Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.mft
File:                     13A8F7FF18790DD7526A982E956B58BEB7F34AEE.mft (raw, json)
Hash identifier:          Lu1Z+wlhXmP7mjZ7ZuiLVKbw0s3vNi4NA9DKR+YnR7E=
Subject key identifier:   86:8C:E8:50:C7:B6:31:41:C6:FA:70:F4:75:16:4D:C4:39:7D:A2:11
Authority key identifier: 13:A8:F7:FF:18:79:0D:D7:52:6A:98:2E:95:6B:58:BE:B7:F3:4A:EE
Certificate issuer:       /CN=13A8F7FF18790DD7526A982E956B58BEB7F34AEE
Certificate serial:       3FF026A8EA373A38CB5D00BB418CC600A9F6D20C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.mft
Manifest number:          01B3
Signing time:             Wed 25 Mar 2026 16:18:05 +0000
Manifest this update:     Wed 25 Mar 2026 16:13:05 +0000
Manifest next update:     Thu 26 Mar 2026 19:10:05 +0000
Files and hashes:         1: 34352e3232382e3131302e302f32342d3234203d3e20323637303539.roa (hash: doHWMHnAMY2s1tjBzEX/cTJYMH8V7yw9cB/JGIayda8=)
                          2: 323830343a343738343a3a2f33322d3333203d3e20323637303539.roa (hash: Sjqvf1yBEiUFrHbgUZPX2cvQEcX94SQSveYfWu9aWbY=)
                          3: 34352e3232382e3130382e302f32342d3234203d3e20323637303539.roa (hash: JJ/KRIsPN8lcf03nfsCnH8WEYKrxCSUBWx9lR03Fr2A=)
                          4: 13A8F7FF18790DD7526A982E956B58BEB7F34AEE.crl (hash: S6Ze8tm+z2qQIA77MQPmjoOuF/owJSEmrcsRilVPVNo=)
                          5: 34352e3232382e3131302e302f32332d3233203d3e20323637303539.roa (hash: UQzzCBAGySt3TzrrlekHgEmcVAzxgj9o36TmmGjVy+g=)
                          6: 34352e3232382e3130382e302f32332d3233203d3e20323637303539.roa (hash: E+GzmUJidbtUK3J/zOCCGQplXbtOWNZyo18pvf0BLFc=)
                          7: 34352e3232382e3130392e302f32342d3234203d3e20323637303539.roa (hash: efoPC2xhxWqvThgB6GZdA0UBcO6fc8TUKaF1C3ie3BE=)
                          8: 34352e3232382e3131312e302f32342d3234203d3e20323637303539.roa (hash: GM9m8Nxkgz0nOuZZ3rhefyU2T7V3y0x9VDTmL6sgtjE=)
                          9: 34352e3232382e3130382e302f32322d3234203d3e20323637303539.roa (hash: +TF0IzfJiaXVd1x7eyWSrn1e/pGSYdYAOhv20HZbsHM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.crl
                          rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 19:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f0:26:a8:ea:37:3a:38:cb:5d:00:bb:41:8c:c6:00:a9:f6:d2:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13A8F7FF18790DD7526A982E956B58BEB7F34AEE
        Validity
            Not Before: Mar 25 16:13:05 2026 GMT
            Not After : Mar 26 19:10:05 2026 GMT
        Subject: CN=868CE850C7B63141C6FA70F475164DC4397DA211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:eb:e9:58:8b:1e:de:76:0f:23:53:fc:f8:a5:
                    aa:94:27:c1:9e:9d:e2:fd:95:85:60:a4:c8:00:8a:
                    3e:bb:f7:ff:5d:3b:e6:74:51:e0:e7:42:0a:49:6e:
                    64:f9:4f:ec:65:d0:5d:97:a2:f6:d9:ba:2a:77:99:
                    ff:12:34:8c:ca:77:ec:47:cc:64:58:c0:54:95:d2:
                    79:f0:4b:e3:6f:dc:ed:88:6c:c0:92:94:d9:e0:3f:
                    88:06:c9:19:a7:b3:84:0e:f8:e9:4c:a8:17:bd:be:
                    46:4b:2f:60:56:0f:6d:ca:7d:f9:14:b2:a8:35:2b:
                    ff:71:cf:20:47:d1:6b:24:93:9e:7f:c6:26:4e:60:
                    d7:8e:c0:19:f5:39:88:b0:ca:e7:7e:1f:0b:66:be:
                    29:5d:be:f0:56:e7:20:a4:1f:32:5b:f9:b7:a0:b1:
                    60:6a:c1:f1:ae:4b:22:8c:c2:c1:82:e8:c8:43:c8:
                    38:66:c1:9f:0d:75:c6:ec:e4:f5:57:f1:e7:da:f9:
                    2a:79:09:78:44:ba:74:f4:6b:df:6c:bf:fa:cc:67:
                    6d:44:30:f8:77:b0:c7:3c:d9:53:f0:c0:eb:6e:fa:
                    d8:ec:e1:2a:1d:79:c9:04:d1:07:cb:b5:9a:cb:9b:
                    25:5d:64:49:c5:ae:dd:83:f7:89:ba:0d:4e:1f:70:
                    c4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8C:E8:50:C7:B6:31:41:C6:FA:70:F4:75:16:4D:C4:39:7D:A2:11
            X509v3 Authority Key Identifier:
                keyid:13:A8:F7:FF:18:79:0D:D7:52:6A:98:2E:95:6B:58:BE:B7:F3:4A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:bc:cb:70:49:5d:b2:ff:48:e2:18:75:3a:13:93:dd:f1:ac:
         09:ab:57:41:1c:e6:46:35:49:f3:f7:60:b2:43:97:15:30:ee:
         a9:28:d8:91:98:90:ba:3a:52:5a:bb:84:91:b6:4c:f7:07:ee:
         1e:21:b8:69:e8:78:88:e9:ad:59:31:da:d9:7c:73:7c:b5:cd:
         55:fe:cd:64:3c:98:1f:b0:27:82:1d:ce:06:fe:d4:46:27:72:
         55:81:0b:b8:d8:7b:d3:f3:c5:ae:e3:56:83:53:ca:71:13:2b:
         e2:33:4d:59:88:a9:ab:67:ef:a4:34:f4:b7:62:9b:3d:d2:d9:
         8d:0b:7e:d3:81:cf:c1:c3:71:6b:f9:f7:dc:f0:95:d8:d0:a7:
         d0:7a:56:83:c7:4e:84:b1:f8:50:12:53:8b:16:01:41:85:0f:
         0f:18:b6:93:cb:cb:4f:10:0e:60:7a:94:37:9c:32:a9:29:92:
         52:75:e9:e4:b5:01:e5:8d:0d:36:52:56:16:6f:2a:6c:f3:da:
         41:ae:6a:d5:23:bd:18:68:d8:60:db:d6:81:7d:d5:80:9f:2b:
         4c:9c:cd:5f:ac:c2:b9:04:8e:1b:f0:c5:21:82:86:08:6c:d3:
         55:35:cb:84:3c:79:d2:f9:fb:b4:7d:57:d7:d3:4d:57:cc:fc:
         93:d5:e4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:25:22 2026 by rpki-client