Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft
File:                     DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft (raw, json)
Hash identifier:          Di+KRT3jNkmxEB5A7OMg/JYEtov4S84gOvKFcHd/hSY=
Subject key identifier:   60:98:7F:E9:A2:B8:66:AB:52:79:51:0A:A9:CA:9E:51:96:00:31:E7
Authority key identifier: DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F
Certificate issuer:       /CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F
Certificate serial:       59A018B8593A95FF9191D79E698F640E19FFFD7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft
Manifest number:          039B
Signing time:             Mon 02 Mar 2026 07:22:08 +0000
Manifest this update:     Mon 02 Mar 2026 07:17:08 +0000
Manifest next update:     Tue 03 Mar 2026 08:09:08 +0000
Files and hashes:         1: 323830343a333131383a3a2f33322d3438203d3e20323634393932.roa (hash: iZmC1t/fjeUUNQnWbsucToAMSgInG3Ark2xpwjFVDnA=)
                          2: 3137302e38342e39362e302f32322d3234203d3e20323634393932.roa (hash: DYGx/T5AnQgCjOey+UURzZWhb0H67r/Ia6mcIhr9I/8=)
                          3: DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl (hash: sf5njTqWromk9Z2RxRuBIfNfcJJGP3OSNWZxFwaAk5c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl
                          rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 08:09:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a0:18:b8:59:3a:95:ff:91:91:d7:9e:69:8f:64:0e:19:ff:fd:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F
        Validity
            Not Before: Mar  2 07:17:08 2026 GMT
            Not After : Mar  3 08:09:08 2026 GMT
        Subject: CN=60987FE9A2B866AB5279510AA9CA9E51960031E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b4:62:cc:84:0b:45:db:d5:0d:f3:90:5c:d4:
                    d1:a4:7b:92:ca:ca:1c:10:9f:42:37:83:ad:43:78:
                    cc:27:92:15:1f:b6:33:d4:35:a9:94:3f:65:10:06:
                    d1:74:53:36:7f:ae:af:ba:a7:34:72:d4:ea:c4:bb:
                    67:d6:80:07:85:6d:97:b0:d0:31:a5:7c:8b:66:68:
                    9e:cc:a2:62:c0:f4:37:05:a8:f5:e0:d6:79:1a:ef:
                    5c:b6:fd:0e:d4:64:b9:6e:60:23:d8:2b:07:ad:09:
                    03:8a:de:66:0b:68:ae:6e:df:64:de:cb:89:64:05:
                    3e:63:03:7c:41:d8:e7:cc:96:d4:53:a1:c7:76:58:
                    f0:42:20:0b:44:f8:76:2a:39:b1:66:6f:a0:d3:b0:
                    0a:79:4b:53:65:eb:a8:c5:f1:e9:3f:24:dd:92:db:
                    dc:42:c3:de:61:f8:eb:39:c7:08:53:4a:2e:c7:8a:
                    06:85:c7:c6:60:f6:ca:56:90:b9:d3:e0:0a:3e:b2:
                    a4:af:b1:c5:12:3b:a0:fe:98:0d:27:26:c9:a8:68:
                    8c:9d:95:4c:28:96:36:ec:c3:52:e5:fa:42:4f:dd:
                    fb:55:04:59:54:52:3a:17:3d:2d:3a:15:4e:57:57:
                    ed:20:79:a1:6e:f6:35:ce:e4:49:c3:e3:d3:38:fc:
                    13:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:98:7F:E9:A2:B8:66:AB:52:79:51:0A:A9:CA:9E:51:96:00:31:E7
            X509v3 Authority Key Identifier:
                keyid:DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:e0:c1:d4:d1:f3:f3:ee:72:59:6f:dc:bc:48:f7:95:99:cb:
         c5:e4:83:14:e7:81:90:5b:ed:c7:c9:12:a6:c7:b9:f7:60:bb:
         29:58:57:ab:0c:b9:18:d0:68:d6:de:ae:37:f9:1c:cc:aa:68:
         9d:3e:90:b8:d7:36:7d:07:52:80:2b:0c:2b:4c:70:ef:7c:73:
         13:bd:14:dd:0a:a0:fe:f5:98:b0:ca:2e:b2:5c:78:df:2a:14:
         e1:15:51:d4:a1:29:79:b5:b0:74:a4:a7:56:37:a2:17:be:2c:
         5d:db:6f:24:0c:88:b9:a5:cf:e7:27:75:fd:89:e7:c5:83:e4:
         f9:97:bb:2d:c5:c9:bb:46:2a:a0:1f:69:13:f4:71:7b:ad:c8:
         56:45:53:56:7a:38:3b:89:97:a3:25:73:12:62:eb:a2:99:d8:
         51:b3:b5:ff:9c:a5:e2:20:8d:44:25:b4:8d:25:94:07:80:a0:
         84:21:86:c2:51:e5:74:c2:a1:f1:c5:2d:e8:43:e1:ce:9f:35:
         f9:fe:9f:da:af:b9:c1:34:7b:cc:15:8e:2d:3d:bf:02:34:0a:
         db:12:e3:65:b4:c3:aa:2d:1f:58:35:6b:2f:19:c6:dd:00:72:
         b7:f1:9d:39:d9:6d:f1:53:36:5c:b1:a6:7f:20:df:40:dc:4e:
         e6:05:0e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:02:58 2026 by rpki-client