Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/FD40F939FDFBA0404DC8406B3AA4C7BC9CBC986C.mft
File:                     FD40F939FDFBA0404DC8406B3AA4C7BC9CBC986C.mft (raw, json)
Hash identifier:          sIV1hib+gsZQHl7qvYjbIyMntEcE8mLbkxuELkJeALI=
Subject key identifier:   CC:9D:D9:B0:51:29:DB:D8:2D:D7:89:F9:83:C2:5C:7A:0E:39:B2:60
Authority key identifier: FD:40:F9:39:FD:FB:A0:40:4D:C8:40:6B:3A:A4:C7:BC:9C:BC:98:6C
Certificate issuer:       /CN=FD40F939FDFBA0404DC8406B3AA4C7BC9CBC986C
Certificate serial:       052CA1CDC141B998B70C332CAC13974B9136FFC2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD40F939FDFBA0404DC8406B3AA4C7BC9CBC986C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/FD40F939FDFBA0404DC8406B3AA4C7BC9CBC986C.mft
Manifest number:          95
Signing time:             Sat 17 Oct 2026 09:02:51 +0000
Manifest this update:     Sat 17 Oct 2026 08:57:51 +0000
Manifest next update:     Sun 18 Oct 2026 12:09:51 +0000
Files and hashes:         1: 3137372e38362e31322e302f32322d3232203d3e203532353537.roa (hash: aPKdm/AOsBzYsLjZNoGUBZJ3yrB6KXn2ZjMLGWzdGyc=)
                          2: FD40F939FDFBA0404DC8406B3AA4C7BC9CBC986C.crl (hash: nrA4DDRd0lYYv0NwgYhOYE4+h/1qPe51tZZ/Pee5L1M=)
                          3: 323830343a6364303a3a2f33332d3333203d3e203532353537.roa (hash: f+kNTGY/buZdWSM1JF9WsaKPxX1bFiRvhzIs1O56LU0=)
                          4: 323830343a6364303a383030303a3a2f33332d3333203d3e203532353537.roa (hash: bzdPh+2IDbDwnOzzra5/IYDRAJCdInNDfSNp77cVvkM=)
                          5: 323830343a6364303a3a2f33322d3332203d3e203532353537.roa (hash: u9yVjyFuS3sUT0g8xi05OeD5u8gYgbxPapHqzOPPaP0=)
                          6: 3137372e38362e382e302f32322d3232203d3e203532353537.roa (hash: LWA/VeCAXndHBp1ioVImblBbaZbI9lDgi2a4VaAFyvs=)
                          7: 3137372e38362e382e302f32312d3231203d3e203532353537.roa (hash: i0JX6rbBfnS6R5zImfXXKCjPyiBPmmtJLw9/+D+NQ3c=)
                          8: 323830343a6364303a323030653a3a2f34382d3438203d3e203532353537.roa (hash: U6vNhjChjrASiyD0R+SWU9wcGGZgeroeib3+Cysu4lQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/FD40F939FDFBA0404DC8406B3AA4C7BC9CBC986C.crl
                          rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/FD40F939FDFBA0404DC8406B3AA4C7BC9CBC986C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD40F939FDFBA0404DC8406B3AA4C7BC9CBC986C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 12:09:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:2c:a1:cd:c1:41:b9:98:b7:0c:33:2c:ac:13:97:4b:91:36:ff:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD40F939FDFBA0404DC8406B3AA4C7BC9CBC986C
        Validity
            Not Before: Oct 17 08:57:51 2026 GMT
            Not After : Oct 18 12:09:51 2026 GMT
