Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.mft
File:                     9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.mft (raw, json)
Hash identifier:          fGa7NSCzXpc/EUje/ZX8MHRI3NqRnluviJ4IjF2Bs+E=
Subject key identifier:   1F:4F:91:16:D4:3F:34:B3:89:CD:6D:FA:09:87:64:4B:E4:CB:C8:91
Authority key identifier: 9A:A6:93:22:4E:78:5F:3D:03:76:FA:01:CC:D4:6E:7A:7D:A4:CE:60
Certificate issuer:       /CN=9AA693224E785F3D0376FA01CCD46E7A7DA4CE60
Certificate serial:       6A69248DFF1A7461EDDDCE037DBC65398CBFB55C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.mft
Manifest number:          03A2
Signing time:             Mon 02 Mar 2026 08:20:48 +0000
Manifest this update:     Mon 02 Mar 2026 08:15:48 +0000
Manifest next update:     Tue 03 Mar 2026 11:38:48 +0000
Files and hashes:         1: 34352e3233332e3135322e302f32322d3234203d3e20323637333238.roa (hash: rwNV2Ulfd4Vad/l+ejClrnvnI1sAET5fICE40mt6p4Y=)
                          2: 9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.crl (hash: EpwuvA0tU643IJ8kqNYKxB1K1/wv1ihRsHdAlPV00Yk=)
                          3: 323830343a346263343a3a2f33322d3430203d3e20323637333238.roa (hash: Mt/9OzLFKzrWHsXUu8GeZATCuyz5l8+TGv1fTYbFyaE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.crl
                          rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 11:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:69:24:8d:ff:1a:74:61:ed:dd:ce:03:7d:bc:65:39:8c:bf:b5:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AA693224E785F3D0376FA01CCD46E7A7DA4CE60
        Validity
            Not Before: Mar  2 08:15:48 2026 GMT
            Not After : Mar  3 11:38:48 2026 GMT
        Subject: CN=1F4F9116D43F34B389CD6DFA0987644BE4CBC891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:60:37:f2:e1:27:e0:85:5f:3a:39:0f:c7:4b:
                    38:70:80:7b:c3:b2:bb:be:e9:3e:af:76:46:dd:99:
                    22:15:20:f3:aa:86:cf:83:ec:fa:4a:2d:8f:cb:a0:
                    ce:fb:2d:3f:f0:93:2d:7f:2c:53:90:bd:01:16:b9:
                    5a:9d:9b:5f:d9:4a:86:ad:ba:92:31:bc:a5:b5:29:
                    6d:a6:37:b0:7b:42:b4:6f:b2:10:31:3f:75:a7:8b:
                    26:1b:ba:30:b1:39:c8:b4:ef:f6:43:47:03:02:42:
                    69:21:3d:4a:f0:2c:b4:19:97:4f:2f:c5:1f:55:6b:
                    2f:61:92:a2:fc:6a:fc:82:ca:f8:ef:9c:bf:a8:07:
                    cd:74:58:67:46:95:48:fb:01:79:0b:b5:c2:2a:9f:
                    98:aa:53:55:44:39:f2:12:28:cf:fb:55:63:c8:9e:
                    d0:be:9a:c2:76:fa:e6:fd:45:2f:d4:00:90:0c:3e:
                    3d:02:91:8d:46:5e:d8:11:3d:d2:3a:f1:89:3d:32:
                    24:42:4e:8c:ca:b6:0a:3c:92:5c:ef:f0:cd:aa:2c:
                    d9:c5:a6:15:9a:e2:0b:7c:f9:94:78:40:da:11:22:
                    c0:69:c8:22:e4:17:b7:81:68:59:de:5d:48:8a:35:
                    6f:df:f9:30:61:89:c1:15:b3:67:b2:9c:6d:1c:8a:
                    39:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4F:91:16:D4:3F:34:B3:89:CD:6D:FA:09:87:64:4B:E4:CB:C8:91
            X509v3 Authority Key Identifier:
                keyid:9A:A6:93:22:4E:78:5F:3D:03:76:FA:01:CC:D4:6E:7A:7D:A4:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:9a:83:42:bb:59:5b:20:80:dd:8a:35:b8:91:cb:0b:2b:f4:
         74:a9:56:2b:6b:67:8f:58:de:57:38:fa:91:c8:74:33:01:7f:
         fe:a9:2b:68:16:e9:96:32:32:ff:c5:5f:37:bf:5b:1f:89:5a:
         7b:b8:83:8a:49:ae:10:98:a3:82:53:e0:49:a0:db:10:01:fe:
         cb:b4:30:05:e0:59:f4:b0:27:2c:6e:a9:e9:37:8a:4b:87:f8:
         d3:27:7c:03:38:30:3b:ca:33:f7:8d:b0:b1:92:70:04:97:91:
         23:b1:81:82:ef:5d:20:d1:bd:a6:18:f2:7c:32:76:4a:e0:3a:
         83:25:0f:fd:94:04:4c:15:6c:92:fe:fa:1e:8a:c5:bc:78:7c:
         3b:8b:7e:b7:61:0d:c4:0b:45:f0:30:56:d5:fe:74:9f:16:78:
         ac:c6:ce:01:2a:8d:d9:6a:5c:56:f9:64:57:56:b2:0f:bb:07:
         3d:56:8a:39:21:6d:e2:ba:16:1f:81:6b:f4:47:b4:4f:28:b7:
         81:68:5b:be:f3:c2:82:4c:7a:78:df:75:68:2d:36:20:12:e3:
         ba:de:46:06:44:50:34:f7:5d:4a:db:94:c9:92:4f:30:3c:04:
         68:3e:af:ab:c7:4f:f5:7e:fc:08:32:c5:5d:0b:50:ad:ae:a6:
         ba:7a:82:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:57:35 2026 by rpki-client