Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft
File:                     1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft (raw, json)
Hash identifier:          GqgzbkxQhr5K71NVX3NQWRgvZbg31YVhthwZFhMlGxs=
Subject key identifier:   F5:82:1B:45:84:F8:E7:2E:8A:8D:03:8E:40:6A:45:3E:5E:FC:31:BE
Authority key identifier: 1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89
Certificate issuer:       /CN=1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789
Certificate serial:       652243F8BC7B4804A25B783358A26CAF0C5750A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft
Manifest number:          01A6
Signing time:             Sun 01 Mar 2026 14:10:53 +0000
Manifest this update:     Sun 01 Mar 2026 14:05:53 +0000
Manifest next update:     Mon 02 Mar 2026 15:16:53 +0000
Files and hashes:         1: 3137302e37382e3132302e302f32322d3234203d3e20323634303039.roa (hash: 1opYPtLVmJbgysJRSAW69AB3hcLNgtJAvVFzTTA/ISk=)
                          2: 3134332e302e3134302e302f32342d3234203d3e20323634303039.roa (hash: ADREfT9MheCE1Wjv94Tw9CnUHlS1l0PQ8XXqstyqAiQ=)
                          3: 3134332e302e3134322e302f32342d3234203d3e20323634303039.roa (hash: L29rQu6A2D/GRscHMRxgKff1Mj4otpbS7jgvNTfbqrM=)
                          4: 1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl (hash: zpyinSDx8vsgeoN0sh+GcyZwO9ar/p10mVvZc8Y90ss=)
                          5: 3134332e302e3134302e302f32322d3232203d3e20323634303039.roa (hash: afJLR8PlUzFskdzVHFBs/+9++T5DKH+kQFl0KIelOiE=)
                          6: 3134332e302e3134332e302f32342d3234203d3e20323634303039.roa (hash: mEuK5L8cqAFP2ipXml/u6wiIus3ycpeZ8oNcV0ag2qo=)
                          7: 323830343a323935343a3a2f33322d3332203d3e20323634303039.roa (hash: ZirqTWq7d7/lwQgHJx1DD+FiioGP1qk31ScfgX+AtN4=)
                          8: 3134332e302e3134312e302f32342d3234203d3e20323634303039.roa (hash: VeR/O+9Gf+ayE3m4Vl1nJkDnw89kGLb98SbW5qArQ/c=)
                          9: 3136382e3232372e3133322e302f32322d3234203d3e20323634303039.roa (hash: hVKZtPo2uOTvKf5GK1oLTTBexTI84WAT9zQJ3UV58/E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl
                          rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 15:16:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:22:43:f8:bc:7b:48:04:a2:5b:78:33:58:a2:6c:af:0c:57:50:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789
        Validity
            Not Before: Mar  1 14:05:53 2026 GMT
            Not After : Mar  2 15:16:53 2026 GMT
        Subject: CN=F5821B4584F8E72E8A8D038E406A453E5EFC31BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ac:b7:ff:13:92:c4:b3:93:6d:b4:81:1c:f5:
                    5c:ad:02:25:52:15:30:34:86:54:87:3c:a3:9a:36:
                    c7:fb:99:42:3c:4a:93:2d:a3:95:f2:5f:47:e1:a2:
                    36:d1:66:56:cd:eb:2d:65:d5:9c:10:20:8e:89:9b:
                    2e:b3:c1:c9:05:6f:cb:54:5e:b9:54:25:33:5b:68:
                    39:ce:eb:93:9b:08:6e:43:24:d6:91:6a:f6:da:a5:
                    1c:4d:14:33:cd:b0:a9:e5:61:cb:ef:81:70:35:7c:
                    a2:11:f8:d8:22:82:37:4f:21:7d:e9:69:15:d3:50:
                    7a:38:0f:b4:cd:d4:d4:b0:27:93:f3:d2:46:b9:94:
                    2d:db:50:42:fa:32:aa:00:db:c2:4b:5b:9a:ae:ec:
                    55:68:4e:c7:60:24:4f:e5:a0:c5:e5:76:71:95:5f:
                    17:c6:f7:a2:93:05:6b:53:d3:73:a4:5a:ef:e1:b7:
                    1b:ed:7f:18:0f:b0:21:9f:88:c3:ce:39:74:c0:b9:
                    1d:7e:73:9a:d6:8e:d3:a6:76:fd:6f:70:5c:8d:c0:
                    f7:f1:ef:03:cc:fe:e0:65:f5:df:24:56:76:a2:a4:
                    68:fc:23:20:b8:78:9b:c6:08:d7:17:fe:67:6b:0a:
                    2a:e7:ac:af:83:d6:51:32:d2:08:ba:7c:85:2a:52:
                    ff:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:82:1B:45:84:F8:E7:2E:8A:8D:03:8E:40:6A:45:3E:5E:FC:31:BE
            X509v3 Authority Key Identifier:
                keyid:1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:f1:be:e7:d3:87:f5:8c:94:85:a3:f8:ec:a3:64:e6:e6:c3:
         e0:64:19:46:fe:c5:65:04:4f:db:34:2f:e1:c9:d8:a0:8a:c3:
         35:07:b2:84:49:d9:17:69:29:e0:ec:dd:3a:a0:e4:35:61:c7:
         ff:6d:73:e0:b3:ac:7a:0f:a6:25:80:7e:fd:14:a9:f7:6c:ab:
         37:c8:2c:a7:eb:2f:6e:20:75:85:3b:ee:41:b4:97:ce:02:ec:
         d4:84:00:7a:b8:31:d9:15:72:0a:45:c7:bc:0b:bf:5a:26:2f:
         85:65:bb:18:6b:62:85:b3:33:97:04:f7:66:02:6f:87:b4:bf:
         67:62:06:6f:1c:63:e8:97:78:b5:58:69:f0:11:fd:b8:7b:2b:
         c1:e0:dc:b1:3b:cc:e3:a5:0e:63:5d:52:14:29:fd:bb:22:96:
         a5:ab:28:67:6b:67:8d:bf:5b:b0:ea:28:38:39:55:02:17:93:
         f6:02:02:dc:78:d0:67:da:64:28:c1:1d:1a:54:23:3d:45:41:
         0a:1e:a5:e5:e9:de:de:ac:cd:d1:81:05:41:2f:8d:7f:bd:14:
         f2:96:02:d3:8e:d0:a6:43:db:cd:e5:1f:a2:6f:0e:9c:5f:e6:
         42:59:bd:50:dc:b9:cb:62:10:a5:f3:9a:81:93:d5:e3:bc:09:
         ca:d5:5e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:15:56 2026 by rpki-client