Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/DC39D96A742EE8C695115CC7A4D907F8D5BF3129.mft
File:                     DC39D96A742EE8C695115CC7A4D907F8D5BF3129.mft (raw, json)
Hash identifier:          O2O7RHlz3OeAFFcyhrPgkfaWh2hEskGG1sH70o1mYyc=
Subject key identifier:   FD:9B:BE:0C:1B:54:06:0C:D7:26:81:7C:E8:AC:29:DA:07:98:77:86
Authority key identifier: DC:39:D9:6A:74:2E:E8:C6:95:11:5C:C7:A4:D9:07:F8:D5:BF:31:29
Certificate issuer:       /CN=DC39D96A742EE8C695115CC7A4D907F8D5BF3129
Certificate serial:       0B0679B0D97CCDCE0BAC40E8F08708C73354BFA9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC39D96A742EE8C695115CC7A4D907F8D5BF3129.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/DC39D96A742EE8C695115CC7A4D907F8D5BF3129.mft
Manifest number:          7C
Signing time:             Fri 17 Apr 2026 15:58:03 +0000
Manifest this update:     Fri 17 Apr 2026 15:53:03 +0000
Manifest next update:     Sat 18 Apr 2026 19:57:03 +0000
Files and hashes:         1: 34352e36352e3138302e302f32342d3234203d3e20323636323636.roa (hash: qKjQHPcxuBUTVeXAbkiTpEmzZJDVQBxedmqiSyQj07U=)
                          2: 34352e36352e3138312e302f32342d3234203d3e20323636323636.roa (hash: 2fw3zPGlSiBl+yUthB7lq9RPosyAV9FJ21jSFcMUdUI=)
                          3: DC39D96A742EE8C695115CC7A4D907F8D5BF3129.crl (hash: baFUwMQYUTFkAybRC7Npc5dRrVGfLt71dCUPyB1HKQw=)
                          4: 34352e36352e3138332e302f32342d3234203d3e20323636323636.roa (hash: AkvRqwt6Hr5JCOogOXcObnbdi2tuTYD2wOWji8Yvz3U=)
                          5: 323830343a336434633a3a2f33322d3332203d3e20323636323636.roa (hash: CPXrH4FFOetIPWKLXFAdOTrfUR38Ch9JvlMw71b25YM=)
                          6: 34352e36352e3138322e302f32342d3234203d3e20323636323636.roa (hash: YflST/hD/V/cE7KI5XCRRTgsP7vEG8nWQ/BlwTWaSs8=)
                          7: 34352e36352e3138302e302f32322d3232203d3e20323636323636.roa (hash: +E0TDyTY4Nut5Ge7xTIQjgeaLQgekX1UMyT1K4o4sx8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/DC39D96A742EE8C695115CC7A4D907F8D5BF3129.crl
                          rsync://rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/DC39D96A742EE8C695115CC7A4D907F8D5BF3129.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC39D96A742EE8C695115CC7A4D907F8D5BF3129.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 19:57:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:06:79:b0:d9:7c:cd:ce:0b:ac:40:e8:f0:87:08:c7:33:54:bf:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC39D96A742EE8C695115CC7A4D907F8D5BF3129
        Validity
            Not Before: Apr 17 15:53:03 2026 GMT
            Not After : Apr 18 19:57:03 2026 GMT
        Subject: CN=FD9BBE0C1B54060CD726817CE8AC29DA07987786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:de:94:3d:ad:89:3f:ac:09:4b:c4:85:58:f2:
                    90:4c:e9:f7:a1:a4:b5:d9:22:6f:0a:cf:b6:94:8c:
                    d0:a3:75:3b:c6:7e:88:1b:0c:2c:fb:d1:12:8d:ad:
                    f5:99:c4:7d:db:4c:ce:ae:2b:a5:7b:89:f2:07:73:
                    4e:c9:ee:b3:0d:9d:6c:32:a4:6a:30:c3:d9:ed:69:
                    b0:53:87:e6:e8:a9:26:8f:0a:44:2f:69:de:5e:f4:
                    89:d5:c3:70:45:83:9d:f6:4f:cd:f6:31:10:bd:89:
                    f8:11:5e:07:11:0a:fc:2f:7d:0f:99:4b:d8:02:fd:
                    11:78:d1:e4:58:9e:cb:6a:b9:85:be:f5:80:a6:ed:
                    78:43:ed:5c:5f:86:5a:20:11:a3:e0:85:9a:8f:4c:
                    56:e1:9a:ed:4a:8d:e3:db:d7:8f:47:91:4b:b8:8e:
                    f1:5b:6e:1f:d9:00:4e:16:57:53:64:d8:30:a1:2d:
                    50:d3:b0:70:a9:49:41:ab:21:01:3e:16:63:cd:cc:
                    54:dd:63:b3:0d:90:c6:b7:7d:fd:e3:7e:ae:e2:8e:
                    03:4c:27:44:db:34:37:83:35:a9:24:e1:91:37:d7:
                    29:8a:5c:51:42:1c:63:3d:78:10:90:90:05:36:c3:
                    35:b3:31:1c:fe:50:c9:d0:ff:01:77:76:0d:72:0e:
                    1f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9B:BE:0C:1B:54:06:0C:D7:26:81:7C:E8:AC:29:DA:07:98:77:86
            X509v3 Authority Key Identifier:
                keyid:DC:39:D9:6A:74:2E:E8:C6:95:11:5C:C7:A4:D9:07:F8:D5:BF:31:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/DC39D96A742EE8C695115CC7A4D907F8D5BF3129.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC39D96A742EE8C695115CC7A4D907F8D5BF3129.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/DC39D96A742EE8C695115CC7A4D907F8D5BF3129.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:db:25:8b:2d:5a:93:4a:e1:f7:15:0c:9f:d3:c6:1c:5f:c2:
         8f:d7:76:09:34:86:38:d7:89:f4:eb:25:ea:74:f5:6e:bc:1a:
         fd:a2:01:49:5e:c6:74:9a:4b:1b:ae:e6:9c:2e:52:8a:9e:c0:
         a5:20:8b:95:b6:12:ff:31:91:4e:86:cc:01:a1:8a:2b:a0:57:
         ce:99:6d:6f:25:9e:16:db:ab:d1:d3:10:f4:76:de:10:96:5b:
         2b:06:b4:15:dd:c7:52:52:fd:83:a5:a6:8b:11:4c:14:e0:7b:
         55:87:c4:ad:36:6d:3e:67:c1:6b:65:92:9d:c0:72:63:5d:ea:
         f5:53:e5:34:61:2e:97:65:dd:0c:2a:f4:59:a7:8d:c2:a8:71:
         46:3d:eb:1a:5b:1f:2f:59:5e:b6:89:2b:24:b6:fc:70:68:38:
         fb:59:30:bb:ff:42:2e:6a:3d:d3:28:34:64:f1:bb:23:1a:53:
         37:a8:3d:dc:af:64:44:59:38:92:48:68:41:d1:10:7b:7f:9c:
         88:4d:eb:cb:52:e8:51:8e:15:38:4d:02:01:24:c2:2d:e9:40:
         c8:20:35:fc:ef:f1:78:7d:99:40:5e:48:71:8b:0c:84:87:00:
         cc:bf:40:8e:d1:15:57:e4:50:34:42:38:50:7b:5a:77:87:f3:
         87:a4:7b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:08:51 2026 by rpki-client