28:20:ec:1f:15:c4:be:b6:d7:
                    3b:79:de:5a:4a:8d:a3:07:7e:97:bf:d0:6f:92:93:
                    89:b3:b0:0f:04:74:6c:f8:d6:8e:aa:6a:59:8c:81:
                    d9:09:67:05:33:c1:13:11:31:f0:d1:f8:af:58:3a:
                    70:da:51:21:67:83:fa:8f:11:ec:98:0b:e8:5e:5f:
                    f1:24:13:64:6c:68:c4:88:9c:35:9a:97:f8:36:81:
                    d5:7b:24:b1:65:f4:80:35:bd:fb:98:89:af:89:e9:
                    8b:03:f7:4a:dc:0b:09:76:2c:3f:18:84:75:cd:c5:
                    6e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C8:F8:46:D8:B0:CA:CB:5C:76:EE:9C:D6:E3:C6:FE:31:5F:7D:26
            X509v3 Authority Key Identifier:
                keyid:C5:B4:11:AB:E7:B1:41:FA:A0:BC:5C:F1:DB:F1:99:B8:6D:E2:B2:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BqQweyCz1SZz59J982Ym2ptUzdjN4rducYWwLtaTAge3/0/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BqQweyCz1SZz59J982Ym2ptUzdjN4rducYWwLtaTAge3/0/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c5:a0:32:a3:fc:56:9e:ba:07:29:f2:2a:a8:09:ce:f6:ef:
         80:7b:9b:49:ca:87:c9:e4:f7:48:7b:a4:0c:85:31:b9:c8:0c:
         c8:a2:66:9d:fe:b7:f6:ca:89:c0:ed:30:c8:4f:01:43:f0:4b:
         9f:35:b8:d7:b9:b0:f5:da:38:9b:d3:cc:79:0d:5d:21:7f:ad:
         fd:6a:1e:a3:2b:50:10:c5:94:0a:d7:31:a7:90:a6:45:df:3a:
         e3:33:af:ec:44:95:ef:cb:58:17:98:d0:27:6d:30:0d:4d:74:
         69:ed:80:35:43:52:03:d5:26:6f:5e:cb:52:0e:ab:58:bb:5c:
         30:5e:72:dc:08:3d:01:1d:10:c2:bc:10:bf:f8:bd:e3:7b:b4:
         23:c8:6e:62:12:7b:06:d9:fb:68:d8:ba:2c:c5:60:cb:5a:74:
         be:a3:6e:8b:8f:07:b7:40:75:e5:99:b4:67:ff:7c:b1:18:21:
         40:ab:b8:fb:b1:ad:1e:4c:76:c8:03:a1:de:ff:e5:4f:51:70:
         f6:42:fb:de:0a:4b:bf:3a:a9:cb:b3:2c:4c:78:9e:44:f1:60:
         3f:6a:07:e1:b6:d8:6a:02:2b:db:ab:41:29:4f:30:80:2f:0c:
         11:7f:df:ed:6c:bb:c2:b3:de:bd:5e:3c:c1:cb:6e:bb:8e:9d:
         b3:b4:fa:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:05 2026 by rpki-client