Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
File:                     DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft (raw, json)
Hash identifier:          xC0jj/LFFrKhtg/7Ce4EaBxjoGSPHBWWVUwv3msQVio=
Subject key identifier:   68:D0:9E:D1:16:B2:E0:2A:20:C3:55:B0:9A:FF:CE:C2:8E:60:1A:F1
Authority key identifier: DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF
Certificate issuer:       /CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
Certificate serial:       35AE5B90D51A2360B272535DC693A436A16C0C15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
Manifest number:          039D
Signing time:             Sun 01 Mar 2026 16:00:04 +0000
Manifest this update:     Sun 01 Mar 2026 15:55:04 +0000
Manifest next update:     Mon 02 Mar 2026 16:59:04 +0000
Files and hashes:         1: DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl (hash: TJxrBTQtyGw74+9sY5TMpUQDfNGLNnAWAmGA0JFW73A=)
                          2: 34352e3233322e37332e302f32342d3234203d3e20323637323531.roa (hash: QIVxHVauEvqV4mYKX09XWLG6LMGXBqT6ako7wX7wXNg=)
                          3: 34352e3233322e37322e302f32342d3234203d3e20323637323531.roa (hash: gwYn/is6VhcQvnMynOevGThyvSq+sHyeol7Ooarj7r8=)
                          4: 34352e3233322e37352e302f32342d3234203d3e20323637323531.roa (hash: r1XY4nAAMQiPedQTv2UyPVyhHWeEghFuH/Sa8IGwww8=)
                          5: 34352e3233322e37342e302f32342d3234203d3e20323637323531.roa (hash: SenK1jmwRDLUh8fN2HBnAiAqBo7jN1L29eDWq7Mi8UU=)
                          6: 34352e3233322e37342e302f32332d3233203d3e20323637323531.roa (hash: Up5c3Zrkl/h4NMxezx9vicK8H0zNaqvBqFAGULiwrgY=)
                          7: 34352e3233322e37322e302f32322d3232203d3e20323637323531.roa (hash: BsLLZ9KkH4Zj74RdZ0/HI2fM5L9/mlUsxVqy4uRFoIM=)
                          8: 34352e3233322e37322e302f32332d3233203d3e20323637323531.roa (hash: i4vOZ5jbbLD0oYiy/k3J6OX7KRNwSiY7Tfa27r5KvNs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl
                          rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 16:59:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ae:5b:90:d5:1a:23:60:b2:72:53:5d:c6:93:a4:36:a1:6c:0c:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
        Validity
            Not Before: Mar  1 15:55:04 2026 GMT
            Not After : Mar  2 16:59:04 2026 GMT
        Subject: CN=68D09ED116B2E02A20C355B09AFFCEC28E601AF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:30:1f:8b:51:8a:a4:dd:64:b8:9e:27:15:0d:
                    94:6b:0d:91:40:58:d3:1e:2a:c0:da:63:f1:63:92:
                    ba:19:49:d9:8a:82:b7:ea:b6:5b:aa:4e:8e:74:06:
                    b3:2b:ac:03:50:f6:b7:97:6d:0e:fb:8f:5d:9c:83:
                    2d:c9:ba:86:29:98:1f:d3:d9:7f:ec:f0:c4:f0:3e:
                    31:55:5b:b2:92:90:91:a6:f9:83:1b:2b:e3:d4:27:
                    4f:29:fd:54:2e:09:1c:0f:85:3d:d3:fa:30:8d:95:
                    23:56:7d:02:1c:82:9e:8e:95:4e:ed:19:d4:7b:b3:
                    07:82:21:f3:29:fe:f2:3a:c4:40:3b:4d:f8:58:f9:
                    f4:20:00:fa:fe:ac:ba:c7:fc:79:3c:39:01:d6:3f:
                    b1:16:dd:27:1c:bc:21:98:28:cb:2c:65:dd:6b:b0:
                    d9:f3:a4:1f:dd:c7:22:01:a9:fd:4b:0e:17:70:73:
                    e5:94:35:4a:26:ef:0b:78:7b:68:ed:55:73:06:eb:
                    08:7d:a9:e0:84:d7:a7:0d:30:08:81:9b:6a:67:fd:
                    5c:61:1c:f4:72:4f:69:3b:0a:02:bc:80:f6:f5:02:
                    31:a3:fe:b7:81:2e:dc:0c:a1:e4:11:13:36:17:0d:
                    0d:64:39:9f:5c:4d:c7:c4:e3:99:7e:24:07:82:97:
                    05:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D0:9E:D1:16:B2:E0:2A:20:C3:55:B0:9A:FF:CE:C2:8E:60:1A:F1
            X509v3 Authority Key Identifier:
                keyid:DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:26:f1:ec:e3:b0:4d:f9:5b:22:ae:cd:9a:6a:ec:ee:18:79:
         9b:7c:d2:75:07:55:73:20:a6:68:62:ea:56:c0:9f:cf:b7:af:
         e4:12:d3:c3:66:b9:e0:02:9e:a4:87:87:7b:cc:71:d9:f7:43:
         f1:fa:5e:35:3e:1f:d0:a2:fc:53:1a:84:3c:ca:ac:6c:71:8f:
         2e:a4:c7:9e:ae:1f:6b:a1:3b:53:d0:3e:25:8c:7a:52:d1:ab:
         4b:a2:c8:52:5c:e8:04:5e:1f:ae:df:c6:c9:85:62:0f:67:8c:
         5d:9a:4a:54:04:74:88:53:37:5e:13:49:09:f2:b1:1d:3f:56:
         39:53:92:78:1c:e4:ef:92:8a:d2:bd:55:e0:5b:d5:ec:0b:69:
         5f:8e:13:82:71:c9:6d:2a:08:90:aa:8d:b8:c7:e9:a6:0f:59:
         88:0b:1c:85:f3:ce:41:80:76:8e:6e:73:dd:30:77:19:e5:57:
         42:bd:49:f2:0b:52:5c:84:d4:10:ac:95:ee:a8:2e:04:90:e8:
         25:f0:61:31:7d:da:e5:60:8e:13:ce:68:40:e8:e9:d5:64:66:
         25:ad:ad:cf:67:f5:1c:0a:03:6a:68:b8:a8:31:d7:94:71:9c:
         49:eb:ee:d8:17:8c:24:d2:99:69:99:2c:18:bb:a0:06:b6:a2:
         69:13:39:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:46:14 2026 by rpki-client