Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.mft
File:                     0EC8EAC7F1F5A216824B37118697748825F314D9.mft (raw, json)
Hash identifier:          6weDyrLBUudLtvOe1ABUEyVzPQm4nfOqf8OLhvFD3Mw=
Subject key identifier:   3A:9B:94:A6:5D:3F:D6:06:44:BD:62:82:B1:CE:47:F8:03:1E:12:5E
Authority key identifier: 0E:C8:EA:C7:F1:F5:A2:16:82:4B:37:11:86:97:74:88:25:F3:14:D9
Certificate issuer:       /CN=0EC8EAC7F1F5A216824B37118697748825F314D9
Certificate serial:       24D38122306CBBE1B4E60679E920BAC17586856C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.mft
Manifest number:          0394
Signing time:             Mon 02 Mar 2026 09:30:31 +0000
Manifest this update:     Mon 02 Mar 2026 09:25:31 +0000
Manifest next update:     Tue 03 Mar 2026 10:04:31 +0000
Files and hashes:         1: 3136382e3139362e37322e302f32322d3234203d3e203631393432.roa (hash: mwSV4AsrionZd6ucwU2XTnQDI1FeF1RXfyJry+mNJBE=)
                          2: 0EC8EAC7F1F5A216824B37118697748825F314D9.crl (hash: 44e2WLofVKrYGs2ZMBRG80GH4+mut1m9Oo4TMgQfUeg=)
                          3: 3137302e3233392e382e302f32322d3234203d3e203631393432.roa (hash: PD7H74uB42C5FlUCcIhjDyZK1EARVfc0do0yGt8ctg4=)
                          4: 323830343a313839383a3a2f33322d3430203d3e203631393432.roa (hash: MTSIW9OG/6g79JqNzXOS6suIJzY+iyX6qIWY52vA9V0=)
                          5: 3139322e31322e3131322e302f32322d3234203d3e203631393432.roa (hash: 5AlfVOEKh4aGDgamW6LgPBzM9IIMT2YGRydnyqqOrhA=)
                          6: 3230312e3133312e36382e302f32322d3234203d3e203631393432.roa (hash: oTj7b9bhH6RiSTQ8IwoCGUPpjxzPMpOXUR545PqouwU=)
                          7: 3137302e3233332e3136342e302f32322d3234203d3e203631393432.roa (hash: RQs3auMT7WMmlvqSiPqhEHjFJdNIhqeq2j9N65JdYuk=)
                          8: 3136382e3230352e34302e302f32322d3234203d3e203631393432.roa (hash: IEOVkq/MiFbe9kSiq1vq9xeON4CdOaPUnC31voI+IqY=)
                          9: 34352e3233392e3130302e302f32322d3234203d3e203631393432.roa (hash: LUDr48xTpx4WCKeX1gnuj4FThy0qQoXGwUVL2TBdP10=)
                          10: 3133312e3235352e36382e302f32322d3234203d3e203631393432.roa (hash: 9P2w7BtRiGunbE7Dhl819E+nMHeQGNGRIZd1Oc/GcCA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl
                          rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 10:04:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d3:81:22:30:6c:bb:e1:b4:e6:06:79:e9:20:ba:c1:75:86:85:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EC8EAC7F1F5A216824B37118697748825F314D9
        Validity
            Not Before: Mar  2 09:25:31 2026 GMT
            Not After : Mar  3 10:04:31 2026 GMT
        Subject: CN=3A9B94A65D3FD60644BD6282B1CE47F8031E125E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0f:fe:fc:1b:8c:fb:48:b2:18:82:9f:d7:0a:
                    e4:64:2c:44:71:a7:31:82:04:e2:c5:58:68:03:28:
                    6b:bc:6b:5c:d5:08:08:80:0a:3e:00:0f:ec:08:b1:
                    64:ae:a5:9e:b0:89:c9:46:f7:62:87:cf:dd:b2:9f:
                    db:73:6e:fb:6e:a4:39:83:09:bb:59:ad:87:f8:76:
                    93:06:6e:f2:de:21:d0:cf:86:26:06:a4:e3:99:b9:
                    1c:ff:55:df:52:7c:3c:01:b6:5f:4a:ef:54:bb:2d:
                    eb:2b:65:16:86:27:98:17:ca:0a:b2:a1:49:7a:51:
                    fd:b9:bb:4e:3e:06:61:46:64:b6:b5:4b:13:b5:61:
                    b4:fc:db:a0:be:00:e1:b8:d3:24:3a:93:11:a4:26:
                    c6:c2:85:c8:08:7e:da:19:20:c4:b5:5a:5e:2b:54:
                    dc:37:a1:2f:f6:b2:28:64:d1:c8:f5:67:d9:69:3f:
                    16:b9:73:e2:8a:ff:fc:16:5a:ba:d6:c4:e6:dd:82:
                    8d:43:58:7b:80:de:9e:b6:f7:53:de:0d:73:b2:5a:
                    30:30:47:ab:7b:d6:53:36:f8:5c:04:d9:6b:36:e1:
                    e6:6d:f7:07:42:87:fb:7a:5e:cd:4d:f8:d0:0c:36:
                    c0:15:2d:85:b8:89:a1:ba:8b:21:66:42:aa:7e:e0:
                    61:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:9B:94:A6:5D:3F:D6:06:44:BD:62:82:B1:CE:47:F8:03:1E:12:5E
            X509v3 Authority Key Identifier:
                keyid:0E:C8:EA:C7:F1:F5:A2:16:82:4B:37:11:86:97:74:88:25:F3:14:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:fc:21:09:ba:e2:ef:0f:97:ae:bf:a6:54:f7:af:c6:1b:aa:
         c4:5c:4d:11:3c:61:53:a9:ba:10:62:09:e3:60:61:ac:dd:a2:
         d0:e5:e3:0e:3b:b4:e6:0b:ff:41:7b:08:91:c3:39:96:b7:ae:
         df:b5:6a:af:ef:24:2e:83:cc:68:b6:7c:97:09:b2:2d:a8:1f:
         47:f2:c7:a5:31:8c:49:42:df:e1:86:ae:a9:20:45:4a:9d:bd:
         ce:40:31:4a:95:a2:05:38:41:93:0e:22:91:74:4d:b1:df:7e:
         ff:40:43:e7:bc:7d:c2:13:6d:a8:9f:80:4d:f5:3a:f7:a1:91:
         a7:45:eb:10:9e:1e:73:e7:51:1c:28:08:f0:8e:d3:33:3e:ad:
         18:62:34:9b:ea:ad:14:a9:51:54:0d:80:5f:6a:10:4e:be:c0:
         f5:4b:8b:21:f4:4b:47:37:2c:1a:48:0d:ca:9f:9f:b8:75:d0:
         6f:99:96:bb:d4:fb:8f:d2:79:de:6d:1e:c9:f1:7c:43:84:c0:
         1a:6d:db:1a:dd:00:ab:ed:6f:44:34:8d:62:94:95:35:bd:19:
         bf:b5:3a:1f:8d:05:d9:7a:f1:d5:07:2d:97:dc:d6:30:7b:49:
         6a:71:9d:88:71:c8:2d:ab:d2:65:d7:2a:cf:7b:ab:43:17:f2:
         98:72:ed:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:59:58 2026 by rpki-client