Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3DX4HLaF1Ds4p3j2vSHk7283JZzP8RR7uuM6GzBSjpGg/0/70283050DD72A7A70DA44A0C786C2D36C246420E.mft
File:                     70283050DD72A7A70DA44A0C786C2D36C246420E.mft (raw, json)
Hash identifier:          rOUbpkjpr1e2zSl+JJlxpISlgVh8PvqHPdFS95qgLkI=
Subject key identifier:   CB:49:69:0B:22:D3:8A:0B:DB:FC:B2:1D:DB:35:E2:9E:E0:0E:05:24
Authority key identifier: 70:28:30:50:DD:72:A7:A7:0D:A4:4A:0C:78:6C:2D:36:C2:46:42:0E
Certificate issuer:       /CN=70283050DD72A7A70DA44A0C786C2D36C246420E
Certificate serial:       38F062E16B9054D141FE0E11599B07F3E94217BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70283050DD72A7A70DA44A0C786C2D36C246420E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3DX4HLaF1Ds4p3j2vSHk7283JZzP8RR7uuM6GzBSjpGg/0/70283050DD72A7A70DA44A0C786C2D36C246420E.mft
Manifest number:          A3
Signing time:             Mon 02 Mar 2026 17:59:41 +0000
Manifest this update:     Mon 02 Mar 2026 17:54:41 +0000
Manifest next update:     Tue 03 Mar 2026 18:58:41 +0000
Files and hashes:         1: 70283050DD72A7A70DA44A0C786C2D36C246420E.crl (hash: RRW3O0sdbqauL4sNePC47SHModfAoYws2Z2R6CmDFnI=)
                          2: 323830343a373830343a3a2f33322d3438203d3e20323731323135.roa (hash: yMEysiX23wH5GFu83ioR5KJ+UjcRBvoJoqep3Nxh7Hk=)
                          3: 3137392e34382e3132342e302f32322d3234203d3e20323731323135.roa (hash: jB2uzF2F1jOjVsE/FYVF7GMY8fqmBqe5/xCtz+AdHrE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3DX4HLaF1Ds4p3j2vSHk7283JZzP8RR7uuM6GzBSjpGg/0/70283050DD72A7A70DA44A0C786C2D36C246420E.crl
                          rsync://rpki-repo.registro.br/repo/3DX4HLaF1Ds4p3j2vSHk7283JZzP8RR7uuM6GzBSjpGg/0/70283050DD72A7A70DA44A0C786C2D36C246420E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70283050DD72A7A70DA44A0C786C2D36C246420E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 18:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f0:62:e1:6b:90:54:d1:41:fe:0e:11:59:9b:07:f3:e9:42:17:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70283050DD72A7A70DA44A0C786C2D36C246420E
        Validity
            Not Before: Mar  2 17:54:41 2026 GMT
            Not After : Mar  3 18:58:41 2026 GMT
        Subject: CN=CB49690B22D38A0BDBFCB21DDB35E29EE00E0524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:f9:0e:b7:88:c2:00:2f:69:95:8c:d9:ce:e0:
                    f7:23:3a:c1:50:0c:9e:a1:c9:a0:74:93:9d:15:52:
                    09:3d:67:41:5d:7f:4b:45:cd:50:cf:b3:49:62:1c:
                    e8:24:31:49:eb:21:d3:30:07:1c:62:10:8c:39:7a:
                    c9:54:28:96:70:c4:bb:1c:c6:fc:c5:47:80:03:5e:
                    63:f6:00:d5:2c:09:7e:cd:78:d6:c4:9d:88:02:ed:
                    58:29:d8:56:0d:f5:46:a9:c7:6b:22:f0:fc:74:a4:
                    e3:2b:94:9a:31:42:92:ff:7d:81:51:3d:75:c2:a6:
                    e1:7f:e6:38:03:d6:1a:95:17:73:35:c3:de:8b:3f:
                    78:38:d9:5d:7a:56:6a:b9:6a:27:1b:b5:4d:31:cf:
                    a5:65:66:77:6a:13:cf:8f:ef:50:c1:34:cf:fc:bd:
                    93:55:d0:6f:9b:64:a6:67:01:9c:e2:e6:c1:08:bb:
                    bd:12:6a:14:aa:ea:99:05:97:5f:33:f4:1e:6e:b7:
                    05:6d:96:67:7d:1b:85:9a:a6:ce:07:87:43:15:c4:
                    ed:5d:ba:b1:85:7f:71:d2:48:d4:f5:4f:e9:b4:6e:
                    e9:44:2d:11:6c:aa:bb:69:77:69:d5:57:6e:79:6b:
                    1d:5c:7f:da:57:d2:3d:58:e6:00:65:12:fd:d5:fb:
                    23:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:49:69:0B:22:D3:8A:0B:DB:FC:B2:1D:DB:35:E2:9E:E0:0E:05:24
            X509v3 Authority Key Identifier:
                keyid:70:28:30:50:DD:72:A7:A7:0D:A4:4A:0C:78:6C:2D:36:C2:46:42:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3DX4HLaF1Ds4p3j2vSHk7283JZzP8RR7uuM6GzBSjpGg/0/70283050DD72A7A70DA44A0C786C2D36C246420E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70283050DD72A7A70DA44A0C786C2D36C246420E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3DX4HLaF1Ds4p3j2vSHk7283JZzP8RR7uuM6GzBSjpGg/0/70283050DD72A7A70DA44A0C786C2D36C246420E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:43:cc:78:12:21:4c:fa:5d:98:6a:07:50:64:29:a3:71:fe:
         74:83:03:91:58:53:85:5d:ed:93:71:8d:e1:06:9d:09:62:6a:
         03:63:da:f4:a8:12:c4:0a:9f:1c:5a:90:d9:8a:d1:79:40:d5:
         56:fa:19:32:0e:ff:e2:ed:75:3d:50:33:64:67:2e:4b:61:dc:
         fa:e0:5c:bc:b2:01:5d:c1:ed:3a:36:17:2a:1f:47:32:87:b1:
         37:39:49:11:b1:f6:41:da:dc:7a:28:29:32:cf:a4:1a:99:1c:
         33:e1:b4:d7:6d:f3:9b:88:09:39:1c:4f:82:c3:a9:28:59:30:
         3e:28:cf:93:5c:1c:60:87:dd:6d:08:17:ff:6b:f4:2d:5e:07:
         87:6c:61:bf:24:ac:3c:b6:33:24:7b:b4:3a:16:03:96:d6:dd:
         bf:97:22:9d:29:93:9a:be:27:b1:2a:13:34:a5:0f:18:57:76:
         aa:eb:3a:49:2d:e8:73:47:37:79:24:2b:c8:fb:53:57:58:b8:
         a0:79:73:ac:9f:44:8a:b2:3f:9d:82:5a:48:1b:56:ac:e9:7f:
         a3:2a:56:e6:81:09:17:0c:a0:99:2b:06:88:92:85:5e:82:bd:
         78:40:73:f7:e8:fd:ec:6d:d0:e1:2c:b4:62:f9:90:4d:59:04:
         ab:75:fe:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:27:12 2026 by rpki-client