Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft
File:                     98525FF70BD67C78C36BE3190E3463098E95DF2C.mft (raw, json)
Hash identifier:          IWP6lzSm3gS0ZdsBkDfBAMRBAwSiFbRFp5GLnvOFs9I=
Subject key identifier:   31:27:6D:7B:77:3D:F2:85:48:53:A3:8D:9B:C6:45:6F:A0:90:FF:86
Authority key identifier: 98:52:5F:F7:0B:D6:7C:78:C3:6B:E3:19:0E:34:63:09:8E:95:DF:2C
Certificate issuer:       /CN=98525FF70BD67C78C36BE3190E3463098E95DF2C
Certificate serial:       784125EE4F77053865650059878B9C26BE4A7B58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft
Manifest number:          03A1
Signing time:             Mon 02 Mar 2026 01:41:02 +0000
Manifest this update:     Mon 02 Mar 2026 01:36:02 +0000
Manifest next update:     Tue 03 Mar 2026 05:05:02 +0000
Files and hashes:         1: 34352e342e3130342e302f32322d3234203d3e20323636303633.roa (hash: 3IzG2u9Tvm/ZvJfm67J3rQInKqJ6ykRL4gHSU5shqrA=)
                          2: 323830343a333966633a3a2f33322d3438203d3e20323636303633.roa (hash: CgKsLGyHlMSxobtOeR+Dmgxw5TCZP8rnC65enPODVrI=)
                          3: 98525FF70BD67C78C36BE3190E3463098E95DF2C.crl (hash: fhZs7l7UqhHS1MNNctKhQ95HRWF5424zDjXTMQXA3bk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.crl
                          rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 05:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:41:25:ee:4f:77:05:38:65:65:00:59:87:8b:9c:26:be:4a:7b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98525FF70BD67C78C36BE3190E3463098E95DF2C
        Validity
            Not Before: Mar  2 01:36:02 2026 GMT
            Not After : Mar  3 05:05:02 2026 GMT
        Subject: CN=31276D7B773DF2854853A38D9BC6456FA090FF86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0f:13:41:e0:31:8e:a6:da:58:d5:8a:aa:9c:
                    ad:d1:3e:f8:e9:73:c1:b1:5c:bc:49:43:81:07:ab:
                    da:68:25:17:47:f7:93:f9:15:77:85:ef:c8:78:fb:
                    af:98:b5:48:35:d9:4e:ad:ee:07:88:cc:e6:f1:25:
                    d7:4a:84:b9:b9:9d:6a:a0:32:6a:d3:dc:3b:5c:3b:
                    e8:cb:13:76:71:c2:c5:6d:34:41:4e:28:da:1a:df:
                    19:0b:0e:60:c7:32:af:0c:c2:da:c5:3f:d9:d4:5f:
                    42:53:7d:b5:28:bb:c5:7e:e9:e3:b4:1d:01:c8:1a:
                    e8:0f:5a:e6:f2:be:71:ce:f7:10:15:76:86:bc:31:
                    86:c8:d1:1b:40:49:f2:53:06:91:c8:30:2d:64:d9:
                    cd:c1:d7:b1:fa:e4:eb:24:d5:cc:4b:43:58:67:c5:
                    7c:8a:30:d6:07:8b:09:1d:ee:ed:b9:8e:ef:ed:4b:
                    ff:c0:36:e2:22:b2:6f:4e:6b:e3:bf:52:06:0e:be:
                    72:55:4f:0f:08:86:4f:dd:e0:b5:08:db:de:8d:3d:
                    6d:cf:26:6e:17:ad:6d:32:67:20:0b:99:cc:97:71:
                    42:8b:32:36:d6:ad:8c:d7:7f:22:26:41:7f:d0:d7:
                    49:f3:63:7c:09:9a:16:9b:77:ae:9b:90:63:2f:98:
