Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.mft
File:                     39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.mft (raw, json)
Hash identifier:          A9acs7NesPsH4uJj+LrPH1v5AuQ2563jnTZiF0Soq3g=
Subject key identifier:   3C:B4:7B:EB:DC:2C:62:CB:3B:46:59:10:42:B2:B1:4C:E8:2F:4B:31
Authority key identifier: 39:DB:9E:8B:0D:7E:2A:74:C7:FA:D5:FB:DF:12:55:B5:5A:8F:DD:5E
Certificate issuer:       /CN=39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E
Certificate serial:       14013D054F1BD62A70A3503E498926835F68E896
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.mft
Manifest number:          01A3
Signing time:             Mon 02 Mar 2026 12:14:31 +0000
Manifest this update:     Mon 02 Mar 2026 12:09:31 +0000
Manifest next update:     Tue 03 Mar 2026 16:12:31 +0000
Files and hashes:         1: 39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.crl (hash: 3gCG7DSngJIHAeOojgFNTIo6e9IkWYcuKLTDpbPHhZU=)
                          2: 323830343a336264633a3a2f33322d3332203d3e20323636313736.roa (hash: oYcp44bLibhjBd34YNYWnpWyJNcqoWLaR+cmxg2Pk48=)
                          3: 3139302e3139362e3234342e302f32322d3232203d3e20323636313736.roa (hash: Y0hBWzedH6u8hIuNnAI1d4XljUbZa7l01VaWq7Kuhac=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.crl
                          rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 16:12:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:01:3d:05:4f:1b:d6:2a:70:a3:50:3e:49:89:26:83:5f:68:e8:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E
        Validity
            Not Before: Mar  2 12:09:31 2026 GMT
            Not After : Mar  3 16:12:31 2026 GMT
        Subject: CN=3CB47BEBDC2C62CB3B46591042B2B14CE82F4B31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b9:57:74:53:7d:34:13:c3:9b:1e:74:f6:60:
                    85:55:00:b2:81:9a:d5:1e:a6:d2:be:31:3c:82:8d:
                    06:b3:c4:f5:4b:9c:7e:2d:f4:72:f1:06:a1:04:a1:
                    45:ec:33:b3:0a:bb:d0:18:bb:72:05:5a:a2:c5:80:
                    9b:34:ed:5e:b2:15:54:26:60:b9:f8:82:20:3d:ca:
                    04:7d:3a:14:77:bf:d2:d9:ea:3a:5f:91:b4:41:70:
                    1a:bb:3a:27:02:1f:ef:8c:dc:95:14:75:aa:df:19:
                    02:38:f5:42:00:76:fe:a5:c4:7c:bd:fa:11:5d:ce:
                    17:df:4f:bb:e1:80:ca:d7:c8:36:80:43:dc:ad:e5:
                    83:a0:ca:a8:c3:83:49:c8:f2:b9:95:d7:5c:f0:93:
                    f2:ae:17:2c:e1:36:a8:28:c5:1e:03:94:44:1e:a2:
                    1d:3d:5d:c6:35:0d:b3:f6:10:f2:b1:fb:de:ce:e5:
                    a2:ff:a8:1b:d0:68:47:a9:2a:fe:4d:b6:67:28:45:
                    14:54:8c:1a:7c:ea:d4:da:2e:75:d2:9a:77:39:a0:
                    58:c1:de:4d:59:6e:f4:16:85:4c:40:df:5e:33:15:
                    33:97:12:74:cf:a8:f1:e5:cd:44:08:ac:fb:87:79:
                    5a:0d:f0:6b:02:86:95:1f:c2:be:dd:33:42:34:64:
                    7f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B4:7B:EB:DC:2C:62:CB:3B:46:59:10:42:B2:B1:4C:E8:2F:4B:31
            X509v3 Authority Key Identifier:
                keyid:39:DB:9E:8B:0D:7E:2A:74:C7:FA:D5:FB:DF:12:55:B5:5A:8F:DD:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:be:18:c8:73:c3:b8:c5:27:f2:51:48:38:b6:b4:db:89:d5:
         e9:bc:f5:7d:c9:3b:27:d5:37:c9:59:9e:54:3b:5b:fe:50:56:
         a0:29:b7:c3:2c:73:a9:9b:23:3e:20:c8:a4:9c:7c:68:2a:97:
         b4:67:2e:db:ac:3c:8c:7b:c8:07:8b:fa:c4:53:c0:3d:e2:81:
         69:c4:90:8c:64:bc:48:e9:81:41:a9:37:4e:40:50:88:42:37:
         34:0a:fe:4c:1d:be:20:1a:7a:f6:73:ad:1e:00:c6:10:32:98:
         e4:09:73:44:66:cb:e1:67:d6:08:cb:ce:ae:fa:7d:00:89:4f:
         b8:fb:fe:58:e3:2d:6c:de:e6:50:08:0d:68:6c:0d:9a:7f:2a:
         5a:18:ba:81:f6:f6:b0:93:37:08:04:7b:6d:46:d6:dd:c4:c3:
         dc:c7:60:e5:ef:56:ba:71:e8:4f:82:86:31:6e:fd:70:69:90:
         d3:7c:29:28:e4:bf:20:b2:f2:17:ee:9f:cf:f2:c7:1f:70:79:
         75:78:f2:51:c8:bc:b7:72:c8:97:78:b3:fb:a2:cc:da:4b:8e:
         0f:32:4e:3d:b7:38:05:a3:97:a9:c9:73:3c:5e:1a:0d:e2:64:
         d4:b7:1a:bd:6e:36:db:79:97:c3:c2:b0:91:3d:a4:10:36:97:
         b9:3e:98:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:17:32 2026 by rpki-client