Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.mft
File:                     701F7EBD5EE2152D4689A615D0F186D075EECD41.mft (raw, json)
Hash identifier:          wOmzcUSRpqQtQPaNFfoq87oUv9VpqgGyKSjntE2BzW4=
Subject key identifier:   BD:21:6C:2D:88:71:90:24:D5:C6:95:06:55:D9:F4:1E:DE:F1:27:4A
Authority key identifier: 70:1F:7E:BD:5E:E2:15:2D:46:89:A6:15:D0:F1:86:D0:75:EE:CD:41
Certificate issuer:       /CN=701F7EBD5EE2152D4689A615D0F186D075EECD41
Certificate serial:       6BC026848D9797F6C45FF9E52AE5C43FAFD440B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701F7EBD5EE2152D4689A615D0F186D075EECD41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.mft
Manifest number:          CA
Signing time:             Sun 01 Mar 2026 11:24:23 +0000
Manifest this update:     Sun 01 Mar 2026 11:19:23 +0000
Manifest next update:     Mon 02 Mar 2026 14:59:23 +0000
Files and hashes:         1: 323830343a353134303a383030303a3a2f33332d3333203d3e20323638343430.roa (hash: hFhn5MBA6jIN2tEXivR9+TiaYDg5D9dFbXSRRyxTQw8=)
                          2: 34352e3136312e32332e302f32342d3234203d3e20323638343430.roa (hash: L+Qb68oKLljVQz7SdZNTQj4XlE9OAhJMPy9WKcpvPm0=)
                          3: 34352e3136312e32322e302f32332d3233203d3e20323638343430.roa (hash: M6krz/e6ZES22ESypEdU6b07Nh29rjcbX207CCLJmG0=)
                          4: 701F7EBD5EE2152D4689A615D0F186D075EECD41.crl (hash: Hu2iRnhkSJ6AtInTI9HDPbLzTLhMjNASkGSHtGYWOK8=)
                          5: 323830343a353134303a3a2f33322d3332203d3e20323638343430.roa (hash: rb1GVHIGSODc5A+kSif6zWYICVt9SMW6ZwSJ9kxJhfA=)
                          6: 323830343a353134303a3a2f33332d3333203d3e20323638343430.roa (hash: LeRqew8opsaem32EprvHblYNmhZFlfM2Lnc7VUAt0Ic=)
                          7: 34352e3136312e32322e302f32342d3234203d3e20323638343430.roa (hash: y2PpABc/Sg1TZ0UYoWQMJkfjOm+jHPlyiTpY2c2lreM=)
                          8: 34352e3136312e32302e302f32322d3232203d3e20323638343430.roa (hash: xE2fRlN5dX60ZRAfgmHWPeQa5LWHn/7y2Wik31QJxSw=)
                          9: 34352e3136312e32312e302f32342d3234203d3e20323638343430.roa (hash: IQ41tqOgD7uD/PEIYH5h/oUTE5tnT9q42FfS6tEZMuU=)
                          10: 34352e3136312e32302e302f32342d3234203d3e20323638343430.roa (hash: QXOWosaoZUnOff/366m5+VXqxvO9oKo3qAcNaj++9vs=)
                          11: 34352e3136312e32302e302f32332d3233203d3e20323638343430.roa (hash: ADh4CVwpL0Yv+Rq09yTFltLU+cq9uBqPwNE16rgyxiQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.crl
                          rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701F7EBD5EE2152D4689A615D0F186D075EECD41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 14:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c0:26:84:8d:97:97:f6:c4:5f:f9:e5:2a:e5:c4:3f:af:d4:40:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701F7EBD5EE2152D4689A615D0F186D075EECD41
