Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
File:                     85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft (raw, json)
Hash identifier:          wMDq1rANm1+gYsibwvObRRWrNmArnC/matAnAVvXQrU=
Subject key identifier:   CC:A7:1A:41:DC:47:DE:A0:74:39:C6:48:01:59:2B:B1:6C:CB:DD:4F
Authority key identifier: 85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB
Certificate issuer:       /CN=85EE0CD661887CC88F64F6B4BE9D420426E200DB
Certificate serial:       32017CA65F76CDE0176908816338A9963D0B158C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
Manifest number:          03A3
Signing time:             Mon 02 Mar 2026 11:52:55 +0000
Manifest this update:     Mon 02 Mar 2026 11:47:55 +0000
Manifest next update:     Tue 03 Mar 2026 13:11:55 +0000
Files and hashes:         1: 323830343a383532303a3a2f33322d3334203d3e20323732353539.roa (hash: 62LOMhvbmOJdbTGkjcygK0r0w7DTO+g8VM0cQfmxQ4g=)
                          2: 85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl (hash: pMsRDcxvzTVW5XIFhhHjLF0haR/jSssj3LOOp2BKGrI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl
                          rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 13:11:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:01:7c:a6:5f:76:cd:e0:17:69:08:81:63:38:a9:96:3d:0b:15:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85EE0CD661887CC88F64F6B4BE9D420426E200DB
        Validity
            Not Before: Mar  2 11:47:55 2026 GMT
            Not After : Mar  3 13:11:55 2026 GMT
        Subject: CN=CCA71A41DC47DEA07439C64801592BB16CCBDD4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:27:3e:f8:20:cd:f5:68:ec:eb:33:c9:3e:d1:
                    54:d5:37:f0:5c:9a:81:3e:f5:b3:0d:df:63:0a:6a:
                    5f:29:59:55:5b:1c:87:64:3a:07:26:2e:e5:9f:d2:
                    48:5b:df:46:96:76:20:4e:4e:98:a1:f2:c8:48:2b:
                    b2:4a:0b:d8:fa:2c:dc:61:53:55:6c:93:63:21:7b:
                    ee:60:1c:eb:4b:61:92:85:91:cc:0d:7a:2f:79:d8:
                    7c:a2:98:66:d3:13:4c:de:a1:1c:78:c6:37:68:ca:
                    d8:4e:6e:18:57:a3:b5:d1:01:7c:d4:45:ae:94:32:
                    f4:d8:fb:b5:2d:0f:18:5c:c0:72:20:60:04:46:7c:
                    e8:ff:28:1e:05:93:4f:c1:8d:01:37:e2:7b:5c:c0:
                    5d:ba:8d:d1:7f:c4:53:55:7e:08:1b:fd:f6:7c:d5:
                    ae:9a:05:14:f7:3d:d4:3d:72:25:6d:31:37:50:3b:
                    ab:e4:03:ef:dc:19:35:5a:78:c7:d6:df:86:8a:af:
                    41:63:20:20:d9:ab:87:bc:ae:72:2d:2b:a9:62:1e:
                    74:9e:a5:17:25:83:bc:1c:fc:1d:3a:65:86:1f:ed:
                    bd:68:0f:f4:99:8c:e6:c9:8a:ea:cb:de:90:e1:a7:
                    98:64:f3:19:07:f8:f0:cc:c6:c9:d9:7f:d5:61:83:
                    1f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A7:1A:41:DC:47:DE:A0:74:39:C6:48:01:59:2B:B1:6C:CB:DD:4F
            X509v3 Authority Key Identifier:
                keyid:85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e3:3b:09:8b:54:49:db:f5:7b:06:5f:69:3a:43:73:18:dc:
         28:87:c0:0e:3f:99:27:d6:95:56:9b:ed:bd:e0:28:07:cd:6a:
         a1:8b:dc:19:fb:2b:43:5f:99:bf:59:de:e2:ab:f4:3f:b2:65:
         70:a1:1a:a4:de:0a:5c:48:9e:48:46:29:05:04:4e:a1:46:8d:
         f4:50:66:1a:31:06:7d:01:50:77:1c:d5:a7:6d:63:72:53:bd:
         bc:57:7c:03:66:58:f8:3e:fa:1b:f5:89:d4:3f:9c:22:e8:df:
         e1:d9:fa:a8:6c:da:a8:42:cf:69:1d:5c:23:b5:b5:7f:00:08:
         57:4b:5f:de:f8:83:3f:45:25:d0:39:cd:8e:82:35:98:a5:c9:
         66:d2:e6:b5:5c:60:5c:94:11:02:c6:63:3a:fe:90:08:b4:5b:
         aa:d1:c1:40:03:93:b6:39:45:97:bb:19:ec:6b:1f:84:08:d3:
         46:ea:9f:a5:e5:25:ff:ee:97:16:73:5d:ff:4e:61:05:b8:9f:
         87:f6:3e:a9:0f:01:a6:f6:96:c0:19:00:dd:73:3f:3d:e2:04:
         da:6c:59:ea:f6:5f:87:a7:b3:65:40:0a:d1:72:ee:7d:e5:7f:
         79:9c:bb:62:99:8c:8b:1e:b2:94:04:c2:a9:e6:1d:8e:2d:91:
         52:37:e6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:28:00 2026 by rpki-client