Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/7F6FA8E3283DF0A70669D93FD9B84155B89C4685.mft
File:                     7F6FA8E3283DF0A70669D93FD9B84155B89C4685.mft (raw, json)
Hash identifier:          tQbYf0cvpKNn/Recj6pQfgednZ+R5jsH4179E0Fm0Y4=
Subject key identifier:   DB:3F:C3:36:BC:68:DC:19:F4:1B:4E:54:73:04:58:2C:6E:1A:0C:3D
Authority key identifier: 7F:6F:A8:E3:28:3D:F0:A7:06:69:D9:3F:D9:B8:41:55:B8:9C:46:85
Certificate issuer:       /CN=7F6FA8E3283DF0A70669D93FD9B84155B89C4685
Certificate serial:       2F862A3D1E6330683B98ACB68A7FA11754353E77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F6FA8E3283DF0A70669D93FD9B84155B89C4685.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/7F6FA8E3283DF0A70669D93FD9B84155B89C4685.mft
Manifest number:          0A
Signing time:             Wed 25 Mar 2026 16:20:24 +0000
Manifest this update:     Wed 25 Mar 2026 16:15:24 +0000
Manifest next update:     Thu 26 Mar 2026 17:33:24 +0000
Files and hashes:         1: 34352e3233352e3232302e302f32322d3234203d3e20323638323330.roa (hash: VgTEKKQ5x6p8Sl6tqGlg1fL84JWHFwkxpp5Kvaa9AxI=)
                          2: 323830343a346466343a3a2f33322d3438203d3e20323638323330.roa (hash: EEjaibjl4KtGJ6sPxxEpS+9JTiJHUhpBK8bGpawBBwg=)
                          3: 323830343a333766303a3a2f33322d3438203d3e20323636343435.roa (hash: 1ATjmvo3uBqMTcGOkpio1ydbi1JCBhnE2wA5k/X6hjY=)
                          4: 7F6FA8E3283DF0A70669D93FD9B84155B89C4685.crl (hash: WkJnGlAZyWyF9qjB8QMa9fbsYnMESA5AnelJNyA73b8=)
                          5: 323830343a373136343a3a2f33322d3438203d3e20323730373836.roa (hash: pVE2jdffR3Qc3/i9ptZTUJih5KGEWwdVDq8JgDsmA6E=)
                          6: 3137302e38322e3138302e302f32322d3234203d3e20323636343435.roa (hash: yvUutLv3EXtn26B0rfgTbmMiXSITc1ZhNXrqobhcm+A=)
                          7: 3230302e33392e3135302e302f32332d3234203d3e20323730373836.roa (hash: S6iIisOfPBRi7ol8nFFEPLhdRV6CrPU+ckiqAYDyj5g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/7F6FA8E3283DF0A70669D93FD9B84155B89C4685.crl
                          rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/7F6FA8E3283DF0A70669D93FD9B84155B89C4685.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F6FA8E3283DF0A70669D93FD9B84155B89C4685.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 17:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:86:2a:3d:1e:63:30:68:3b:98:ac:b6:8a:7f:a1:17:54:35:3e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F6FA8E3283DF0A70669D93FD9B84155B89C4685
        Validity
            Not Before: Mar 25 16:15:24 2026 GMT
            Not After : Mar 26 17:33:24 2026 GMT
        Subject: CN=DB3FC336BC68DC19F41B4E547304582C6E1A0C3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:67:91:36:fb:5c:d7:86:4a:da:1d:04:0a:03:
                    f2:01:0b:24:28:d7:58:1f:a6:1b:7f:9f:c3:08:5b:
                    26:b0:6b:da:0b:6a:8f:54:62:91:de:13:0b:f2:39:
                    3b:d4:2b:83:2b:ad:b3:94:81:0c:d6:e3:20:88:64:
                    63:ba:0e:8a:c1:0d:f2:1c:fa:eb:de:1d:d4:7f:d6:
                    15:2b:9c:91:63:f2:5a:36:6c:9c:02:f0:d8:8a:41:
                    f6:70:e7:6d:ad:6b:d3:06:4d:3b:12:f2:53:9b:1d:
                    a0:5b:54:ba:1b:c6:4c:4a:bc:9d:2d:72:70:1e:a5:
                    85:e7:ad:25:37:c9:d8:8e:71:fb:a7:ff:5f:8e:28:
                    41:f4:9c:69:80:26:49:ee:8f:e2:e9:e1:dd:f3:f3:
                    da:67:29:2e:aa:cd:45:d1:fb:ad:0e:be:1f:74:25:
                    63:64:42:c8:b0:0c:b4:b1:00:26:65:ff:49:ba:23:
                    3f:50:d3:3a:48:1d:6f:91:1b:d6:4f:e8:7e:e8:15:
                    1a:6f:10:75:db:4b:07:93:75:1a:ca:5e:7e:b5:fa:
                    04:d0:11:77:c7:65:41:3a:be:e3:d1:0e:78:dc:0f:
                    45:53:09:21:bd:39:f8:93:32:41:5c:81:32:75:e4:
                    aa:55:d6:5f:20:35:e8:33:92:57:a9:86:9b:da:3a:
                    6a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:3F:C3:36:BC:68:DC:19:F4:1B:4E:54:73:04:58:2C:6E:1A:0C:3D
            X509v3 Authority Key Identifier:
                keyid:7F:6F:A8:E3:28:3D:F0:A7:06:69:D9:3F:D9:B8:41:55:B8:9C:46:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/7F6FA8E3283DF0A70669D93FD9B84155B89C4685.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F6FA8E3283DF0A70669D93FD9B84155B89C4685.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/7F6FA8E3283DF0A70669D93FD9B84155B89C4685.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:0e:e2:ce:ef:cf:f3:32:f3:27:12:04:d9:65:e0:dc:98:89:
         40:61:1d:6b:44:96:72:bf:06:59:92:6d:6a:37:92:26:e8:2b:
         06:11:3c:9a:75:ee:09:40:7b:88:44:e0:5f:a4:68:81:45:d6:
         a5:ef:1f:ef:8d:97:df:77:0d:a7:c0:f8:1c:c7:d7:47:c6:9c:
         c6:df:1a:49:15:f6:73:b8:26:78:83:d0:7a:f7:b3:50:d4:dd:
         c2:b8:da:19:35:2e:8a:37:8e:db:c5:5f:90:62:53:a0:c8:01:
         3a:fe:a2:a6:48:22:a7:3d:4d:fb:d8:27:9d:fd:76:66:1e:af:
         a6:63:a1:af:a0:84:7f:22:af:01:72:40:a8:24:b2:f4:3d:5f:
         9d:71:8c:54:06:ff:42:24:82:91:69:b9:17:1e:61:93:95:d7:
         8c:dd:46:cf:61:25:7c:b4:3a:ee:90:ca:5f:5d:2f:95:51:27:
         62:49:46:d3:70:d8:eb:61:04:b9:fe:47:8a:a3:36:02:e5:79:
         cc:28:cb:14:b3:a3:e2:39:a0:03:33:75:d9:68:80:fc:21:21:
         6e:5c:35:1a:5c:e7:f9:d3:d3:40:94:37:ab:6b:47:82:c1:7a:
         65:e6:3a:38:3b:44:52:1d:a2:2d:ca:6d:e2:28:de:a4:85:c4:
         2a:d1:a7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:14:56 2026 by rpki-client