Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft
File:                     954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft (raw, json)
Hash identifier:          C5w7oMDikWZDJYfunFB2hbiUjB/W42RH3rDttXK0ahw=
Subject key identifier:   95:94:BC:E9:7D:DE:DF:E4:66:1E:A4:04:B2:23:82:E7:DE:4E:DF:58
Authority key identifier: 95:4C:9D:B1:28:5C:0B:22:F0:BA:C0:FE:38:F7:4F:0F:D2:27:87:44
Certificate issuer:       /CN=954C9DB1285C0B22F0BAC0FE38F74F0FD2278744
Certificate serial:       5A307D0E08BC9F95ED2EB357B6DCD3CD7579227B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft
Manifest number:          039D
Signing time:             Mon 02 Mar 2026 14:06:21 +0000
Manifest this update:     Mon 02 Mar 2026 14:01:21 +0000
Manifest next update:     Tue 03 Mar 2026 16:20:21 +0000
Files and hashes:         1: 3230312e37312e372e302f32342d3234203d3e20323730323832.roa (hash: SX5RU2LPuWHAIi92bTf0pJAKq912WRjWvuPUr+KGjjE=)
                          2: 3230312e37312e352e302f32342d3234203d3e20323730323832.roa (hash: GLg2A2guXRKI5hgYOXafpggFO7WhdO5GN/yUMIsCxKw=)
                          3: 3230312e37312e342e302f32342d3234203d3e20323730323832.roa (hash: 7ef6MTIGvzZEmcBuUoSKVpmybb4snnDytulBwSG3gUU=)
                          4: 954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl (hash: rRScyEzmK9QVST6R/i11N57Ln2csy5LH9OMiTmM1Ufc=)
                          5: 3230312e37312e362e302f32342d3234203d3e20323730323832.roa (hash: cgty3y+WXB77fKXgspObQAAIy86k6JD4z/lljwnVAH0=)
                          6: 323830343a363961343a633030303a3a2f33342d3334203d3e20323730323832.roa (hash: 58YtV/EyutYvuD7ax99x1jtrrKvHc6DLEIj1RSU1WxY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl
                          rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 16:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:30:7d:0e:08:bc:9f:95:ed:2e:b3:57:b6:dc:d3:cd:75:79:22:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=954C9DB1285C0B22F0BAC0FE38F74F0FD2278744
        Validity
            Not Before: Mar  2 14:01:21 2026 GMT
            Not After : Mar  3 16:20:21 2026 GMT
        Subject: CN=9594BCE97DDEDFE4661EA404B22382E7DE4EDF58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ff:0f:5f:ff:7d:2f:70:5f:4c:1f:06:42:3c:
                    b4:db:14:6a:b4:dd:97:d3:02:c2:49:82:02:be:43:
                    46:e0:45:10:88:5c:09:a2:fc:15:4e:b9:1f:c4:4d:
                    63:7d:fc:a8:29:f2:55:4b:e1:cd:a6:3f:61:18:47:
                    ea:d1:e0:75:17:1f:55:6c:7e:ca:b6:bf:b1:be:34:
                    d4:96:f5:7b:38:2d:fc:63:e1:e0:09:a4:df:2f:00:
                    fa:3b:e9:32:8b:f9:1f:18:f1:6f:bb:6b:71:e0:1c:
                    d6:1f:38:0a:f8:09:7b:6b:3a:04:9b:56:eb:f9:d8:
                    7b:66:33:e6:33:7e:dc:44:ef:a2:e5:b6:93:94:46:
                    26:bc:ba:e2:b0:58:a3:e7:2b:24:6c:25:1c:65:92:
                    71:47:6c:15:04:2a:c2:ae:e1:7e:96:e2:5c:d7:ec:
                    eb:8f:ea:83:29:a5:f4:06:17:bf:ea:76:ce:51:a5:
                    27:6c:97:c3:9d:35:2d:ad:df:a1:d8:12:5b:8b:6a:
                    c2:28:33:32:56:27:c0:68:df:73:56:1b:50:5a:53:
                    c1:18:82:ee:b0:85:2e:ca:45:10:4e:d4:b6:91:fb:
                    26:45:b6:5c:5e:1b:da:77:f3:de:b3:bd:2d:7a:a5:
                    39:ba:06:28:8c:e4:c0:e8:8c:1f:66:5e:7a:0a:b5:
                    a2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:94:BC:E9:7D:DE:DF:E4:66:1E:A4:04:B2:23:82:E7:DE:4E:DF:58
            X509v3 Authority Key Identifier:
                keyid:95:4C:9D:B1:28:5C:0B:22:F0:BA:C0:FE:38:F7:4F:0F:D2:27:87:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:d1:3a:5f:89:4c:71:01:03:fe:59:b6:ab:25:a6:c4:f4:a9:
         14:f7:f7:28:4f:68:e7:c5:6c:e4:0a:be:55:3b:83:62:e5:82:
         d8:c1:92:db:c1:01:73:de:19:37:b5:00:1f:81:99:8e:57:9c:
         f8:54:2c:04:8d:11:47:18:e6:8e:c3:a3:4c:7f:f6:e7:39:88:
         f7:d2:aa:2a:63:e3:42:75:36:12:1e:6b:a2:43:d2:a6:35:9e:
         70:40:0e:01:94:8a:32:e1:77:cd:d4:d7:93:65:89:14:09:4b:
         26:52:36:7d:11:cc:81:37:23:f1:db:e2:e6:23:94:fa:bd:dc:
         0d:bc:d6:94:ae:99:69:15:ff:90:4f:5b:f0:a1:53:c2:cf:99:
         ff:47:b9:48:67:d4:e8:b7:a7:ed:bc:1b:a6:14:7e:96:8e:8c:
         29:b3:c0:bb:ba:c6:2e:c6:3a:99:b5:0d:33:5c:80:db:a0:34:
         56:6c:c5:1f:bc:cd:2d:f7:20:b0:27:c6:74:30:51:2b:a6:56:
         25:0d:ec:cc:2e:d3:39:12:32:1e:7b:59:9f:27:d5:a3:a4:f2:
         6b:82:c1:d9:86:b7:4b:2c:18:bc:65:08:0c:bf:fb:c8:ba:86:
         eb:33:85:27:60:27:fa:3e:87:ce:b0:e9:d2:54:9b:77:31:17:
         41:16:57:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:17:42 2026 by rpki-client