        Validity
            Not Before: Mar  1 11:19:23 2026 GMT
            Not After : Mar  2 14:59:23 2026 GMT
        Subject: CN=BD216C2D88719024D5C6950655D9F41EDEF1274A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:50:eb:89:32:e7:ca:ef:e7:1d:b9:61:40:f8:
                    3c:29:74:f2:49:9d:48:05:19:be:eb:de:a7:e8:14:
                    df:aa:b5:09:9c:29:e1:fe:cf:c3:e8:d3:80:3e:f1:
                    d3:6b:21:a1:7d:97:78:99:cb:07:be:20:4a:8e:dd:
                    7e:bb:ca:1e:b9:48:f7:a0:31:5d:eb:7e:62:8d:51:
                    a7:35:24:d5:a6:59:7b:6d:73:b8:9a:e8:38:f9:9c:
                    31:d2:5f:94:b8:8a:5e:d6:5d:e0:9c:00:5d:e6:ea:
                    64:8b:4f:29:c4:57:44:3b:50:9c:4f:18:20:5b:c4:
                    f8:37:73:19:9a:ac:10:cb:4f:cd:b9:8f:cc:ee:a1:
                    b9:c5:31:cc:14:19:9e:ba:09:a6:34:47:b0:0c:f3:
                    ca:79:fb:8f:34:f9:67:26:f4:e1:69:ba:f7:3e:80:
                    41:cc:20:9e:ae:a6:7e:44:5e:23:57:ff:f6:34:da:
                    fb:f7:fb:e9:93:4d:59:8c:39:b0:f6:73:93:fa:88:
                    03:90:39:32:49:40:00:fe:00:0f:24:07:97:a5:00:
                    35:dd:32:31:73:3c:63:d8:8d:2d:22:8a:5f:29:21:
                    9c:7e:a8:ff:4e:e5:83:b2:43:77:41:50:95:ea:b1:
                    1a:e3:5f:0d:31:7f:1e:fb:30:f6:d0:69:0e:50:1a:
                    a8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:21:6C:2D:88:71:90:24:D5:C6:95:06:55:D9:F4:1E:DE:F1:27:4A
            X509v3 Authority Key Identifier:
                keyid:70:1F:7E:BD:5E:E2:15:2D:46:89:A6:15:D0:F1:86:D0:75:EE:CD:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701F7EBD5EE2152D4689A615D0F186D075EECD41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:7c:40:98:98:4b:56:75:57:21:88:00:94:81:13:45:0c:7d:
         bc:f1:ce:96:83:bb:59:d9:43:09:7b:1d:94:7e:0c:db:56:dc:
         bd:40:d6:5c:cf:82:59:82:35:3f:ce:7c:af:eb:06:47:b6:bb:
         f2:88:e7:30:30:0d:93:4e:92:0c:92:2a:61:a9:cb:73:53:6a:
         58:d5:80:ee:15:9b:22:5b:89:63:d9:3f:b0:3b:27:c2:bf:b8:
         86:3f:fc:13:f9:60:c0:a6:d9:2b:14:84:6d:62:c8:fd:9b:9c:
         56:84:ce:c5:61:2f:a9:90:c5:13:00:4a:20:51:5f:4d:e9:51:
         b6:10:67:de:c2:3c:5e:97:a4:58:f7:ae:fb:43:93:1c:e2:14:
         2f:dd:4f:aa:70:19:29:df:16:91:cb:50:48:23:25:33:83:86:
         21:08:16:d0:3f:48:29:2a:67:01:5d:1d:54:96:90:3a:fe:2e:
         33:80:cd:41:89:68:4b:90:98:2c:39:68:b2:25:6a:03:9e:d4:
         6f:c1:d5:05:33:27:86:ea:c3:4f:2b:d1:3d:96:9e:9f:b1:27:
         fc:21:46:85:34:f1:03:04:98:a5:1f:a0:96:46:9e:19:ef:c7:
         34:d2:c1:16:18:17:fc:32:b9:1b:da:c8:78:a3:f0:6d:27:e7:
         6d:3e:e2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:14:41 2026 by rpki-client