Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/16149638FCC37EDB923C5F2AFF854155C7486481.mft
File:                     16149638FCC37EDB923C5F2AFF854155C7486481.mft (raw, json)
Hash identifier:          Xmn6xMIQWLDTnkI4G6Ty9ukH1dUkw8Ehnm0d8kI2sZ0=
Subject key identifier:   63:26:D5:18:1F:2E:3F:0B:4C:97:6F:0A:0B:6B:B8:81:6C:89:A6:4D
Authority key identifier: 16:14:96:38:FC:C3:7E:DB:92:3C:5F:2A:FF:85:41:55:C7:48:64:81
Certificate issuer:       /CN=16149638FCC37EDB923C5F2AFF854155C7486481
Certificate serial:       36EFB595F4B62C07C8E6C2F205E6687CBB9EA6A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16149638FCC37EDB923C5F2AFF854155C7486481.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/16149638FCC37EDB923C5F2AFF854155C7486481.mft
Manifest number:          010D
Signing time:             Mon 02 Mar 2026 05:36:24 +0000
Manifest this update:     Mon 02 Mar 2026 05:31:24 +0000
Manifest next update:     Tue 03 Mar 2026 06:36:24 +0000
Files and hashes:         1: 34352e3232342e33322e302f32332d3233203d3e20323636393234.roa (hash: SQpPZBsBN3O1LpptuNmrD50V+6SEruwpO8dl+O1NH8A=)
                          2: 16149638FCC37EDB923C5F2AFF854155C7486481.crl (hash: jq49Peoa3BKZsX4bDPLXas+K0VxHdYkCEyUexYoiRsc=)
                          3: 323830343a343536383a3a2f33322d3332203d3e20323636393234.roa (hash: laJYiJ87zwjmHurZ74zyf8JwjNPE74GPAkodpTq8GtY=)
                          4: 34352e3232342e33352e302f32342d3234203d3e20323636393234.roa (hash: BaklOCUX2/7AEqVb9APvliCg/IBaqKvZ41hnd72XFoE=)
                          5: 34352e3232342e33322e302f32322d3232203d3e20323636393234.roa (hash: YuDAqFbDopuYUJatHhs5zqdckb1n36tKOhAu53zFPwk=)
                          6: 34352e3232342e33342e302f32332d3233203d3e20323636393234.roa (hash: aa2f1/JjiEtOH2iLz1Mh1JcGxp60RpAzVRtNHvjwUck=)
                          7: 34352e3232342e33322e302f32342d3234203d3e20323636393234.roa (hash: NWec7YMpl0OfbJhkXqXCRQu7t/+5uYVycElpfAyd4Tk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/16149638FCC37EDB923C5F2AFF854155C7486481.crl
                          rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/16149638FCC37EDB923C5F2AFF854155C7486481.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16149638FCC37EDB923C5F2AFF854155C7486481.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 06:36:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ef:b5:95:f4:b6:2c:07:c8:e6:c2:f2:05:e6:68:7c:bb:9e:a6:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16149638FCC37EDB923C5F2AFF854155C7486481
        Validity
            Not Before: Mar  2 05:31:24 2026 GMT
            Not After : Mar  3 06:36:24 2026 GMT
        Subject: CN=6326D5181F2E3F0B4C976F0A0B6BB8816C89A64D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:50:bf:55:44:40:99:27:dd:2b:ee:30:a9:ae:
                    8b:bc:43:df:9b:c6:37:a2:77:e4:20:04:79:74:59:
                    b4:c2:1f:d2:68:a3:50:9e:6d:bc:56:a2:18:51:5f:
                    ba:47:27:ea:03:d5:4f:44:2c:2c:6c:70:cc:b5:5b:
                    bf:35:60:71:ea:d3:6f:2d:b5:cd:d5:f8:2f:79:0d:
                    b4:64:5a:56:d3:14:aa:f5:cc:75:d7:66:d8:3a:b4:
                    f3:c5:c2:00:86:f7:44:cf:54:24:ca:3e:24:ed:66:
                    ab:fe:cf:b7:de:f8:e3:b3:e3:5f:6d:7d:50:71:35:
                    36:5c:49:03:5e:bf:2f:03:e9:b0:b7:02:20:c2:54:
                    57:5a:94:4a:d5:90:fb:17:d9:77:f5:1a:25:41:30:
                    d5:a2:48:08:37:b5:73:95:73:dc:ce:e2:8d:7d:89:
                    4a:81:8c:26:18:16:8f:45:a8:34:26:26:12:8f:c1:
                    52:7a:18:ec:63:41:b2:91:cd:49:6b:5e:c0:f3:f6:
                    d1:75:aa:a3:82:78:2c:2c:1e:af:b0:79:0f:25:ea:
                    da:73:9d:20:01:65:a9:94:8d:85:75:a0:0d:ce:56:
                    52:42:1b:44:bd:dd:b2:ae:c9:8b:37:ef:67:cf:2b:
                    fa:23:0e:71:fc:7d:96:b8:3f:54:38:24:8c:2e:41:
                    6b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:26:D5:18:1F:2E:3F:0B:4C:97:6F:0A:0B:6B:B8:81:6C:89:A6:4D
            X509v3 Authority Key Identifier:
                keyid:16:14:96:38:FC:C3:7E:DB:92:3C:5F:2A:FF:85:41:55:C7:48:64:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/16149638FCC37EDB923C5F2AFF854155C7486481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16149638FCC37EDB923C5F2AFF854155C7486481.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/16149638FCC37EDB923C5F2AFF854155C7486481.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:2e:7b:bf:7a:c5:94:b9:70:9e:b0:3a:46:99:eb:07:e5:69:
         ec:08:f5:bc:80:6e:e2:9d:cf:d5:cb:ef:18:4f:7c:ba:30:5e:
         a7:eb:5d:7e:4f:5c:c0:50:31:ac:6b:c5:bc:79:05:ac:53:a4:
         90:e7:e8:2c:f2:11:0e:64:35:63:d2:3c:92:e0:20:45:15:37:
         00:00:e4:98:3a:30:bd:9d:c2:8b:c5:d5:62:1b:34:f8:38:05:
         76:6c:10:2c:ee:e6:23:93:0b:f3:e6:ac:2f:ba:6d:b0:fb:3a:
         5f:e9:b7:f4:88:6d:fe:6f:68:c3:07:6f:5b:68:a0:e0:ab:c8:
         60:4f:22:e7:0b:03:c4:68:e8:37:93:9c:f8:b0:88:6f:4d:1e:
         54:c0:78:d9:36:e2:2d:b4:6d:e8:3d:1a:d4:c0:3e:c2:01:13:
         1c:3a:4b:95:df:bd:5b:24:e6:d1:f3:6c:5b:d7:ab:cd:88:8e:
         5f:86:37:60:a9:64:ae:50:21:a1:52:5c:0d:72:4c:0d:2d:13:
         3a:a8:af:ab:70:f8:f3:75:8b:31:66:6c:8b:d1:c2:31:14:59:
         7d:40:d5:47:fd:bd:3c:f9:fb:81:6f:dc:3f:fd:6a:8f:46:92:
         dc:0e:84:40:19:60:5f:1d:6f:fa:be:06:99:f7:bd:9b:d1:c6:
         05:57:4f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:02:56 2026 by rpki-client