Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft
File:                     1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft (raw, json)
Hash identifier:          F4tzZdMI+78WTiG4gC9eGwGJ0xAvJ4bw1s5n2My8gdk=
Subject key identifier:   B1:3D:01:89:44:D9:16:EC:8C:70:B2:08:91:4A:3A:46:D6:02:E1:C4
Authority key identifier: 1A:FF:FF:1E:33:EA:BF:29:8E:9B:05:F1:77:16:6C:96:F2:C3:B5:55
Certificate issuer:       /CN=1AFFFF1E33EABF298E9B05F177166C96F2C3B555
Certificate serial:       7E9B22F225A87D4A9F111027563DFE463EE05CED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft
Manifest number:          03A3
Signing time:             Mon 02 Mar 2026 01:58:14 +0000
Manifest this update:     Mon 02 Mar 2026 01:53:14 +0000
Manifest next update:     Tue 03 Mar 2026 04:24:14 +0000
Files and hashes:         1: 323830343a326430633a3a2f33322d3332203d3e20323632343038.roa (hash: Jyg7uuoqRgxPoK2mN3y2Z5lXpwjNgkblynHyZIoODGU=)
                          2: 1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl (hash: UWBZKDq9ufSREReUusMiOg4XBkcr0zALtaMo8cDOcfI=)
                          3: 3137372e33382e3136302e302f32312d3234203d3e20323632343038.roa (hash: FYexX+4LSedo8q+EO3Zlufuz0HQjKBkTM+8/B+lu9SA=)
                          4: 3136382e302e3234302e302f32322d3234203d3e20323632343038.roa (hash: DNWvPjO8iO0j2YZ2N/ldGBBOWlFe6bj2WLKkJepslkw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl
                          rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 04:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:9b:22:f2:25:a8:7d:4a:9f:11:10:27:56:3d:fe:46:3e:e0:5c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AFFFF1E33EABF298E9B05F177166C96F2C3B555
        Validity
            Not Before: Mar  2 01:53:14 2026 GMT
            Not After : Mar  3 04:24:14 2026 GMT
        Subject: CN=B13D018944D916EC8C70B208914A3A46D602E1C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c3:0c:65:76:02:e8:4a:c5:ac:c1:76:69:6a:
                    63:fe:4a:6c:9e:73:9d:52:fc:e1:8b:0d:23:20:a7:
                    df:60:d6:8b:b4:00:91:49:bf:fd:64:26:58:55:e6:
                    97:f8:0d:97:cd:fb:cb:0d:21:41:e1:a8:96:d9:d8:
                    53:25:f0:a1:68:f2:ed:dd:16:ee:9c:46:bf:e6:f0:
                    60:1e:a5:94:1e:2e:7a:95:4a:23:b0:69:14:fc:79:
                    58:af:ce:d0:49:5f:45:50:77:5c:81:ea:5b:b1:89:
                    1d:99:15:d9:10:d7:0b:4a:31:d0:4b:06:4c:45:c6:
                    c0:00:ec:95:51:7a:3b:03:61:93:96:d6:cf:5b:ef:
                    51:00:0a:3b:3e:57:84:33:0c:68:6b:e4:b0:67:88:
                    89:55:fe:3b:98:dc:7d:72:e4:2e:6e:2f:0c:fc:1c:
                    aa:9c:bc:59:54:c9:62:51:11:4a:96:4e:79:52:4b:
                    3d:1d:08:3d:dd:e9:98:a9:18:23:48:0a:20:9b:fe:
                    22:8b:05:3b:ff:1d:b4:ca:20:d0:68:1d:1e:e3:ec:
                    71:9f:c0:21:6d:9b:fa:6c:60:dc:01:11:77:10:c0:
                    f9:3d:d9:67:a1:ca:24:71:50:ab:c4:8f:69:27:d3:
                    e8:e0:bd:b9:42:a8:5d:85:dc:0b:e0:67:e6:ea:43:
                    cd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3D:01:89:44:D9:16:EC:8C:70:B2:08:91:4A:3A:46:D6:02:E1:C4
            X509v3 Authority Key Identifier:
                keyid:1A:FF:FF:1E:33:EA:BF:29:8E:9B:05:F1:77:16:6C:96:F2:C3:B5:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:69:80:62:bd:07:e7:e0:36:25:ff:99:6e:6f:58:b6:df:10:
         39:fd:33:50:7d:f4:f9:c9:36:0a:be:ba:0f:79:b4:3f:27:fe:
         a7:21:ce:5a:be:81:cc:b5:ab:83:ee:e4:2b:d9:6e:b9:66:be:
         4d:5d:4d:e4:c3:84:d2:35:49:da:ff:57:cc:ee:8e:e7:0f:26:
         a4:1b:6d:83:5f:f3:9e:d5:c8:52:9f:4a:52:54:7f:35:cc:04:
         68:ad:35:9f:08:d0:20:39:97:21:34:7c:77:9d:95:7d:ac:a3:
         16:7d:e4:93:b2:93:e4:dd:63:a7:fd:0d:3e:f7:8e:69:23:9a:
         80:e8:b2:97:fe:67:c7:95:cc:0e:3f:a9:b9:f9:79:ee:35:ce:
         c5:ab:67:62:21:ef:25:4d:00:17:79:f5:3e:a0:b9:68:b6:c1:
         57:76:2b:f0:b0:97:e0:31:28:da:30:c9:0a:e7:b7:1f:79:e3:
         58:8f:b1:34:54:3f:e9:05:83:64:1d:d8:66:5a:61:6f:a6:30:
         2c:ac:1c:45:08:72:ef:27:24:af:6c:bb:a1:14:78:45:7a:f4:
         92:c3:f2:6f:75:21:9d:ff:31:87:bf:6c:a5:d9:1f:3d:5f:d7:
         ae:48:27:a7:f0:bb:40:2a:ff:ca:dd:26:1a:a7:4a:6f:08:d5:
         ea:e2:3c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:31:34 2026 by rpki-client