Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.mft
File:                     237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.mft (raw, json)
Hash identifier:          uRdmHCJwuK2D5QMrKADgX7bKojFjjt6CS6Ougq53hnA=
Subject key identifier:   C7:0C:31:D4:B3:82:44:14:E3:9E:2B:5B:BA:07:54:C0:B0:94:BB:78
Authority key identifier: 23:7C:B7:F1:CD:45:AE:DD:61:C9:34:9F:41:1B:9C:9C:AF:0C:1D:E9
Certificate issuer:       /CN=237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9
Certificate serial:       7BAD64E061546FB3A9C9E855C830A5C00AB53442
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.mft
Manifest number:          012A
Signing time:             Tue 12 May 2026 17:57:59 +0000
Manifest this update:     Tue 12 May 2026 17:52:59 +0000
Manifest next update:     Wed 13 May 2026 21:35:59 +0000
Files and hashes:         1: 3139302e392e3130362e302f32342d3234203d3e20323731363037.roa (hash: TZdqbginZESFTaWiNfuHq6EWjsaXIffUhMsJzyjmSWQ=)
                          2: 3139302e392e3130342e302f32332d3233203d3e20323731363037.roa (hash: Q4gatQHmvouqKXKWkc4KYIDIi6b8S+UXYDlHbMIK07E=)
                          3: 237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.crl (hash: XR1lAXmSJ1oXQrzyC/SjGu+pL87r/gPT/YdAIPpARFY=)
                          4: 3139302e392e3130362e302f32332d3233203d3e20323731363037.roa (hash: WBH4FJc7CIobjLqMzLThMCmIR1FV3fR1DTGTW9nTUk0=)
                          5: 3139302e392e3130342e302f32322d3232203d3e20323731363037.roa (hash: 0QIbpErBtuQPAI+3C1XspGhUhYB3kp1lED6jT2GYH9Q=)
                          6: 323830343a376532633a343030303a3a2f33342d3334203d3e20323731363037.roa (hash: wtTk40M/Y/sa+Okxb6WaseAzw4p0FGOFxHM1NhAoT0Q=)
                          7: 323830343a376532633a3a2f33322d3332203d3e20323731363037.roa (hash: b3clEwqCI3P8YcKVBjN5GNmnsLdTIb0mQjtPOehhoFg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.crl
                          rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 May 2026 21:35:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ad:64:e0:61:54:6f:b3:a9:c9:e8:55:c8:30:a5:c0:0a:b5:34:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9
        Validity
            Not Before: May 12 17:52:59 2026 GMT
            Not After : May 13 21:35:59 2026 GMT
        Subject: CN=C70C31D4B3824414E39E2B5BBA0754C0B094BB78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2a:eb:15:af:28:48:0b:ef:b0:9b:fd:0f:bb:
                    c6:ce:80:65:78:00:bb:fc:b9:02:94:89:96:6c:af:
                    81:b7:5e:63:34:a6:d7:b9:71:44:45:86:ce:d2:c1:
                    29:55:ae:68:29:41:41:13:48:c0:1c:61:83:d9:64:
                    9e:0c:21:41:1b:b5:7d:19:f4:c7:96:49:1c:22:69:
                    e8:2d:7a:a2:0f:fc:e9:a0:9c:31:36:f3:07:b7:d4:
                    07:36:4c:ea:08:38:27:83:fb:28:e5:25:d2:be:0b:
                    66:81:ad:a8:e6:29:a3:b4:9e:59:d0:c8:bb:c9:b0:
                    3c:aa:56:24:92:2d:ea:3a:67:8a:6c:1d:37:c5:49:
                    e5:63:09:4d:db:4a:70:c5:79:cb:4e:1c:e0:27:4b:
                    f7:d1:c7:79:c4:06:a8:06:ad:00:b8:a1:36:c9:2b:
                    3b:8d:2a:b3:84:ea:0b:e6:40:58:f9:45:b4:db:fd:
                    4a:3c:72:44:c5:3f:40:a2:d4:06:2d:8e:4b:0d:eb:
                    e3:df:f3:36:89:7f:02:72:c1:bb:cb:7e:a7:42:58:
                    92:bb:e4:95:ce:1d:88:1f:c5:44:92:73:70:c5:48:
                    71:09:4a:5a:d3:9b:d1:3d:21:b2:68:b1:0f:4a:32:
                    ef:28:18:a4:6d:73:02:5a:73:23:04:bb:37:b4:05:
                    9d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0C:31:D4:B3:82:44:14:E3:9E:2B:5B:BA:07:54:C0:B0:94:BB:78
            X509v3 Authority Key Identifier:
                keyid:23:7C:B7:F1:CD:45:AE:DD:61:C9:34:9F:41:1B:9C:9C:AF:0C:1D:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:06:a4:bb:c0:1b:bf:c0:47:7a:fe:61:cc:fb:d7:17:c3:4b:
         de:3d:3f:a3:26:c2:b3:96:cf:e1:60:02:35:0d:2d:6e:b8:48:
         30:8c:57:70:14:78:e4:ab:18:08:fe:ca:33:50:cc:71:c0:1d:
         ab:68:56:74:8b:92:d8:97:6c:ee:6a:2a:f5:2f:e8:c2:b4:21:
         36:e0:b3:9a:ee:68:e7:a0:e4:e0:55:26:16:fa:71:77:54:ea:
         41:85:b3:b2:ab:ae:78:e8:e3:a2:97:cc:25:db:24:cd:07:11:
         3d:f8:a8:3a:ab:59:64:cc:37:c4:34:c7:72:a3:d8:63:6b:8d:
         f9:b3:4e:5a:5b:46:17:3c:64:8e:41:d4:ef:42:b9:96:16:04:
         9c:04:4c:7a:39:e4:b6:74:36:96:9d:94:46:13:e3:88:10:6c:
         4e:27:88:54:f5:0d:49:8c:71:1c:cb:07:ae:5a:f9:43:66:26:
         fb:0c:11:75:24:cf:a5:c0:bd:66:66:8a:3c:cd:86:45:e2:e3:
         3d:e0:44:e2:f0:4d:aa:61:67:ce:e9:94:44:26:6f:64:e6:11:
         dd:6f:c7:b5:c4:2a:7a:e4:fc:52:21:7d:53:b9:cc:1a:40:19:
         45:38:84:4f:de:56:34:d9:dd:04:f0:da:02:29:e2:9a:e2:a2:
         01:7c:c8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:37:46 2026 by rpki-client