Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/C9FCFFF20FD7DAAFBAC583DB0991203A48E54F6F.mft
File:                     C9FCFFF20FD7DAAFBAC583DB0991203A48E54F6F.mft (raw, json)
Hash identifier:          e5NMSss/mL/MSpMSTBiUSvOapaamgiYqHGput2PgsQg=
Subject key identifier:   C7:95:4E:01:BE:A5:8C:12:72:1B:29:7A:7F:E5:58:94:A3:E9:B5:79
Authority key identifier: C9:FC:FF:F2:0F:D7:DA:AF:BA:C5:83:DB:09:91:20:3A:48:E5:4F:6F
Certificate issuer:       /CN=C9FCFFF20FD7DAAFBAC583DB0991203A48E54F6F
Certificate serial:       05A9F242C88D348496541AB2ED0C53CE23457928
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9FCFFF20FD7DAAFBAC583DB0991203A48E54F6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/C9FCFFF20FD7DAAFBAC583DB0991203A48E54F6F.mft
Manifest number:          05
Signing time:             Wed 25 Mar 2026 18:47:56 +0000
Manifest this update:     Wed 25 Mar 2026 18:42:56 +0000
Manifest next update:     Thu 26 Mar 2026 19:30:56 +0000
Files and hashes:         1: B775879547BAC5F677A7B482DDB82E88568B21AE.cer (hash: aqU+PMuLcO6Q8Yl5dsRrzYtKnBtxQMjzDfLBhyhWMag=)
                          2: C9FCFFF20FD7DAAFBAC583DB0991203A48E54F6F.crl (hash: ku4kAF/kgwxM6nnK1LuV5ZvTzSaVhfA5pMddk6h5630=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/C9FCFFF20FD7DAAFBAC583DB0991203A48E54F6F.crl
                          rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/C9FCFFF20FD7DAAFBAC583DB0991203A48E54F6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9FCFFF20FD7DAAFBAC583DB0991203A48E54F6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 19:30:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a9:f2:42:c8:8d:34:84:96:54:1a:b2:ed:0c:53:ce:23:45:79:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9FCFFF20FD7DAAFBAC583DB0991203A48E54F6F
        Validity
            Not Before: Mar 25 18:42:56 2026 GMT
            Not After : Mar 26 19:30:56 2026 GMT
        Subject: CN=C7954E01BEA58C12721B297A7FE55894A3E9B579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7e:56:14:82:bb:9c:e9:bf:25:02:b9:7f:c8:
                    b5:82:cb:c4:0f:a9:db:d9:dd:21:6d:d4:17:6e:b4:
                    cd:0e:0a:3e:50:a6:57:51:8d:66:46:9c:e2:63:2f:
                    fd:79:9f:ba:a0:18:71:ce:96:8f:04:4c:3f:43:b1:
                    9a:c9:b3:d7:70:07:f4:5b:4a:73:73:4b:03:d2:ab:
                    c6:11:51:ee:67:35:0b:8a:b1:89:fc:e3:1e:e1:92:
                    34:49:b1:33:7f:d0:0e:41:c6:cb:80:8f:dd:a1:37:
                    00:9f:a1:67:78:19:bd:16:a7:ff:ce:79:1f:40:3d:
                    d3:0b:ef:42:02:1d:c0:aa:b0:b8:d3:c5:da:cc:00:
                    77:05:b7:f7:b7:b5:24:e4:05:60:10:da:a7:23:02:
                    64:f4:08:42:76:1b:c6:c7:ca:a0:72:c8:64:99:dd:
                    2c:8e:9c:09:01:f1:db:4b:d9:43:e7:46:c0:d3:3d:
                    0c:af:62:0e:18:67:5e:ad:41:5b:b2:08:40:6e:3b:
                    5a:c5:dd:13:6a:58:8c:7a:3a:62:b9:38:9f:1e:76:
                    e9:e8:b2:a2:88:cd:0c:e1:85:8d:66:95:43:61:29:
                    50:70:6f:4b:b6:53:e2:17:9d:e8:40:0a:40:21:d7:
                    9e:84:5f:6c:26:87:c7:12:30:2a:26:f2:ce:10:1a:
                    23:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:95:4E:01:BE:A5:8C:12:72:1B:29:7A:7F:E5:58:94:A3:E9:B5:79
            X509v3 Authority Key Identifier:
                keyid:C9:FC:FF:F2:0F:D7:DA:AF:BA:C5:83:DB:09:91:20:3A:48:E5:4F:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/C9FCFFF20FD7DAAFBAC583DB0991203A48E54F6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9FCFFF20FD7DAAFBAC583DB0991203A48E54F6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/C9FCFFF20FD7DAAFBAC583DB0991203A48E54F6F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:a0:0a:54:b3:31:a7:84:ba:de:7c:1c:48:5b:83:b7:58:ce:
         74:e7:cc:91:ea:69:55:75:f5:04:fb:bc:4d:5c:fc:23:47:0f:
         fd:e8:bf:40:94:fe:e4:ca:5b:17:0e:cc:79:7e:e5:4a:5f:ee:
         5f:19:d0:ef:64:1b:52:36:7a:cd:5f:33:d0:35:65:e1:41:71:
         8a:1e:97:de:56:a4:45:bf:c4:0e:84:0e:70:ff:13:c7:5d:50:
         d1:96:dc:8a:09:c9:df:c1:61:89:18:a7:00:ca:8a:15:8d:14:
         4f:ab:dd:05:a6:68:93:21:22:fb:40:1c:d1:0c:63:8c:c1:4e:
         a9:7f:12:63:fc:22:69:46:55:52:ca:15:33:86:e0:4f:ed:f3:
         66:b7:01:79:ef:c0:d7:07:c1:e8:9d:7a:89:1a:66:dd:bd:f6:
         67:a8:34:3b:8a:49:8e:59:e8:da:f0:3c:67:8f:37:69:6d:c2:
         11:f7:b3:d4:3b:5b:89:df:c4:4c:a9:eb:35:88:be:70:c9:54:
         26:50:ad:5e:79:60:1a:89:eb:45:d1:da:74:aa:16:58:6a:85:
         e3:33:22:d3:78:23:e6:47:28:e1:9f:ce:27:3f:72:75:e0:fc:
         b2:b2:e4:cb:e5:c0:d3:06:e3:94:9a:b3:3f:c9:fc:d3:75:28:
         5c:58:24:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:27:47 2026 by rpki-client