Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft
File:                     5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft (raw, json)
Hash identifier:          t+BBoBkT/dHIWAAIHIehEUrSepfhak1sPBCX2JP8yYA=
Subject key identifier:   6E:4E:FF:CF:AA:9D:62:0A:CE:88:E4:CB:B3:B7:25:46:D4:15:4C:A2
Authority key identifier: 5A:F9:55:DC:B3:FA:6C:6B:A7:AE:C3:D8:BC:13:72:70:86:96:B8:ED
Certificate issuer:       /CN=5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED
Certificate serial:       2D84F933A0033866AFE8505666430C59949D1F6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft
Manifest number:          03CC
Signing time:             Wed 08 Apr 2026 07:07:03 +0000
Manifest this update:     Wed 08 Apr 2026 07:02:03 +0000
Manifest next update:     Thu 09 Apr 2026 09:44:03 +0000
Files and hashes:         1: 5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.crl (hash: DlzovH3bPMpTgryF6yTzZwgJb791I7N7Z734l6q3jG4=)
                          2: 323830343a343035383a3a2f33322d3438203d3e20323635393533.roa (hash: b6oC7++W/XXljdmQxKd71TnMAgO0NafF77SXICJ+nj0=)
                          3: 3136342e3136332e35322e302f32322d3234203d3e20323635393533.roa (hash: vs8ReSkfqiBOH9cHrURHk1ppepZS7/kl5JmgM/prj4Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.crl
                          rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 09:44:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:84:f9:33:a0:03:38:66:af:e8:50:56:66:43:0c:59:94:9d:1f:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED
        Validity
            Not Before: Apr  8 07:02:03 2026 GMT
            Not After : Apr  9 09:44:03 2026 GMT
        Subject: CN=6E4EFFCFAA9D620ACE88E4CBB3B72546D4154CA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9b:b4:f9:cf:2a:48:25:85:e1:38:ec:3f:18:
                    f0:01:be:d3:a3:95:d5:78:c1:24:33:d6:69:67:a8:
                    7f:70:f7:10:5d:59:2c:8d:f7:5a:37:15:0a:9f:12:
                    84:36:97:19:cd:89:bf:ec:67:f3:b5:be:96:6b:23:
                    18:f1:23:63:0e:c6:a1:79:8d:b1:29:f4:d4:7a:e4:
                    a0:36:6d:cb:03:9e:76:18:6f:6e:04:bf:fd:d0:74:
                    9f:49:bd:c1:9a:1c:19:3e:61:21:2b:66:d2:a8:7f:
                    b4:6a:3c:cc:2a:55:3b:1d:2c:74:37:97:af:c4:43:
                    49:b0:51:20:02:30:8b:2b:cb:10:4f:62:37:d4:dd:
                    6e:5c:a9:7c:a4:e6:bb:13:56:e8:f4:72:c7:4c:ef:
                    55:e1:79:76:0a:fd:6e:c3:3a:72:0c:1e:45:27:6f:
                    74:e6:fa:02:37:00:1d:c0:b4:2e:fb:f5:04:0c:e4:
                    ef:bb:de:96:ab:86:f5:99:fb:e8:b4:f6:b3:ac:ab:
                    cc:c0:e4:38:32:ec:43:7b:af:93:ca:e1:15:45:a7:
                    5f:9a:a5:d0:d3:af:45:96:98:4f:61:0c:ad:e7:d7:
                    40:bf:f1:a6:d2:e6:27:e0:6b:83:86:c7:d4:e0:7f:
                    62:be:73:ed:9d:26:fe:1f:e4:d4:d7:04:63:6e:fe:
                    ae:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4E:FF:CF:AA:9D:62:0A:CE:88:E4:CB:B3:B7:25:46:D4:15:4C:A2
            X509v3 Authority Key Identifier:
                keyid:5A:F9:55:DC:B3:FA:6C:6B:A7:AE:C3:D8:BC:13:72:70:86:96:B8:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:59:92:dd:4c:26:d3:c8:32:96:2f:ab:19:13:9f:90:c0:2f:
         6b:cb:4c:91:71:29:17:f7:70:cc:6f:28:fe:1f:7f:6f:a8:22:
         03:71:7b:8b:cb:18:e5:35:9b:68:38:26:f6:be:0f:33:a0:34:
         49:23:81:db:79:ea:da:8e:ca:98:45:82:82:f1:40:2e:2e:89:
         de:3d:bb:12:5e:29:bf:66:6e:95:29:46:1f:f1:14:84:6c:7e:
         ca:48:67:c9:05:83:7c:64:d9:8f:56:8f:a4:a8:06:ee:24:08:
         e8:dd:fa:22:b4:5e:bd:72:d4:2b:c6:b2:a9:fe:91:ec:98:bb:
         f6:a3:d2:d9:77:a2:64:98:58:ea:76:bf:52:0a:79:e5:0e:a6:
         d9:c2:8a:4b:f9:d6:2f:09:62:de:15:4f:85:3d:cb:cb:62:67:
         62:f8:60:17:02:f7:a2:da:3e:42:22:96:bc:50:78:ad:70:54:
         a4:1c:33:7e:c9:8a:d1:d2:c2:1e:cf:83:27:4f:b3:ea:fd:c0:
         c1:13:d7:41:1a:6a:9d:6e:ea:12:f9:8c:8a:fc:10:20:9a:3d:
         f8:bd:69:86:fc:21:d8:56:b8:30:72:c9:4f:cf:ea:1a:9e:df:
         ba:14:bf:35:84:2d:dd:ec:a1:c4:1c:e7:62:99:40:bd:7b:97:
         05:8a:a6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 23:06:39 2026 by rpki-client