Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/33wsswsjEF1KVEGfEEMQuXEHHvMvmCgXd2XAmm9QYVzW/0/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.mft
File:                     F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.mft (raw, json)
Hash identifier:          T8E6iQ/CHTYRimhTFQDT724PcVTPukg9j0hQI8pf+6c=
Subject key identifier:   16:39:A7:FB:C4:1B:28:DE:6F:5A:7F:72:B7:1C:B8:50:65:9A:B8:8C
Authority key identifier: F0:EF:5A:E4:94:31:89:7F:FD:D3:75:9A:B5:AC:D5:D5:F9:D5:CB:3E
Certificate issuer:       /CN=F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E
Certificate serial:       0C12374F407E3A7F4FC78544F9F63E2B83F82883
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33wsswsjEF1KVEGfEEMQuXEHHvMvmCgXd2XAmm9QYVzW/0/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.mft
Manifest number:          01B4
Signing time:             Thu 26 Mar 2026 04:47:17 +0000
Manifest this update:     Thu 26 Mar 2026 04:42:17 +0000
Manifest next update:     Fri 27 Mar 2026 08:21:17 +0000
Files and hashes:         1: 323830343a363062343a3a2f33322d3335203d3e20323639313835.roa (hash: T1aWsoQrU0M7lZb+1nTTA35HTWI62YBVgONyJXtASb8=)
                          2: F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.crl (hash: 2h/LviM8MGTab2m7tckXxlycQhfwnVMSA8sqWh1izTg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/33wsswsjEF1KVEGfEEMQuXEHHvMvmCgXd2XAmm9QYVzW/0/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.crl
                          rsync://rpki-repo.registro.br/repo/33wsswsjEF1KVEGfEEMQuXEHHvMvmCgXd2XAmm9QYVzW/0/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 08:21:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:12:37:4f:40:7e:3a:7f:4f:c7:85:44:f9:f6:3e:2b:83:f8:28:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E
        Validity
            Not Before: Mar 26 04:42:17 2026 GMT
            Not After : Mar 27 08:21:17 2026 GMT
        Subject: CN=1639A7FBC41B28DE6F5A7F72B71CB850659AB88C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2e:a8:88:62:e6:49:19:a9:a8:a0:ce:a0:bb:
                    cc:45:c5:cc:10:f3:d6:0f:88:11:0b:4f:b9:7d:75:
                    73:26:d6:a9:20:09:21:8a:a7:10:aa:c8:d5:d4:21:
                    b8:22:8c:c3:cd:39:da:41:eb:7e:94:de:cd:89:4a:
                    b9:3a:cc:1c:4f:98:48:c8:e9:fe:29:20:58:6f:c3:
                    aa:da:a1:83:aa:41:9a:ae:a7:30:49:91:6f:b3:73:
                    7a:ff:22:91:72:8b:25:02:25:3e:25:71:19:c8:d5:
                    aa:6c:50:73:6e:2e:ac:ac:e0:27:cd:a3:4a:5e:2c:
                    00:ba:57:5d:e8:e6:3e:22:9c:c3:2f:7f:d8:a5:9f:
                    d1:c8:18:fb:34:27:cc:d8:43:78:73:61:83:5f:7b:
                    33:78:fa:c8:ce:43:c6:5a:f2:60:fb:4c:80:92:4b:
                    7d:61:b6:ea:90:af:6d:ca:06:8b:91:b4:6e:ba:6a:
                    18:7b:d1:a4:93:41:71:1b:43:c8:9f:e8:f3:47:0f:
                    19:3a:c4:a9:0d:1c:5c:46:ee:39:1f:1e:37:63:f1:
                    cc:35:e5:c4:22:65:e7:90:1e:0e:56:da:28:bc:07:
                    b6:42:fc:ee:06:60:ed:bc:d4:06:98:07:b6:7e:89:
                    2d:4e:ea:40:32:ec:74:46:cc:ef:63:d4:7e:33:1b:
                    ba:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:39:A7:FB:C4:1B:28:DE:6F:5A:7F:72:B7:1C:B8:50:65:9A:B8:8C
            X509v3 Authority Key Identifier:
                keyid:F0:EF:5A:E4:94:31:89:7F:FD:D3:75:9A:B5:AC:D5:D5:F9:D5:CB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33wsswsjEF1KVEGfEEMQuXEHHvMvmCgXd2XAmm9QYVzW/0/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33wsswsjEF1KVEGfEEMQuXEHHvMvmCgXd2XAmm9QYVzW/0/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:81:e3:bf:e6:ec:6c:57:47:8b:bd:b1:9e:31:43:cc:90:84:
         ae:3b:ea:d8:e8:1a:69:5a:32:49:bd:d7:48:fc:f4:df:c3:52:
         90:c7:3f:17:52:c3:99:9b:ae:37:e4:c8:79:8e:f7:53:97:4a:
         b8:99:44:85:eb:92:3e:c9:1c:ed:c3:34:4b:ee:18:f2:c0:cd:
         28:5d:92:3c:f4:b0:4b:45:cf:24:1a:cb:23:f9:67:2e:ce:49:
         a5:00:b3:c5:65:56:5d:65:e2:c2:94:9c:e2:55:04:30:ec:50:
         13:9e:f3:a1:a1:f4:11:72:a0:f3:c4:10:1d:77:6b:4f:33:7a:
         ee:1f:51:7b:db:d6:22:04:2e:af:11:14:37:4b:ec:6f:0b:90:
         25:d5:78:1e:a3:23:94:5f:16:c5:7a:38:ce:e5:ab:89:9c:a3:
         5b:5f:7e:9a:cd:bb:dd:d2:13:d6:33:69:b0:c3:1f:19:12:3c:
         b9:11:a3:8c:ba:7a:c3:9a:98:55:c9:cf:1a:42:5b:14:75:ff:
         66:14:53:56:01:3a:c5:92:b8:02:71:2b:e6:d1:65:e8:de:a1:
         4d:ec:9c:82:1d:79:8b:ea:fb:2f:f3:82:4e:c1:01:d1:f2:f8:
         e3:95:27:ae:d3:54:f7:c6:34:72:12:6b:3e:14:ff:00:c1:59:
         fc:45:10:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:56:01 2026 by rpki-client