Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/97BD08F65EE9CED01EAC61A0D095B170713D00DD.mft
File:                     97BD08F65EE9CED01EAC61A0D095B170713D00DD.mft (raw, json)
Hash identifier:          bnY8L/6mnoUDKJqNCByFtIrqY23fNBmxK8s4Qt2gBh4=
Subject key identifier:   D4:41:F8:5D:C4:A7:E1:A7:D8:ED:9F:3F:E9:1F:D4:8C:1B:0E:EF:8B
Authority key identifier: 97:BD:08:F6:5E:E9:CE:D0:1E:AC:61:A0:D0:95:B1:70:71:3D:00:DD
Certificate issuer:       /CN=97BD08F65EE9CED01EAC61A0D095B170713D00DD
Certificate serial:       5BA1037987C38EBA5CFD6DD619A19CAE8FA1EBDB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97BD08F65EE9CED01EAC61A0D095B170713D00DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/97BD08F65EE9CED01EAC61A0D095B170713D00DD.mft
Manifest number:          B0
Signing time:             Fri 17 Apr 2026 15:35:08 +0000
Manifest this update:     Fri 17 Apr 2026 15:30:08 +0000
Manifest next update:     Sat 18 Apr 2026 16:47:08 +0000
Files and hashes:         1: 323830343a376537633a383430303a3a2f34302d3430203d3e20323731363237.roa (hash: arng9H8tohrkLJyfZy300ojfMOBufLHQdhz2X61KsRs=)
                          2: 323830343a376537633a383230303a3a2f34302d3430203d3e20323731363237.roa (hash: QaYh3mwhXojNNtJN6iqkTIbMki9gC/4nc0Z5vqen9/U=)
                          3: 34352e3137382e38322e302f32342d3234203d3e20323731363237.roa (hash: qZl96t5+ZO/nqTc7g9Amf5WR3Is/v8wxMRh3titJIjA=)
                          4: 34352e3137382e38332e302f32342d3234203d3e20323731363237.roa (hash: ToCkVPZLKS36J0ZVLdNQDr7neEMELUW/vvSpYabIiiE=)
                          5: 97BD08F65EE9CED01EAC61A0D095B170713D00DD.crl (hash: 63R4NDDY4Wut8FcI7umOLqcBDczl//OAlbAkjtxrol0=)
                          6: 323830343a376537633a383130303a3a2f34302d3430203d3e20323731363237.roa (hash: ABcYCWExk1a9/ILR4V7guGdM2eTmR4SJfj/zOR6kBQ4=)
                          7: 323830343a376537633a383030303a3a2f33332d3333203d3e20323731363237.roa (hash: Ge3TVmUOMYKLtMx7w2rpaamG3yXOKu/zpy9KiCH8L4M=)
                          8: 34352e3137382e38322e302f32332d3233203d3e20323731363237.roa (hash: I0cf20RY35SBPbQga1MyoU+AEYm7ZqdbyjSzEL1LM/A=)
                          9: 323830343a376537633a383330303a3a2f34302d3430203d3e20323731363237.roa (hash: dr0kaJw/1x3zViNmb4QNYwwcvPCHwGYqKRssngw9gQY=)
                          10: 34352e3137382e38312e302f32342d3234203d3e20323731363237.roa (hash: 40TYMQPQmX5NgI0zGLTH5VqNIfr0MXZDkEMjRHkfjRg=)
                          11: 34352e3137382e38302e302f32342d3234203d3e20323731363237.roa (hash: vr8fz4SA92k3cLs7KPQKjKQlx73PD+Ew8g6rwcjmT7U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/97BD08F65EE9CED01EAC61A0D095B170713D00DD.crl
                          rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/97BD08F65EE9CED01EAC61A0D095B170713D00DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97BD08F65EE9CED01EAC61A0D095B170713D00DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 16:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a1:03:79:87:c3:8e:ba:5c:fd:6d:d6:19:a1:9c:ae:8f:a1:eb:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97BD08F65EE9CED01EAC61A0D095B170713D00DD
