Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
File:                     DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft (raw, json)
Hash identifier:          ELAlowFbAG9PfFLWc7SmGfycB59Yy1JnwKqdnlrk7Rs=
Subject key identifier:   F3:16:B8:42:3F:0A:BE:27:0A:F4:CF:77:E7:D6:64:1E:F8:81:BD:B0
Authority key identifier: DF:D4:20:BE:EE:86:65:8C:69:BF:7B:F0:25:AB:DE:B3:5F:72:3B:3D
Certificate issuer:       /CN=DFD420BEEE86658C69BF7BF025ABDEB35F723B3D
Certificate serial:       08491ACCED0A101D756351AED212D20F17995536
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
Manifest number:          03A5
Signing time:             Mon 02 Mar 2026 16:32:32 +0000
Manifest this update:     Mon 02 Mar 2026 16:27:32 +0000
Manifest next update:     Tue 03 Mar 2026 17:17:32 +0000
Files and hashes:         1: 323830343a386230303a3a2f33322d3438203d3e20323733373036.roa (hash: Mfi2YXsn4usozNTkApzXZOTp/npyplnvShsrNKnIPOg=)
                          2: DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl (hash: YEuoJQ27JiDUR70Gu2PieplRr035e5K+afQoWXfP5AE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl
                          rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 17:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:49:1a:cc:ed:0a:10:1d:75:63:51:ae:d2:12:d2:0f:17:99:55:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFD420BEEE86658C69BF7BF025ABDEB35F723B3D
        Validity
            Not Before: Mar  2 16:27:32 2026 GMT
            Not After : Mar  3 17:17:32 2026 GMT
        Subject: CN=F316B8423F0ABE270AF4CF77E7D6641EF881BDB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b3:ae:56:a1:4c:6e:c2:72:07:57:b9:01:c2:
                    24:e8:05:95:59:06:77:d5:d5:08:a3:d3:53:80:72:
                    a3:b7:56:f0:89:6d:76:6c:26:c7:45:c2:c4:cf:77:
                    66:93:8f:6d:b5:ad:e4:e6:db:c7:31:4d:d1:6c:cc:
                    3d:a2:7a:61:40:fa:80:8b:f8:8e:62:19:b9:f1:4f:
                    cf:2a:04:e9:9c:af:cb:2a:9c:84:4a:0b:62:cd:62:
                    fe:ca:db:34:d7:71:4a:f3:ab:05:85:74:f1:a9:be:
                    19:2a:b0:be:ab:dd:74:cb:db:64:d9:8a:68:f4:90:
                    c9:74:3d:08:75:29:dd:ef:0d:b2:9b:5e:9f:49:29:
                    00:4d:78:b4:67:ea:81:18:66:68:e4:7f:de:a5:55:
                    66:54:50:51:f5:07:b5:83:5f:92:af:ab:20:ca:9a:
                    4d:47:79:1d:31:1f:9f:6f:a2:e3:70:2c:39:e3:2c:
                    64:53:ba:b7:df:f0:a3:dc:90:aa:e6:ad:9f:4d:99:
                    70:e6:97:84:b3:cc:43:e7:5a:e9:96:09:c6:fb:8a:
                    45:1b:b1:40:50:3f:09:f2:f5:ea:49:be:ea:f3:bc:
                    9e:a5:60:0e:c9:2e:ea:24:f1:c6:bf:2a:85:ce:59:
                    67:53:08:e5:51:ac:84:45:3d:69:9f:48:55:10:f8:
                    22:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:16:B8:42:3F:0A:BE:27:0A:F4:CF:77:E7:D6:64:1E:F8:81:BD:B0
            X509v3 Authority Key Identifier:
                keyid:DF:D4:20:BE:EE:86:65:8C:69:BF:7B:F0:25:AB:DE:B3:5F:72:3B:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ee:5c:ac:3e:1c:e8:80:67:41:62:a8:22:c6:48:0e:43:9e:
         d0:34:57:dc:a8:40:5f:d0:c8:91:f9:f4:9e:7d:7b:32:8b:a6:
         22:6c:9a:40:32:de:84:1f:23:f6:8d:14:a7:9c:e2:72:e9:75:
         79:0c:80:4f:41:51:73:2c:f9:2f:c8:09:fc:88:d8:25:4a:63:
         a9:f2:e4:cc:83:29:78:62:1b:78:47:c1:04:79:f8:71:38:42:
         50:87:f0:fa:d7:fc:2e:db:1c:a7:d2:30:d1:b8:85:d2:7d:d7:
         d0:34:b1:ae:de:f5:5b:95:fa:67:39:9d:86:dc:a5:b0:3e:6f:
         3c:87:6f:d2:9a:b7:14:ba:30:a1:7b:d7:d2:77:43:a6:e8:32:
         3d:06:9f:9b:89:b4:31:e5:8a:d9:b6:b0:b0:34:b8:d6:54:ca:
         f4:81:2d:ba:68:bf:53:17:33:5d:d8:ed:2c:a9:d2:da:94:af:
         98:56:5a:92:5c:b4:85:36:b9:55:2b:27:de:72:87:84:84:ba:
         f4:3c:39:15:88:7f:a8:18:f1:bd:93:cf:ea:1b:c4:b1:8b:9a:
         c0:cd:11:c7:29:9a:4f:ae:62:f7:69:2f:19:08:35:ac:f2:eb:
         ef:60:21:bf:7e:b6:59:b3:24:fb:b8:e1:2a:6c:f8:9f:9d:d4:
         8b:c8:d3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:46:00 2026 by rpki-client