Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft
File:                     0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft (raw, json)
Hash identifier:          888/kLbZ2hrTbpCk9JICjMGuelRn1eji6zeFuuo5LW0=
Subject key identifier:   8C:2F:0A:80:74:2B:D3:F7:2D:0E:78:57:A0:04:0F:88:0F:D1:C3:70
Authority key identifier: 0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96
Certificate issuer:       /CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
Certificate serial:       1C6319DB2C957D2B5D9A549439CD7ED1AB818AFE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft
Manifest number:          03D4
Signing time:             Mon 02 Mar 2026 07:18:26 +0000
Manifest this update:     Mon 02 Mar 2026 07:13:26 +0000
Manifest next update:     Tue 03 Mar 2026 10:36:26 +0000
Files and hashes:         1: 3137302e37382e33302e302f32342d3234203d3e203532353837.roa (hash: OQrPAaufm/IIA/ux/gBP/eRTC7wVuWaor0CIJhQqO0M=)
                          2: 3137302e37382e33312e302f32342d3234203d3e203532353837.roa (hash: GVb5ACoACo41NNBiKijTXhHtLaywGpWaqrMw6x6JqAQ=)
                          3: 3137372e38372e3230302e302f32322d3232203d3e203532353837.roa (hash: v/kBm1v+isP2XXTLmXnKuTp9Rqywg/NC0RFRzgAr/9E=)
                          4: 3137372e38372e3230312e302f32342d3234203d3e203532353837.roa (hash: iEOJ+g7sC95DXUReWOJ5kvXlAdgnFQ55nizfxDdLPSg=)
                          5: 3137302e37382e32382e302f32322d3232203d3e203532353837.roa (hash: QkCov4dW4mV16qROCveAsn2j0+OUgF2BegrvBH0L1FA=)
                          6: 3137372e38372e3230302e302f32342d3234203d3e203532353837.roa (hash: tlWD0HzHIhfkJclR0v8ssrdgm/1+o7U+hMuXSlvl9Pc=)
                          7: 3137372e38372e3230322e302f32342d3234203d3e203532353837.roa (hash: qe9Jff+tGp27uj0Fv/r4SWJj8LOqDymfhQOPFTvPvVA=)
                          8: 0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl (hash: /d06/rvXC/opQ8BC4vh9nK+fF3caS+iXYyNFbxrMfRo=)
                          9: 3137372e38372e3230332e302f32342d3234203d3e203532353837.roa (hash: IDaJJjIwRkalTiqK0J3wyePr87APf8T4eQ7uvcqZAhI=)
                          10: 3137302e37382e32382e302f32342d3234203d3e203532353837.roa (hash: fmyiRBx3ikOjVKsXkQ8cpvxr8wjsvyIXdzNlU8vv5+g=)
                          11: 323830343a386563303a3a2f33322d3332203d3e203532353837.roa (hash: wpL10v59H954g33BuOd7BGNKMuPnDKrZ2Zn/nnChX1U=)
                          12: 3137302e37382e32392e302f32342d3234203d3e203532353837.roa (hash: ZVRpjy5LyDeaPoHH9Yq0IsvVayvZvPCcq+8GiojQ0YU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl
                          rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 10:36:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:63:19:db:2c:95:7d:2b:5d:9a:54:94:39:cd:7e:d1:ab:81:8a:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
        Validity
            Not Before: Mar  2 07:13:26 2026 GMT
            Not After : Mar  3 10:36:26 2026 GMT
        Subject: CN=8C2F0A80742BD3F72D0E7857A0040F880FD1C370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d0:ad:df:1f:98:7e:c4:0a:e8:39:6d:e1:0a:
                    f0:14:3e:cf:18:df:a5:55:1e:90:7e:5d:e0:5e:a5:
                    e3:8c:f8:80:13:28:fb:05:e6:42:d7:c8:2c:5b:b2:
                    84:0c:59:11:9d:81:b8:52:21:b9:bc:74:85:99:bb:
                    f4:8e:43:ee:05:95:15:06:9f:d4:97:0c:76:14:8c:
                    e7:1b:75:d9:bb:17:e7:d7:d2:e3:30:4d:73:21:f6:
                    06:c9:3d:a8:5c:f5:87:12:82:c0:06:a6:e2:a8:c8:
                    fa:78:ab:e1:d2:45:5a:e0:0f:98:6a:0a:fb:f8:6a:
                    4d:47:05:ea:1d:29:87:8d:b3:f8:f4:6f:21:44:e8:
                    96:d1:00:a2:6e:e1:d0:2b:0c:e6:4d:73:33:44:09:
                    0c:b2:c1:f5:e7:ad:96:bb:1e:81:1b:0e:0e:ef:8e:
                    6a:5a:be:ea:af:cb:ae:e4:25:8c:d2:20:1b:90:35:
                    5c:23:b5:81:5e:e1:8f:5d:40:46:d3:5a:91:b4:63:
                    4f:fc:9b:85:29:ba:66:9e:07:96:a4:bc:37:bd:15:
                    7f:db:23:8c:e3:a6:78:95:bf:f7:15:93:12:9b:cc:
                    a5:42:8d:9b:4a:17:39:fc:8d:f5:7c:d8:53:f7:a3:
                    77:4d:f7:6e:df:27:f4:5e:22:8b:57:7a:1d:0f:7e:
                    5e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2F:0A:80:74:2B:D3:F7:2D:0E:78:57:A0:04:0F:88:0F:D1:C3:70
            X509v3 Authority Key Identifier:
                keyid:0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:46:df:4a:1c:83:09:8f:6c:38:a9:49:a6:49:c2:2f:03:2b:
         d7:d2:8c:1f:1e:b3:f1:79:05:5b:45:06:f8:c8:db:6d:73:b0:
         72:61:40:3d:ea:76:4f:5d:d5:b2:7b:bf:41:ea:41:bf:19:68:
         52:99:f0:a8:f5:15:68:5a:ee:89:2b:8b:6c:0b:ad:a3:2f:13:
         3a:ea:29:ec:0b:61:4e:54:cb:7f:34:fe:75:8d:ab:03:44:96:
         3d:9f:fd:57:6d:65:d1:e0:44:c6:81:97:b8:19:ed:30:aa:72:
         b0:00:1b:68:9e:00:2b:b6:14:07:88:c2:4a:20:8d:95:d1:03:
         f6:e0:21:05:a7:1b:25:30:52:50:9d:2c:97:82:d8:04:9e:b8:
         d7:bd:ed:82:1e:ac:1b:d7:1f:1b:04:d3:35:00:02:60:8d:5f:
         4c:be:d3:3a:8b:92:f8:0c:19:75:8d:12:db:11:5d:7e:01:ec:
         e5:81:f6:f0:92:30:0c:7e:b2:db:42:ca:40:a3:a8:92:2d:59:
         c0:98:36:5f:bb:69:3c:34:ae:1a:b8:3d:f4:20:c6:cd:33:9d:
         4e:29:4a:00:7f:a3:1a:26:9d:ac:a3:6e:6a:19:cc:6d:73:dc:
         5f:87:81:d8:8d:b8:17:76:a4:44:75:b4:16:aa:20:ec:5c:5e:
         bc:6e:fc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:31:04 2026 by rpki-client