Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/B72B0284F2122722802DB9B23EEDE6D2F1B7EB88.mft
File:                     B72B0284F2122722802DB9B23EEDE6D2F1B7EB88.mft (raw, json)
Hash identifier:          zJluLeCL1wl3tt/wOZoM19ajThelxPyyEXHcyYvfjew=
Subject key identifier:   86:D0:DE:7F:F1:F3:78:A2:27:C7:87:3A:91:C3:35:00:E8:B1:BC:5E
Authority key identifier: B7:2B:02:84:F2:12:27:22:80:2D:B9:B2:3E:ED:E6:D2:F1:B7:EB:88
Certificate issuer:       /CN=B72B0284F2122722802DB9B23EEDE6D2F1B7EB88
Certificate serial:       4F1568749F0FD32CB71DDF590DE0D2AD669B1AE2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B72B0284F2122722802DB9B23EEDE6D2F1B7EB88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/B72B0284F2122722802DB9B23EEDE6D2F1B7EB88.mft
Manifest number:          3A
Signing time:             Mon 02 Mar 2026 01:14:02 +0000
Manifest this update:     Mon 02 Mar 2026 01:09:02 +0000
Manifest next update:     Tue 03 Mar 2026 04:13:02 +0000
Files and hashes:         1: 323830343a333032343a3a2f33322d313238203d3e20323634393332.roa (hash: 4IjgZVMW/Ngyzjd0vKnaxySIVs1glHOEX8Q+r9oHkk0=)
                          2: 3136382e3233322e31322e302f32322d3332203d3e20323634393332.roa (hash: ovEuyAp+fRwhjJQH2KN+42JlRJG0CNQoOVLhlCktA3U=)
                          3: B72B0284F2122722802DB9B23EEDE6D2F1B7EB88.crl (hash: wGKj8jN+r7Ds9al+CXMHQ7C2XPNvwL64ZRB7lKQupQU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/B72B0284F2122722802DB9B23EEDE6D2F1B7EB88.crl
                          rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/B72B0284F2122722802DB9B23EEDE6D2F1B7EB88.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B72B0284F2122722802DB9B23EEDE6D2F1B7EB88.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 04:13:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:15:68:74:9f:0f:d3:2c:b7:1d:df:59:0d:e0:d2:ad:66:9b:1a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B72B0284F2122722802DB9B23EEDE6D2F1B7EB88
        Validity
            Not Before: Mar  2 01:09:02 2026 GMT
            Not After : Mar  3 04:13:02 2026 GMT
        Subject: CN=86D0DE7FF1F378A227C7873A91C33500E8B1BC5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f5:4c:54:47:50:98:d5:ff:49:32:73:38:8d:
                    14:22:cd:fa:11:93:58:f6:8e:73:0e:cb:40:a5:e4:
                    1f:eb:53:98:da:1e:39:7e:48:4c:fb:cc:b5:ae:93:
                    1b:4a:86:4f:ba:ed:05:9c:78:e7:04:fe:38:05:84:
                    70:0d:53:0d:d6:89:c8:7c:04:cd:97:d5:b2:6e:84:
                    d4:e9:f1:dc:01:73:b6:7e:34:3b:8c:6e:02:e5:58:
                    45:8f:27:22:ca:b8:b2:8e:97:ce:8c:05:0e:70:ef:
                    5b:d8:dc:23:28:43:e5:c3:01:7f:ac:b9:f6:11:b7:
                    38:62:93:af:03:04:f7:e4:3a:b5:ec:28:b1:f7:ab:
                    56:5d:d0:84:c9:7c:91:23:50:de:10:4b:20:75:4e:
                    20:d3:cb:20:ad:42:20:43:fb:6c:18:93:9c:b0:27:
                    77:ba:64:0f:ab:16:ae:87:55:2c:02:83:b7:0f:77:
                    1b:70:3c:1f:69:37:8b:d6:f4:c8:26:08:d6:c1:41:
                    b1:84:d7:1d:21:78:7c:89:a6:b9:53:df:d8:6a:48:
                    32:ac:c4:1d:7f:ef:26:49:e8:0a:52:ee:74:89:8e:
                    eb:20:d1:72:6d:e9:3e:c1:8c:bd:f2:fc:dd:8c:2e:
                    5d:9e:f6:61:49:29:e7:a1:91:15:d4:4c:e3:5c:42:
                    2a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D0:DE:7F:F1:F3:78:A2:27:C7:87:3A:91:C3:35:00:E8:B1:BC:5E
            X509v3 Authority Key Identifier:
                keyid:B7:2B:02:84:F2:12:27:22:80:2D:B9:B2:3E:ED:E6:D2:F1:B7:EB:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/B72B0284F2122722802DB9B23EEDE6D2F1B7EB88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B72B0284F2122722802DB9B23EEDE6D2F1B7EB88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/B72B0284F2122722802DB9B23EEDE6D2F1B7EB88.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:ac:86:f0:0f:0c:92:87:12:87:2c:48:ea:96:ca:3a:e8:03:
         52:9b:1e:47:0a:5a:7c:c8:82:c8:44:2b:e6:08:28:e5:df:24:
         28:1b:e1:72:d8:f2:ba:86:e6:aa:c5:64:10:d8:33:49:ba:fe:
         13:63:b4:d3:e4:d9:f1:4a:89:11:5c:8b:04:42:66:65:e7:0a:
         d8:e1:51:38:7b:7f:24:e7:e4:c4:dd:47:c1:fd:23:fc:3e:da:
         0a:a3:76:dd:7c:f8:d1:80:3d:b7:59:a2:18:d3:78:b4:da:c2:
         1f:04:e1:b5:65:f0:8c:76:40:a7:d6:5e:90:df:a0:6d:35:f0:
         dd:be:fc:e6:3a:bd:59:89:fc:a1:76:53:79:f6:6f:dc:10:f9:
         7b:94:6d:4a:77:09:59:4d:e9:96:da:06:a0:4e:e5:25:45:00:
         68:f7:32:63:67:ba:81:a4:e0:25:d7:e9:7a:28:0c:41:c3:f9:
         a2:58:6d:8d:a9:6e:80:cf:98:d9:6d:cc:61:41:d4:43:8f:e5:
         75:b4:56:55:44:1f:b6:64:13:a0:ac:16:44:87:3f:a7:be:9b:
         3e:a7:ed:91:07:59:da:fe:ef:d4:21:ad:ba:a0:12:9d:d3:61:
         58:54:90:cb:ef:50:a9:f3:99:9c:db:0e:0d:b7:71:32:c3:fa:
         29:df:3d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:41:07 2026 by rpki-client