Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
File:                     3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft (raw, json)
Hash identifier:          qd1ROoeUQ2kB0iSv+plhYFhWOmCDlRvcCI4U+7rGHQc=
Subject key identifier:   BF:FE:11:4C:4E:6C:13:9F:74:FF:D4:22:6F:11:66:D5:B8:87:87:FF
Authority key identifier: 3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0
Certificate issuer:       /CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
Certificate serial:       56AA461C68DE247B901A193CA55B77E77DBC28A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
Manifest number:          039A
Signing time:             Mon 02 Mar 2026 12:05:16 +0000
Manifest this update:     Mon 02 Mar 2026 12:00:15 +0000
Manifest next update:     Tue 03 Mar 2026 15:14:15 +0000
Files and hashes:         1: 34352e3138302e3138362e302f32332d3233203d3e20323639313435.roa (hash: boYO6tOGQgroLgW6ULNmJAn4NcrWCrbNrFuebeCiBpM=)
                          2: 34352e3138302e3138342e302f32332d3233203d3e20323639313435.roa (hash: a8haySQUKnVEPYwnbcI28rS2mFG3JY2FDkGLXbuMBEw=)
                          3: 323830343a363031383a3a2f33332d3333203d3e20323639313435.roa (hash: QNu3N4Q6fO05gIGJMeAaG22Ov/LtiCeuvFBnnuXQaow=)
                          4: 34352e3138302e3138342e302f32322d3232203d3e20323639313435.roa (hash: 3EpRMfCJQ/oplvoRy8WV3jeX247HTwGAj4R/48Hj6x4=)
                          5: 3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl (hash: eSxJ/X9Vg1lf5xwDletiKTLKkxED7E/LXhB6qAj6SH8=)
                          6: 323830343a363031383a3a2f33322d3332203d3e20323639313435.roa (hash: GEfn4Bl00zdhGTYrW9jbA0jPa3LwMFFlV00DI8uLXIg=)
                          7: 323830343a363031383a383030303a3a2f33332d3333203d3e20323639313435.roa (hash: KivaW3ZlK69l+y9q+bdg0FUrxGdXfuK1ZNEbBCDZre4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl
                          rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 15:14:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:aa:46:1c:68:de:24:7b:90:1a:19:3c:a5:5b:77:e7:7d:bc:28:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
        Validity
            Not Before: Mar  2 12:00:15 2026 GMT
            Not After : Mar  3 15:14:15 2026 GMT
        Subject: CN=BFFE114C4E6C139F74FFD4226F1166D5B88787FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2c:42:cc:27:1d:e7:a2:9a:91:21:e3:f7:7b:
                    06:b2:9d:e0:a9:90:4e:81:20:2c:1e:8f:df:cc:bd:
                    4c:c6:74:c5:2e:6e:c7:24:7a:e4:51:85:78:c5:2a:
                    5c:03:f8:55:f0:1f:0e:ed:35:2a:f5:19:d2:98:1f:
                    b6:aa:a1:11:89:4a:96:45:d5:23:39:b0:a6:4b:ad:
                    61:6c:e1:83:07:c7:f7:fc:96:94:e1:02:e9:05:8a:
                    34:05:a4:37:69:29:0f:e9:9e:32:09:e3:6e:2a:fb:
                    4d:04:09:08:84:cf:31:31:8a:8a:cc:d8:6e:c3:4d:
                    59:16:3a:86:76:68:06:40:3a:3d:6b:38:f5:2b:cc:
                    d7:4a:4f:d9:43:9a:b5:ba:63:68:74:02:07:9f:f4:
                    f8:27:d0:75:53:65:ae:d7:c5:87:16:df:d2:82:ec:
                    80:2c:d8:2c:78:19:46:27:51:03:32:f8:d6:7b:98:
                    3f:f1:03:04:8a:dd:5e:11:9f:8d:9b:79:16:98:70:
                    bb:22:9e:87:c6:01:88:cc:20:6d:27:fa:e0:a8:6d:
                    02:8c:f6:2d:b6:08:b9:81:b6:7c:77:bc:90:00:b2:
                    24:af:c0:3c:7d:0c:98:3a:6d:14:35:ba:ce:8c:05:
                    89:84:3d:8f:d2:b5:be:77:73:fe:0e:cf:87:f8:89:
                    b7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:FE:11:4C:4E:6C:13:9F:74:FF:D4:22:6F:11:66:D5:B8:87:87:FF
            X509v3 Authority Key Identifier:
                keyid:3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:c0:86:a5:62:1e:5e:58:c0:06:5d:eb:33:10:d5:64:37:20:
         37:d0:b8:1c:3b:5c:8c:c1:b7:98:83:9b:a5:d5:88:54:2e:3f:
         31:d7:c3:6e:a5:a9:1e:f7:76:fe:3c:1b:10:4a:68:2c:32:af:
         66:c1:b7:2a:c9:e1:2b:ad:58:d4:b0:cb:79:15:cb:be:51:64:
         6d:26:39:75:22:73:40:bf:a3:dc:ed:8d:dc:07:8a:b2:73:a2:
         8e:ff:41:1d:95:b3:7d:0a:85:ab:2a:20:ad:4b:4e:25:d3:59:
         3e:6b:5e:9f:e7:30:d5:45:26:3d:c0:f6:b2:ec:a7:69:7a:68:
         e7:1f:58:f5:c1:f5:5d:d7:76:64:7d:ea:fe:09:ea:98:04:f9:
         58:ed:b9:48:9a:e7:cb:1b:56:3f:9b:7a:c5:99:0c:5a:94:68:
         39:a3:94:8d:61:84:37:18:62:38:55:e3:7c:0b:ab:26:6b:b9:
         b8:9d:44:3b:aa:9e:6f:74:ec:e2:38:38:80:f8:92:6a:08:57:
         fd:f3:1f:cd:1c:79:b6:04:ee:7c:90:e5:46:a8:c2:7f:32:ba:
         65:f2:34:52:27:93:d4:e5:e6:b9:dd:96:22:37:ac:78:c3:3a:
         a6:a1:3f:89:cf:17:b1:3b:cf:00:2e:b7:81:29:f5:d9:8a:c9:
         dc:aa:00:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:01:44 2026 by rpki-client