Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.mft
File:                     60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.mft (raw, json)
Hash identifier:          rvu27os1wCDhir0CTCXoI9rwnYqsa+/ZTLb7fwyF+xU=
Subject key identifier:   DC:2B:1A:F0:41:8E:88:0A:81:C5:23:0D:F3:51:27:DC:EA:61:9B:55
Authority key identifier: 60:CB:1A:8F:EC:A3:BA:79:84:AB:DC:02:AD:DF:32:E3:D0:B9:FA:CE
Certificate issuer:       /CN=60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE
Certificate serial:       20F5C8A6F54B72884CEBB35B26002BCA9BF4D8CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.mft
Manifest number:          0157
Signing time:             Wed 13 May 2026 02:44:56 +0000
Manifest this update:     Wed 13 May 2026 02:39:56 +0000
Manifest next update:     Thu 14 May 2026 04:52:56 +0000
Files and hashes:         1: 3137302e3234362e3136342e302f32322d3332203d3e203532393133.roa (hash: xVGuh8ZqUun2aFWgV6zGTet20avfAQx18DeSH9cUFXo=)
                          2: 3137302e3135302e37362e302f32322d3332203d3e203532393133.roa (hash: Q9OvGuz8TTKF9RjQ74+6TngzRXXOpcOYYmP7t5SvAHM=)
                          3: 3137372e32332e3136382e302f32312d3332203d3e203532393133.roa (hash: v6W6av2Nqz/d23buHuKv8sV39F3VHfJtgyR85ofg1QU=)
                          4: 3136372e3234392e342e302f32322d3332203d3e203532393133.roa (hash: gPybI+cpgn7l3rwkk8NQ/Z7s+5qfXp3TxhgAwuEbhlc=)
                          5: 60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.crl (hash: 5cymV/5+sv0JIWr0cZloMk063INzd0ZqN0HywNDjvMw=)
                          6: 3137392e3132372e34302e302f32312d3332203d3e203532393133.roa (hash: teB4Nd0CWwUZopZQ/bc8WgcgIqPA+1jpQxaaSHEJSFo=)
                          7: 323830343a313038383a3a2f33322d313238203d3e203532393133.roa (hash: PuDs9UEY2wHxNVKfZaEvKw/VqnmgORMciwYehQdD0pQ=)
                          8: 3139302e3130392e38302e302f32322d3332203d3e203532393133.roa (hash: iGotrqf3eERFWHu+HvXfMO5Oje1C2Y+zcriigkdX8co=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.crl
                          rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:52:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f5:c8:a6:f5:4b:72:88:4c:eb:b3:5b:26:00:2b:ca:9b:f4:d8:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE
        Validity
            Not Before: May 13 02:39:56 2026 GMT
            Not After : May 14 04:52:56 2026 GMT
        Subject: CN=DC2B1AF0418E880A81C5230DF35127DCEA619B55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d8:12:7d:04:9d:cf:c6:55:d2:ba:aa:b0:17:
                    e5:3e:1a:ec:30:31:f1:20:01:b9:a5:06:43:9e:47:
                    2e:4f:6a:10:01:a3:3e:49:07:bb:2c:f3:1c:94:b2:
                    0f:99:d1:b9:23:07:db:72:33:e3:6d:7c:0f:7f:5d:
                    dd:cc:21:80:7d:61:e6:b0:9e:18:c7:81:7b:8b:d4:
                    87:f0:ee:53:08:58:0c:28:f0:89:51:91:d6:b7:80:
                    1f:b4:72:de:65:fd:73:21:b0:93:3e:38:a5:fe:c4:
                    39:94:9c:73:ac:38:02:70:5b:7c:03:51:43:4f:e2:
                    2a:ef:77:1c:fe:4a:12:1e:9b:65:86:18:ad:01:4e:
                    4a:49:63:7d:65:b3:36:1f:4f:0f:15:4e:31:52:78:
                    7d:40:05:fe:be:c4:e3:91:fa:9f:08:e3:e4:f0:80:
                    bd:e3:45:b2:b2:cf:d5:9f:3c:f2:32:7c:8b:74:48:
                    38:a7:e0:cd:2a:f9:70:81:02:96:40:02:e6:93:64:
                    59:9b:b1:b9:ee:e7:14:81:43:16:b9:d0:2c:a6:8d:
                    ab:ba:0c:5d:44:20:f1:c2:88:3e:3c:13:ef:78:9a:
                    0b:9e:69:cf:b2:5f:83:63:24:ae:4a:8a:af:15:4d:
                    f1:60:0d:73:5b:69:56:eb:61:3e:ac:1b:3e:fb:3c:
                    02:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2B:1A:F0:41:8E:88:0A:81:C5:23:0D:F3:51:27:DC:EA:61:9B:55
            X509v3 Authority Key Identifier:
                keyid:60:CB:1A:8F:EC:A3:BA:79:84:AB:DC:02:AD:DF:32:E3:D0:B9:FA:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:b4:11:bc:52:b6:94:37:e8:0f:8e:66:a4:27:a9:9b:64:a8:
         10:3c:14:64:f9:ed:6f:64:86:b5:4c:57:a3:d6:4e:0a:e5:b0:
         c4:40:fe:98:6d:3f:20:39:d7:d5:c0:96:9f:e9:32:13:91:81:
         dd:c1:72:f2:86:ea:ea:4b:60:73:29:7a:f9:76:a8:b7:28:33:
         bc:cb:eb:a6:15:b6:2e:26:ac:e9:17:97:17:71:a1:9e:34:bd:
         e4:57:13:4a:08:23:a0:45:f5:8d:01:1f:fd:66:0f:fe:c7:df:
         e0:f8:c3:24:c6:51:b1:f0:4a:c3:e2:73:0e:d0:42:90:0f:ed:
         7b:ad:73:ad:25:f8:32:c5:c4:2c:e0:3d:d8:9f:3b:bd:9f:8f:
         65:d6:b6:13:01:7b:a9:36:43:66:e0:51:3a:fd:ff:46:93:5b:
         f1:bb:1e:bc:c6:78:3b:99:5c:95:b7:c6:5b:19:23:f9:09:6a:
         83:74:eb:aa:e7:ca:1e:b7:c3:84:eb:bc:23:28:09:c6:2b:34:
         b1:d2:24:7f:5e:e0:cf:8e:58:fc:e8:c0:da:a6:bf:c7:5c:eb:
         26:27:3f:f3:d3:e8:1b:21:6a:6d:ca:6d:86:8c:ad:94:5d:44:
         1a:6a:68:23:8f:fb:d6:b9:83:8d:40:99:4d:89:27:53:29:09:
         dc:39:fa:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:01:23 2026 by rpki-client