Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.mft
File:                     237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.mft (raw, json)
Hash identifier:          Oeo9+DZBMr7mMVoFi96UR/BPr3kU7PkIa36N/M1h3lc=
Subject key identifier:   A6:06:88:F0:DF:F5:7E:23:95:31:81:57:7C:B8:5C:3C:13:71:31:20
Authority key identifier: 23:7C:B7:F1:CD:45:AE:DD:61:C9:34:9F:41:1B:9C:9C:AF:0C:1D:E9
Certificate issuer:       /CN=237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9
Certificate serial:       B7596DB8C6D92233B60D36354BF4094E2A2A7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.mft
Manifest number:          0139
Signing time:             Sun 24 May 2026 02:39:05 +0000
Manifest this update:     Sun 24 May 2026 02:34:05 +0000
Manifest next update:     Mon 25 May 2026 06:19:05 +0000
Files and hashes:         1: 3139302e392e3130342e302f32322d3232203d3e20323731363037.roa (hash: 0QIbpErBtuQPAI+3C1XspGhUhYB3kp1lED6jT2GYH9Q=)
                          2: 323830343a376532633a343030303a3a2f33342d3334203d3e20323731363037.roa (hash: wtTk40M/Y/sa+Okxb6WaseAzw4p0FGOFxHM1NhAoT0Q=)
                          3: 3139302e392e3130362e302f32332d3233203d3e20323731363037.roa (hash: WBH4FJc7CIobjLqMzLThMCmIR1FV3fR1DTGTW9nTUk0=)
                          4: 3139302e392e3130342e302f32332d3233203d3e20323731363037.roa (hash: Q4gatQHmvouqKXKWkc4KYIDIi6b8S+UXYDlHbMIK07E=)
                          5: 3139302e392e3130362e302f32342d3234203d3e20323731363037.roa (hash: TZdqbginZESFTaWiNfuHq6EWjsaXIffUhMsJzyjmSWQ=)
                          6: 323830343a376532633a3a2f33322d3332203d3e20323731363037.roa (hash: b3clEwqCI3P8YcKVBjN5GNmnsLdTIb0mQjtPOehhoFg=)
                          7: 237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.crl (hash: 0GBrNVG6OP/L3Ax3VRCARvs2e++Mcxe6Db43zSzrSng=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.crl
                          rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 06:19:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b7:59:6d:b8:c6:d9:22:33:b6:0d:36:35:4b:f4:09:4e:2a:2a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9
        Validity
            Not Before: May 24 02:34:05 2026 GMT
            Not After : May 25 06:19:05 2026 GMT
        Subject: CN=A60688F0DFF57E23953181577CB85C3C13713120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:92:23:a8:8b:f7:bc:16:56:f9:0f:75:cf:71:
                    85:56:b0:f9:16:38:b2:9b:dd:d7:7d:74:c4:66:1f:
                    1a:a2:c9:53:e7:9f:c2:de:bb:64:c4:2d:41:63:8e:
                    f0:0c:f3:65:74:51:11:f3:0c:5b:69:5d:75:e7:f8:
                    7c:1b:2f:29:24:f4:f5:68:c9:3b:bd:25:42:14:28:
                    dc:82:d0:68:28:ec:ab:eb:fa:12:e0:15:c7:6e:c8:
                    c6:65:54:5f:fb:ac:88:cb:0f:42:9e:2b:98:43:1d:
                    2e:2d:8f:f3:ed:6e:b1:f0:54:dd:d1:a1:be:43:a9:
                    f0:15:c9:e6:bd:59:72:78:c6:42:9d:e9:92:dc:ac:
                    44:a0:db:61:5a:cc:a6:ed:d4:a4:48:d1:c4:f1:e7:
                    a3:55:30:ff:d6:26:ae:6b:f5:6b:1d:7e:8d:0d:d1:
                    e3:98:7b:7a:1c:a2:52:98:41:e1:d9:18:09:45:72:
                    4c:df:c0:2b:f0:5b:23:3b:da:f8:f3:08:79:41:fa:
                    b2:c3:51:52:28:b4:87:e0:1e:f8:6a:89:14:de:2d:
                    2a:dd:b1:24:8f:26:27:59:55:84:53:d7:2c:3b:bf:
                    c1:fe:35:c8:36:a5:f0:2b:b1:56:02:f7:b0:6d:9c:
                    ec:96:08:04:ef:7d:bb:6b:9a:f7:bf:46:f2:4f:aa:
                    13:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:06:88:F0:DF:F5:7E:23:95:31:81:57:7C:B8:5C:3C:13:71:31:20
            X509v3 Authority Key Identifier:
                keyid:23:7C:B7:F1:CD:45:AE:DD:61:C9:34:9F:41:1B:9C:9C:AF:0C:1D:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:09:e8:de:b7:82:d4:e4:e9:e1:f4:c5:7b:63:19:ac:f8:61:
         42:36:6b:04:88:da:fb:32:f1:7d:c2:ac:5d:23:6d:dd:c4:19:
         7f:c8:df:7a:2d:83:21:65:d7:6f:a6:02:b7:52:15:bf:a6:05:
         ae:1a:2c:43:f5:75:01:d1:ee:65:5a:5e:12:50:a3:74:65:bc:
         3b:8c:5e:f8:eb:1d:44:28:b7:26:e4:28:05:01:0c:1d:9e:65:
         a7:26:34:2a:72:c7:45:3c:de:a7:b3:6d:c5:f1:7d:22:42:c1:
         af:cc:ce:f8:1f:cc:e3:be:f4:7f:b3:7f:bd:4e:90:24:66:f4:
         1a:20:70:a8:b9:38:f7:7c:a4:b8:d6:55:bd:f3:1e:06:23:dc:
         b0:ed:18:4f:c6:ce:8c:18:ac:04:00:26:6a:de:f0:02:46:5c:
         7b:88:96:c2:44:73:c8:6c:57:7b:56:5a:94:97:ff:69:cf:f6:
         16:42:03:95:cf:24:be:9e:e1:47:02:ef:5e:b4:3a:4b:1e:cc:
         76:ac:c9:17:4d:ce:da:00:16:e3:80:10:0e:29:a0:10:24:66:
         a5:1c:95:56:8d:d4:f6:f1:75:be:3e:58:e9:d2:05:fb:b4:36:
         20:0a:3b:81:58:c4:9e:c3:3b:6a:9e:87:58:7e:07:99:75:90:
         e0:93:7e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 12:49:31 2026 by rpki-client