Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.mft
File:                     624B8344A542767D88F5B544B3EA21DADC8EA1C8.mft (raw, json)
Hash identifier:          7Cw1hI3mSH+KAQs/zFHmECi7+0C/eNrlTfMQQUukdFw=
Subject key identifier:   07:24:58:70:3B:CF:AB:F0:67:64:A2:1D:BA:7B:36:7F:42:95:EC:FC
Authority key identifier: 62:4B:83:44:A5:42:76:7D:88:F5:B5:44:B3:EA:21:DA:DC:8E:A1:C8
Certificate issuer:       /CN=624B8344A542767D88F5B544B3EA21DADC8EA1C8
Certificate serial:       6B37509ED1A29E3C436F189611C92BA173447516
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.mft
Manifest number:          CE
Signing time:             Mon 02 Mar 2026 00:59:23 +0000
Manifest this update:     Mon 02 Mar 2026 00:54:23 +0000
Manifest next update:     Tue 03 Mar 2026 03:15:23 +0000
Files and hashes:         1: 3137372e3138342e3137362e302f32302d3230203d3e203532393233.roa (hash: 8ZFUoxLgSZ1DxrIPi+lxbHhqxY86uVD8wJvTxZNSkxc=)
                          2: 3137372e3138342e3137362e302f32322d3232203d3e203532393233.roa (hash: u0Sm26O6dSQIkWEwWNzVH6cTzHBoxuAHd7V7mjor3vM=)
                          3: 624B8344A542767D88F5B544B3EA21DADC8EA1C8.crl (hash: GyMfAWJIDOdUR79gIKMLdiOo4oVMzAo5iVNyAr4gOgA=)
                          4: 3137372e3138342e3138332e302f32342d3234203d3e203532393233.roa (hash: XxYvhV0Nxig+oz+bWXbMEe7YTY9r9oOnbM2o1AeUebA=)
                          5: 3137372e3138342e3138302e302f32342d3234203d3e203532393233.roa (hash: wfqXQBZkVckrhs9aLlBdM0VKK7cnWTFpqEEG9vNZXKE=)
                          6: 3137372e3138342e3138372e302f32342d3234203d3e203532393233.roa (hash: 0gdtCQnmcKIx4efrwczVva3KQgPI8Xg4VsRZItrz4YM=)
                          7: 3137372e3138342e3138342e302f32342d3234203d3e203532393233.roa (hash: YUTF7zsVzBErSWBhymJo/CSv9hP9jprAVej9OFoWHpA=)
                          8: 3137372e3138342e3138382e302f32332d3233203d3e203532393233.roa (hash: TWHuYR9a22DnFMDFPjiGOD0mVPC2xZ1bvx2+YvRNKjw=)
                          9: 3137372e3138342e3137362e302f32332d3233203d3e203532393233.roa (hash: DkCiEKStfIHgO43kbu74AownWatynYXbVIvlhTlEHb0=)
                          10: 3137372e3138342e3138362e302f32332d3233203d3e203532393233.roa (hash: GOSa0WZJcEkjSIjAJl0VUUC/RrHL89Y3FsGcW0WuPt0=)
                          11: 3137372e3138342e3139312e302f32342d3234203d3e203532393233.roa (hash: t9JuWBdF8ariGshz739nhMxR1KaZZ/nOk6B6uuvmtIU=)
                          12: 3137372e3138342e3138312e302f32342d3234203d3e203532393233.roa (hash: 8ouyOu5AlqqUp8kyJf415n6Iz+l4DoX0MRJdS3PNWuo=)
                          13: 3137372e3138342e3139302e302f32342d3234203d3e203532393233.roa (hash: aGH0GbzEzquqiWX2pe5Gubj3h0eFkZ0vN/npQBFfTmI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.crl
