Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.mft
File:                     09B74F5AE0A9C9687059CF905757A70385D63DD2.mft (raw, json)
Hash identifier:          Czm4XRgcUo7NGLX5T9dlFFxJDAsjAZTCpYhECRUmxuo=
Subject key identifier:   03:C5:DA:49:A0:2C:CB:7D:B1:3E:5C:ED:58:A3:07:4F:94:F9:F9:08
Authority key identifier: 09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2
Certificate issuer:       /CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
Certificate serial:       68DE30926D68B573E74464EEC47789E4D01F5B39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.mft
Manifest number:          27
Signing time:             Sun 24 May 2026 06:29:22 +0000
Manifest this update:     Sun 24 May 2026 06:24:22 +0000
Manifest next update:     Mon 25 May 2026 09:25:22 +0000
Files and hashes:         1: 3230312e34392e3232342e302f32302d3231203d3e20323634383836.roa (hash: kVbUJV1x/I9iT55MHFWoNBO+6sztVhFF2FCtzNjUJdc=)
                          2: 323830343a326635633a3a2f33322d3438203d3e20323634383836.roa (hash: ezEBIBQi7ig1my0ZDB2nYtWc1DbtiNNyb3ckM480QP0=)
                          3: 3230312e34392e3233362e302f32322d3234203d3e20323634383836.roa (hash: XN9CCx0lFBew1qncC5wGxraVjsVHLo0ghIcjDF6grNM=)
                          4: 3230312e34392e3232342e302f32322d3234203d3e20323634383836.roa (hash: CEdWSjlE/XHqKiMxIuqM/ESkCVBt9RhP72uLKAxXgis=)
                          5: 3137392e3130382e34342e302f32322d3234203d3e20323634383836.roa (hash: WHR79WU0/ir8PEtMatEg5e3blddKwBK4zMFmKBwxHO0=)
                          6: 3136382e3232372e3138302e302f32322d3234203d3e20323634383836.roa (hash: 4wPTh/z3Jjb1oTVIxAP61tUwkh3sKcUvVQHC5yFt0E8=)
                          7: 3230312e34392e3233322e302f32322d3234203d3e20323634383836.roa (hash: JHcqknEMllxo36vXKR7p50d1kKE+yQGDGxhJU0ByG38=)
                          8: 09B74F5AE0A9C9687059CF905757A70385D63DD2.crl (hash: L2hI/J5sferHZ0ZPQTk10ogLMyhp6xqa73AQ3B4fXV0=)
                          9: 3230312e34392e3232382e302f32322d3234203d3e20323634383836.roa (hash: RrfUxkIbBtqt5d4wQ3is1XkcQsAxja2abiQNgxHH+zE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 09:25:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:de:30:92:6d:68:b5:73:e7:44:64:ee:c4:77:89:e4:d0:1f:5b:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
        Validity
            Not Before: May 24 06:24:22 2026 GMT
            Not After : May 25 09:25:22 2026 GMT
        Subject: CN=03C5DA49A02CCB7DB13E5CED58A3074F94F9F908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ec:4f:89:1d:fb:bb:15:77:2f:83:f0:e6:44:
                    49:12:bc:47:2f:6b:95:ac:d6:be:58:73:c2:49:f9:
                    66:70:b1:c4:46:2c:44:88:58:47:20:87:9c:80:4a:
                    b9:20:c7:8d:b0:44:1d:47:27:7d:8f:18:6e:9d:73:
                    75:e2:03:75:4d:99:e8:9a:8f:9e:d0:6a:18:19:6f:
                    d1:2c:49:75:28:fb:fa:2d:cd:8d:c0:8a:71:a9:6f:
                    7d:13:9a:90:d5:7f:7c:28:54:77:57:f3:e6:05:e4:
                    f9:f0:57:18:86:e2:21:f7:dd:38:ce:0f:a0:d3:22:
                    37:59:04:ba:c6:98:f4:41:72:9d:df:82:0c:8d:34:
                    aa:c9:33:59:0f:e4:84:d8:05:06:f8:2f:92:5b:75:
                    66:e5:28:34:97:a9:8f:3b:57:11:ef:90:0b:88:67:
                    c7:26:86:4d:8b:45:00:32:48:dd:e3:89:60:65:79:
                    d4:47:96:4f:f9:b0:5a:b3:84:45:28:f9:63:5d:63:
                    94:a7:fc:9a:30:ba:0e:5b:6b:6f:0d:df:22:3f:d0:
                    c3:55:b9:11:bd:38:1d:37:72:a4:6d:31:28:ae:ff:
                    ed:d5:cd:7b:06:3b:57:3f:bd:ff:e4:72:3b:a0:77:
                    aa:b0:9c:35:76:91:e5:e1:44:84:51:1c:b1:2f:9c:
                    4c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C5:DA:49:A0:2C:CB:7D:B1:3E:5C:ED:58:A3:07:4F:94:F9:F9:08
            X509v3 Authority Key Identifier:
                keyid:09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:6b:32:ce:f2:4f:28:a3:aa:89:c7:2f:16:66:e5:7f:0e:a3:
         fb:44:70:03:99:53:88:73:7b:c0:81:a1:19:59:0b:f3:4c:4f:
         4f:dd:19:d7:cf:04:39:e0:52:9c:0d:b5:29:9f:51:68:2b:ed:
         5c:3c:34:d9:ec:28:9a:1b:62:0c:a1:c3:ea:f2:a8:9c:2a:15:
         5b:76:21:5c:8a:2e:00:8b:27:5c:15:c1:24:0d:53:99:4f:fc:
         12:ff:30:de:6d:c0:26:3a:f8:3c:90:96:c9:83:a1:f8:dd:a1:
         1e:3a:75:d4:ab:c3:bb:54:47:ce:1a:29:a8:af:67:3a:ff:11:
         8b:11:6e:8c:b4:d1:c0:7a:41:bc:f2:ca:d0:e8:15:53:ba:51:
         88:94:35:65:6b:38:f8:e2:19:44:2c:1a:7b:fd:d7:30:03:08:
         87:57:34:b1:13:6a:88:10:4e:76:f0:3e:d8:32:98:3d:af:49:
         6a:90:5d:b2:4e:16:72:c4:7f:d6:33:11:45:50:b7:5a:ee:6b:
         d2:e4:59:3e:19:24:25:21:c1:f7:d5:90:67:7a:9e:e0:24:8e:
         50:c7:e6:1b:40:c1:75:e2:44:56:43:cd:72:38:c1:85:8e:1a:
         fa:48:84:cf:69:4e:11:d4:16:02:75:96:e3:5a:64:da:ef:35:
         20:d4:dd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 13:29:51 2026 by rpki-client