Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/5C6F6BA2D8176C89D8376B51DB34FFB0FF08DD58.mft
File:                     5C6F6BA2D8176C89D8376B51DB34FFB0FF08DD58.mft (raw, json)
Hash identifier:          xrordX9iqZDo+sMCB/YRv7hiqLL8PqwHGGfjJhwljPg=
Subject key identifier:   23:70:CA:84:FD:A1:DE:00:7E:3F:5F:0E:A6:22:50:D4:D5:C1:1D:ED
Authority key identifier: 5C:6F:6B:A2:D8:17:6C:89:D8:37:6B:51:DB:34:FF:B0:FF:08:DD:58
Certificate issuer:       /CN=5C6F6BA2D8176C89D8376B51DB34FFB0FF08DD58
Certificate serial:       7CD5C27BECAD7738129FC717644B26508C3485C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C6F6BA2D8176C89D8376B51DB34FFB0FF08DD58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/5C6F6BA2D8176C89D8376B51DB34FFB0FF08DD58.mft
Manifest number:          40
Signing time:             Tue 17 Mar 2026 04:25:56 +0000
Manifest this update:     Tue 17 Mar 2026 04:20:56 +0000
Manifest next update:     Wed 18 Mar 2026 05:08:56 +0000
Files and hashes:         1: 5C6F6BA2D8176C89D8376B51DB34FFB0FF08DD58.crl (hash: mVeC/eKXEZXbhw2iABDy1diI4n1ag5YwVJ0qaaD2lRY=)
                          2: 323830343a393335633a3a2f33322d313238203d3e20323734373732.roa (hash: K24uUqtZPMChhSk5npgJRBepqL9auirZnsIHoNiUSGM=)
                          3: AS274772.asa (hash: Qnri7lMMrLNqBSqzY1vnjWxAyQDBN65AnfXzE5Szz5A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/5C6F6BA2D8176C89D8376B51DB34FFB0FF08DD58.crl
                          rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/5C6F6BA2D8176C89D8376B51DB34FFB0FF08DD58.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C6F6BA2D8176C89D8376B51DB34FFB0FF08DD58.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Mar 2026 05:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d5:c2:7b:ec:ad:77:38:12:9f:c7:17:64:4b:26:50:8c:34:85:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C6F6BA2D8176C89D8376B51DB34FFB0FF08DD58
        Validity
            Not Before: Mar 17 04:20:56 2026 GMT
            Not After : Mar 18 05:08:56 2026 GMT
        Subject: CN=2370CA84FDA1DE007E3F5F0EA62250D4D5C11DED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:33:5d:f7:60:1f:c1:2d:16:23:e8:31:c7:7b:
                    05:94:43:3c:dc:cc:a1:c6:ba:70:b3:07:42:a9:6d:
                    e4:16:59:7b:c6:d2:17:6f:f8:57:9b:e0:ba:91:c6:
                    65:ba:8d:6c:6e:94:da:cd:6b:f1:9f:e7:e1:4a:06:
                    be:8b:32:f0:57:6e:9d:46:c9:60:b0:25:61:bd:c1:
                    99:84:ea:87:7d:ad:fe:e5:e5:d3:ba:8f:71:f2:d6:
                    d8:e2:d8:6c:c4:9b:04:04:ea:f6:41:ad:1a:33:8d:
                    6f:ad:18:3e:50:89:b7:ef:4c:95:7c:6d:3d:48:f9:
                    32:ea:91:5a:47:a2:c5:56:9b:6b:c6:8c:f6:55:de:
                    d1:0e:c1:5c:9b:10:38:3b:c9:22:4b:05:61:6e:36:
                    0a:ce:f2:e8:d6:75:ca:1c:ff:62:ae:65:36:f8:24:
                    d2:57:09:40:f6:59:98:cc:32:99:50:c4:92:08:52:
                    08:e4:bf:d7:04:40:ad:e8:d9:03:9a:5e:1d:c5:31:
                    39:04:42:42:09:b5:3b:78:e8:01:9f:8a:da:c7:cb:
                    7f:81:95:eb:ad:8b:e8:3d:82:fa:29:a7:e3:ca:9a:
                    31:ec:ec:4c:e7:f9:8d:9f:0a:34:d8:5a:5e:bd:a1:
                    db:7c:4f:b0:53:8a:12:ef:82:4a:eb:fc:33:e7:f7:
                    a2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:70:CA:84:FD:A1:DE:00:7E:3F:5F:0E:A6:22:50:D4:D5:C1:1D:ED
            X509v3 Authority Key Identifier:
                keyid:5C:6F:6B:A2:D8:17:6C:89:D8:37:6B:51:DB:34:FF:B0:FF:08:DD:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/5C6F6BA2D8176C89D8376B51DB34FFB0FF08DD58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C6F6BA2D8176C89D8376B51DB34FFB0FF08DD58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/5C6F6BA2D8176C89D8376B51DB34FFB0FF08DD58.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:a8:16:82:11:fe:67:a8:6e:b4:c0:5e:80:1a:74:fa:bf:37:
         1f:21:6c:b1:72:8b:7c:ae:24:b1:d6:cc:b4:f2:64:02:d0:c0:
         ce:8d:b0:45:7b:81:4f:0b:fc:2a:da:b8:c4:31:43:01:57:89:
         ec:03:de:e5:02:a1:30:55:82:9e:d2:e0:f7:3c:22:32:f4:11:
         aa:20:03:a0:13:a8:0d:d5:fe:c2:d8:27:fb:0e:02:70:80:a4:
         df:2c:d0:e7:47:e4:30:1b:7c:b4:ae:95:fc:16:a9:b3:fe:80:
         1b:47:82:07:48:66:ba:bb:29:88:90:13:ea:53:4f:a3:09:9c:
         06:b7:c7:5e:31:0e:8e:d4:31:e2:f8:08:7d:4c:81:a5:c1:be:
         f0:f1:3e:ac:96:cf:a7:40:1c:f1:69:16:51:91:e2:f6:92:bf:
         28:a3:04:df:94:2c:6a:77:98:65:99:fc:25:10:00:1a:29:1c:
         89:ea:75:38:9a:d2:ff:4b:76:c0:43:0b:15:c1:bf:e8:8f:e2:
         94:67:12:5c:91:09:45:a9:0b:6e:93:65:ac:f0:9b:3b:69:83:
         63:c1:8c:4b:43:12:c3:89:39:1e:7a:34:89:3f:61:4b:84:17:
         59:87:08:35:e3:58:28:31:ec:d2:fa:bc:f5:04:ba:9a:48:e2:
         5e:5e:8a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 15:13:02 2026 by rpki-client