        Validity
            Not Before: Apr 17 15:30:08 2026 GMT
            Not After : Apr 18 16:47:08 2026 GMT
        Subject: CN=D441F85DC4A7E1A7D8ED9F3FE91FD48C1B0EEF8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:88:3e:10:27:f4:5a:ab:07:3c:b3:6b:ce:8e:
                    14:6d:96:9f:7d:50:19:7a:41:e5:1a:12:fc:29:ff:
                    62:f2:18:0e:10:74:d2:46:3b:34:43:15:67:bf:90:
                    45:16:38:39:f9:0e:af:1b:68:b8:2f:dd:5b:93:71:
                    24:03:ec:62:87:f7:51:62:95:50:1d:38:4f:2f:22:
                    14:75:1e:41:ca:75:44:15:32:7b:8c:f8:c9:fb:61:
                    34:c7:28:e4:62:10:af:99:f4:24:d0:7d:e9:d9:c6:
                    c4:35:09:36:7e:13:25:35:6f:a4:37:37:69:af:83:
                    02:a4:6a:51:53:02:d7:75:ac:3d:c0:64:a0:d6:b4:
                    95:a6:f5:e1:2e:8f:7f:dc:a4:9a:7f:fb:f0:63:a1:
                    66:da:24:8e:b2:04:2c:60:af:70:ba:9a:c3:12:38:
                    fc:20:99:01:57:73:8e:a8:b4:48:c1:be:3c:d3:10:
                    9a:d7:e6:bd:6a:4c:70:86:72:23:f0:1c:14:7e:f6:
                    b0:29:25:69:fa:3a:95:d2:e7:e6:63:6e:8f:f7:e4:
                    b2:a7:0f:3c:ba:8b:8d:20:4a:e9:df:ff:f3:d3:19:
                    53:ea:ae:a0:3e:47:8a:a1:91:c2:f3:a7:74:35:56:
                    af:db:d6:63:3d:fb:e3:52:16:5d:09:88:d1:e4:a9:
                    c7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:41:F8:5D:C4:A7:E1:A7:D8:ED:9F:3F:E9:1F:D4:8C:1B:0E:EF:8B
            X509v3 Authority Key Identifier:
                keyid:97:BD:08:F6:5E:E9:CE:D0:1E:AC:61:A0:D0:95:B1:70:71:3D:00:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/97BD08F65EE9CED01EAC61A0D095B170713D00DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97BD08F65EE9CED01EAC61A0D095B170713D00DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/97BD08F65EE9CED01EAC61A0D095B170713D00DD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:0b:67:a5:3e:21:cf:44:1d:f6:26:8a:7f:36:be:de:68:5d:
         2b:9d:f5:15:e4:89:22:82:6c:72:98:15:11:b5:83:a1:ef:9c:
         c6:cf:be:69:cd:16:ec:dc:d9:a7:13:6a:27:d8:c4:51:52:f3:
         31:e4:0d:28:01:bb:c2:b5:e9:79:5f:15:f2:05:3f:31:e5:d7:
         0f:95:9d:63:bf:b4:2f:c9:60:b4:32:73:f3:66:7d:a9:6e:6b:
         de:1c:f8:e5:1d:c5:15:c6:a1:c2:61:30:b1:f6:f7:7f:4e:ad:
         5e:24:52:d7:90:bc:8f:5a:37:2b:cc:84:5e:2a:54:df:84:e2:
         a0:b1:9b:b3:18:4f:f8:b9:32:33:62:61:b6:7d:9b:a8:bf:6b:
         0e:b1:ad:9c:a1:76:da:7d:0c:32:d8:8d:9d:e0:f5:40:52:78:
         08:27:75:bf:49:41:f4:ab:b0:81:09:99:55:dc:c5:06:86:9b:
         fb:7d:82:f8:12:2a:4d:89:aa:75:11:42:a7:cd:3c:b7:f4:9f:
         e0:ba:80:05:71:45:72:3b:a0:f4:4f:c9:5b:0c:01:5c:1e:34:
         68:0d:f8:a4:af:13:d5:38:71:85:55:f4:70:71:bc:d3:7e:92:
         ad:4d:c0:b5:0b:8b:2a:b3:8f:ec:86:65:df:9f:84:92:5e:0d:
         40:13:9c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:28:17 2026 by rpki-client