Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft
File:                     D539CF929B6A6A2B9596B922F417FAD917799ED7.mft (raw, json)
Hash identifier:          7byK9PGt2x6r1eOxdzB2RmepHNLn2XEcdVSL8Vu+ZAI=
Subject key identifier:   A3:B8:39:41:FA:8F:C1:D7:CA:CE:92:FA:C0:69:23:43:DB:F8:24:8D
Authority key identifier: D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7
Certificate issuer:       /CN=D539CF929B6A6A2B9596B922F417FAD917799ED7
Certificate serial:       796F17B14CF217D7FD6E955434CC9EC8ED381C73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft
Manifest number:          03A5
Signing time:             Mon 02 Mar 2026 05:30:48 +0000
Manifest this update:     Mon 02 Mar 2026 05:25:48 +0000
Manifest next update:     Tue 03 Mar 2026 08:34:48 +0000
Files and hashes:         1: 323830343a343832633a3a2f33322d3438203d3e20323637313032.roa (hash: LEA9vDzQJLKKOYYh86Ctx9GDjZX9B441ozGpSCmd91s=)
                          2: 34352e3232382e3134302e302f32322d3234203d3e20323637313032.roa (hash: eP0r+wZovEoOi3AFVmS1ks40+jUeBeX9l/i7mThdIlg=)
                          3: D539CF929B6A6A2B9596B922F417FAD917799ED7.crl (hash: 2zM82UJV6XHlotJ2uLaEZxnUShvy4jhT4MCe39FFcw4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl
                          rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 08:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:6f:17:b1:4c:f2:17:d7:fd:6e:95:54:34:cc:9e:c8:ed:38:1c:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D539CF929B6A6A2B9596B922F417FAD917799ED7
        Validity
            Not Before: Mar  2 05:25:48 2026 GMT
            Not After : Mar  3 08:34:48 2026 GMT
        Subject: CN=A3B83941FA8FC1D7CACE92FAC0692343DBF8248D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:78:52:ae:3e:cd:7f:1f:89:3c:51:9c:de:6c:
                    e6:e6:b9:1b:41:7f:55:19:fb:8a:0e:f8:07:eb:72:
                    58:47:fb:4b:ef:77:c8:43:b0:1a:3d:c0:b1:36:36:
                    56:b1:c2:23:6f:97:f5:54:2c:5d:e7:04:22:ce:ee:
                    94:34:34:7c:97:8c:2e:a1:c5:c8:72:88:f5:3f:40:
                    0b:3d:a6:46:ac:bf:bb:4b:0f:33:dd:64:35:13:2e:
                    31:8a:9f:84:74:0c:9c:f0:af:f9:04:04:aa:80:95:
                    79:72:1a:bd:f7:94:68:77:bb:d9:ea:c5:bf:6e:8f:
                    3e:0d:00:23:8b:7d:b9:7f:26:c3:23:a8:d8:1f:ff:
                    79:08:49:8c:e1:c8:fb:00:40:95:d3:cc:9c:75:bd:
                    6f:04:73:7a:24:8d:93:fe:34:34:ba:23:a1:91:b2:
                    05:98:de:23:50:28:ca:8f:83:45:4a:e8:be:95:61:
                    c3:9e:5c:e9:e9:8d:ec:e6:80:e7:06:f8:0d:d9:a3:
                    59:6f:78:de:3c:d2:1d:07:7d:e8:d6:65:df:d7:4a:
                    2e:b3:1c:7f:c2:78:ef:8b:7a:14:bf:73:35:a3:5e:
                    36:df:21:8c:e9:19:6c:99:97:f3:d6:fd:48:67:72:
                    7e:a7:c7:32:0f:a1:08:fd:d0:da:73:67:9d:19:26:
                    c1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B8:39:41:FA:8F:C1:D7:CA:CE:92:FA:C0:69:23:43:DB:F8:24:8D
            X509v3 Authority Key Identifier:
                keyid:D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:f3:83:dc:10:f3:37:5e:56:a2:41:6b:e2:9f:06:1e:0b:8f:
         84:77:4f:35:8e:fa:f2:38:53:f4:26:74:e5:f7:ae:28:17:97:
         71:1a:25:68:b0:c8:40:a0:77:ec:fc:eb:35:e3:f1:af:91:52:
         09:e7:79:70:37:0e:ad:b8:82:3c:b5:78:00:f1:60:2e:ac:2f:
         30:6f:ec:d9:c7:dd:42:3e:50:bf:f8:b8:11:e1:6a:5c:26:6b:
         6c:a5:3f:21:2d:58:9a:e5:3f:c6:95:14:4c:73:83:bb:d4:9c:
         66:05:3a:28:8a:95:24:a8:3e:52:68:71:6c:b7:85:62:3d:23:
         d1:79:92:2d:c7:c0:3a:3a:29:2f:eb:bd:5e:65:f9:c4:4e:7c:
         33:1e:3a:f2:be:85:57:09:90:67:4d:52:c0:fd:6d:ce:d6:f1:
         6b:20:0d:1b:aa:7a:f4:d0:09:f1:54:2b:14:1c:d9:52:fa:19:
         d2:ef:97:b5:09:d3:74:c1:e2:d6:e9:72:7a:ca:ab:b7:06:82:
         4f:94:e7:65:a6:7c:ee:0d:74:a0:67:7d:d9:e6:7b:71:ab:0b:
         8a:56:93:78:a2:4b:30:87:d4:df:a2:0a:cb:a6:6d:09:6e:37:
         64:84:43:9f:1f:73:1f:74:27:d1:c1:0c:58:35:20:5d:f6:07:
         d9:2b:cd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:28:14 2026 by rpki-client