        Subject: CN=CC9DD9B05129DBD82DD789F983C25C7A0E39B260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1e:12:fe:70:4e:05:dd:c5:fd:4a:08:6f:3b:
                    c3:8a:f2:b9:2a:04:74:88:14:bf:25:e0:e8:06:81:
                    92:13:e2:e0:41:b2:40:79:03:b0:98:e6:c3:09:ab:
                    ec:b1:c0:f8:69:37:62:d2:c7:a1:9b:c2:27:f3:fd:
                    27:b1:85:d8:05:e4:08:2c:47:35:8e:1c:fa:a4:cf:
                    d6:95:5f:48:4a:64:50:9c:39:b3:07:9b:c1:63:51:
                    ea:9c:10:42:7d:94:18:f4:8d:38:31:6c:d0:30:00:
                    21:99:76:56:79:05:c1:dc:9f:26:32:35:8e:6b:f1:
                    9e:46:b1:b5:51:d0:53:bf:6b:68:a2:29:28:07:99:
                    29:35:ff:d6:12:93:f5:ac:20:8f:82:43:ca:63:0f:
                    1c:9f:00:85:89:f3:21:a1:35:f6:15:5d:00:66:23:
                    45:8e:11:dc:66:42:2e:bc:03:2c:b5:ee:db:17:ec:
                    d0:5c:da:f0:56:49:04:53:05:0e:50:8b:cf:9f:79:
                    c3:d4:e0:3f:a0:86:73:f8:17:7d:ee:0a:a4:d1:a4:
                    a1:52:7e:9c:bb:db:fb:b3:76:f4:8b:23:46:37:29:
                    a7:64:88:ae:79:45:7a:70:dc:ba:b0:7f:28:a5:46:
                    67:59:1c:76:5c:a3:ca:35:26:bc:42:57:67:fe:a0:
                    54:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:9D:D9:B0:51:29:DB:D8:2D:D7:89:F9:83:C2:5C:7A:0E:39:B2:60
            X509v3 Authority Key Identifier:
                keyid:FD:40:F9:39:FD:FB:A0:40:4D:C8:40:6B:3A:A4:C7:BC:9C:BC:98:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/FD40F939FDFBA0404DC8406B3AA4C7BC9CBC986C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD40F939FDFBA0404DC8406B3AA4C7BC9CBC986C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/FD40F939FDFBA0404DC8406B3AA4C7BC9CBC986C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:98:0e:01:38:17:bf:0d:a8:aa:9a:51:4f:98:2f:63:ac:6f:
         81:e8:43:99:b2:71:b9:0f:4b:04:f8:1e:80:39:da:ce:b8:ab:
         78:2b:3d:19:4c:12:a3:04:b9:4e:a7:0a:86:59:ef:15:60:da:
         ce:8e:82:67:2b:21:d4:33:3f:d7:42:14:95:6d:87:dd:28:bf:
         5b:46:45:c9:5f:2f:c7:0a:e8:fb:71:ca:84:40:07:c3:b7:ef:
         b5:46:87:63:d7:60:bc:14:b5:e2:51:c0:29:e4:58:3e:84:6a:
         00:76:8d:f1:c7:83:51:c5:de:b3:94:c2:57:c6:13:00:8f:12:
         85:b9:01:aa:e0:f9:a5:a7:9c:1d:7c:98:a3:20:db:14:90:44:
         e9:cc:23:16:d8:21:2a:c9:18:98:cb:55:5f:34:db:65:fa:7b:
         f0:40:fa:76:ff:94:c1:a4:4e:a9:f7:03:cc:f5:5d:f1:cf:5e:
         6c:6d:36:5f:c7:5f:41:2e:c0:f2:26:d4:85:db:7e:ac:d8:f0:
         0d:ad:e1:ca:5b:3c:85:2d:b5:50:7f:73:73:df:7e:43:dd:dd:
         21:0b:97:bf:85:3f:68:3f:f2:e3:46:5c:94:8e:d3:f9:ce:ec:
         80:a7:fd:b7:46:b8:9d:98:aa:17:66:42:8e:92:2f:28:54:f8:
         69:d6:ae:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 19:52:20 2026 by rpki-client