Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft
File:                     AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft (raw, json)
Hash identifier:          QwFIVoBXV0aaY+ZBt7eOaQAJ4nmycKhIm6i2BqObEWc=
Subject key identifier:   05:08:6B:50:88:7D:58:7F:5C:10:1B:A1:48:3C:F7:30:61:C2:D8:6C
Authority key identifier: AF:FF:48:D4:DF:8A:F6:72:E3:3B:AD:D4:E2:50:9F:DC:EB:91:A0:7A
Certificate issuer:       /CN=AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A
Certificate serial:       593276C6160ABD8EA090D5D18E050D21B829A3AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft
Manifest number:          5D
Signing time:             Sun 01 Mar 2026 12:16:24 +0000
Manifest this update:     Sun 01 Mar 2026 12:11:23 +0000
Manifest next update:     Mon 02 Mar 2026 15:38:23 +0000
Files and hashes:         1: 3137372e36362e3230342e302f32322d3234203d3e203532363737.roa (hash: yDNPyXgjX/y0hPLEz5NZxLDCJMYIy8W2A8TGaumChMY=)
                          2: AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.crl (hash: EKZkxyNXE7vdCu/kB4mpY+BzMsUbhPgN/IXoyuaGkas=)
                          3: 323830343a6331383a3a2f33322d3430203d3e203532363737.roa (hash: UuXrq76U/ZaAK1gD5JTwAREf7VkzhOPiI6J4b9u8Omk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.crl
                          rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 15:38:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:32:76:c6:16:0a:bd:8e:a0:90:d5:d1:8e:05:0d:21:b8:29:a3:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A
        Validity
            Not Before: Mar  1 12:11:23 2026 GMT
            Not After : Mar  2 15:38:23 2026 GMT
        Subject: CN=05086B50887D587F5C101BA1483CF73061C2D86C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:71:64:ea:fd:cc:1e:18:71:7d:ec:58:3a:66:
                    ed:a5:a5:85:de:8b:dd:a3:50:85:d5:17:1c:24:de:
                    91:6e:70:3b:84:07:f5:08:9e:7a:69:53:15:79:1c:
                    8a:46:13:57:03:20:c8:09:54:4e:6f:e0:6b:26:04:
                    35:ab:25:fb:64:c9:52:ab:ae:ae:f8:86:77:95:bc:
                    2b:1a:ca:f6:a8:41:8f:c1:fa:a2:da:2c:38:09:6d:
                    a2:e5:1d:bc:4c:56:86:43:0b:85:a5:cb:35:00:fb:
                    57:d1:1a:41:18:ea:4b:d1:3e:6f:7d:e6:11:4b:83:
                    7d:dc:9b:75:12:72:a4:6e:11:20:71:3f:c0:a7:5b:
                    7d:c4:b0:68:90:6f:da:09:de:f6:ef:67:be:3f:39:
                    6f:31:5b:39:81:5f:9b:cd:a2:bf:ea:68:23:2f:aa:
                    cb:92:c9:c4:3c:d8:a9:25:43:3a:cc:4d:ce:05:e7:
                    9f:aa:7c:05:e8:73:68:b7:68:92:28:62:63:61:bd:
                    4f:72:7b:60:a8:bd:b6:31:18:b7:c0:a4:d5:23:be:
                    45:c2:6d:0f:84:f0:d8:c5:88:35:3f:db:40:d1:ff:
                    c2:a6:53:53:74:47:f7:15:b6:4f:36:41:16:6c:c5:
                    ec:d7:9e:7a:73:0a:dc:0a:e0:43:64:4e:d3:40:1c:
                    52:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:08:6B:50:88:7D:58:7F:5C:10:1B:A1:48:3C:F7:30:61:C2:D8:6C
            X509v3 Authority Key Identifier:
                keyid:AF:FF:48:D4:DF:8A:F6:72:E3:3B:AD:D4:E2:50:9F:DC:EB:91:A0:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:07:4b:24:2a:2d:e0:5b:e5:0e:8e:db:99:db:97:77:8b:d1:
         04:0c:a9:95:35:19:e8:36:42:c5:49:41:bd:60:58:3d:3f:5e:
         ca:ce:52:03:ff:1b:c8:25:f9:09:85:e0:b1:05:c6:39:f5:82:
         c8:79:0b:f0:29:4a:ad:77:bc:d0:32:ea:29:be:e3:ce:50:64:
         09:d0:06:14:77:42:ac:8a:e8:00:f8:55:12:90:63:a3:40:5c:
         e5:42:2a:15:32:80:21:b5:d5:5e:ea:7b:87:38:a5:92:fa:ea:
         c7:16:44:f6:ce:f2:bc:15:2b:af:90:81:9b:98:1c:89:80:10:
         6d:8f:c4:bc:83:37:0f:fa:6a:c1:54:21:ef:eb:8e:6e:f5:87:
         c8:7d:e8:5c:1d:b1:51:53:55:dc:2d:71:e1:f7:f1:d6:be:3d:
         19:59:f1:22:ac:06:90:41:88:31:e4:f8:64:4a:4f:0b:b6:85:
         75:ec:aa:47:6f:8f:08:90:c5:3d:bc:ac:28:ab:a9:31:3e:79:
         b4:b6:e7:88:c4:78:8f:6c:d8:29:1e:2d:52:a5:b2:d2:7d:de:
         08:3e:92:3a:9d:cc:3d:23:4f:63:11:6d:55:b6:09:03:32:64:
         b6:42:ab:6b:2d:32:f8:b9:c6:3d:3e:77:d8:9b:1f:77:c4:8e:
         21:30:08:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:07:47 2026 by rpki-client