                    b8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:27:6D:7B:77:3D:F2:85:48:53:A3:8D:9B:C6:45:6F:A0:90:FF:86
            X509v3 Authority Key Identifier:
                keyid:98:52:5F:F7:0B:D6:7C:78:C3:6B:E3:19:0E:34:63:09:8E:95:DF:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:7a:20:5a:f7:fd:02:48:c6:5a:55:f4:8d:4d:ae:bc:dc:e0:
         29:cd:ec:cb:df:df:2d:33:3b:59:1f:bb:73:7c:cf:0f:0e:40:
         db:9a:19:21:8d:69:60:97:73:2c:af:d6:aa:9f:97:a6:55:19:
         3c:ee:d6:46:a8:20:a1:95:8d:b7:6d:16:15:37:06:e6:3c:1f:
         0e:8a:23:db:58:c9:c1:dd:4c:35:66:1d:2f:2c:af:e4:04:99:
         57:72:96:68:cd:3a:1d:a3:de:a5:3c:1d:3b:57:95:58:d8:4e:
         6a:9b:af:77:a9:b1:8f:fc:6e:c9:69:1a:10:22:8a:42:71:66:
         11:40:df:88:b3:0b:5a:44:43:ad:5d:28:8e:f3:54:6a:e0:4d:
         2f:df:ea:29:f7:05:32:32:4c:13:ad:5e:e5:d2:1a:f2:a2:21:
         8c:48:74:7c:5b:1f:2b:fe:a6:1b:85:04:0f:08:12:e9:59:9f:
         03:59:22:90:12:f7:0b:b3:de:60:d5:b8:db:6c:d2:2e:7d:4d:
         10:14:f1:70:4e:83:58:56:00:19:4a:7b:ce:ee:7a:40:87:85:
         52:a1:33:ff:00:a0:f8:70:76:14:0f:88:5c:7e:71:19:f0:08:
         52:e8:9b:45:4f:3b:a9:1b:b7:04:00:65:b9:ba:1c:ce:95:87:
         c7:95:f0:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUeEEl7k93BThlZQBZh4ucJr5Ke1gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTg1MjVGRjcwQkQ2N0M3OEMzNkJFMzE5MEUzNDYzMDk4
RTk1REYyQzAeFw0yNjAzMDIwMTM2MDJaFw0yNjAzMDMwNTA1MDJaMDMxMTAvBgNV
BAMTKDMxMjc2RDdCNzczREYyODU0ODUzQTM4RDlCQzY0NTZGQTA5MEZGODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+DxNB4DGOptpY1YqqnK3RPvjp
c8GxXLxJQ4EHq9poJRdH95P5FXeF78h4+6+YtUg12U6t7geIzObxJddKhLm5nWqg
MmrT3DtcO+jLE3ZxwsVtNEFOKNoa3xkLDmDHMq8MwtrFP9nUX0JTfbUou8V+6eO0
HQHIGugPWubyvnHO9xAVdoa8MYbI0RtASfJTBpHIMC1k2c3B17H65Osk1cxLQ1hn
xXyKMNYHiwkd7u25ju/tS//ANuIism9Oa+O/UgYOvnJVTw8Ihk/d4LUI296NPW3P
Jm4XrW0yZyALmcyXcUKLMjbWrYzXfyImQX/Q10nzY3wJmhabd66bkGMvmLhXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUMSdte3c98oVIU6ONm8ZFb6CQ/4YwHwYDVR0j
BBgwFoAUmFJf9wvWfHjDa+MZDjRjCY6V3ywwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3duRE1ITTEydkZkZ1dDclVVUWVUeGk0c1ZBaTdId2h4WXVQYkVZSmM5
QjQvMS85ODUyNUZGNzBCRDY3Qzc4QzM2QkUzMTkwRTM0NjMwOThFOTVERjJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4NTI1RkY3MEJENjdDNzhD
MzZCRTMxOTBFMzQ2MzA5OEU5NURGMkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N3duRE1ITTEydkZkZ1dDclVVUWVUeGk0c1ZBaTdId2h4WXVQYkVZSmM5QjQvMS85
ODUyNUZGNzBCRDY3Qzc4QzM2QkUzMTkwRTM0NjMwOThFOTVERjJDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAInogWvf9AkjGWlX0jU2uvNzgKc3sy9/fLTM7WR+7c3zPDw5A25oZIY1pYJdz
LK/Wqp+XplUZPO7WRqggoZWNt20WFTcG5jwfDooj21jJwd1MNWYdLyyv5ASZV3KW
aM06HaPepTwdO1eVWNhOapuvd6mxj/xuyWkaECKKQnFmEUDfiLMLWkRDrV0ojvNU
auBNL9/qKfcFMjJME61e5dIa8qIhjEh0fFsfK/6mG4UEDwgS6VmfA1kikBL3C7Pe
YNW422zSLn1NEBTxcE6DWFYAGUp7zu56QIeFUqEz/wCg+HB2FA+IXH5xGfAIUuib
RU87qRu3BABluboczpWHx5XwgQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:47:25 2026 by rpki-client