Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft
File:                     5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft (raw, json)
Hash identifier:          ZzOlP03iaf3w7an/JUjmSiVOAp+EGD/ttO3QnlqTns0=
Subject key identifier:   81:86:FC:17:F3:B3:36:A3:A5:E6:01:10:51:C6:33:9C:0F:DA:75:09
Authority key identifier: 5F:F5:DC:22:C9:F3:8E:4B:3A:5F:FA:CC:76:89:C6:EB:52:A6:5D:B9
Certificate issuer:       /CN=5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9
Certificate serial:       7EF842AF0931D2BFFFCF4A7F2FDFE5072277D399
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft
Manifest number:          03A4
Signing time:             Sun 01 Mar 2026 12:08:05 +0000
Manifest this update:     Sun 01 Mar 2026 12:03:05 +0000
Manifest next update:     Mon 02 Mar 2026 14:50:05 +0000
Files and hashes:         1: 3137372e38362e3131362e302f32322d3234203d3e203532353730.roa (hash: x1+GQO8H+q7duDGrJLmVFbvRT4PTXdBBkE2zgyXohJc=)
                          2: 5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl (hash: 0F1EvQSrglvOjwhzjBe+UwyOTU5CJkKmdOD7D2LfFEw=)
                          3: 323830343a313536343a3a2f33322d3336203d3e203532353730.roa (hash: MJEU9stz6b2jhBGcAeFLhP96QluPf2/eiJRTzyfKnO0=)
                          4: 3137392e39362e3230302e302f32312d3234203d3e203532353730.roa (hash: d1r/JqCcRrfI+uplhqwOSFjUh6OVTzwZb6fZkyUCGRU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl
                          rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 14:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f8:42:af:09:31:d2:bf:ff:cf:4a:7f:2f:df:e5:07:22:77:d3:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9
        Validity
            Not Before: Mar  1 12:03:05 2026 GMT
            Not After : Mar  2 14:50:05 2026 GMT
        Subject: CN=8186FC17F3B336A3A5E6011051C6339C0FDA7509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:03:8c:8c:38:b6:83:10:e6:4e:f7:e4:a4:4a:
                    ac:a6:f1:b1:4b:c6:3b:3d:8a:d2:28:c6:e3:6f:c2:
                    58:05:50:7b:74:9c:53:87:b7:c9:56:ce:b5:73:0b:
                    72:6e:c0:d8:cc:ec:52:01:c3:89:58:57:19:39:a9:
                    b1:6a:ca:45:4c:48:8a:26:02:3b:6d:60:28:cb:b4:
                    a1:13:da:cb:be:46:41:b1:b1:2e:b9:68:0e:e6:a7:
                    2a:43:67:5a:88:5f:07:af:89:eb:e5:80:97:af:0d:
                    a5:da:d4:e1:21:93:94:4c:2f:3f:16:d7:bc:c9:9a:
                    cd:2a:b5:36:81:9d:08:6c:00:6f:79:0c:1c:23:33:
                    e6:c4:b5:49:00:e2:45:06:f9:0f:44:03:9c:16:c3:
                    42:44:4d:5f:ef:79:0a:52:82:71:9c:5f:53:a2:c8:
                    6d:4b:d2:8e:3a:1f:5a:f1:2a:f1:53:68:e6:f7:0e:
                    7a:57:9f:92:7d:ad:e7:07:83:43:f7:fd:b5:7b:21:
                    05:93:2b:c4:e5:47:44:9e:fa:c0:c9:e3:98:06:c8:
                    6c:c9:c1:9d:f9:db:4f:4f:70:74:76:1a:71:24:97:
                    f2:41:dc:fd:cb:d3:06:b8:14:1d:f9:a2:c2:97:bf:
                    13:d2:44:b5:7a:79:81:a3:44:77:2b:38:57:5b:76:
                    67:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:86:FC:17:F3:B3:36:A3:A5:E6:01:10:51:C6:33:9C:0F:DA:75:09
            X509v3 Authority Key Identifier:
                keyid:5F:F5:DC:22:C9:F3:8E:4B:3A:5F:FA:CC:76:89:C6:EB:52:A6:5D:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:e9:14:58:a8:59:43:78:18:88:85:56:ac:31:09:2d:07:dc:
         16:bc:0d:a0:e8:5b:ef:c4:72:1e:18:ce:99:1e:e2:c4:63:d4:
         bd:0d:f5:a5:22:d4:dd:c5:81:b1:23:df:dd:fe:f6:f3:c0:63:
         cc:df:e7:c4:3c:f1:f6:6b:b4:d2:7a:e5:47:66:07:01:d0:eb:
         f5:eb:18:83:7a:b6:6c:23:4f:18:7f:b2:58:32:7d:cc:a2:24:
         7c:5d:95:a8:ad:72:9b:60:53:09:48:04:fc:51:64:55:e9:9e:
         21:80:9a:e5:57:0d:c7:c7:c4:9d:d0:d4:48:d8:ad:47:a7:2b:
         fe:fa:ea:30:51:c4:fa:b4:6b:3e:b8:34:9d:0e:49:52:4d:c2:
         68:de:d8:90:4f:5f:9b:67:9e:b2:b9:d1:4e:1e:83:6f:b8:fe:
         28:f6:22:2b:6d:f9:67:00:9c:86:d6:72:7f:bc:52:c2:a9:91:
         7b:98:2e:cf:be:29:0e:ea:3e:9c:3f:36:ac:03:44:f7:03:08:
         4f:de:d4:d7:92:9c:db:66:30:dc:ce:a2:e7:a4:b4:ef:8e:7a:
         d1:af:10:f0:5b:46:9e:99:01:84:08:40:74:62:b2:5c:4b:5f:
         76:96:96:89:88:2f:b0:32:1a:5a:ab:f1:de:0a:f0:7d:43:4e:
         de:e3:7f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:10:11 2026 by rpki-client