Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.mft
File:                     4329045FF5A88F6B7949093B6FE2C5D28A774010.mft (raw, json)
Hash identifier:          Gw3l3ayHs/MzW7A83pnJ+n9iMULTzn0slvl1AyhVfEA=
Subject key identifier:   A3:E1:63:8F:D0:5E:2B:4C:4D:F8:A8:B8:71:4E:D4:53:C2:AE:8D:C1
Authority key identifier: 43:29:04:5F:F5:A8:8F:6B:79:49:09:3B:6F:E2:C5:D2:8A:77:40:10
Certificate issuer:       /CN=4329045FF5A88F6B7949093B6FE2C5D28A774010
Certificate serial:       3A67233D8841C4D3575217D4AFA6BABB41B2BC14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.mft
Manifest number:          03A9
Signing time:             Mon 02 Mar 2026 15:14:04 +0000
Manifest this update:     Mon 02 Mar 2026 15:09:04 +0000
Manifest next update:     Tue 03 Mar 2026 15:50:04 +0000
Files and hashes:         1: 3136372e3234392e3138302e302f32322d3234203d3e20323633303938.roa (hash: tvRwHUxjhA267CUJXNuW127IH/hF3eYIe06RspqjnhU=)
                          2: 3138362e3233332e39322e302f32322d3234203d3e20323633303938.roa (hash: AYfK0J0uGnPHoqWm5OZG/+cKXZWtdiE+J9waUYXsq9I=)
                          3: 323830343a313736633a3a2f33322d313238203d3e20323633303938.roa (hash: 6urLe1qWg2v8eMe2oKgYt0ZAQWt9DYnjfH3T405VXdY=)
                          4: 4329045FF5A88F6B7949093B6FE2C5D28A774010.crl (hash: R0vII73NYY0k7W/hg5HYTmlHk2oV2nVTYhlU2efmY+o=)
                          5: 3138362e3230382e3235322e302f32322d3234203d3e20323633303938.roa (hash: 1RKSqDo1JgPyiCbyvaujL8tuPC2KTJ/BzPuZq6KksVI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.crl
                          rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 15:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:67:23:3d:88:41:c4:d3:57:52:17:d4:af:a6:ba:bb:41:b2:bc:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4329045FF5A88F6B7949093B6FE2C5D28A774010
        Validity
            Not Before: Mar  2 15:09:04 2026 GMT
            Not After : Mar  3 15:50:04 2026 GMT
        Subject: CN=A3E1638FD05E2B4C4DF8A8B8714ED453C2AE8DC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cb:f0:aa:e6:ef:3f:d5:1a:ed:da:83:ef:77:
                    f8:ad:c2:d8:28:30:9e:81:30:ec:6c:cc:da:c3:d8:
                    59:d5:c0:d2:a9:82:35:5a:f5:61:53:b3:b3:78:02:
                    02:7b:dc:ea:18:95:1c:20:3f:30:35:86:2a:6b:65:
                    53:db:c7:de:33:c1:e9:27:ff:59:74:cb:fa:2d:b5:
                    37:ae:cb:34:ec:3c:80:30:d9:c7:51:d8:fd:5f:26:
                    17:27:4a:87:20:e7:50:a7:42:af:1f:e6:ca:7c:54:
                    d2:77:e7:f9:66:13:dc:b1:27:68:27:1a:8c:ec:c6:
                    96:80:cc:45:ad:d3:f6:8b:ae:e4:09:f1:4f:a7:6d:
                    a6:4f:5f:8d:e0:a0:da:f6:18:80:64:dd:e6:8b:bd:
                    04:ce:72:27:76:16:78:0c:3e:60:c3:b2:c8:fd:2d:
                    6b:f2:19:fd:28:09:da:72:4f:82:7b:0a:58:49:86:
                    55:1f:9a:46:05:42:e6:2c:44:5e:ef:b9:dd:ac:82:
                    61:7c:25:8d:61:3e:14:e3:40:72:7c:c3:08:77:20:
                    ba:e9:f4:51:56:97:df:cc:06:c5:f6:a5:80:62:49:
                    2d:ed:04:86:ea:b7:90:c7:8d:79:49:38:d7:19:65:
                    99:d5:a7:51:d3:9d:01:74:df:2b:07:bf:b5:c4:95:
                    37:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E1:63:8F:D0:5E:2B:4C:4D:F8:A8:B8:71:4E:D4:53:C2:AE:8D:C1
            X509v3 Authority Key Identifier:
                keyid:43:29:04:5F:F5:A8:8F:6B:79:49:09:3B:6F:E2:C5:D2:8A:77:40:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:dc:6d:a2:0a:d8:18:e3:44:15:15:4f:d6:05:30:1d:e7:13:
         2d:be:77:3e:42:cd:6e:b7:4e:4e:be:24:a6:93:87:a5:a1:2f:
         f8:34:ea:4c:d8:ce:54:c9:6e:55:2d:b3:17:22:a8:05:0f:f6:
         88:7a:9f:ea:99:89:58:4e:1f:2e:01:2d:73:85:06:74:8e:f8:
         f2:18:c1:a1:1c:4b:ab:96:42:83:ae:2b:e0:41:25:d2:2c:73:
         01:fa:47:b0:78:78:5d:52:97:51:a9:07:4c:cf:20:0a:aa:4b:
         e4:69:35:31:39:46:58:da:73:19:20:80:f6:82:14:c1:bd:5b:
         13:fe:f2:5a:29:82:e9:04:c3:14:c5:78:bb:34:0f:ac:6d:92:
         7f:35:79:e4:53:88:8c:19:7c:33:cd:f5:70:05:9f:c0:9c:63:
         c9:8d:3f:43:7c:28:02:5b:78:a4:c0:36:5c:39:96:b4:1a:92:
         04:c5:54:a9:0e:75:83:a4:50:49:13:41:3a:62:23:3d:36:2f:
         ac:64:e5:05:f4:c0:41:e0:e5:f8:eb:0e:39:16:a7:32:9a:ec:
         a6:a1:4b:73:c4:f1:7d:cf:9f:d3:55:bc:03:b8:21:2b:49:8b:
         a5:0f:30:d8:98:d7:0d:d0:a4:d7:3b:58:b8:30:a4:c2:fa:a9:
         c3:51:cb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:24:42 2026 by rpki-client