Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.mft
File:                     CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.mft (raw, json)
Hash identifier:          EAucjyDfggyRcZhhGqb+rp4R6dsN9tX4NtXygeiFPeA=
Subject key identifier:   4C:FC:AB:BD:1A:D8:DE:96:38:16:D1:0A:8E:A2:0D:6F:34:98:35:80
Authority key identifier: CF:3A:0F:4D:CF:62:E8:BC:D4:1F:46:B5:74:F7:A5:5C:04:2E:E0:18
Certificate issuer:       /CN=CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018
Certificate serial:       16F3F5D5F45D89B790D2D810A408276B5B929775
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.mft
Manifest number:          43
Signing time:             Mon 02 Mar 2026 12:23:10 +0000
Manifest this update:     Mon 02 Mar 2026 12:18:10 +0000
Manifest next update:     Tue 03 Mar 2026 15:41:10 +0000
Files and hashes:         1: 3137302e3234372e3233382e302f32332d3233203d3e203631373932.roa (hash: 2porUDIWXQzRPGw1lpbiLM8NJFRmoPWfAam3JjOiqQI=)
                          2: 3230312e35352e3139382e302f32332d3233203d3e203631373932.roa (hash: bNFVAIma85Zo38JJw/JHddmotrkMT822P8k2TWhj/80=)
                          3: 3137302e3234372e3233362e302f32322d3232203d3e203631373932.roa (hash: iySyHxjIr7ORJGuCFbUIcn5qiL0P95Z+JKZ8mPhMmS8=)
                          4: 3230312e35352e3139362e302f32332d3233203d3e203631373932.roa (hash: ojTwfVCng+7ymOiarD5AYKRaqQLpx5tvbx3yrswWgbw=)
                          5: 3137302e3234372e3233392e302f32342d3234203d3e203631373932.roa (hash: 203AL4NBhBycj+vxU5+ovaUOgvD9LecJjLlS2saKm9Y=)
                          6: 323830343a313936343a3a2f33322d3332203d3e203631373932.roa (hash: zHBVTUBnR+xbwji6JVUdRg0MsKUdPKUIU0tERwH4f6M=)
                          7: 3230312e35352e3139362e302f32322d3232203d3e203631373932.roa (hash: J0mYs0fzR0mOVze7cTBEVZo4hZZrQFqWPvJRYly0lg0=)
                          8: 3137302e3234372e3233362e302f32332d3233203d3e203631373932.roa (hash: h8zTmBMcHd6Q/eGxRZiyGDjTEek9FbOkKHoyTgL0LbI=)
                          9: 323830343a313936343a3a2f33332d3333203d3e203631373932.roa (hash: B7uhdADRB/qpR0N7Nv3nA1bj4eB0sZ92c8CWrY8NFjo=)
                          10: CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.crl (hash: K6OmW4p+msbiHd2aO3EP1rpfDTUlnHyBxtNgyzleTcI=)
                          11: 323830343a313936343a383030303a3a2f33332d3333203d3e203631373932.roa (hash: jQn6bNShNRccKfizsl/8A30O75ibJQDVEx9YPr3zU38=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.crl
                          rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 15:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:f3:f5:d5:f4:5d:89:b7:90:d2:d8:10:a4:08:27:6b:5b:92:97:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018
        Validity
            Not Before: Mar  2 12:18:10 2026 GMT
            Not After : Mar  3 15:41:10 2026 GMT
        Subject: CN=4CFCABBD1AD8DE963816D10A8EA20D6F34983580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7c:8c:11:6b:e4:fe:fc:34:e0:db:e5:25:94:
                    17:11:b6:65:8d:72:c7:c8:2f:7e:4a:8b:fe:a7:e7:
                    89:b7:fc:58:16:94:51:63:68:19:18:3f:8e:43:f0:
                    3e:fd:c5:e6:09:97:c5:e0:dc:cf:31:af:05:65:fc:
                    11:96:97:84:5b:92:ef:e5:f4:b2:28:e4:15:f9:48:
                    19:76:d6:fc:82:de:ce:61:d9:f9:a9:41:74:51:9b:
                    ab:7e:47:ab:89:48:a5:32:55:fa:fd:c9:3c:45:a8:
                    a9:9e:c0:6b:52:ec:83:20:77:0e:8f:8c:e6:fa:7e:
                    5a:ec:cc:a5:bb:8a:97:8d:ce:b1:38:db:35:21:ec:
                    1c:a5:3c:db:a0:4d:b8:be:60:6a:34:7b:bd:97:81:
                    b7:c2:d7:79:8e:53:bd:8e:ba:52:74:cf:22:d3:e0:
                    f0:15:0b:0d:c5:d9:33:1f:48:43:8a:a0:b0:bf:bd:
                    7b:7e:75:09:6a:74:f1:99:80:ff:81:e2:0a:04:33:
                    e8:29:60:89:f3:ee:95:95:10:3a:31:e7:bd:63:df:
                    f2:60:d4:c3:1d:6c:d5:61:71:38:af:58:b5:cc:49:
                    ea:a1:57:62:a1:27:7f:59:6a:c7:38:ff:91:e9:93:
                    74:9a:15:4c:51:4b:bd:f5:0d:db:5b:2b:d9:69:b8:
                    29:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:FC:AB:BD:1A:D8:DE:96:38:16:D1:0A:8E:A2:0D:6F:34:98:35:80
            X509v3 Authority Key Identifier:
                keyid:CF:3A:0F:4D:CF:62:E8:BC:D4:1F:46:B5:74:F7:A5:5C:04:2E:E0:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:02:00:b8:d0:d0:0a:d4:bf:12:56:71:39:38:0b:8c:18:ac:
         b8:c0:45:cb:97:9b:94:b6:da:ae:fb:44:cc:7c:cf:8a:f5:53:
         b5:96:54:e5:d9:92:0f:93:89:80:e4:46:9a:21:6e:7d:8b:26:
         f3:c6:df:04:19:57:c3:7d:13:9a:74:12:a1:17:97:f0:0c:8a:
         55:3a:51:2a:d3:82:30:3f:3d:37:dd:11:b1:c2:2f:8e:c4:08:
         94:30:d7:d1:7d:a5:53:53:7c:20:e4:f9:79:73:d3:d6:84:8c:
         24:7b:2d:44:1b:80:8d:bd:3f:68:f6:47:f8:00:3f:a7:3e:6d:
         dd:60:c8:b3:c7:9e:70:7f:68:96:86:d8:c9:40:e8:a7:a3:d9:
         74:b7:77:9c:ab:0a:d6:b2:9a:13:57:1a:26:07:9f:b0:45:d7:
         a4:52:e2:98:b5:d5:49:45:d7:20:c2:7e:36:0a:33:d7:3b:c4:
         49:d5:d0:2b:f0:56:6e:88:cc:21:46:0b:3c:18:51:a5:07:f4:
         ec:9b:0f:c2:56:40:30:80:af:f2:79:81:c0:6b:c5:3e:4e:5f:
         1e:f5:9b:10:63:3a:d6:41:71:79:33:cd:6b:e2:37:95:09:b8:
         e7:10:9e:5d:a9:8e:0d:f0:b5:c3:38:d5:a1:ff:dd:60:2b:40:
         dd:64:0b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:18:49 2026 by rpki-client