Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.mft
File:                     60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.mft (raw, json)
Hash identifier:          gt2nTJG0ntitqG+lJwxOyKXICf2h2zrMV+JIcVHEWgg=
Subject key identifier:   3E:D6:97:B9:BB:CB:6D:9F:E1:A9:E3:1D:B8:E9:E2:86:63:DA:7E:E4
Authority key identifier: 60:CB:1A:8F:EC:A3:BA:79:84:AB:DC:02:AD:DF:32:E3:D0:B9:FA:CE
Certificate issuer:       /CN=60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE
Certificate serial:       36E9F49D8E7DFCEBC8D76EB9AE6A9FD00D371E3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.mft
Manifest number:          EA
Signing time:             Sun 01 Mar 2026 21:39:56 +0000
Manifest this update:     Sun 01 Mar 2026 21:34:56 +0000
Manifest next update:     Mon 02 Mar 2026 23:46:56 +0000
Files and hashes:         1: 323830343a313038383a3a2f33322d3438203d3e203532393133.roa (hash: axgSkmUjtBcUJhDdxY50OAl2F65WCIR0kpE7OknSiOs=)
                          2: 3137302e3135302e37362e302f32322d3234203d3e203532393133.roa (hash: H1BpSabD7EjQpKt8GnC7GQFyTB0CtLfE3S/uH6VEQE8=)
                          3: 3137392e3132372e34302e302f32312d3234203d3e203532393133.roa (hash: 3XeEXdGm3FEmQIejx2o19T6QnKNhmnCEYFppYZ1rTOk=)
                          4: 3136372e3234392e342e302f32322d3234203d3e203532393133.roa (hash: N9aNb5nRITMEXmQ99EkoNdxo9eOZ0P7QUmc142R3SnY=)
                          5: 3137302e3234362e3136342e302f32322d3234203d3e203532393133.roa (hash: pKIlEjTJQdtfOgnsTf9kAZyFJKRBEZfwhcEAHrNiQhE=)
                          6: 3137372e32332e3136382e302f32312d3234203d3e203532393133.roa (hash: wUHEHgMMe8IV7JhvFyMRVTJBFafz4uTBCGPZ3TeIlqw=)
                          7: 60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.crl (hash: /EimkektdK3515ajsVXUsLiDhXitaG1zL5vq+R/Tbr0=)
                          8: 3139302e3130392e38302e302f32322d3234203d3e203532393133.roa (hash: cY/EGISIvDqPzArLRiXiuQfyFMimoOe3BNRGHIlormE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.crl
                          rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 23:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e9:f4:9d:8e:7d:fc:eb:c8:d7:6e:b9:ae:6a:9f:d0:0d:37:1e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE
        Validity
            Not Before: Mar  1 21:34:56 2026 GMT
            Not After : Mar  2 23:46:56 2026 GMT
        Subject: CN=3ED697B9BBCB6D9FE1A9E31DB8E9E28663DA7EE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:07:b5:47:b1:4e:7f:f9:b1:d7:82:0a:f2:1c:
                    49:e3:54:68:6e:43:bc:79:3b:00:7a:31:fe:41:96:
                    b5:87:ba:ff:d0:db:b2:81:67:16:3f:f4:ba:76:64:
                    fd:40:08:83:69:9d:c3:d5:45:35:7e:d6:ac:74:48:
                    fe:60:52:da:88:ca:b5:8d:79:d2:28:d6:b7:4b:24:
                    6f:21:e2:0e:c3:b9:90:54:50:e2:30:63:1d:ca:ed:
                    92:8d:04:bb:9d:3d:d3:e3:c8:f5:91:04:4d:9f:59:
                    c2:31:7c:a7:73:78:9d:11:4c:93:af:35:0b:0d:15:
                    63:08:4f:f7:b3:5b:b7:8e:07:93:1c:c6:a5:cc:ac:
                    3c:73:5f:07:8f:03:1b:50:31:94:2a:8a:20:b0:b0:
                    37:f1:f2:66:94:b2:32:b6:2a:e6:a5:48:4b:ae:ca:
                    21:9b:8c:94:ff:fa:f4:13:e5:0f:03:94:f9:34:73:
                    b8:d1:eb:f0:0a:19:83:88:af:e9:c3:07:9d:68:41:
                    7f:01:3f:cf:73:d1:e2:b0:c7:fc:c9:07:bf:97:cb:
                    ba:a8:3e:37:91:ec:97:dd:42:93:6c:db:aa:19:28:
                    59:3f:16:3b:90:53:7f:2d:fc:f4:c9:bd:0b:07:e5:
                    e8:4b:5b:f6:46:4b:10:d5:34:5e:07:75:16:67:d4:
                    1b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D6:97:B9:BB:CB:6D:9F:E1:A9:E3:1D:B8:E9:E2:86:63:DA:7E:E4
            X509v3 Authority Key Identifier:
                keyid:60:CB:1A:8F:EC:A3:BA:79:84:AB:DC:02:AD:DF:32:E3:D0:B9:FA:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:a0:aa:31:3f:c7:fd:85:7d:10:a4:31:30:f2:3f:bd:06:05:
         72:0f:4a:c4:9b:5c:a2:27:1d:b2:7f:53:da:72:b6:be:7a:56:
         9f:a1:96:b8:30:0b:48:b6:a3:42:b5:34:e3:62:f2:99:b4:d9:
         24:ab:0a:35:59:cf:19:bd:7c:76:b1:7b:2b:66:19:a2:23:ad:
         f1:06:81:6f:d7:07:4c:53:4f:47:f0:00:85:55:53:cf:a2:c2:
         bb:00:e0:22:f7:f7:66:0d:90:d6:3b:8f:15:de:68:f1:a8:87:
         d0:83:7a:2d:46:6a:e7:2d:bc:d1:ce:42:3f:aa:ee:62:5a:fb:
         2e:6f:ef:79:7d:e8:dd:c4:51:9f:05:b7:00:b7:c5:33:44:c3:
         3e:e4:86:ee:5e:70:a5:0d:2a:11:16:4a:3c:88:e9:44:5f:a2:
         a7:4b:88:ed:9c:f2:13:b1:49:64:dc:ab:82:c9:36:38:dc:d0:
         2d:37:de:d3:6b:80:6c:80:88:44:0a:25:02:af:69:31:7a:3a:
         f4:79:a8:09:b0:07:ea:38:59:af:69:18:98:e1:55:cd:7b:73:
         e6:75:d3:a2:0e:39:70:a5:38:7a:7c:f6:6c:a9:37:f6:00:1b:
         71:68:6d:24:5d:ab:1d:b3:cd:a2:19:4b:df:09:73:a0:da:d1:
         52:34:9d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:25:51 2026 by rpki-client