Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft
File:                     BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft (raw, json)
Hash identifier:          N+QrV33TID7uYFuiedx5LfH7PY6oafaKqkpsFJkY5+g=
Subject key identifier:   3C:16:63:08:29:E0:33:68:D9:71:F1:23:E1:91:42:AC:AE:11:37:9A
Authority key identifier: BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C
Certificate issuer:       /CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C
Certificate serial:       09AD8B263D02E3D7A60D64BBF122FF8F5E600125
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft
Manifest number:          0452
Signing time:             Tue 07 Jul 2026 22:53:14 +0000
Manifest this update:     Tue 07 Jul 2026 22:48:14 +0000
Manifest next update:     Thu 09 Jul 2026 00:58:14 +0000
Files and hashes:         1: 34352e3136322e3232342e302f32322d3332203d3e20323638353333.roa (hash: Jt3Cge+scyEkLAh6eKSsHK1dBdtzgPuunNy5Tm98HFs=)
                          2: 323830343a353261633a3a2f33322d313238203d3e20323638353333.roa (hash: mtS8+UNTVPWQJ/BGsdsyosrfEqOydb8rPqF5d/uVFWA=)
                          3: BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl (hash: 8lK9/TYgFZFgYrKuYY7Ys2sHaSfhTfv0uXj6yPLiyAM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl
                          rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 00:58:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ad:8b:26:3d:02:e3:d7:a6:0d:64:bb:f1:22:ff:8f:5e:60:01:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C
        Validity
            Not Before: Jul  7 22:48:14 2026 GMT
            Not After : Jul  9 00:58:14 2026 GMT
        Subject: CN=3C16630829E03368D971F123E19142ACAE11379A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:81:e7:2d:66:7c:0f:1e:95:e7:6a:9f:c7:f0:
                    fa:e7:33:4c:6d:40:97:87:a1:52:4f:69:e3:a1:df:
                    97:86:f6:ef:04:1e:73:2a:62:44:36:1c:a7:b4:af:
                    fa:a9:1a:8a:04:7f:7c:4d:47:eb:25:be:e0:f2:69:
                    72:b9:95:9b:3c:3d:7f:93:24:b7:c8:cb:39:c0:79:
                    63:6a:42:05:f7:65:4b:d9:85:e8:ad:78:f6:7b:35:
                    52:ba:14:f5:44:e7:f0:67:88:39:c6:62:0d:12:c9:
                    a1:3d:9e:81:e2:f6:c1:9a:23:af:d4:93:fa:64:f3:
                    59:74:fc:69:17:0a:f7:de:a0:9d:c6:1f:5b:00:72:
                    ad:ca:f4:97:29:2d:a2:dd:4d:6d:44:05:c9:b7:48:
                    7f:fc:18:1f:06:53:a3:b8:85:e6:d8:6f:df:f3:61:
                    6a:4f:7b:6b:d3:04:f0:cd:0e:63:11:b9:58:60:34:
                    e8:22:25:33:9f:0b:b0:86:74:12:df:13:6b:80:e6:
                    b3:ce:15:d6:a7:b5:94:d8:b3:41:cd:e4:20:d8:e0:
                    d1:91:88:8c:d9:ca:1e:92:9e:46:4c:b1:32:95:c0:
                    38:1b:fa:ed:81:c7:3a:de:16:be:1e:04:2e:c8:d9:
                    bd:89:d2:a3:ca:f8:87:84:56:9d:40:8f:7e:4b:6b:
                    27:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:16:63:08:29:E0:33:68:D9:71:F1:23:E1:91:42:AC:AE:11:37:9A
            X509v3 Authority Key Identifier:
                keyid:BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:da:d3:a0:fd:f4:d3:56:d4:d9:71:24:9d:8c:88:c6:d7:34:
         4c:96:70:0d:91:76:5e:91:a3:ef:fa:53:8c:a9:d0:cc:3a:49:
         06:39:45:61:72:be:c3:c7:e5:c5:9f:16:fb:b2:ad:58:e3:87:
         20:32:f6:41:46:d1:72:ee:c9:ae:60:71:d3:0d:47:04:4f:2f:
         2e:0c:95:9d:18:5b:27:9a:bd:04:c4:74:bb:29:9b:40:37:10:
         bc:2e:7b:b6:c0:6b:34:05:d2:d1:58:d6:9a:5b:be:3f:2f:89:
         06:7d:d4:cf:e8:03:dd:58:6d:1a:a7:74:58:23:a8:a3:70:2c:
         78:42:2a:1e:8f:65:19:05:93:51:8c:bd:88:57:e6:86:04:41:
         4d:ba:70:cb:50:f4:38:cb:7e:15:31:2e:fd:dd:f7:27:9a:8f:
         17:dd:45:4c:62:f9:7a:86:1d:93:0b:76:dd:b0:12:17:7d:0d:
         14:29:c5:7e:3c:a1:f3:7b:2b:d2:5d:13:60:84:92:90:a3:2b:
         76:e2:79:c7:7f:09:94:00:b5:74:0d:43:5d:e1:9b:72:b3:59:
         bd:09:d2:96:44:ab:c0:39:64:e8:6f:56:4c:50:09:d6:0f:18:
         fa:82:06:16:e1:78:80:2d:73:47:bb:e8:8a:d9:5b:bd:57:7e:
         58:d4:2d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 15:23:31 2026 by rpki-client