Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft
File:                     233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft (raw, json)
Hash identifier:          9KwrQKJmS6dcKVLrEyTi9DZhCMEd1CwbHwAQGnXZQYY=
Subject key identifier:   9D:70:E3:04:5C:C1:44:E9:1B:F2:CA:4E:A3:3B:6B:3F:1F:F3:89:9C
Authority key identifier: 23:3C:0F:0B:57:1F:DA:1C:33:13:BF:8A:F7:D6:86:C7:4B:AF:CB:41
Certificate issuer:       /CN=233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41
Certificate serial:       4078B9AEBE09F5243272B6CEB2A9BF4A769B73A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft
Manifest number:          03A2
Signing time:             Sun 01 Mar 2026 13:13:11 +0000
Manifest this update:     Sun 01 Mar 2026 13:08:11 +0000
Manifest next update:     Mon 02 Mar 2026 13:50:11 +0000
Files and hashes:         1: 323830343a353162303a3a2f33322d313238203d3e20323638343730.roa (hash: +m9YWZk3TMhLiqol4NpnwKiR2A38eOMIKyxmbrjEwwU=)
                          2: 34352e3136312e3137362e302f32322d3332203d3e20323638343730.roa (hash: infniEWP3j17myDo6uSPhVMIMf9cY06lNVvSV//w480=)
                          3: 233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl (hash: Q5+t0KWjCLx7XKg/hSZjLJodc8oQOnUKdwSGYfmfiAM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl
                          rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 13:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:78:b9:ae:be:09:f5:24:32:72:b6:ce:b2:a9:bf:4a:76:9b:73:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41
        Validity
            Not Before: Mar  1 13:08:11 2026 GMT
            Not After : Mar  2 13:50:11 2026 GMT
        Subject: CN=9D70E3045CC144E91BF2CA4EA33B6B3F1FF3899C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:98:ee:11:af:de:74:67:3f:a3:2d:27:ee:ce:
                    76:76:b5:aa:f6:34:75:22:57:ba:80:0b:21:26:61:
                    43:71:24:c2:35:6c:c6:3b:51:6d:70:e0:24:64:e9:
                    d5:4f:3d:1f:e6:83:6f:95:6f:0b:1e:cc:04:14:96:
                    12:d2:14:1e:da:19:52:39:df:72:12:44:71:14:6e:
                    56:29:45:73:36:54:8c:8e:78:ef:08:bf:bd:ff:37:
                    4c:9d:4b:44:ce:5e:59:48:75:31:84:50:14:df:fb:
                    6c:5f:25:e3:3d:d8:6c:a3:8f:08:f3:76:8c:ce:bc:
                    c6:2e:bd:89:f9:2a:bd:a5:e5:34:99:40:e9:6a:0c:
                    1c:e8:02:11:dc:93:5d:45:46:99:fb:58:5e:f2:d4:
                    03:ec:fb:0e:86:c0:75:ec:e9:88:52:0b:6d:10:46:
                    a8:bb:64:33:fe:00:98:28:3d:d8:97:39:10:38:bd:
                    d7:eb:5a:48:b6:a4:b8:1a:d0:9a:b0:ee:7c:d8:92:
                    e0:da:31:d4:c0:9a:1d:d3:a5:9f:92:59:ef:15:9b:
                    0c:10:c4:fa:0b:3e:5e:5f:14:63:85:6e:c5:08:e8:
                    7f:37:ac:c7:9b:6b:83:81:25:8f:5e:31:d0:c4:11:
                    f8:fb:29:4a:b8:60:39:98:3c:37:48:0e:26:2c:b5:
                    75:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:70:E3:04:5C:C1:44:E9:1B:F2:CA:4E:A3:3B:6B:3F:1F:F3:89:9C
            X509v3 Authority Key Identifier:
                keyid:23:3C:0F:0B:57:1F:DA:1C:33:13:BF:8A:F7:D6:86:C7:4B:AF:CB:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:b1:54:d2:97:fc:b0:0a:56:e1:7e:91:7a:8d:a1:90:dc:2a:
         18:ac:40:1a:2c:bc:03:56:4b:8c:c5:97:84:40:34:88:cf:0f:
         ed:8d:f2:ff:c1:eb:cf:6e:86:0c:8f:ef:40:d3:f5:0f:fc:8a:
         a1:5d:8c:7c:65:c9:72:fb:5f:b5:7b:f5:88:e5:9c:dd:c9:4b:
         5d:94:1a:67:d5:9f:36:df:15:db:0f:9a:4d:a9:f1:86:59:c6:
         d8:61:b9:1c:7b:4f:a7:ae:6f:e4:c6:e3:e7:fa:7a:05:3b:75:
         a1:f8:67:34:54:f5:b5:c5:88:4a:32:50:f3:ef:5c:de:40:a1:
         58:89:5e:4a:7a:6a:89:6a:0b:cc:4e:e4:29:3c:4d:a4:75:db:
         55:15:aa:7c:e9:3b:4b:b2:6b:6a:72:86:f0:8d:cd:84:e5:76:
         96:e7:ad:5e:ee:3e:3e:0a:7e:ab:c4:0b:86:ff:61:44:d8:96:
         7a:e2:d1:b3:5a:25:69:95:10:f9:35:f1:bc:38:ad:78:df:20:
         57:cb:fe:5e:8d:c3:50:64:20:29:06:b9:cb:72:b4:f4:40:57:
         35:2a:af:78:7b:50:74:0e:67:dc:35:1c:eb:6d:17:55:ab:ce:
         a3:66:54:33:8f:3b:74:00:29:fb:ff:76:6e:06:39:42:9f:67:
         76:79:98:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:16:48 2026 by rpki-client