Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft
File:                     633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft (raw, json)
Hash identifier:          je0SyIGqXymYZcdiNgxaKKnqcEdK9DzilAqlIXR+4qc=
Subject key identifier:   F7:54:13:21:ED:4E:6C:2A:F9:B4:8A:33:88:EC:2F:17:EE:8E:AD:08
Authority key identifier: 63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0
Certificate issuer:       /CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0
Certificate serial:       3895FDA03E6C3DEA4C3F7C34F701AF4F5D18F280
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft
Manifest number:          031C
Signing time:             Mon 02 Mar 2026 14:16:36 +0000
Manifest this update:     Mon 02 Mar 2026 14:11:36 +0000
Manifest next update:     Tue 03 Mar 2026 14:29:36 +0000
Files and hashes:         1: 34352e3137392e35322e302f32342d3234203d3e20323639303533.roa (hash: Akh9nscz8Ru7h4WuNxjio0jBeFurBOjjKKbR62pQnJ8=)
                          2: 323830343a356562633a3a2f33322d3332203d3e20323639303533.roa (hash: GzYX1I8QbJi7Hwby4wbyOYtpvdHoyuDJfPbvJ9HohlI=)
                          3: 34352e3137392e35322e302f32332d3233203d3e20323639303533.roa (hash: 9l/70hTQnj9cn5gJDSkLTYu0XIiUnFExA0SmD6ik6eI=)
                          4: 633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl (hash: lI6k2Q7W9yFPnhWr4Zntueyziigxcm3mmuH4xcjFQJY=)
                          5: 323830343a356562633a383030303a3a2f33332d3333203d3e20323639303533.roa (hash: liUwlmRsLROgEFIRorcVo4wkRIukQ80gom0ndXpXupg=)
                          6: 323830343a356562633a3a2f33332d3333203d3e20323639303533.roa (hash: 1bUpQCBjJc58z+IfdaGqbDO6BVXJbwt9z0HYCIingm0=)
                          7: 34352e3137392e35332e302f32342d3234203d3e20323639303533.roa (hash: K9WqDVoOC9+J/ZxCcup5mVeeWECoZyoed0UuxFFCPmc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl
                          rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 14:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:95:fd:a0:3e:6c:3d:ea:4c:3f:7c:34:f7:01:af:4f:5d:18:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0
        Validity
            Not Before: Mar  2 14:11:36 2026 GMT
            Not After : Mar  3 14:29:36 2026 GMT
        Subject: CN=F7541321ED4E6C2AF9B48A3388EC2F17EE8EAD08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fa:cb:95:d7:11:43:28:e1:f3:b1:01:06:01:
                    55:82:54:45:72:61:78:38:aa:47:7f:26:d7:61:b9:
                    fa:61:6a:98:33:7a:80:1b:28:01:3e:16:1d:0e:06:
                    19:0e:e7:c9:eb:7c:28:0e:15:40:b9:d7:43:5a:02:
                    80:07:b5:53:09:e1:ed:71:91:48:5d:25:c0:45:3a:
                    96:2b:e6:45:34:ab:92:60:50:a0:12:e9:26:28:75:
                    7e:05:9d:a3:82:d0:f2:24:27:38:73:cd:d4:74:70:
                    a2:9f:f1:bf:07:56:76:2a:ca:aa:45:19:63:3e:ac:
                    20:97:56:73:10:01:bc:b0:4e:24:c9:ea:26:cc:e6:
                    60:35:88:6e:b1:cb:93:98:da:a6:55:40:9d:2d:e1:
                    e5:64:27:fb:52:cb:10:14:f7:11:c2:30:df:23:b6:
                    0c:33:16:e8:80:88:22:d9:17:b3:37:fb:42:4d:43:
                    d6:c7:a4:1d:cb:e0:48:17:41:40:6a:a9:4a:15:4f:
                    e2:4a:70:0e:43:83:eb:ce:1a:72:f3:d5:20:a4:13:
                    fa:4f:ea:ff:f7:5a:3e:b2:d5:84:6d:bc:80:7d:d7:
                    24:74:9f:48:a8:e3:9c:72:2d:5c:41:ff:ad:00:3a:
                    73:fb:c5:14:c0:05:03:dc:4d:17:69:ce:8c:53:3a:
                    f4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:54:13:21:ED:4E:6C:2A:F9:B4:8A:33:88:EC:2F:17:EE:8E:AD:08
            X509v3 Authority Key Identifier:
                keyid:63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:c5:c3:2b:f0:4b:7a:f8:44:21:69:3e:34:e0:c4:ad:28:f4:
         10:bf:da:16:d6:1e:5c:b8:64:34:70:6a:b9:99:ef:b3:01:04:
         f3:cd:3a:18:38:d0:45:ad:6a:2a:28:63:fd:99:a4:01:6b:11:
         0f:b2:9f:90:a6:37:c4:b7:aa:85:6b:1b:9b:7e:1c:01:30:e8:
         dd:51:13:6b:9f:34:d6:77:d0:28:a4:37:dc:a0:f6:b0:9f:a3:
         09:26:3b:38:3c:ca:56:32:c7:b0:1f:0b:6c:c1:3e:49:92:54:
         80:58:a7:5b:24:22:4e:99:cb:19:f8:30:2a:70:df:06:75:e4:
         68:45:a1:5d:0c:00:4e:d5:a5:24:ad:75:48:4d:6d:0a:ee:78:
         f4:16:df:77:e5:79:27:06:78:ad:91:f7:e4:40:72:8b:bd:77:
         ac:1c:25:77:c6:09:07:57:07:2a:9e:ef:29:45:7a:ee:f8:1c:
         cf:55:97:41:31:be:93:33:e8:2b:18:28:24:4b:7b:31:89:56:
         f7:1b:e5:6e:e7:c1:26:bc:18:48:79:3e:ba:b9:7d:df:a5:82:
         a4:f3:44:c7:cf:70:22:30:cc:74:6f:5f:4f:f8:2c:97:00:8b:
         b8:9b:d6:29:f7:30:f1:2a:71:a1:61:78:ae:cf:51:68:ea:5e:
         11:b3:cf:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:57:54 2026 by rpki-client