Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft
File:                     0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft (raw, json)
Hash identifier:          SYbLLVKCXJ8oa+KKYBwikOOgR9AS7F/mxYPgoJf/GsM=
Subject key identifier:   14:A8:FA:AA:68:0A:19:2A:40:F2:32:36:ED:D9:9A:58:2D:12:9A:7E
Authority key identifier: 06:85:BB:63:77:E4:38:23:F6:EA:F7:CD:0E:E0:4B:7B:50:8B:B4:3A
Certificate issuer:       /CN=0685BB6377E43823F6EAF7CD0EE04B7B508BB43A
Certificate serial:       6102FD35BE919EB7619FEBB6C6B968FEA9F21D19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft
Manifest number:          03A9
Signing time:             Sun 01 Mar 2026 08:22:31 +0000
Manifest this update:     Sun 01 Mar 2026 08:17:31 +0000
Manifest next update:     Mon 02 Mar 2026 11:30:31 +0000
Files and hashes:         1: 0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl (hash: qYQllQsArh51giQJMDOtmRWWDqzWUNiHPW3kODviAS8=)
                          2: 34352e3138312e3139322e302f32322d3234203d3e20323639323033.roa (hash: BXBMdFx7otSxHTwUNboayShinyzfM90Ba7+cGRAazlA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl
                          rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 11:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:02:fd:35:be:91:9e:b7:61:9f:eb:b6:c6:b9:68:fe:a9:f2:1d:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0685BB6377E43823F6EAF7CD0EE04B7B508BB43A
        Validity
            Not Before: Mar  1 08:17:31 2026 GMT
            Not After : Mar  2 11:30:31 2026 GMT
        Subject: CN=14A8FAAA680A192A40F23236EDD99A582D129A7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8d:2a:88:2a:8a:ee:d5:8d:34:8a:15:a1:1a:
                    5d:69:f7:34:d6:b4:63:d6:50:e4:c2:ca:4c:87:cb:
                    67:ea:9b:a8:0d:c2:47:3d:4e:85:a2:dc:03:a3:42:
                    f6:0b:1b:23:01:b4:3a:6a:4f:07:18:d9:d2:21:3d:
                    bd:ab:7b:12:ee:26:90:4a:e0:f1:81:9a:f9:7b:85:
                    5f:f2:51:c3:15:c1:53:00:a3:08:99:7c:42:37:85:
                    07:94:e2:96:c2:55:95:a7:7b:da:a1:ec:35:8c:cb:
                    0a:82:c2:fb:49:e3:e6:24:f0:2f:6b:be:fc:24:5c:
                    0d:5f:a7:2a:75:a6:26:cd:f0:6b:f5:8c:43:83:eb:
                    40:15:a4:a2:cc:87:88:9d:3e:c9:c7:bc:30:28:9e:
                    44:9c:6c:4c:4e:f9:26:06:7e:90:65:b9:bc:a0:50:
                    5c:ad:3a:81:39:28:4d:08:ef:f0:36:59:46:c6:27:
                    d9:2a:dd:8b:05:6b:33:5c:60:11:fe:80:8f:47:2e:
                    d7:40:1a:e9:c9:f7:13:13:7b:47:43:58:ed:73:15:
                    87:1d:bc:4e:ec:a5:fc:28:66:77:4c:49:cc:15:f3:
                    37:24:35:37:06:ff:63:a7:44:72:02:76:6e:f3:87:
                    27:ad:cc:b6:e6:11:2c:1d:52:20:0b:81:af:52:e1:
                    df:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A8:FA:AA:68:0A:19:2A:40:F2:32:36:ED:D9:9A:58:2D:12:9A:7E
            X509v3 Authority Key Identifier:
                keyid:06:85:BB:63:77:E4:38:23:F6:EA:F7:CD:0E:E0:4B:7B:50:8B:B4:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c3:0c:e8:1f:6f:b2:66:6b:a1:89:98:31:d6:a3:6b:7e:38:
         cf:97:ec:0e:c8:0a:35:c3:a8:7a:27:36:2e:f8:16:e6:42:8e:
         9a:7c:69:e9:b1:1d:ba:1a:6e:17:42:01:c9:99:7a:62:bf:a2:
         ed:3b:83:3a:e1:1e:5a:84:9f:6f:85:10:28:73:5c:64:cc:9b:
         39:a1:bc:07:0c:32:5f:aa:87:53:56:db:19:2b:e9:c3:65:0a:
         10:c9:96:74:04:10:32:22:b2:cd:50:f2:3f:b5:ca:03:1b:e8:
         91:59:06:51:78:bf:69:38:88:dd:ce:23:fa:0a:1d:39:90:0a:
         3f:6d:43:58:74:af:ee:b1:e2:7e:bb:f7:9a:d7:99:5c:10:69:
         0a:90:43:d8:1f:1a:47:e1:26:f4:5b:e8:34:20:1e:5e:4d:cb:
         5c:f1:e9:03:ab:09:c8:d1:c8:44:9e:28:0e:20:e0:23:a8:9b:
         3e:f2:8e:ba:00:47:9a:49:ea:24:4e:e7:22:2d:8e:f2:da:a9:
         b5:41:9b:82:d6:e9:52:fe:93:c4:0f:dc:19:6a:a0:f0:b0:9e:
         ab:53:a2:58:52:9a:ec:0e:56:7b:e0:ff:87:f9:84:93:ed:b5:
         bd:f1:e7:19:d5:d5:42:28:07:77:3e:5c:26:e8:e7:c8:15:0b:
         08:9a:14:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:15:43 2026 by rpki-client