Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BiMVDfTQM5beVkx5brAwNa1B1iXz4wwJLXM5B9UFpJcm/0/B95DA4500CFC4EB3787FB5C9BE7068045664997E.mft
File:                     B95DA4500CFC4EB3787FB5C9BE7068045664997E.mft (raw, json)
Hash identifier:          1JXPrE3/aOTL/7vjio4RiTJqc2NqXBtmw9THFeiJd4c=
Subject key identifier:   CF:ED:AF:6F:2F:49:50:1B:6A:BC:7F:70:B9:A0:64:5B:2B:35:F0:D8
Authority key identifier: B9:5D:A4:50:0C:FC:4E:B3:78:7F:B5:C9:BE:70:68:04:56:64:99:7E
Certificate issuer:       /CN=B95DA4500CFC4EB3787FB5C9BE7068045664997E
Certificate serial:       319A905A28D096E6CB63D8AB6AF12C1AB6BCE1B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B95DA4500CFC4EB3787FB5C9BE7068045664997E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BiMVDfTQM5beVkx5brAwNa1B1iXz4wwJLXM5B9UFpJcm/0/B95DA4500CFC4EB3787FB5C9BE7068045664997E.mft
Manifest number:          28
Signing time:             Fri 26 Jun 2026 22:23:40 +0000
Manifest this update:     Fri 26 Jun 2026 22:18:40 +0000
Manifest next update:     Sat 27 Jun 2026 23:27:40 +0000
Files and hashes:         1: 34352e3136332e31362e302f32342d3234203d3e20323638363434.roa (hash: prxQSYz2hsSmGmLAw6LLfeUfOBDq18Iq8CBDYkx9JBg=)
                          2: 34352e3136332e31372e302f32342d3234203d3e20323638363434.roa (hash: znUygPe3LlDBjfiBO647IcSTtgxoZjjmbg1SMgPOWRw=)
                          3: B95DA4500CFC4EB3787FB5C9BE7068045664997E.crl (hash: JrZI7AhxpS60iKP3KTSAAC6Oihh261o1ufN9vvz8Tso=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BiMVDfTQM5beVkx5brAwNa1B1iXz4wwJLXM5B9UFpJcm/0/B95DA4500CFC4EB3787FB5C9BE7068045664997E.crl
                          rsync://rpki-repo.registro.br/repo/BiMVDfTQM5beVkx5brAwNa1B1iXz4wwJLXM5B9UFpJcm/0/B95DA4500CFC4EB3787FB5C9BE7068045664997E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B95DA4500CFC4EB3787FB5C9BE7068045664997E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 27 Jun 2026 23:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:9a:90:5a:28:d0:96:e6:cb:63:d8:ab:6a:f1:2c:1a:b6:bc:e1:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B95DA4500CFC4EB3787FB5C9BE7068045664997E
        Validity
            Not Before: Jun 26 22:18:40 2026 GMT
            Not After : Jun 27 23:27:40 2026 GMT
        Subject: CN=CFEDAF6F2F49501B6ABC7F70B9A0645B2B35F0D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dc:6e:19:4f:34:4b:f6:e9:1d:3c:e8:5d:d6:
                    3e:21:ed:19:35:0b:7c:0d:88:d1:f3:e8:f5:1f:81:
                    70:d2:18:70:27:81:8d:96:5d:ec:22:84:c4:2b:4e:
                    dc:4c:0e:5c:ab:79:bd:c4:97:be:58:db:f1:cb:ae:
                    8c:20:fd:6b:52:5d:e9:9a:74:b8:79:c1:f2:74:26:
                    58:f1:f5:51:12:92:ab:71:81:f6:1a:5c:00:a1:55:
                    40:da:54:07:49:18:de:79:e9:3e:a6:0c:6f:34:57:
                    b1:d4:f9:a8:a5:74:2b:5d:a7:3d:1e:92:c5:39:23:
                    9f:e7:a1:01:b2:fb:fc:18:02:6a:75:23:ef:df:c6:
                    61:f2:e8:8f:4f:3e:82:6f:ab:60:52:42:60:ee:77:
                    01:b8:a3:a1:93:eb:d3:7d:f5:45:60:29:55:bc:d0:
                    14:5e:9c:d3:19:da:d4:ee:d0:36:58:e9:00:df:b0:
                    15:3c:fd:84:72:38:40:62:f5:60:03:e5:19:c3:a5:
                    6c:bf:34:72:57:a0:50:a0:93:8b:6d:9b:08:91:ec:
                    ac:3b:44:88:45:9c:eb:d8:73:94:53:3f:0e:74:28:
                    2a:83:54:21:00:15:9f:d1:40:61:07:fc:1b:9e:2c:
                    6c:5b:09:85:7f:92:73:08:94:cc:1a:df:fe:68:26:
                    d8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:ED:AF:6F:2F:49:50:1B:6A:BC:7F:70:B9:A0:64:5B:2B:35:F0:D8
            X509v3 Authority Key Identifier:
                keyid:B9:5D:A4:50:0C:FC:4E:B3:78:7F:B5:C9:BE:70:68:04:56:64:99:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BiMVDfTQM5beVkx5brAwNa1B1iXz4wwJLXM5B9UFpJcm/0/B95DA4500CFC4EB3787FB5C9BE7068045664997E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B95DA4500CFC4EB3787FB5C9BE7068045664997E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BiMVDfTQM5beVkx5brAwNa1B1iXz4wwJLXM5B9UFpJcm/0/B95DA4500CFC4EB3787FB5C9BE7068045664997E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:9b:43:ce:0d:66:29:6a:3f:0b:c2:b6:6d:a7:9c:c6:72:e6:
         3d:db:ed:dd:fc:86:41:3b:66:1d:7f:aa:f1:fd:da:3f:2d:71:
         4f:f9:c7:4f:fd:5a:fe:16:8d:53:27:c3:7e:28:66:b2:a2:66:
         6d:70:ee:5d:95:15:d8:2d:1a:4a:76:09:26:bc:ea:d4:85:5b:
         22:7e:59:40:eb:f0:64:53:04:b8:b6:2c:e7:9d:f8:42:70:f8:
         28:57:c9:be:68:ea:f2:90:b3:cd:38:f1:19:d4:ac:da:08:21:
         cf:46:c4:8a:06:4e:41:fa:e8:76:54:9b:f7:db:6f:d8:b5:6b:
         23:a8:2a:7f:aa:3c:b3:30:eb:e3:58:82:d0:26:ca:82:46:18:
         2c:67:f2:d4:af:43:8d:a9:a5:29:3a:9a:52:cb:d4:dd:20:e0:
         73:25:71:c6:ff:79:3e:ce:9a:d7:3e:f8:1d:e3:9e:29:db:c6:
         f0:73:f4:5a:b7:28:7d:95:b5:52:26:a8:7a:85:51:58:17:99:
         b4:92:78:45:42:72:a5:c8:b3:6e:be:43:46:af:a4:c3:da:30:
         49:f5:6a:fd:4f:0c:47:33:d5:2e:b9:3b:06:71:13:c8:6d:fc:
         e8:52:63:e7:10:44:e6:1f:86:82:4e:b1:f6:7a:67:1a:17:9d:
         59:04:d2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 12:10:49 2026 by rpki-client