Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft
File:                     0F9708322570D07CA4BE75EF484B6831664FE864.mft (raw, json)
Hash identifier:          xoVhXBQtscprBgmrtBe7vrXvZAeLBytqGjZSMKbErRg=
Subject key identifier:   86:DD:4B:F4:94:ED:DF:EE:33:E1:E5:9E:FD:1D:37:54:9A:9D:4E:C3
Authority key identifier: 0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64
Certificate issuer:       /CN=0F9708322570D07CA4BE75EF484B6831664FE864
Certificate serial:       16D86B0A74381E45E095D5BEC3A5E2510B3A6015
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft
Manifest number:          03AA
Signing time:             Sun 01 Mar 2026 12:32:13 +0000
Manifest this update:     Sun 01 Mar 2026 12:27:13 +0000
Manifest next update:     Mon 02 Mar 2026 12:37:13 +0000
Files and hashes:         1: 323830343a333664303a3a2f33322d3332203d3e20323636333734.roa (hash: vJSi+CLu+OHU9HXYLFKzd0mrGSQkqtG0UHjrkyoN9aA=)
                          2: 3137302e38302e34382e302f32322d3232203d3e20323636333734.roa (hash: MeparfLp7Iz8B/Z72Qoqi/a4d3zvPz6n8crVlI+FX5U=)
                          3: 3137302e38302e35302e302f32332d3233203d3e20323636333734.roa (hash: /NgZQYnTS9w42llOLCP0aJZFd5VrOsWONzzDN/cH+c4=)
                          4: 3137302e38302e34382e302f32332d3233203d3e20323636333734.roa (hash: ZUwx8FJujJamKmHrEmLckHKXG3XsHvWKylvM3U8gyOY=)
                          5: 3137302e38302e35302e302f32342d3234203d3e20323636333734.roa (hash: 4SHb55z5RYKv3b9zt/DL+Avw47KfCE3hmg+wVfBxb2Q=)
                          6: 3137302e38302e34392e302f32342d3234203d3e20323636333734.roa (hash: EhX66VpZbnhVDScH0Qoez565ystRem3Vy8v1TXBg9Yk=)
                          7: 3137302e38302e34382e302f32342d3234203d3e20323636333734.roa (hash: N0g+TEuM83+qVx1uu9QMFdeIJuGRRXI3j0hxusJKQE4=)
                          8: 3137302e38302e35312e302f32342d3234203d3e20323636333734.roa (hash: uCysVc1lML4BWmXNx9y7wZX5lR9FYwcoZzAp2MF74/A=)
                          9: 323830343a333664303a383030303a3a2f33332d3333203d3e20323636333734.roa (hash: iMih0NQjcACqcLmt+w0oTkgLMDObLAxqaD77FHVDdTE=)
                          10: 323830343a333664303a3a2f33332d3333203d3e20323636333734.roa (hash: ILfaXmA8alvc6XtKl3oju+kl7De/K6TG8womMAt8/50=)
                          11: 0F9708322570D07CA4BE75EF484B6831664FE864.crl (hash: J1njgMCb4kz+zhK8gpfVEx7JrOrrgkyeuiUkr75ciL8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl
                          rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 12:37:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d8:6b:0a:74:38:1e:45:e0:95:d5:be:c3:a5:e2:51:0b:3a:60:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9708322570D07CA4BE75EF484B6831664FE864
        Validity
            Not Before: Mar  1 12:27:13 2026 GMT
            Not After : Mar  2 12:37:13 2026 GMT
        Subject: CN=86DD4BF494EDDFEE33E1E59EFD1D37549A9D4EC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b0:85:dc:e5:d2:84:34:a0:87:0b:f9:f3:50:
                    89:3b:e7:06:b2:a9:b4:3e:a4:2c:f9:16:33:8e:4c:
                    bb:9c:76:53:17:dd:8d:97:ef:42:ae:ee:5d:bf:a3:
                    60:24:fc:32:94:bc:dc:08:22:e9:26:10:fa:36:38:
                    86:1d:15:84:d4:fc:41:54:54:f7:1e:2a:14:7d:c2:
                    80:be:3a:89:43:13:87:92:df:eb:f1:17:14:82:eb:
                    43:c6:e8:f8:35:90:38:9d:62:5b:4d:de:5f:6b:d4:
                    e5:af:c6:77:99:ae:92:03:89:a6:a5:a7:5f:20:68:
                    a8:ce:9a:05:85:84:77:c6:4b:51:42:95:70:f3:bf:
                    18:b8:8f:fc:f8:c2:b6:82:f1:76:8f:a2:bb:08:ae:
                    32:a8:4f:5e:33:64:a1:05:09:c7:dd:ac:fb:4c:d4:
                    92:14:6d:8e:59:7a:7b:5e:3d:f7:41:9b:fc:98:43:
                    56:a1:ce:d8:ff:ae:ed:12:cb:21:6b:17:3a:06:23:
                    58:bd:7e:a2:63:11:2d:35:1e:fa:22:94:6f:c9:cc:
                    00:e4:ae:d7:01:6f:e1:b2:e4:4f:b0:0c:1c:b7:96:
                    1d:66:09:ae:b6:8f:65:bc:e9:19:90:84:bb:4b:3b:
                    97:74:75:ca:3e:bd:b6:bc:25:4d:5a:3d:df:54:24:
                    ca:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DD:4B:F4:94:ED:DF:EE:33:E1:E5:9E:FD:1D:37:54:9A:9D:4E:C3
            X509v3 Authority Key Identifier:
                keyid:0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:25:b4:c7:59:19:f8:18:3c:c4:30:1f:8c:13:65:c0:b7:36:
         5f:2d:3a:ad:87:1a:15:5b:e1:5b:8f:51:91:f5:41:e1:4e:e4:
         66:5c:ef:75:d3:88:84:fd:01:b0:20:b1:a5:b0:02:fc:47:f5:
         cd:d4:77:fd:66:0a:13:8e:ed:2f:14:00:90:b8:c7:d4:7b:9c:
         8f:f3:1f:36:94:af:97:57:48:0b:b2:d7:5f:15:36:19:55:84:
         b2:b3:4b:48:19:92:a2:b5:f9:a9:a4:ea:4f:94:2b:96:f2:ca:
         75:b6:5d:36:ba:8e:bc:13:5d:45:d9:5a:96:ab:cd:6c:4e:c1:
         27:0c:ca:6b:6b:ca:9e:c5:43:a3:e6:6e:a1:ff:94:b2:e0:ee:
         c8:eb:62:c7:ca:d4:4b:07:c7:20:a7:4c:8d:39:37:5e:94:2a:
         61:88:d2:03:27:dc:0d:2e:a0:46:1d:a2:5f:78:dc:ec:10:24:
         05:8d:08:50:6f:83:fb:2f:bb:b9:28:61:ad:68:df:8a:97:a2:
         ba:9c:01:92:0b:2e:fc:67:17:fa:1a:e5:30:7a:1a:ad:ff:73:
         23:7f:4e:a2:8b:d5:7f:c6:95:41:f8:3e:7c:04:eb:97:7f:a6:
         f9:4d:da:80:53:f2:e9:65:5f:10:8d:80:44:cd:5d:22:98:1a:
         01:d4:8e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:15:30 2026 by rpki-client