Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/DC39D96A742EE8C695115CC7A4D907F8D5BF3129.mft
File:                     DC39D96A742EE8C695115CC7A4D907F8D5BF3129.mft (raw, json)
Hash identifier:          zgKoVFccUSGfPV0Peedf5U0esoodz7vD5BAWJKap+Oo=
Subject key identifier:   44:96:1C:DD:B7:B3:76:AA:9E:87:67:D8:F7:08:34:C6:3F:58:1C:C7
Authority key identifier: DC:39:D9:6A:74:2E:E8:C6:95:11:5C:C7:A4:D9:07:F8:D5:BF:31:29
Certificate issuer:       /CN=DC39D96A742EE8C695115CC7A4D907F8D5BF3129
Certificate serial:       30863AE1CA91897C040C8BA989455E26DDF2BCE3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC39D96A742EE8C695115CC7A4D907F8D5BF3129.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/DC39D96A742EE8C695115CC7A4D907F8D5BF3129.mft
Manifest number:          5E
Signing time:             Thu 26 Mar 2026 06:25:49 +0000
Manifest this update:     Thu 26 Mar 2026 06:20:49 +0000
Manifest next update:     Fri 27 Mar 2026 07:42:49 +0000
Files and hashes:         1: 34352e36352e3138322e302f32342d3234203d3e20323636323636.roa (hash: YflST/hD/V/cE7KI5XCRRTgsP7vEG8nWQ/BlwTWaSs8=)
                          2: 34352e36352e3138302e302f32342d3234203d3e20323636323636.roa (hash: qKjQHPcxuBUTVeXAbkiTpEmzZJDVQBxedmqiSyQj07U=)
                          3: 34352e36352e3138302e302f32322d3232203d3e20323636323636.roa (hash: +E0TDyTY4Nut5Ge7xTIQjgeaLQgekX1UMyT1K4o4sx8=)
                          4: 34352e36352e3138332e302f32342d3234203d3e20323636323636.roa (hash: AkvRqwt6Hr5JCOogOXcObnbdi2tuTYD2wOWji8Yvz3U=)
                          5: 323830343a336434633a3a2f33322d3332203d3e20323636323636.roa (hash: CPXrH4FFOetIPWKLXFAdOTrfUR38Ch9JvlMw71b25YM=)
                          6: 34352e36352e3138312e302f32342d3234203d3e20323636323636.roa (hash: 2fw3zPGlSiBl+yUthB7lq9RPosyAV9FJ21jSFcMUdUI=)
                          7: DC39D96A742EE8C695115CC7A4D907F8D5BF3129.crl (hash: mbws3qmN1E2eBrY3mber1WPxWypZetwd7ubBhOK+BRQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/DC39D96A742EE8C695115CC7A4D907F8D5BF3129.crl
                          rsync://rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/DC39D96A742EE8C695115CC7A4D907F8D5BF3129.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC39D96A742EE8C695115CC7A4D907F8D5BF3129.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 07:42:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:86:3a:e1:ca:91:89:7c:04:0c:8b:a9:89:45:5e:26:dd:f2:bc:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC39D96A742EE8C695115CC7A4D907F8D5BF3129
        Validity
            Not Before: Mar 26 06:20:49 2026 GMT
            Not After : Mar 27 07:42:49 2026 GMT
        Subject: CN=44961CDDB7B376AA9E8767D8F70834C63F581CC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5f:fa:39:6f:26:dd:c7:2c:6c:97:56:5d:19:
                    b0:60:06:af:81:54:4f:fa:9e:ec:40:1c:37:27:a8:
                    96:77:eb:05:91:d7:22:ad:24:d8:1a:0d:52:63:45:
                    42:a5:00:f0:3d:0b:14:44:6b:92:94:56:f5:8d:93:
                    3a:01:87:c5:22:9d:ff:10:9c:db:7f:7a:b6:e0:fd:
                    60:63:3a:c2:a5:e0:35:2e:bd:c7:ee:92:ad:40:da:
                    bf:ae:d8:b3:ca:0d:76:e4:f5:6d:86:c4:9c:c9:85:
                    fe:01:ea:78:f2:d0:1c:e9:1c:d6:31:17:7d:20:08:
                    32:a6:97:ef:a3:27:2f:10:09:82:a6:b9:c6:88:07:
                    b0:06:7c:0c:31:68:32:84:00:dc:56:64:fa:ba:57:
                    22:96:51:e9:93:7c:3c:0a:d4:64:d6:a4:a7:f1:e3:
                    6f:93:49:29:b5:fe:14:ea:44:fa:b6:03:88:e6:e1:
                    14:da:2a:e6:f0:94:bb:13:90:2b:5d:e2:b2:6d:a0:
                    0b:74:52:68:c0:2f:d1:89:37:f3:0b:21:da:71:1a:
                    e0:f3:3a:44:b8:0b:ca:a6:4a:4c:89:2f:13:90:5a:
                    fe:05:38:c8:d7:0e:26:5e:7d:b9:8d:a5:82:af:68:
                    b5:6b:77:12:a5:2a:54:cc:8e:52:91:85:c8:cb:e5:
                    c5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:96:1C:DD:B7:B3:76:AA:9E:87:67:D8:F7:08:34:C6:3F:58:1C:C7
            X509v3 Authority Key Identifier:
                keyid:DC:39:D9:6A:74:2E:E8:C6:95:11:5C:C7:A4:D9:07:F8:D5:BF:31:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/DC39D96A742EE8C695115CC7A4D907F8D5BF3129.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC39D96A742EE8C695115CC7A4D907F8D5BF3129.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/DC39D96A742EE8C695115CC7A4D907F8D5BF3129.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:f8:b7:0d:69:7c:10:5c:11:d0:db:05:c6:db:f9:28:e3:61:
         e8:63:8f:5b:4d:20:f7:21:b6:1a:dc:6d:e3:fd:7f:08:9d:10:
         bc:99:9e:86:e8:5f:38:88:df:3f:06:eb:92:22:7f:62:f2:d5:
         f3:fb:0e:d0:12:52:34:98:5f:04:75:8d:23:eb:bb:2e:60:39:
         91:5f:12:39:48:c0:6f:17:21:0d:79:33:c9:d6:c9:36:be:a8:
         ff:5c:13:3d:c4:2d:11:7a:19:3e:68:2c:a8:d2:2c:aa:f9:c9:
         0e:00:5b:a4:d4:59:26:1e:ba:ea:4a:98:fd:15:b0:90:b3:90:
         41:02:93:2a:88:93:df:ff:93:00:b9:30:6d:7a:a6:19:d6:8a:
         82:25:13:76:a7:45:37:fe:3e:03:f4:73:2e:d2:55:88:d0:16:
         5b:89:d0:42:f9:fe:d8:91:41:9e:c3:0b:b7:d5:be:05:6d:75:
         b5:bc:51:48:72:44:32:97:15:8e:94:70:eb:87:b7:82:d3:49:
         73:8f:f2:b7:61:1f:16:33:d4:a1:2e:23:ba:56:27:1c:64:f1:
         95:04:3c:25:79:af:c6:af:33:a1:8f:f8:8a:73:0c:19:dd:d5:
         32:01:68:8e:dd:32:3d:60:28:42:47:63:cd:14:ac:eb:0b:c6:
         ee:b6:c3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:21:12 2026 by rpki-client