Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft
File:                     DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft (raw, json)
Hash identifier:          OXbMQ13WYlV4TK4N4nDVOB9gS/F5SR14/lQdliIX8PI=
Subject key identifier:   8D:BA:F6:B3:97:93:6A:00:3B:F1:C0:82:D4:85:B6:91:8F:E0:54:94
Authority key identifier: DF:34:AF:E4:C3:52:59:EA:0E:0A:B9:3A:34:0D:F1:39:E8:6B:8D:B7
Certificate issuer:       /CN=DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7
Certificate serial:       1D3F5B4287A7E6F3A0D2ECAA014E9D02D04E7370
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft
Manifest number:          013C
Signing time:             Sun 01 Mar 2026 06:50:28 +0000
Manifest this update:     Sun 01 Mar 2026 06:45:28 +0000
Manifest next update:     Mon 02 Mar 2026 06:56:28 +0000
Files and hashes:         1: 323830343a386532303a3a2f33322d313238203d3e20323733343034.roa (hash: +rQtNxAInELK5ARSncrEa6aoX0jAyBJS0K9vEo2MC/M=)
                          2: DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.crl (hash: 1aFtNutQU5SYHwsiDLltL42A+fzExYRf6F0krxnG1lY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.crl
                          rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 06:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:3f:5b:42:87:a7:e6:f3:a0:d2:ec:aa:01:4e:9d:02:d0:4e:73:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7
        Validity
            Not Before: Mar  1 06:45:28 2026 GMT
            Not After : Mar  2 06:56:28 2026 GMT
        Subject: CN=8DBAF6B397936A003BF1C082D485B6918FE05494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:22:b5:ef:d0:ab:c3:d6:8d:5f:d5:6c:54:67:
                    23:35:b3:56:40:e1:cc:19:44:fb:b6:0a:db:fe:5d:
                    24:9e:43:a2:10:4e:cd:56:3f:93:f9:f3:c7:42:1f:
                    38:74:5b:7f:0b:4b:ea:22:1a:34:60:f7:20:2d:66:
                    01:fa:2b:7d:ef:7c:74:07:38:f0:db:30:cb:81:97:
                    e0:7d:1e:6f:6e:f4:10:bc:1e:a3:9d:02:9f:0a:b6:
                    07:ac:2d:51:4b:d1:51:cb:a3:a2:97:fb:56:9e:d0:
                    2b:4e:c7:5d:43:ab:36:2a:8b:eb:e2:23:65:68:aa:
                    19:a5:3f:83:d6:9d:55:8a:e6:ac:e7:ec:c2:3c:c5:
                    3f:92:55:c0:da:08:3c:ad:ac:93:0f:a7:5c:85:7e:
                    22:4c:2b:fc:d4:03:96:e3:43:12:5a:29:a8:8f:ce:
                    21:8e:df:69:63:22:34:be:8b:71:86:0f:9a:18:08:
                    c1:cd:d5:b4:8d:36:93:9a:7c:ac:33:8c:35:2a:a3:
                    92:9b:1e:54:4e:62:0f:4a:e3:7b:8e:8b:7b:b2:b5:
                    9f:b7:a5:9b:df:db:85:db:79:4c:4f:59:e1:f3:71:
                    b9:73:ad:3e:2f:63:a4:17:b4:86:10:d9:13:b5:89:
                    42:d5:f7:d9:d8:07:e6:11:96:f8:2b:81:44:f3:6e:
                    88:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:BA:F6:B3:97:93:6A:00:3B:F1:C0:82:D4:85:B6:91:8F:E0:54:94
            X509v3 Authority Key Identifier:
                keyid:DF:34:AF:E4:C3:52:59:EA:0E:0A:B9:3A:34:0D:F1:39:E8:6B:8D:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:01:05:8b:a6:4a:30:2c:54:e1:0f:7a:5b:4c:8d:84:1c:4f:
         ed:05:10:e8:6e:70:e2:2f:cf:80:39:d9:d5:c9:aa:41:3b:14:
         b3:70:c8:1d:e2:f7:5c:0d:4c:8a:e4:dd:43:49:91:99:f0:b9:
         6b:57:c7:3b:29:0f:e2:f8:ce:2c:f0:ab:ba:f0:0f:8f:ad:64:
         90:d2:7e:75:7e:ea:a3:2e:09:30:f7:e1:da:6b:e0:9f:98:7c:
         0b:7c:5a:53:f5:c9:c7:f8:aa:10:9a:f4:73:a5:9c:44:ad:13:
         a0:68:d1:e3:98:27:bc:39:c2:fb:0c:df:39:25:04:25:4b:f9:
         56:7f:b7:6f:7c:05:cc:10:99:29:e6:58:07:0e:22:d8:75:ba:
         44:d3:0f:2d:f5:39:6c:88:ac:b1:79:58:e1:ee:32:0a:1c:db:
         59:14:e2:d3:bb:6c:77:03:a9:71:38:4d:4d:eb:13:53:e0:99:
         20:d1:96:30:63:3d:90:bb:b8:52:d2:ca:4d:8b:68:1c:1e:86:
         a7:7a:a9:90:48:e3:40:7f:d1:97:a1:64:11:3b:31:9f:3c:fe:
         b4:00:3b:3c:31:3f:9d:2d:ed:35:5e:73:39:f5:47:fe:7e:8d:
         0d:7b:58:0d:9f:fb:78:80:bf:0e:c4:a0:6c:58:d8:4d:76:44:
         61:bf:b7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:15:40 2026 by rpki-client