Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.mft
File:                     357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.mft (raw, json)
Hash identifier:          OuJpcMuAgLwRIwlcC3Jr3eKrrFAgg0aSO66QpLQL680=
Subject key identifier:   17:A6:0E:CA:1C:DA:D7:31:73:C7:69:B9:DE:29:9A:78:18:93:78:05
Authority key identifier: 35:7C:66:AE:DE:5C:85:D6:2E:43:F2:E7:B4:7A:9A:4D:2A:DB:ED:BA
Certificate issuer:       /CN=357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA
Certificate serial:       3D09655932F0B5BD3E572B2B18B01C4DE00280E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.mft
Manifest number:          038A
Signing time:             Mon 02 Mar 2026 01:29:30 +0000
Manifest this update:     Mon 02 Mar 2026 01:24:30 +0000
Manifest next update:     Tue 03 Mar 2026 02:32:30 +0000
Files and hashes:         1: 357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.crl (hash: AErTCj8q6/DwRe76ud+lDJWy3nIknm5I9CB/frynG3M=)
                          2: 34352e3136392e3135362e302f32332d3233203d3e20323638313136.roa (hash: ymbi2Lfx4ZtV8gF2MRQp8E/O2Ogj/N6UCPxsNEcjK1o=)
                          3: 34352e3136392e3135382e302f32342d3234203d3e20323638313136.roa (hash: bcalPYU+tSK5huc2habI4064FP5L9Hu4d1Eb3RLCDuQ=)
                          4: 34352e3136392e3135362e302f32342d3234203d3e20323638313136.roa (hash: PdAsfcUWYQmaT1Bg5r5rYn4qPB4k4eo8osAztKSAuSc=)
                          5: 34352e3136392e3135372e302f32342d3234203d3e20323638313136.roa (hash: LBBRxAm1NuTZIL2xCkHz3joELasKM//dRUSXbtdYKZk=)
                          6: 34352e3136392e3135392e302f32342d3234203d3e20323638313136.roa (hash: XbN9SoDNFRG3oLApYccZ49Db4xljngYXRzPIXreIPjQ=)
                          7: 34352e3136392e3135362e302f32322d3232203d3e20323638313136.roa (hash: KFYPGotuoBBVUgUgZEZEqnBZzV30AR7eWH3EpVOvDio=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.crl
                          rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 02:32:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:09:65:59:32:f0:b5:bd:3e:57:2b:2b:18:b0:1c:4d:e0:02:80:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA
        Validity
            Not Before: Mar  2 01:24:30 2026 GMT
            Not After : Mar  3 02:32:30 2026 GMT
        Subject: CN=17A60ECA1CDAD73173C769B9DE299A7818937805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:40:39:44:6d:63:7c:0a:35:73:76:41:19:33:
                    ce:33:68:ec:1c:12:c0:09:1a:7d:b9:14:1c:3c:9f:
                    05:02:63:02:2f:8f:75:53:43:a5:dd:1a:22:23:e8:
                    9b:d9:8e:53:d2:7d:37:8f:2c:bd:6c:a7:91:c4:79:
                    dc:b3:cf:42:66:3b:9a:e1:7e:54:04:15:50:93:61:
                    4e:01:04:1e:13:3b:e0:73:c9:31:5c:f5:91:6e:85:
                    e5:a9:b6:d6:12:15:82:07:01:06:9c:e8:a6:08:96:
                    25:15:54:cc:ff:7a:40:ad:af:d9:01:51:91:07:24:
                    52:5d:67:97:60:d6:f7:56:67:6a:75:88:38:c4:4a:
                    92:c7:ac:4f:c3:f3:f7:90:81:d6:23:59:b1:60:5d:
                    20:f8:4b:04:c9:b0:7d:4d:e2:9a:e9:f4:61:fc:6c:
                    94:5f:b2:52:1f:41:62:3d:a7:8c:3a:23:49:37:89:
                    62:d5:85:70:73:01:c6:72:36:c4:bd:72:c2:30:ce:
                    3a:de:39:a3:37:60:a0:f4:de:96:86:09:cb:91:10:
                    61:a3:51:4a:1c:cd:e4:85:04:27:51:3f:a4:c5:15:
                    62:07:d9:18:0a:ed:49:b0:73:f1:2d:b3:da:c3:7b:
                    7d:d1:53:5b:b2:53:c0:8d:9a:98:a9:6d:aa:b0:96:
                    d4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A6:0E:CA:1C:DA:D7:31:73:C7:69:B9:DE:29:9A:78:18:93:78:05
            X509v3 Authority Key Identifier:
                keyid:35:7C:66:AE:DE:5C:85:D6:2E:43:F2:E7:B4:7A:9A:4D:2A:DB:ED:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:22:37:3d:b9:42:5c:72:a4:69:d5:94:b0:86:56:01:2d:cf:
         22:49:e5:bc:f4:15:43:98:df:cf:9d:0b:76:78:fa:9c:ac:65:
         e2:ed:51:74:fb:a4:e1:65:c9:4b:62:da:25:be:41:2d:62:98:
         fa:40:c6:dd:5f:df:2d:c8:2b:f1:18:5a:32:cb:0d:5c:0a:52:
         f3:9d:3e:bd:04:d4:ff:d7:1d:c5:7d:6d:0d:d6:1d:76:46:50:
         5e:d0:99:52:31:c4:07:19:32:c4:1d:10:66:74:3c:ad:da:7f:
         3a:86:c6:a3:ac:59:35:ac:fc:53:5c:4e:0b:ca:dd:55:ca:25:
         c1:9a:5d:a3:b4:7a:68:eb:d6:79:f6:b3:57:77:16:cf:15:b1:
         45:6e:b2:c2:e3:03:37:f1:8f:fb:a4:17:18:21:b5:46:47:e1:
         08:4d:a2:dd:78:36:af:82:d5:cb:d7:f0:b2:e6:ab:d4:1a:df:
         88:aa:ea:d9:89:2f:fa:c0:85:48:cf:4e:00:ad:3c:71:3b:43:
         51:c1:81:c9:db:17:be:40:9d:80:19:c8:ed:14:0e:40:35:49:
         0c:e0:4a:40:25:44:01:37:aa:52:47:f7:38:87:b2:09:70:6b:
         9b:87:13:b5:f5:cd:84:7c:0d:10:c8:94:e4:2c:b2:e1:5f:e0:
         e0:ce:83:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:46:16 2026 by rpki-client