Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft
File:                     95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft (raw, json)
Hash identifier:          DduUq2dhe3M3QQXPWBjhv/jgTIJa07yCCMwGnDaKRAE=
Subject key identifier:   C1:F8:0B:6E:B5:02:30:C2:13:B4:9F:B5:01:83:D5:30:B7:89:93:3D
Authority key identifier: 95:B2:CF:7C:56:35:CD:91:2B:BD:7A:8D:ED:18:4C:C3:98:CB:E3:07
Certificate issuer:       /CN=95B2CF7C5635CD912BBD7A8DED184CC398CBE307
Certificate serial:       37838E4DDAB321D119FEFEFCA57308CCE22C3A7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft
Manifest number:          040B
Signing time:             Sun 24 May 2026 01:32:20 +0000
Manifest this update:     Sun 24 May 2026 01:27:20 +0000
Manifest next update:     Mon 25 May 2026 02:11:20 +0000
Files and hashes:         1: 323830343a373366383a3a2f33322d3332203d3e20323730393439.roa (hash: JQ5SVQoYS1TJdeiD3c7cXwL9TNeI4YdTtRuu8ewxifc=)
                          2: 95B2CF7C5635CD912BBD7A8DED184CC398CBE307.crl (hash: VEVcjCkEwF2UtJfuLg3LaCtAdoQed4gVA63hTBSJLEM=)
                          3: 3134332e3133372e33362e302f32322d3232203d3e20323730393439.roa (hash: hORhhEUZHV6EWha9xU6cjOFONpcXr+/pqPHfPPZKfm4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.crl
                          rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 02:11:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:83:8e:4d:da:b3:21:d1:19:fe:fe:fc:a5:73:08:cc:e2:2c:3a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95B2CF7C5635CD912BBD7A8DED184CC398CBE307
        Validity
            Not Before: May 24 01:27:20 2026 GMT
            Not After : May 25 02:11:20 2026 GMT
        Subject: CN=C1F80B6EB50230C213B49FB50183D530B789933D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ae:61:eb:c1:1b:87:8b:23:fa:9f:b5:53:a5:
                    4b:33:67:07:cf:0f:f0:f6:db:1a:83:d6:33:02:26:
                    50:34:fd:fe:79:ee:62:39:80:71:5a:73:44:ee:81:
                    f3:8e:ef:a2:78:1c:d7:cb:fa:c9:bc:1b:51:fc:a3:
                    b2:1b:cf:5c:bf:b9:91:40:2c:91:3c:cc:fc:48:62:
                    20:97:8e:c0:50:9f:fa:69:74:0b:8a:7a:cd:70:ab:
                    3d:bc:87:db:76:fe:fa:a1:6c:86:c6:2a:25:c0:1e:
                    b4:7f:e3:4b:30:a6:cc:b4:ff:90:c7:dd:5c:8e:ea:
                    b2:cc:da:2c:5c:a8:35:8e:ac:75:fb:e1:0c:e0:17:
                    10:e3:e5:a4:87:72:17:83:5f:78:06:9c:05:11:f0:
                    66:45:49:63:fd:59:ca:67:e8:33:59:08:2d:29:0f:
                    78:01:1b:cb:c3:e2:dd:a8:69:7f:e8:28:28:02:7d:
                    93:a4:7a:af:97:b0:04:b3:62:d5:f0:c9:97:9d:05:
                    69:a9:55:59:9d:16:47:b2:a9:7d:0f:2c:04:8f:2a:
                    e5:32:ed:04:d9:97:8b:c4:f3:23:1c:7e:a5:b8:9d:
                    d6:8a:29:55:36:b4:98:7d:b0:4c:f6:4c:85:8a:bb:
                    0c:35:79:92:7c:99:45:22:18:22:2c:5a:8f:cf:04:
                    20:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F8:0B:6E:B5:02:30:C2:13:B4:9F:B5:01:83:D5:30:B7:89:93:3D
            X509v3 Authority Key Identifier:
                keyid:95:B2:CF:7C:56:35:CD:91:2B:BD:7A:8D:ED:18:4C:C3:98:CB:E3:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:70:53:1f:f9:34:2b:89:87:5e:cd:13:4e:53:7d:bd:b5:b0:
         7d:8d:fe:2e:c5:93:70:bc:cc:94:71:e1:a6:56:c5:e7:40:fd:
         80:7d:d8:8e:0f:65:b0:00:d1:e3:eb:78:78:b6:8d:43:b4:b2:
         20:f2:dc:cc:20:ae:a3:9d:97:4f:08:e9:03:99:03:01:81:ae:
         d1:be:fc:aa:1b:16:7e:6d:87:15:be:f0:7a:b3:f2:00:dc:fa:
         06:ae:1d:00:36:ec:b7:7c:c0:bc:26:95:07:57:53:f8:6e:2d:
         fd:75:24:54:aa:d8:79:7c:03:29:2c:11:6b:52:84:1f:d5:1c:
         5e:12:ab:9b:fd:32:0c:b7:90:8b:3c:ff:a5:08:29:e8:c3:cc:
         59:13:1a:8d:86:c5:e0:4d:d6:61:e9:f2:9c:8d:1f:47:01:e4:
         2c:e8:6b:58:c0:33:73:f4:07:38:ba:96:5a:c5:43:8f:19:50:
         78:67:ce:d7:2b:4d:39:bf:a6:b3:80:60:73:13:2b:27:77:7d:
         5a:72:8c:82:64:3e:4d:cd:dd:f3:29:c6:07:93:0d:9f:c2:5a:
         a6:9c:07:db:7f:43:0c:aa:2e:09:bc:e9:2f:08:95:a2:b8:f6:
         1e:4e:26:b8:de:58:c2:7a:f8:45:9f:81:2a:92:8b:6f:22:fb:
         eb:ed:c4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 13:37:41 2026 by rpki-client