Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/A97765788ABBF9CF9F38CFF907138FBAE29C9607.mft
File:                     A97765788ABBF9CF9F38CFF907138FBAE29C9607.mft (raw, json)
Hash identifier:          d5Tso1pkN6AO5H0H4e8P+wa0Rwq7FAdrEgoSwgA8zB0=
Subject key identifier:   C1:AA:5A:AC:72:49:9D:50:2E:24:C4:84:33:07:5F:CE:7B:FC:D2:1B
Authority key identifier: A9:77:65:78:8A:BB:F9:CF:9F:38:CF:F9:07:13:8F:BA:E2:9C:96:07
Certificate issuer:       /CN=A97765788ABBF9CF9F38CFF907138FBAE29C9607
Certificate serial:       3BB62CEC2E59696BF1C56694A41B0F988E89FDBC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A97765788ABBF9CF9F38CFF907138FBAE29C9607.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/A97765788ABBF9CF9F38CFF907138FBAE29C9607.mft
Manifest number:          52
Signing time:             Tue 27 Oct 2026 15:55:51 +0000
Manifest this update:     Tue 27 Oct 2026 15:50:51 +0000
Manifest next update:     Wed 28 Oct 2026 19:43:51 +0000
Files and hashes:         1: 34352e3137312e31382e302f32342d3234203d3e20323638313831.roa (hash: 2xZ6f8licPKZN8HjAZ6LYkJH4paB6xtcY0S1ND1oRQY=)
                          2: 34352e3137312e31362e302f32332d3233203d3e20323638313831.roa (hash: FdBdwU/n9JawoRw4eXvf6ovePqNnMdPh/3kLmZpQrM0=)
                          3: 323830343a353934383a3a2f33322d3332203d3e20323638313831.roa (hash: tordLdfSPY/TsAEGrpNnLj2I2gTFnUFq1OxqhuGQio4=)
                          4: 34352e3137312e31362e302f32342d3234203d3e20323638313831.roa (hash: HXVZ+nq/8qA+MRp7WOSzg9zbOtvgYNZdsaFrEZ3kXLE=)
                          5: 34352e3137312e31372e302f32342d3234203d3e20323638313831.roa (hash: OwPdljTSyfAiT9kmulHzFCTC5RjM8P3fypRZLkYr81E=)
                          6: 34352e3137312e31392e302f32342d3234203d3e20323638313831.roa (hash: 14JNPLlGNe4bCAFFnTkQkEvPJfNnZh/7wEKHWuKM5LU=)
                          7: A97765788ABBF9CF9F38CFF907138FBAE29C9607.crl (hash: VHQQIEEXHGU+lyKCNfSwnzhjkupiy7rNkOasMQ1Uxz0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/A97765788ABBF9CF9F38CFF907138FBAE29C9607.crl
                          rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/A97765788ABBF9CF9F38CFF907138FBAE29C9607.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A97765788ABBF9CF9F38CFF907138FBAE29C9607.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 19:43:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b6:2c:ec:2e:59:69:6b:f1:c5:66:94:a4:1b:0f:98:8e:89:fd:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A97765788ABBF9CF9F38CFF907138FBAE29C9607
        Validity
            Not Before: Oct 27 15:50:51 2026 GMT
            Not After : Oct 28 19:43:51 2026 GMT
        Subject: CN=C1AA5AAC72499D502E24C48433075FCE7BFCD21B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a6:bd:cb:53:46:11:95:83:9d:0f:33:56:e2:
                    04:b2:5d:ff:66:e6:cb:a5:fb:d3:d6:b1:7c:a7:e4:
                    c9:13:27:b7:fe:7d:c6:ec:ee:66:5d:8b:cf:ec:20:
                    9e:32:a8:36:a5:f1:57:0d:ac:1e:85:3f:1f:0f:59:
                    c5:48:90:74:57:ba:26:aa:85:20:ed:20:e2:ed:5a:
                    4c:16:6d:12:4d:98:bd:9d:a1:af:39:ec:91:46:ce:
                    8a:15:4c:e2:50:09:ad:ef:12:cd:9e:f0:9b:d5:43:
                    f3:82:30:8d:76:89:c0:b4:d5:61:10:ba:37:e7:64:
                    f3:20:1f:2a:2e:d6:27:c1:d8:bb:59:c3:41:f5:55:
                    97:07:d9:cc:c2:db:ef:90:a0:dd:ce:11:67:2c:6f:
                    f9:d6:6e:e3:ce:dd:3f:3b:40:09:f8:24:35:a2:d5:
                    2d:b0:c2:76:20:ad:c3:29:7b:b4:00:af:02:de:cf:
                    49:15:52:0c:70:2c:2f:b1:68:5f:09:da:9d:b8:75:
                    f6:b9:8c:85:d8:d4:54:20:28:b4:4c:6b:c1:df:96:
                    fd:96:06:0a:96:9f:98:8b:26:61:a4:80:24:de:bd:
                    a1:bd:18:d6:44:89:6c:ca:6d:fd:7d:19:6c:ac:ea:
                    ff:11:0e:a2:21:e8:3c:da:24:49:e7:0f:b3:82:62:
                    1c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AA:5A:AC:72:49:9D:50:2E:24:C4:84:33:07:5F:CE:7B:FC:D2:1B
            X509v3 Authority Key Identifier:
                keyid:A9:77:65:78:8A:BB:F9:CF:9F:38:CF:F9:07:13:8F:BA:E2:9C:96:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/A97765788ABBF9CF9F38CFF907138FBAE29C9607.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A97765788ABBF9CF9F38CFF907138FBAE29C9607.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/A97765788ABBF9CF9F38CFF907138FBAE29C9607.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:e7:69:5e:3f:c7:58:3f:3c:6a:1e:ac:d3:cb:43:5d:7b:b1:
         cf:2c:e6:3e:a0:00:26:38:15:fc:6f:0f:6a:4e:38:2c:67:c3:
         8c:5b:8b:92:a8:29:c7:e4:30:1a:42:88:ba:68:d9:9a:3f:20:
         01:4e:b9:81:ab:3b:84:6c:99:9b:fd:b7:22:be:c4:e0:58:67:
         c7:e8:d0:e2:36:29:95:02:34:e0:7d:37:e5:e5:f8:8c:36:0a:
         66:1d:01:dd:c0:96:f5:84:48:f3:37:56:90:06:74:0a:95:74:
         c4:c1:c5:6e:9a:5d:46:e3:66:a3:28:c3:00:02:d0:9c:18:8d:
         d1:16:e3:7d:68:56:27:c1:13:0c:1c:74:20:1e:f6:41:bb:c6:
         c8:af:2f:26:d4:d3:a9:b8:46:60:87:f7:1c:85:87:ac:14:e8:
         57:a4:8b:4f:53:39:de:39:3d:08:8c:de:33:6f:f7:c0:e1:65:
         d6:d9:48:08:49:28:a4:6d:67:9d:aa:fb:e2:15:6c:60:e3:fd:
         51:0c:0e:6d:f4:b5:ae:6c:ab:84:05:11:83:41:97:c2:5c:7f:
         b1:8d:2c:41:19:7c:76:22:4e:aa:f7:73:d4:b8:7a:f5:dd:da:
         42:71:e5:1a:dc:22:47:60:b2:b8:25:1b:89:c0:fc:3a:0f:84:
         37:87:c9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 10:27:08 2026 by rpki-client