Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft
File:                     9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft (raw, json)
Hash identifier:          S3Afl+5l+8TrIGnyzIqNjGejUEGAI7A053Dm/Tu05IY=
Subject key identifier:   55:45:D5:78:E9:2E:47:37:60:5A:F8:2B:61:AD:A2:DB:5D:79:93:1A
Authority key identifier: 9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21
Certificate issuer:       /CN=9DB99B4A1CD56B1C7C104FA25EFDE518596FD221
Certificate serial:       7346DB63C061A75A5EA913673B196E023C8BC7BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft
Manifest number:          03C5
Signing time:             Wed 25 Mar 2026 19:52:05 +0000
Manifest this update:     Wed 25 Mar 2026 19:47:05 +0000
Manifest next update:     Thu 26 Mar 2026 22:48:05 +0000
Files and hashes:         1: 323830343a373332383a3a2f33322d3332203d3e20323730383939.roa (hash: unA0Gjz2Q6vjQ8Bq0OcuFQzV+vSj3UZ3TQWrhlIyJjg=)
                          2: 3137372e39312e3232382e302f32342d3234203d3e20323730383939.roa (hash: 7zzXxz8oG/h6p/wT6a3hW45J5GT5EUuiD/5Q9fXZjdI=)
                          3: 323830343a373332383a313030303a3a2f33362d3336203d3e20323730383939.roa (hash: 1LjVIsu6vgVFWS+WMXOywF/CM4824Icywjw4RPstbuA=)
                          4: 3137372e39312e3233312e302f32342d3234203d3e20323730383939.roa (hash: 33unFx0BPDM93xidOI8RxSrGD0Ax6NzK2fo1EPQhKAw=)
                          5: 3137372e39312e3232392e302f32342d3234203d3e20323730383939.roa (hash: zYjOKgma5GjcE+SOhZrGU+PQtYIh6Cgnm/tr/z8vp+0=)
                          6: 323830343a373332383a323030303a3a2f33362d3336203d3e20323730383939.roa (hash: 9RMhVqIS994VMGgO6JKcMkM0VsS52vc31KkpVlyW7LE=)
                          7: 9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.crl (hash: LHYMrhk7d24+NSYs/ujgByYmrBbpXdJXNrhfdvNFPgw=)
                          8: 3137372e39312e3232382e302f32322d3232203d3e20323730383939.roa (hash: amyBJSGHpXcpgSLgeYxuniSRQMq9Y74aeD5Kw4Fe8HA=)
                          9: 3137372e39312e3232382e302f32332d3233203d3e20323730383939.roa (hash: xt7VYNK+lTgJiLr2D8b+Sz6hpJFnM7zzNs7ahT8Albg=)
                          10: 323830343a373332383a3a2f33362d3336203d3e20323730383939.roa (hash: LELzMfjP2YPJ6gs9gca2xUnCMtriwzgrbkGFNkC28Ow=)
                          11: 3137372e39312e3233302e302f32342d3234203d3e20323730383939.roa (hash: cR9nJSEdADE6DMFb8Q/Zd0jDjca+/smzNYrr89u0Ngg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.crl
                          rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 22:48:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:46:db:63:c0:61:a7:5a:5e:a9:13:67:3b:19:6e:02:3c:8b:c7:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB99B4A1CD56B1C7C104FA25EFDE518596FD221
        Validity
            Not Before: Mar 25 19:47:05 2026 GMT
            Not After : Mar 26 22:48:05 2026 GMT
        Subject: CN=5545D578E92E4737605AF82B61ADA2DB5D79931A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6d:b7:47:83:5e:35:b2:16:58:3a:51:ea:05:
                    c7:1d:7d:1f:b6:e7:12:04:8b:95:f9:69:8c:9b:f5:
                    55:30:f6:44:87:3d:85:61:b4:36:90:76:7e:b7:9b:
                    f9:e8:e0:4c:5d:54:85:90:14:7f:46:43:98:13:c9:
                    3a:12:b4:1a:9a:f8:1f:d4:a5:5b:13:f2:45:b7:03:
                    38:be:55:7a:0d:ca:7c:ea:6d:38:ed:1d:d4:d5:ca:
                    40:c6:8b:e1:96:97:6a:74:57:c7:99:6b:2f:5b:ef:
                    2c:ce:4c:16:fa:d2:4b:d2:8d:38:48:5a:a0:78:f8:
                    39:2e:df:53:a9:b3:d3:11:95:2f:69:38:37:4f:39:
                    43:2c:77:cf:02:fd:ef:6a:19:7c:49:17:fb:56:3c:
                    7e:b3:2f:07:cf:63:93:de:f9:6b:a9:7e:de:ff:ca:
                    c3:f4:c7:47:48:70:a0:6f:d1:0b:d7:63:38:42:db:
                    27:65:71:d5:7a:13:f6:db:01:b5:ef:7d:88:69:f9:
                    bf:65:1e:2c:48:dd:00:8b:30:71:b6:0b:b3:12:bf:
                    f9:5b:4a:b7:57:89:dc:fe:e0:2a:73:30:3b:d7:01:
                    a7:73:96:0c:b6:0d:bb:55:16:62:06:ce:a6:17:d7:
                    6d:ae:c8:95:81:c9:76:f7:45:73:d9:05:23:8b:ee:
                    1a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:45:D5:78:E9:2E:47:37:60:5A:F8:2B:61:AD:A2:DB:5D:79:93:1A
            X509v3 Authority Key Identifier:
                keyid:9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:f5:c3:01:35:7f:8a:e8:fc:6a:47:e4:82:38:55:cc:68:0b:
         0f:cb:82:f0:f7:9c:46:c1:cd:f8:7d:0e:79:36:e1:5b:89:55:
         c4:f5:b6:49:97:90:74:5f:de:af:be:48:30:fc:16:5b:1c:57:
         d8:e2:ba:a3:30:51:b1:24:bc:c5:89:e6:45:fc:34:76:8b:fc:
         6b:16:41:22:06:8d:79:2b:91:78:b6:9a:6b:c5:db:4b:f5:3f:
         38:06:c4:a4:9a:42:9f:80:d9:38:25:08:8e:6c:30:69:18:f3:
         ef:44:01:1b:77:de:2c:93:7d:8a:94:f2:5c:5f:ff:a3:86:3d:
         58:18:fd:25:da:3d:54:bf:8f:ea:bf:7a:22:a7:bb:3b:ae:3e:
         45:f7:a5:8d:f4:dd:40:90:58:e7:d7:83:eb:9a:b8:d0:61:e6:
         19:e8:24:e0:e7:8c:f3:06:99:08:8a:5c:30:8b:85:87:63:9d:
         04:07:3c:24:f9:91:a0:6f:82:c9:cb:23:04:ac:e6:7c:a8:07:
         3a:81:4e:ed:e4:af:49:57:47:e8:61:01:28:8f:6c:fe:8b:d6:
         b1:0f:19:15:00:30:58:ec:84:25:34:24:e9:e8:35:a8:39:f4:
         d8:ec:f2:87:df:21:a7:56:3f:d7:2b:99:03:cd:90:ee:99:55:
         1d:29:c7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:57:39 2026 by rpki-client