Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/96E330CC67B9424B0A45DBE2B7D598DA7436BD2B.mft
File:                     96E330CC67B9424B0A45DBE2B7D598DA7436BD2B.mft (raw, json)
Hash identifier:          kOmRxZGT5qIn3OmenY8XAoZv37BlPlmEesuZnKLrknE=
Subject key identifier:   5C:AB:0B:73:4F:27:52:28:8D:9B:19:56:91:B7:C0:FC:97:10:0B:9A
Authority key identifier: 96:E3:30:CC:67:B9:42:4B:0A:45:DB:E2:B7:D5:98:DA:74:36:BD:2B
Certificate issuer:       /CN=96E330CC67B9424B0A45DBE2B7D598DA7436BD2B
Certificate serial:       717D79D1D62985249A02CEA3C8B1059C41718796
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E330CC67B9424B0A45DBE2B7D598DA7436BD2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/96E330CC67B9424B0A45DBE2B7D598DA7436BD2B.mft
Manifest number:          40
Signing time:             Wed 08 Apr 2026 15:42:34 +0000
Manifest this update:     Wed 08 Apr 2026 15:37:34 +0000
Manifest next update:     Thu 09 Apr 2026 16:37:34 +0000
Files and hashes:         1: 3137392e3132342e3232342e302f32302d3332203d3e203238333630.roa (hash: ykkN/ttRkKP6hjXmHgYkAxDppb71lLCpimWF8BXwEGU=)
                          2: 3133382e39342e382e302f32322d3332203d3e203238333630.roa (hash: VqYKt2WdeVbDQ+x2+hjCWOwTwCLLAFr9uQY9FJ4ITAs=)
                          3: 96E330CC67B9424B0A45DBE2B7D598DA7436BD2B.crl (hash: pA4gYA08uPYwxHZ/PLb0/qDWMZ61eors3r7vax01Dhg=)
                          4: 323830343a31343a3a2f33322d313238203d3e203238333630.roa (hash: X1ElzMf8vcQcxnjOZ5+E5fxRmmLHx5uVXUkwXz5YPho=)
                          5: 3138392e37362e3232342e302f32302d3332203d3e203238333630.roa (hash: Q7rJ4JumpZ/5D5o5W7DverUgD3dBL29JTuP68X2OSbY=)
                          6: 3138392e37362e3230382e302f32302d3332203d3e203238333630.roa (hash: xW5lEekpuxTsqjLJwlYIGcPs7eoqPoQjnm27n2oFfiI=)
                          7: 3137372e382e302e302f31392d3332203d3e203238333630.roa (hash: HW6iLO1TG6Qs3g9rWeXePEnZPfTejAzJEYJLD9k60PE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/96E330CC67B9424B0A45DBE2B7D598DA7436BD2B.crl
                          rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/96E330CC67B9424B0A45DBE2B7D598DA7436BD2B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E330CC67B9424B0A45DBE2B7D598DA7436BD2B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 16:37:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:7d:79:d1:d6:29:85:24:9a:02:ce:a3:c8:b1:05:9c:41:71:87:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E330CC67B9424B0A45DBE2B7D598DA7436BD2B
        Validity
            Not Before: Apr  8 15:37:34 2026 GMT
            Not After : Apr  9 16:37:34 2026 GMT
        Subject: CN=5CAB0B734F2752288D9B195691B7C0FC97100B9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7d:4f:96:54:0e:6c:39:1f:c2:9e:7d:ce:94:
                    b0:77:dc:51:34:b7:a5:f3:d1:16:9d:80:6a:af:08:
                    7d:5e:27:3f:40:c8:33:50:bd:d7:e7:86:e3:1e:a7:
                    52:f1:3a:d4:4c:fe:b8:78:a3:72:dc:13:81:78:5f:
                    24:4b:45:37:82:b9:30:97:e5:24:b6:83:63:0d:e4:
                    ef:f4:45:4e:f5:10:51:25:d5:2e:03:75:b3:2b:67:
                    2b:06:0a:8e:f9:48:97:79:42:d0:16:0a:f3:cc:19:
                    d4:52:cd:10:35:7e:c3:bf:e1:d5:a5:7c:4d:4b:98:
                    7d:31:ad:d0:1d:97:fa:d1:de:c2:15:bc:4d:63:19:
                    0e:13:fb:f2:c5:8b:48:7e:d8:1a:1c:48:2d:44:ce:
                    6b:e0:58:b4:7f:8d:be:24:29:d1:10:91:48:ce:c8:
                    9e:73:10:d8:41:d1:07:b6:44:ff:eb:d3:ff:6b:75:
                    ac:72:d1:4c:ef:76:7c:db:8c:a3:e7:60:87:86:19:
                    aa:e5:35:c3:3d:67:ab:62:12:22:a0:17:e9:38:43:
                    00:3d:8a:63:96:fe:45:29:03:04:1e:7d:9a:d5:d9:
                    b4:4c:de:06:55:54:b8:67:a9:8d:ad:c2:14:47:2b:
                    4e:35:7b:a4:ce:a5:d9:f9:6d:82:9d:dc:be:21:4e:
                    82:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AB:0B:73:4F:27:52:28:8D:9B:19:56:91:B7:C0:FC:97:10:0B:9A
            X509v3 Authority Key Identifier:
                keyid:96:E3:30:CC:67:B9:42:4B:0A:45:DB:E2:B7:D5:98:DA:74:36:BD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/96E330CC67B9424B0A45DBE2B7D598DA7436BD2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E330CC67B9424B0A45DBE2B7D598DA7436BD2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/96E330CC67B9424B0A45DBE2B7D598DA7436BD2B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:16:20:8e:d3:22:91:70:ce:e6:af:ca:4f:e8:8f:3c:52:0d:
         9c:06:c3:cb:7f:3a:db:ec:f9:87:4c:58:d6:7d:57:5b:7d:c1:
         2d:a8:4e:f9:03:b3:fc:c5:b6:32:45:a2:43:3b:65:3f:80:9a:
         50:a9:88:89:d9:a5:46:98:a6:46:87:e5:0d:39:e1:ef:6e:af:
         06:f9:3c:c3:e3:87:e9:c8:ee:71:92:3a:d5:e6:9c:63:9f:b5:
         08:7c:42:9c:78:28:5f:65:72:2c:b8:d2:06:84:ff:3a:35:98:
         e6:f8:9c:10:fe:e6:2b:19:22:a3:23:47:bc:5f:32:c4:e7:e3:
         0b:0d:fa:17:5a:a7:4d:b3:3f:80:79:55:3c:69:22:4d:22:c4:
         c3:58:27:b9:67:4b:cd:f2:9f:b7:af:e5:8b:73:b9:07:00:00:
         14:11:79:8d:fe:e5:be:da:46:91:df:30:ba:dc:ba:b2:60:1d:
         3c:a0:d8:f9:2a:95:3c:6f:11:df:b7:f5:e0:d3:64:8f:cb:75:
         59:2a:03:c8:cb:8c:64:ba:9b:a2:55:e6:34:e7:5d:6d:27:f5:
         6f:ff:c7:8f:d9:be:c4:00:ea:b4:95:49:88:30:7f:0e:d0:40:
         af:d3:e0:06:79:8a:e5:7f:d6:ef:ab:3d:69:01:56:0f:22:a5:
         4d:81:5c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 20:19:55 2026 by rpki-client