Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft
File:                     CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft (raw, json)
Hash identifier:          BBjDLrk9v7T5jKHIeTFoKs/n/YUhON+sgM66AVhIKVI=
Subject key identifier:   19:84:11:38:E6:C9:9B:F6:85:F9:59:49:6B:7C:A2:28:47:A2:C6:53
Authority key identifier: CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38
Certificate issuer:       /CN=CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38
Certificate serial:       3EB5312DBBCC1494D28EFC382A5DD6E6A7850272
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft
Manifest number:          01B7
Signing time:             Mon 02 Mar 2026 05:24:10 +0000
Manifest this update:     Mon 02 Mar 2026 05:19:10 +0000
Manifest next update:     Tue 03 Mar 2026 06:17:10 +0000
Files and hashes:         1: 323830343a353666303a3a2f33322d313238203d3e20323638303333.roa (hash: mgsYCCjJSoJmcEEh/9mNABYK1PuWrIpDzusmWD7BpKk=)
                          2: CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl (hash: FMl6odR3/I+fyOkTQ58+wLAcnqfqqN8DRWL015Fjmaw=)
                          3: 34352e3136362e3230302e302f32322d3332203d3e20323638303333.roa (hash: amDeMX/BZEdOLpiY5eI+Syvf2w+HOessOzMCfITuWvo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl
                          rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 06:17:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b5:31:2d:bb:cc:14:94:d2:8e:fc:38:2a:5d:d6:e6:a7:85:02:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38
        Validity
            Not Before: Mar  2 05:19:10 2026 GMT
            Not After : Mar  3 06:17:10 2026 GMT
        Subject: CN=19841138E6C99BF685F959496B7CA22847A2C653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:72:fd:98:53:11:3f:d1:84:af:ab:5d:7e:3b:
                    57:c1:05:5c:44:e8:44:41:b6:70:3a:8d:0f:ab:9b:
                    d3:da:12:0b:d5:8a:a4:3c:21:84:ae:bc:13:52:3d:
                    3d:b4:91:b0:ca:b3:b5:77:ee:21:fd:b8:05:f5:0b:
                    4d:fd:e0:a9:91:7e:02:d5:5e:57:28:1b:d0:87:29:
                    2d:18:ef:c3:17:fd:e0:4c:4c:cf:8b:49:bb:4a:fa:
                    e1:b9:17:55:c0:a4:55:7e:53:18:02:2c:ae:bb:bc:
                    e3:42:6e:80:39:2c:fc:7f:49:90:a8:96:2e:75:c4:
                    cf:e9:d0:d1:02:46:5a:40:8b:cb:94:89:60:00:e3:
                    be:93:5e:4f:3c:d1:9a:d3:b2:6f:b9:3d:c6:4e:f6:
                    8f:db:cb:04:89:cd:90:c6:c1:be:2b:0a:16:86:56:
                    11:7f:5e:00:8a:a4:ee:00:c3:fa:db:cd:b5:ff:3a:
                    02:0d:24:aa:59:1d:57:5e:90:5c:1e:2e:70:3c:29:
                    28:d1:3a:51:32:41:2c:c8:7a:8a:fe:1f:a4:b5:d8:
                    48:07:1f:f6:1a:63:5f:48:8f:c3:fa:47:d3:9b:2e:
                    00:22:fc:c8:05:b0:b0:4b:be:d6:89:f7:83:93:2c:
                    4f:cc:03:7f:4e:6c:bc:97:9b:2d:58:9b:04:d5:5f:
                    2e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:84:11:38:E6:C9:9B:F6:85:F9:59:49:6B:7C:A2:28:47:A2:C6:53
            X509v3 Authority Key Identifier:
                keyid:CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:08:20:5a:4c:05:52:5d:5e:b2:b2:31:89:9e:30:70:c2:e4:
         4d:1c:1c:d5:e6:cf:30:f3:c6:d9:3a:e6:a2:53:5d:73:b5:da:
         91:46:87:8f:7b:07:4c:7d:57:cf:40:dc:9c:a2:c7:7e:e9:28:
         44:0d:0f:98:6e:94:5a:e8:46:22:9d:1b:ea:d0:7d:ca:73:bf:
         2a:30:91:b9:32:be:23:f8:42:7a:e5:3a:85:49:ae:da:df:ff:
         03:7f:0a:4b:c7:3b:aa:ad:87:4f:42:91:31:ff:e5:0e:f5:23:
         5d:7a:95:4c:2b:9b:5b:15:ff:3c:af:ea:d4:3d:35:7c:e0:28:
         13:07:3e:de:14:aa:fc:55:d5:30:df:96:c6:bc:f5:d9:6a:cc:
         99:37:01:2a:32:b5:bb:6a:10:94:80:cc:9b:54:bf:bb:b8:4f:
         b6:4a:1c:41:b9:46:88:d9:ee:b0:ab:65:7a:b0:fd:02:01:d6:
         f4:ad:5b:22:ac:67:96:18:f8:45:14:90:99:56:81:66:06:17:
         3b:30:2c:c8:35:12:4d:4c:7c:bb:24:08:97:62:4e:6c:5e:f9:
         5f:15:13:8f:52:08:d1:69:31:4b:2a:e4:78:25:05:06:01:ed:
         ba:26:e8:5b:93:28:a2:59:d4:8f:5c:6b:aa:f8:b2:ac:37:36:
         f0:38:7e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:15:42 2026 by rpki-client