Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft
File:                     A910E04F27510FFF1E8362052070412C903FFD8B.mft (raw, json)
Hash identifier:          0EsZAPU0/ltSty1UwSrGTnFmN32Jwf4J7gi0v8GL0I0=
Subject key identifier:   60:9E:AC:CB:D2:FF:BE:17:BE:5B:8E:3F:6D:6F:7F:AD:F5:2E:07:36
Authority key identifier: A9:10:E0:4F:27:51:0F:FF:1E:83:62:05:20:70:41:2C:90:3F:FD:8B
Certificate issuer:       /CN=A910E04F27510FFF1E8362052070412C903FFD8B
Certificate serial:       1F65755911ED2903F736B083B768DC5BD003B675
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft
Manifest number:          0212
Signing time:             Mon 02 Mar 2026 14:12:43 +0000
Manifest this update:     Mon 02 Mar 2026 14:07:43 +0000
Manifest next update:     Tue 03 Mar 2026 14:49:43 +0000
Files and hashes:         1: 3133322e3235352e3137362e302f32322d3234203d3e203533303438.roa (hash: kNcxoziUs2V/DZt4kc9ONX8Yibj7lteIZFVSevEydOw=)
                          2: 323830343a316230343a3a2f33322d3438203d3e203533303438.roa (hash: 6V34vYOx2MLgtwHD9a/e8nKBoFUO7kEonmSNUlw0zWM=)
                          3: 3137372e3133372e34382e302f32312d3234203d3e203533303438.roa (hash: p+UFfhkBAnWncsui85kUuhM0+jqknevxzdqYB/fmK3s=)
                          4: 3137302e3234352e3232382e302f32322d3234203d3e203533303438.roa (hash: dFZ0LGf9VUQmelCd2T2ZnwoXRmTaX8jDdO8dHAjtnkk=)
                          5: 3138372e37332e39362e302f32302d3234203d3e203533303438.roa (hash: mUieqeJdxR4tWDtSXb9czyw88olGSwxh8CnFwdCV008=)
                          6: 3230302e39342e3235322e302f32322d3234203d3e203533303438.roa (hash: il53B7Q73jNFlH7g51wKgGiNgid+xMbJfds7WZ0O2Bg=)
                          7: A910E04F27510FFF1E8362052070412C903FFD8B.crl (hash: tMz7jFoH1i93kwN5dY0mFXaBFxGqen1SOALkDmxvSus=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.crl
                          rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 14:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:65:75:59:11:ed:29:03:f7:36:b0:83:b7:68:dc:5b:d0:03:b6:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A910E04F27510FFF1E8362052070412C903FFD8B
        Validity
            Not Before: Mar  2 14:07:43 2026 GMT
            Not After : Mar  3 14:49:43 2026 GMT
        Subject: CN=609EACCBD2FFBE17BE5B8E3F6D6F7FADF52E0736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6c:18:18:44:9a:ce:8e:1c:31:7c:10:a7:31:
                    48:3a:46:4c:da:97:d3:99:67:8f:73:10:1b:b9:0d:
                    12:c4:ed:b1:86:7c:c4:9f:61:07:98:ea:2a:dc:67:
                    5a:18:80:35:c5:9f:e6:cf:35:a3:d5:68:a2:e2:50:
                    ad:89:1f:2d:fd:97:1e:8a:bb:49:a7:9f:95:4b:60:
                    0f:2b:4e:77:bc:88:09:87:86:a0:be:46:7f:1d:1d:
                    62:9b:81:d6:38:ec:2d:e8:73:37:94:54:ff:3b:16:
                    91:53:c7:d0:b8:7e:b9:39:7c:88:90:52:d3:ba:96:
                    5f:4d:d6:18:c8:83:a0:b1:76:f6:d5:8a:9a:a1:ef:
                    f8:9d:f7:9a:7b:94:09:63:f0:e4:57:6d:93:86:f5:
                    4d:61:5e:4b:02:ec:66:1d:36:49:32:5f:2b:a7:6e:
                    08:a7:ac:e8:47:6a:5a:57:d4:09:cb:37:b7:b2:c4:
                    40:bc:f4:4e:98:94:4f:a6:30:18:ae:5b:4d:c2:dc:
                    57:0f:e7:6a:98:60:af:1d:3c:ef:c1:ac:e8:24:db:
                    53:c5:a9:33:52:f4:f6:b2:5f:cb:11:05:95:cd:00:
                    87:ae:a8:07:89:54:7a:54:16:5f:31:bd:77:58:5a:
                    9b:e8:2f:2e:1b:1d:5e:d0:22:1a:d4:a4:19:6e:b8:
                    5a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9E:AC:CB:D2:FF:BE:17:BE:5B:8E:3F:6D:6F:7F:AD:F5:2E:07:36
            X509v3 Authority Key Identifier:
                keyid:A9:10:E0:4F:27:51:0F:FF:1E:83:62:05:20:70:41:2C:90:3F:FD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:49:7a:b1:2b:a7:8e:58:38:83:18:7e:a4:8b:9f:2f:47:2c:
         3b:0b:6f:07:05:41:bb:ce:9c:a2:62:dc:22:ee:0c:72:44:f5:
         f9:54:1d:8a:3c:a9:57:fb:78:24:2d:9a:f4:fc:26:cb:68:68:
         6e:6c:cb:ae:0c:b9:c3:9c:9c:0c:d6:74:d8:8c:50:ab:47:23:
         aa:92:0a:6e:a3:26:84:0f:74:c8:c8:7a:c2:ec:66:22:10:b8:
         85:42:dd:0f:d7:bd:80:7e:31:9c:b4:2f:d7:68:11:85:89:d8:
         3a:9f:25:06:3a:92:05:80:9f:2b:fc:e2:19:f4:77:61:92:cd:
         d8:f2:20:ed:c7:06:11:53:ac:12:08:db:d7:71:7b:ee:da:5e:
         2a:91:30:52:d8:20:8f:b6:d8:32:5e:90:d4:b8:ca:82:bc:a2:
         6e:12:28:84:aa:d5:17:51:b0:cc:50:a3:8c:da:d8:b9:7c:b9:
         27:85:e0:a3:61:9d:f1:f9:f7:c4:eb:ae:34:75:58:12:bd:8c:
         d1:68:3a:8a:dd:46:c9:1d:4d:ab:6a:a6:f5:24:96:d7:b1:30:
         f7:af:9b:59:2f:7c:19:90:e9:75:c8:07:69:bc:5c:68:48:03:
         3a:32:74:7a:77:83:7f:ee:18:25:e1:1b:ce:d5:2a:0b:e7:39:
         60:bd:20:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:16:03 2026 by rpki-client