Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.mft
File:                     CC038C42F33B3D558931769A27D97E3412751117.mft (raw, json)
Hash identifier:          rUQ/k6vgKzCWSFtT9jjvJr4+408LW6hVfWWuX4+cwBQ=
Subject key identifier:   99:63:92:6E:2D:2B:64:E5:00:0F:31:8C:44:E5:34:62:49:82:94:22
Authority key identifier: CC:03:8C:42:F3:3B:3D:55:89:31:76:9A:27:D9:7E:34:12:75:11:17
Certificate issuer:       /CN=CC038C42F33B3D558931769A27D97E3412751117
Certificate serial:       57FA4A3F750013B7E4D10F4132646EFE91364B4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.mft
Manifest number:          040C
Signing time:             Wed 13 May 2026 12:24:31 +0000
Manifest this update:     Wed 13 May 2026 12:19:31 +0000
Manifest next update:     Thu 14 May 2026 12:52:31 +0000
Files and hashes:         1: CC038C42F33B3D558931769A27D97E3412751117.crl (hash: OY25mB77VR3vylqZukG335s4aeSgfJiHCYefxC1hTiM=)
                          2: 3133312e3130382e3137322e302f32322d3232203d3e20323634333836.roa (hash: ujqnDp2+YEwXM9ncBaOcCCQ+V+3aNd81j4AwQAgNMTk=)
                          3: 323830343a316462303a3a2f33322d3438203d3e20323634333836.roa (hash: 3mYaNta/aHoEzN7Wodt1NzXNQY077d5xab+jB3ud0qk=)
                          4: 3137372e33382e38382e302f32322d3234203d3e20323634333836.roa (hash: jogr1sFBFweIww06NUImv+W1fijBnVaSw/777woTfJM=)
                          5: 3136382e3139372e38302e302f32322d3234203d3e20323634333836.roa (hash: 2rcjc9kz31srAYaSfuNquIOO4EfYa6vINLdNH4QTpM0=)
                          6: 34352e362e3234312e302f32342d3234203d3e20323634333836.roa (hash: WHSbq0/+FZFnkOmGhfmYLcPGIMlX1Meoxz9qVJFO1Os=)
                          7: 34352e362e3234302e302f32342d3234203d3e20323634333836.roa (hash: uHeS7RCqj7iIIW70kNHK8DdSTodTdS1+Zm+hZPfX+MI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.crl
                          rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 12:52:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:fa:4a:3f:75:00:13:b7:e4:d1:0f:41:32:64:6e:fe:91:36:4b:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC038C42F33B3D558931769A27D97E3412751117
        Validity
            Not Before: May 13 12:19:31 2026 GMT
            Not After : May 14 12:52:31 2026 GMT
        Subject: CN=9963926E2D2B64E5000F318C44E5346249829422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e5:bf:1c:9f:f1:1c:62:d7:3d:e9:3e:b5:c5:
                    0a:81:c1:68:41:ca:30:ab:22:a4:3b:e3:64:84:89:
                    2e:8b:26:6e:61:26:77:78:83:5f:e0:58:2c:2a:78:
                    50:a2:cf:b1:00:14:f3:66:8a:81:de:70:d5:92:2f:
                    9e:38:9b:fc:7b:6a:2d:a1:bc:cc:c7:d0:a2:f5:66:
                    8a:72:cf:43:4a:1c:aa:29:28:7e:64:54:4d:b5:1a:
                    cd:af:88:a0:c4:05:62:60:e3:93:8d:fb:d7:00:b2:
                    3a:d1:b4:cd:db:59:a4:ef:ca:75:39:e9:54:e2:03:
                    d7:5f:58:e2:1e:48:38:01:81:82:44:48:44:43:c7:
                    8d:2a:42:2b:96:5a:52:40:fe:32:c6:0e:4f:15:b0:
                    f2:8f:da:85:0f:86:05:e0:cd:fd:8a:00:60:82:c1:
                    0f:10:f5:f6:3b:d2:59:03:98:05:2f:aa:30:d7:d7:
                    26:21:66:b5:b1:be:9a:3e:29:9f:86:29:2c:fb:f6:
                    39:d5:02:ae:d0:13:a8:17:ba:5f:9c:b3:70:18:18:
                    e9:27:0a:7a:b6:1f:4c:9b:80:d7:d3:53:0d:da:07:
                    43:ed:67:2d:a4:58:d8:a0:32:9b:eb:25:f8:8b:5e:
                    55:e1:77:f1:d5:06:c0:1d:aa:0a:47:99:46:de:29:
                    98:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:63:92:6E:2D:2B:64:E5:00:0F:31:8C:44:E5:34:62:49:82:94:22
            X509v3 Authority Key Identifier:
                keyid:CC:03:8C:42:F3:3B:3D:55:89:31:76:9A:27:D9:7E:34:12:75:11:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:e5:f3:b5:b4:44:a8:e5:58:40:23:4d:02:47:64:01:28:f9:
         c0:83:66:d3:b7:5d:ef:a5:53:03:46:1f:26:03:7b:f2:c3:a9:
         19:88:d4:6b:59:4b:78:8d:fc:8a:2d:c1:4f:24:e5:3b:ce:de:
         6e:5f:3c:ae:1f:76:45:3b:a9:24:15:63:2c:ac:c5:cd:05:ab:
         bf:f7:3a:fe:3b:7d:ac:8e:c7:64:4c:9d:b4:9b:ea:87:f3:58:
         05:6c:dd:e1:00:7a:09:d5:9c:43:39:92:58:f2:03:98:f2:a7:
         14:55:df:cb:fd:0d:62:fa:c3:b5:a1:47:84:4a:55:97:2c:ab:
         47:53:d2:ba:d1:cd:03:ca:ac:c0:21:69:93:63:eb:c3:ed:aa:
         42:7b:d7:6a:f1:37:46:d7:be:37:37:4b:01:4a:bd:0b:05:39:
         95:44:41:1f:ff:ed:e2:29:ab:f4:74:81:05:50:09:16:54:ae:
         0d:f1:87:4a:27:4e:0c:55:b4:54:b2:a3:f3:51:d8:b2:2b:c5:
         12:a6:79:61:3e:e5:ae:ac:70:a6:3b:45:73:fa:79:f9:00:2e:
         29:b5:18:b4:64:12:e7:5f:53:05:05:7a:a2:16:7c:5b:44:8e:
         90:89:85:7a:9e:13:0a:e9:7d:5f:16:61:26:28:93:50:05:42:
         ff:3a:20:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:20:52 2026 by rpki-client