Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/66CDB035108BA5CAF5AF8D476FF862F54C5DE911.mft
File:                     66CDB035108BA5CAF5AF8D476FF862F54C5DE911.mft (raw, json)
Hash identifier:          tUHYJU3+mL1QwT6hpX1vC8eMgHM7kG2GTKFkr93W5H4=
Subject key identifier:   83:57:FA:22:7E:68:A8:54:AB:E6:DA:A8:E0:B4:F6:5F:5A:6D:0F:61
Authority key identifier: 66:CD:B0:35:10:8B:A5:CA:F5:AF:8D:47:6F:F8:62:F5:4C:5D:E9:11
Certificate issuer:       /CN=66CDB035108BA5CAF5AF8D476FF862F54C5DE911
Certificate serial:       5E3847E4D8349AD95CF62D954F1CD7F89A3EA109
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66CDB035108BA5CAF5AF8D476FF862F54C5DE911.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/66CDB035108BA5CAF5AF8D476FF862F54C5DE911.mft
Manifest number:          08
Signing time:             Sun 24 May 2026 05:35:31 +0000
Manifest this update:     Sun 24 May 2026 05:30:31 +0000
Manifest next update:     Mon 25 May 2026 06:01:31 +0000
Files and hashes:         1: 323830343a376132633a3a2f33322d3332203d3e20323731333532.roa (hash: nz9aheDg+wg00VMT52Wvj8bW3fJo1XafZAoyXVrPZC0=)
                          2: 66CDB035108BA5CAF5AF8D476FF862F54C5DE911.crl (hash: JB/Q6L64dMABl3736eGPaZkRFXHmhNDEnKGfopkDs7U=)
                          3: 3138312e3233322e3136382e302f32342d3234203d3e20323731333532.roa (hash: 14co/flJ1g5GyjFnGTMm8O1T3X1nfkkS9awNncbcaQM=)
                          4: 3138312e3233322e3137302e302f32332d3233203d3e20323731333532.roa (hash: 7MgAe1WMWF1F7Uc+lnWtutsHcgvF4T9efRTLq1LAJzo=)
                          5: 323830343a376132633a383030303a3a2f33332d3333203d3e20323731333532.roa (hash: VZEHC1FzMqGb5XwqfQOiFh9EJYwU0GLVAiFMoiCBzN0=)
                          6: 3138312e3233322e3136382e302f32322d3232203d3e20323731333532.roa (hash: bqhSwLH8IDoOw4WSabV++qqadz/xRZ0lIDbTpO498ho=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/66CDB035108BA5CAF5AF8D476FF862F54C5DE911.crl
                          rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/66CDB035108BA5CAF5AF8D476FF862F54C5DE911.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66CDB035108BA5CAF5AF8D476FF862F54C5DE911.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 06:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:38:47:e4:d8:34:9a:d9:5c:f6:2d:95:4f:1c:d7:f8:9a:3e:a1:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66CDB035108BA5CAF5AF8D476FF862F54C5DE911
        Validity
            Not Before: May 24 05:30:31 2026 GMT
            Not After : May 25 06:01:31 2026 GMT
        Subject: CN=8357FA227E68A854ABE6DAA8E0B4F65F5A6D0F61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9f:81:07:4d:2e:9f:45:2a:63:08:d1:a3:67:
                    dc:e1:a5:24:e0:b2:74:6a:00:0f:a8:57:71:88:ce:
                    3c:f4:68:cc:9e:26:6a:1a:76:96:1b:fa:63:55:e8:
                    bf:63:69:ea:15:10:f3:a4:18:d3:b5:65:95:3d:0f:
                    48:ee:69:24:a7:d7:9c:34:59:41:fc:fc:09:81:09:
                    98:61:4d:a9:04:cb:bf:a0:b0:e7:05:b6:d8:c6:d0:
                    ac:15:b7:88:05:b9:fa:7c:d2:ce:89:d2:f1:c9:e8:
                    51:36:61:7b:b5:fe:0a:53:24:16:ad:1e:dc:d1:b4:
                    bc:33:d9:83:f5:09:e7:eb:db:75:4c:1a:da:b3:e5:
                    db:96:b6:7d:5d:53:63:0e:b8:f2:9e:2b:fe:57:f6:
                    b4:c9:88:d4:20:01:13:c1:18:77:87:14:e7:a3:86:
                    f3:be:ed:4b:85:29:ce:a8:2b:b2:0f:ea:40:ae:2e:
                    57:0f:ef:9a:de:bf:ab:2a:56:06:db:22:e5:c2:f5:
                    36:33:f0:81:1e:7c:f0:20:9e:03:5b:a0:82:a6:96:
                    69:14:91:d9:49:f4:84:09:e1:37:40:e7:73:a0:4e:
                    89:6a:bd:1e:cc:c0:da:a2:c3:21:09:2e:54:91:e1:
                    a5:4e:b6:0c:4b:9d:e3:73:de:0d:64:eb:34:b0:86:
                    40:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:57:FA:22:7E:68:A8:54:AB:E6:DA:A8:E0:B4:F6:5F:5A:6D:0F:61
            X509v3 Authority Key Identifier:
                keyid:66:CD:B0:35:10:8B:A5:CA:F5:AF:8D:47:6F:F8:62:F5:4C:5D:E9:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/66CDB035108BA5CAF5AF8D476FF862F54C5DE911.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66CDB035108BA5CAF5AF8D476FF862F54C5DE911.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/66CDB035108BA5CAF5AF8D476FF862F54C5DE911.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:bc:85:df:e2:8d:b4:bc:eb:ab:4a:b8:48:6f:7e:08:57:d7:
         71:9c:24:be:30:34:7f:8e:45:da:3a:85:45:80:8f:7d:61:58:
         d3:f5:97:99:d1:fc:3d:fc:13:84:f7:e2:b0:82:9f:51:09:7c:
         c3:cd:50:be:e0:70:1f:9c:10:04:d6:33:ed:fc:2c:19:f2:8f:
         60:36:2f:a5:cf:38:17:0d:7b:91:2e:38:be:e9:12:f7:2a:55:
         16:94:48:84:c7:f4:e7:c5:18:05:95:0c:b1:f6:87:8a:78:4a:
         5c:a6:df:f4:e7:70:e4:97:fa:28:6f:15:8f:2f:f8:27:ca:44:
         82:3a:ff:69:08:f5:08:03:9f:a5:c8:3d:e0:4c:03:34:e3:19:
         9c:8e:4e:dd:03:0c:92:91:0a:e0:34:80:9a:a1:bc:fd:52:97:
         06:c4:d7:5f:b9:86:ef:56:89:c6:35:ce:39:c9:a8:0f:c9:8d:
         a0:b2:01:03:03:6d:09:8f:5d:b3:08:71:c5:1d:87:ef:ba:4d:
         18:65:16:66:b6:c7:44:cd:51:90:35:24:6c:44:82:0c:e5:06:
         5c:1f:d3:ca:80:a1:93:79:86:97:0b:0d:f7:68:7c:8d:22:47:
         2e:e1:02:dc:73:dc:b6:24:ce:aa:27:4c:a3:92:d8:36:35:a4:
         0d:75:91:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:42:10 2026 by rpki-client