Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.mft
File:                     A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.mft (raw, json)
Hash identifier:          zfc0CcayZVuYSJiOkcJLrrRJNzioOE10XWaNCAd4KOU=
Subject key identifier:   1E:78:23:6E:A7:47:DD:79:40:EC:15:F5:02:57:C6:36:C4:EF:23:C2
Authority key identifier: A3:12:4B:CE:5C:32:36:ED:EC:70:B3:89:72:51:EE:E2:3B:3F:1B:E9
Certificate issuer:       /CN=A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9
Certificate serial:       36B95B9EDF3C01D6D256B4ECD720B5C313A3D7ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.mft
Manifest number:          94
Signing time:             Mon 02 Mar 2026 01:00:16 +0000
Manifest this update:     Mon 02 Mar 2026 00:55:16 +0000
Manifest next update:     Tue 03 Mar 2026 01:21:16 +0000
Files and hashes:         1: 3138312e3139312e3133362e302f32322d3332203d3e20323731303739.roa (hash: N+VS1gEZX19mdKurLnVGGGidsfPq2fXzteV2UkYkHBM=)
                          2: 323830343a373566303a3a2f33322d313238203d3e20323731303739.roa (hash: 0pHtEVmtptfCW1hlsfzp0qcUp3I9S9GwoWoaQ04Zss8=)
                          3: A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.crl (hash: 2TG8BvrFBXKxBeLUPMLF2Qwvtf6fSz6/CH+YQcg+Azg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.crl
                          rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 01:21:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b9:5b:9e:df:3c:01:d6:d2:56:b4:ec:d7:20:b5:c3:13:a3:d7:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9
        Validity
            Not Before: Mar  2 00:55:16 2026 GMT
            Not After : Mar  3 01:21:16 2026 GMT
        Subject: CN=1E78236EA747DD7940EC15F50257C636C4EF23C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:80:94:51:4b:2f:89:3c:84:e7:1d:08:bc:2f:
                    21:bb:43:78:10:bc:b8:65:ae:72:c2:bb:72:6f:6b:
                    ca:6e:4d:ea:a3:e5:2e:dc:b4:1c:4f:dd:d5:a6:c4:
                    6a:48:e7:09:5b:8f:1b:ac:27:b7:d7:cd:a2:1d:bd:
                    ac:28:ef:aa:50:9c:df:aa:9e:a1:ea:ee:eb:20:b7:
                    d8:14:5d:7f:e1:74:53:9b:f4:dd:38:eb:b6:90:93:
                    7e:ee:12:8a:05:36:ac:72:e1:e4:71:16:41:0f:35:
                    36:62:f0:00:4b:1b:d5:2b:8a:1e:2a:84:26:fb:83:
                    69:7d:ab:b5:8b:78:c8:a8:9d:6f:58:27:d0:9d:a1:
                    05:44:64:c7:20:be:b1:1c:e7:89:5f:e2:96:e0:2c:
                    af:4b:a7:9f:b0:67:34:e3:9f:65:b3:f4:5b:cf:cc:
                    9e:8c:34:74:e7:fd:1f:ea:0c:4d:26:95:07:a2:cc:
                    c3:24:77:54:05:de:a1:78:e8:bc:14:23:e5:67:89:
                    31:cc:35:62:26:95:b0:fe:21:b7:e2:6c:3d:b3:ff:
                    68:a0:2f:8e:da:fc:d9:dc:fc:aa:31:54:a6:4a:5f:
                    76:60:da:98:09:65:a7:a4:7f:2d:35:17:a2:ee:77:
                    6f:7a:11:e9:b8:f8:92:d5:c3:ad:42:c5:15:82:03:
                    ad:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:78:23:6E:A7:47:DD:79:40:EC:15:F5:02:57:C6:36:C4:EF:23:C2
            X509v3 Authority Key Identifier:
                keyid:A3:12:4B:CE:5C:32:36:ED:EC:70:B3:89:72:51:EE:E2:3B:3F:1B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:a3:af:07:33:0c:69:9a:fc:fe:03:41:74:9a:bb:39:76:6c:
         fc:7f:95:79:6d:bc:80:a0:78:3f:3f:26:e4:1a:e5:fb:ea:f2:
         20:d1:bf:74:cf:09:55:6f:f0:ba:14:09:41:99:4e:2a:49:ea:
         86:77:e8:31:81:13:eb:74:af:58:c8:7b:a1:34:ab:6a:c6:5a:
         ff:25:36:9b:84:47:a0:4b:4f:61:87:57:fb:f9:6b:a6:11:29:
         58:df:7b:23:11:69:1e:01:9d:a2:0e:7e:09:a7:30:be:e1:d6:
         64:f7:5f:25:a1:81:6b:ee:07:a1:00:16:dd:d1:d7:a0:af:8a:
         c7:6d:b0:bc:7b:f5:a1:d5:76:97:5b:cb:1b:61:0b:f2:fd:ab:
         d1:18:2c:db:2f:a1:4b:4e:36:ab:3f:ee:5a:ee:39:df:68:88:
         00:c0:ef:01:79:52:f4:01:02:83:88:4d:a5:0f:e4:17:ed:95:
         b9:db:0a:26:00:be:98:1e:cf:1b:1d:78:44:1e:0a:7d:b9:ae:
         1c:47:f6:8e:9c:88:dc:ed:b2:51:77:5d:14:f8:b2:d7:8d:3e:
         41:4d:29:b2:11:bb:f7:d9:0e:07:0e:fa:a8:c8:10:13:1b:5b:
         b6:08:c4:3f:9e:59:8b:49:94:b4:3c:44:8b:4f:5a:e4:32:3a:
         ce:89:cf:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:04:12 2026 by rpki-client