Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft
File:                     67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft (raw, json)
Hash identifier:          dKbHXvblZlHJD2aa4p15bYKj5QyRYpHpJRaNHNEz9QM=
Subject key identifier:   0A:65:2E:99:E5:2F:D3:B5:10:58:B9:CC:2C:4C:43:F7:EC:A5:79:FA
Authority key identifier: 67:21:0E:55:22:F5:15:3F:DA:7A:73:E4:EE:2B:30:0B:C0:CC:9A:0B
Certificate issuer:       /CN=67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B
Certificate serial:       1C30248C6330DC77A0F41F69FF06AD1386F58CC2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft
Manifest number:          0418
Signing time:             Mon 02 Mar 2026 05:30:01 +0000
Manifest this update:     Mon 02 Mar 2026 05:25:01 +0000
Manifest next update:     Tue 03 Mar 2026 05:30:01 +0000
Files and hashes:         1: 34352e3136322e33362e302f32322d3234203d3e20323638343934.roa (hash: Lo8PbrecpCoK0GBUm97e5EPmV/3YQQ/fzWOGICbdPxM=)
                          2: 323830343a353231383a3a2f33322d3335203d3e20323638343934.roa (hash: R9L/kMmN7S/9lZVlWx9nyQOiSYfk/inspmGIL6RrUsQ=)
                          3: 67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl (hash: fuHkakcFSfjveN0TmTHq/wy+mcu7Tx2DRp2MSb9N7B4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl
                          rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 05:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:30:24:8c:63:30:dc:77:a0:f4:1f:69:ff:06:ad:13:86:f5:8c:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B
        Validity
            Not Before: Mar  2 05:25:01 2026 GMT
            Not After : Mar  3 05:30:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a7:20:9a:a4:bc:25:c4:67:ec:34:d8:b2:a4:
                    18:43:a1:ca:fb:bc:64:ae:92:3c:e3:f5:d3:c8:0c:
                    91:c3:23:19:34:4f:b2:ab:de:d9:d8:0b:c2:bd:fd:
                    c4:5a:c4:d0:f1:a9:71:5c:c2:1a:b2:d6:08:89:ae:
                    f0:cc:d2:89:a2:49:30:68:5f:39:bf:48:3e:9c:38:
                    b5:c7:83:00:e0:17:6f:56:6f:e0:18:d2:33:ec:96:
                    f7:52:7a:9a:a5:58:fa:2b:e1:6e:53:ff:84:e8:1b:
                    6c:79:4e:49:60:ff:44:a8:8a:ca:35:3b:70:30:4e:
                    92:79:ff:3e:99:a7:ab:38:3f:d3:fc:4e:96:7d:fd:
                    37:68:b5:87:2f:2b:cc:a9:f5:f3:1d:d8:ce:0d:40:
                    04:0a:2c:99:4e:9a:94:9e:db:aa:48:b0:9b:7c:28:
                    c3:07:5c:2a:05:3a:41:b5:5a:23:49:66:66:bf:8b:
                    63:f2:61:94:f7:59:83:3d:58:67:a7:e7:a1:41:c3:
                    a0:46:8a:3a:d3:9e:cd:a6:b7:48:b0:0c:af:00:93:
                    5b:e6:77:16:16:b0:62:aa:9d:0d:8e:fc:93:d6:77:
                    03:2c:b0:59:3f:6b:ea:4a:ea:4e:2a:24:f4:92:e0:
                    f6:f0:ae:2a:b7:30:85:59:e5:06:2e:2a:a7:b1:d4:
                    2a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:65:2E:99:E5:2F:D3:B5:10:58:B9:CC:2C:4C:43:F7:EC:A5:79:FA
            X509v3 Authority Key Identifier:
                keyid:67:21:0E:55:22:F5:15:3F:DA:7A:73:E4:EE:2B:30:0B:C0:CC:9A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:fe:80:b5:2a:c4:c0:fc:ac:75:d8:c8:3f:25:6f:bc:f9:65:
         07:99:a9:1b:1f:8d:d6:3c:57:da:45:fe:0e:9d:5e:6e:93:80:
         64:e8:c6:bc:d3:7d:db:03:11:7f:2e:27:7e:f7:d3:7a:a9:75:
         28:ce:99:12:02:af:d1:68:ed:87:24:55:51:28:40:5f:9e:9c:
         44:35:54:53:05:72:f0:bd:0c:fa:41:db:97:96:16:0d:4b:5f:
         04:72:7a:75:b3:19:b8:0d:e0:e4:a3:6f:d8:17:48:c2:6d:ee:
         f2:ba:b1:c7:59:b0:80:70:4a:4b:08:a1:1d:5c:1d:b5:b0:4a:
         75:83:af:2e:a3:ae:ea:7b:df:4c:0e:b5:76:25:cc:91:10:30:
         a9:b9:a0:77:12:6d:9b:a8:ba:ab:16:70:0e:7a:82:fd:f1:14:
         41:ea:4f:9b:eb:06:ed:b8:8d:67:8c:56:fc:2b:ac:cd:8f:38:
         b0:b2:83:ca:31:36:8c:3e:0d:8c:38:a9:3d:95:ba:29:e0:eb:
         fe:be:bf:7e:9b:9c:b6:4c:72:53:53:18:93:7c:2a:4d:af:84:
         f3:47:40:b8:87:ea:26:c7:76:59:39:b3:0c:60:b5:44:6e:09:
         0e:73:1d:95:1a:0e:4a:25:64:b0:45:29:d6:da:3f:d0:9f:96:
         91:13:08:7f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:53:01 2026 by rpki-client