Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.mft
File:                     FDD143F62E397A87EC22FC239E7DA2435AD80D9E.mft (raw, json)
Hash identifier:          XW1o/p/1oCnjT6vPqT7euVu+pzdBz0PvS7col1vYEvk=
Subject key identifier:   A7:0A:16:21:BE:D9:59:B0:4B:5E:46:28:3D:58:90:61:DE:23:F3:B3
Authority key identifier: FD:D1:43:F6:2E:39:7A:87:EC:22:FC:23:9E:7D:A2:43:5A:D8:0D:9E
Certificate issuer:       /CN=FDD143F62E397A87EC22FC239E7DA2435AD80D9E
Certificate serial:       681C01980DD656D5213ED3F7D5B5648C967F281E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.mft
Manifest number:          01A0
Signing time:             Mon 02 Mar 2026 05:14:23 +0000
Manifest this update:     Mon 02 Mar 2026 05:09:23 +0000
Manifest next update:     Tue 03 Mar 2026 06:38:23 +0000
Files and hashes:         1: 34352e3138322e3234382e302f32322d3332203d3e20323639323435.roa (hash: E+cklEAbvkMVYK9jhvnpL60xDxOtgqMtgJs65eGmU7c=)
                          2: 323830343a363139633a3a2f33322d313238203d3e20323639323435.roa (hash: YKjIAqG1yuEFYMVP4xZkWKECjkHqyOHvad/Qpo5c/Co=)
                          3: FDD143F62E397A87EC22FC239E7DA2435AD80D9E.crl (hash: Q46M9Gaawmi7M+b+nARogxofI2aKOfKzI9BtkcO5KtY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.crl
                          rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 06:38:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:1c:01:98:0d:d6:56:d5:21:3e:d3:f7:d5:b5:64:8c:96:7f:28:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDD143F62E397A87EC22FC239E7DA2435AD80D9E
        Validity
            Not Before: Mar  2 05:09:23 2026 GMT
            Not After : Mar  3 06:38:23 2026 GMT
        Subject: CN=A70A1621BED959B04B5E46283D589061DE23F3B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:26:cb:e0:69:dd:53:40:d7:2e:24:07:89:1a:
                    91:fc:51:07:2c:b8:86:db:89:54:e9:4a:49:d5:e4:
                    9f:57:9a:63:70:95:d6:b5:89:92:69:bf:9a:e1:74:
                    5a:c4:6b:07:78:70:ce:25:6a:08:42:16:ab:3b:78:
                    14:b0:b2:c9:87:77:94:96:5e:42:98:8e:eb:7a:fc:
                    b2:6f:89:1e:71:c9:3f:bb:d8:06:4b:5c:88:49:02:
                    55:a4:61:6e:52:9e:69:f1:2b:47:b5:9a:3a:3d:32:
                    45:e1:9f:9f:7c:d2:68:a4:c3:d3:cd:58:e4:2b:7e:
                    12:1d:cb:b9:12:38:83:c8:26:5a:19:43:5f:76:d2:
                    a1:88:7e:78:b2:5b:45:ea:39:22:dd:5d:31:f1:f5:
                    6f:6f:39:35:74:f0:3a:fb:b7:2a:9e:d8:f6:81:28:
                    8a:4d:3e:45:1f:ea:23:e3:f2:a8:a2:32:8e:26:cc:
                    64:8e:08:7f:e7:d7:08:2a:b8:c8:3e:78:88:40:1e:
                    8f:25:1f:a4:b0:b7:40:ea:94:8c:d6:3a:b2:a6:e1:
                    02:eb:db:0d:50:50:a5:d1:74:79:c0:40:f7:62:d8:
                    d0:e6:98:3b:6d:d9:9a:63:12:31:ac:b2:49:d6:4d:
                    fe:8f:93:41:08:87:43:3f:d8:9c:46:b6:91:e5:78:
                    01:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:0A:16:21:BE:D9:59:B0:4B:5E:46:28:3D:58:90:61:DE:23:F3:B3
            X509v3 Authority Key Identifier:
                keyid:FD:D1:43:F6:2E:39:7A:87:EC:22:FC:23:9E:7D:A2:43:5A:D8:0D:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:df:ee:cf:6b:89:bc:93:d2:11:52:ae:9c:42:ec:da:25:43:
         ec:1f:dd:ef:59:e0:3d:f3:9e:55:6a:f9:fb:b8:c5:d4:7a:26:
         94:2f:57:32:2a:83:51:1b:d3:95:4b:a5:54:ae:b9:1b:27:fc:
         fe:c7:4a:41:ad:eb:6c:f8:f1:0e:0e:32:85:0b:49:09:e6:17:
         bc:41:1e:a7:ad:7d:e4:47:be:7a:04:53:95:ed:50:34:6f:5b:
         05:2a:a1:2e:8f:b3:60:37:ce:53:db:ea:d1:9c:d8:2f:c5:ef:
         b5:b7:42:38:98:72:85:b2:b0:24:10:a5:5f:a8:8c:cc:fd:ec:
         61:e6:6f:19:bb:b9:c2:46:23:87:14:ce:5a:d6:1b:57:3c:5f:
         a6:35:3e:fd:04:33:5f:ca:34:a2:f9:22:0f:ba:56:f0:0f:bb:
         e7:a8:5f:71:2b:24:cb:16:74:3e:bc:5e:10:02:52:3e:40:4c:
         1b:cd:be:b1:f7:69:71:c4:f1:25:4a:76:ab:95:ce:1d:86:e0:
         db:f5:19:6b:a9:7c:34:2d:10:76:d8:f9:33:5b:e1:68:26:a4:
         a0:0b:9f:7b:bd:86:8a:29:c3:7b:eb:c8:6d:92:b1:a2:7c:6f:
         1d:91:04:d0:61:6b:4a:0b:d8:e0:ed:ad:bb:ac:e5:5f:de:f4:
         fc:a8:4d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:35:18 2026 by rpki-client