                          rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 03:15:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:37:50:9e:d1:a2:9e:3c:43:6f:18:96:11:c9:2b:a1:73:44:75:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624B8344A542767D88F5B544B3EA21DADC8EA1C8
        Validity
            Not Before: Mar  2 00:54:23 2026 GMT
            Not After : Mar  3 03:15:23 2026 GMT
        Subject: CN=072458703BCFABF06764A21DBA7B367F4295ECFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1d:6b:06:91:ab:08:7b:51:e9:08:c1:9f:1a:
                    85:a5:82:d7:ca:da:b8:18:7d:c5:55:5d:9c:53:8a:
                    d3:15:a1:02:2c:96:39:aa:67:0b:63:60:aa:b1:4d:
                    e4:89:7d:27:69:e2:1b:42:89:da:4b:7f:89:17:e1:
                    20:99:47:e9:ff:16:bc:4a:cb:c7:b6:da:0f:82:36:
                    7d:34:f8:1d:30:6b:21:63:3a:2c:81:bd:54:fc:36:
                    74:07:58:bb:06:69:a5:e4:c0:77:71:17:bd:96:30:
                    1a:67:88:08:c5:a9:f1:a8:c4:42:8a:ab:a6:4e:04:
                    b5:22:c5:b0:e1:65:6b:9b:d0:ba:7b:6d:c2:1e:47:
                    81:b3:6a:6d:47:63:ee:ed:85:ae:d4:36:5f:a1:56:
                    51:77:9e:39:07:91:8a:2e:45:84:c3:12:ec:8a:1f:
                    72:7a:bf:f1:8a:9b:fd:cd:c8:4f:79:09:1d:24:6d:
                    bd:07:4a:d7:ed:ca:bd:3a:84:fc:b3:7f:1a:12:7b:
                    72:e2:93:65:5b:a5:3d:7a:a3:30:0b:9e:88:dc:db:
                    6e:d3:3d:c6:7d:1e:3f:50:44:d2:ec:da:20:f9:79:
                    36:60:2f:47:b0:1e:6a:3d:1a:a6:00:8e:89:dc:ec:
                    c8:a0:39:3d:6c:72:81:1f:c1:a6:ca:84:fa:19:50:
                    51:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:24:58:70:3B:CF:AB:F0:67:64:A2:1D:BA:7B:36:7F:42:95:EC:FC
            X509v3 Authority Key Identifier:
                keyid:62:4B:83:44:A5:42:76:7D:88:F5:B5:44:B3:EA:21:DA:DC:8E:A1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:72:02:ba:80:51:c3:85:4d:84:c9:b2:0b:58:e1:d3:19:a1:
         bf:c3:81:25:28:b0:2d:06:92:e4:fc:c6:6e:4d:b1:77:4c:b0:
         d3:f5:b2:af:6d:c6:1e:eb:7a:25:b8:23:65:d5:cb:43:7f:a2:
         91:dd:f6:21:97:09:e3:64:3a:bd:de:5e:91:f4:74:61:83:16:
         0e:d0:e9:89:88:5a:c3:87:eb:14:e4:ce:44:fc:1e:9e:6a:ba:
         92:dd:5c:2f:9d:dd:ca:69:23:ef:7f:c1:af:c3:10:1c:f4:a9:
         46:cc:05:cc:e5:37:1f:ed:1b:34:12:d4:73:18:b7:18:d4:4a:
         05:9e:c1:45:cb:77:12:40:71:1f:55:8c:46:4e:95:82:82:d0:
         29:7f:43:e3:33:78:b7:5f:7d:29:dc:2c:ac:69:fb:68:24:13:
         e1:6b:57:d7:fd:c6:59:4b:3c:60:2c:17:0a:b2:6a:df:72:4a:
         45:07:84:ae:2e:a7:82:2d:28:c1:ab:d8:a4:c3:01:cf:a8:cf:
         35:65:15:16:89:00:b9:03:6d:35:f9:11:72:12:53:09:c8:a8:
         be:93:55:34:3e:d3:9c:aa:25:07:fc:01:c8:a2:c0:4b:fe:54:
         b2:42:91:34:6d:9a:28:2d:4b:3f:f0:22:cf:18:2b:2f:bf:85:
         4d:d7:1f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:15:04 2026 by rpki-client