Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft
File:                     0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft (raw, json)
Hash identifier:          xsZ7lyIzfJkAU3qkeb/sJXCW7cIBMCc0xLb3mNvJfl4=
Subject key identifier:   3E:13:1E:BD:BE:47:C7:21:CF:B3:03:1F:ED:DA:F1:D9:EE:12:B5:E6
Authority key identifier: 06:85:BB:63:77:E4:38:23:F6:EA:F7:CD:0E:E0:4B:7B:50:8B:B4:3A
Certificate issuer:       /CN=0685BB6377E43823F6EAF7CD0EE04B7B508BB43A
Certificate serial:       1B8CAB6FE270A8097124E675148BC3B35A9A8F97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft
Manifest number:          03CA
Signing time:             Thu 26 Mar 2026 18:55:19 +0000
Manifest this update:     Thu 26 Mar 2026 18:50:19 +0000
Manifest next update:     Fri 27 Mar 2026 21:18:19 +0000
Files and hashes:         1: 34352e3138312e3139322e302f32322d3234203d3e20323639323033.roa (hash: BXBMdFx7otSxHTwUNboayShinyzfM90Ba7+cGRAazlA=)
                          2: 0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl (hash: cbEKUZzvZ8qYoLZfAOI88vWaHCyUzgj+bNAlbGckfNI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl
                          rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 21:18:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:8c:ab:6f:e2:70:a8:09:71:24:e6:75:14:8b:c3:b3:5a:9a:8f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0685BB6377E43823F6EAF7CD0EE04B7B508BB43A
        Validity
            Not Before: Mar 26 18:50:19 2026 GMT
            Not After : Mar 27 21:18:19 2026 GMT
        Subject: CN=3E131EBDBE47C721CFB3031FEDDAF1D9EE12B5E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:97:85:99:7f:1d:f0:d0:97:0c:db:30:95:7a:
                    4d:d1:a9:f3:c7:82:0e:4c:cd:12:2f:ca:4a:2e:fc:
                    1d:64:c3:48:74:12:19:59:44:31:67:bb:75:fc:e6:
                    4d:e3:32:ca:2f:16:6a:69:10:42:8c:b7:62:7a:1f:
                    f5:37:15:4e:42:d6:e1:3c:bc:78:42:d0:32:41:d0:
                    c2:4c:b2:ea:cd:c1:14:12:03:95:3c:50:dc:8f:d2:
                    79:81:18:5b:93:81:3f:6f:74:55:50:4b:42:89:a3:
                    fe:50:fa:0b:d4:6d:e3:d9:f1:9a:32:a7:e0:f2:a6:
                    51:5e:26:34:23:f2:a2:ca:94:2a:fa:00:a9:3a:ed:
                    b6:5e:6c:55:70:a7:a3:17:21:27:8a:0f:e5:68:d3:
                    c2:31:86:32:bd:fd:cf:b4:e7:f5:f3:96:c7:e9:44:
                    76:bf:76:9a:eb:ed:1c:d9:74:74:30:9d:8f:b5:22:
                    9a:76:d5:75:ae:71:bf:d5:23:07:bc:00:7b:df:b8:
                    01:d0:68:c3:5f:d5:b7:2d:07:13:73:eb:c7:eb:aa:
                    d4:43:b4:73:38:87:ad:b3:a7:cf:09:74:5a:a6:46:
                    8d:e0:c2:cd:00:ef:77:79:ea:de:de:94:b1:7c:7d:
                    13:b7:bd:11:27:ed:6f:1d:92:76:72:69:7d:38:99:
                    9f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:13:1E:BD:BE:47:C7:21:CF:B3:03:1F:ED:DA:F1:D9:EE:12:B5:E6
            X509v3 Authority Key Identifier:
                keyid:06:85:BB:63:77:E4:38:23:F6:EA:F7:CD:0E:E0:4B:7B:50:8B:B4:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:9b:ca:5d:00:d3:65:12:0b:a9:a9:a4:5c:f4:da:bc:2e:b1:
         37:50:bd:e7:6f:c8:88:62:ae:54:bf:45:58:9b:fb:1a:3c:55:
         57:54:fc:3d:78:a1:d5:2b:82:a6:9f:c8:15:e0:24:98:59:97:
         09:46:00:b9:b5:9a:46:80:32:04:e3:d7:9a:ad:61:1f:d5:2e:
         a0:cf:61:7f:73:3a:ca:02:87:ac:a8:3a:69:c2:fb:fc:be:54:
         52:68:a0:13:ce:9e:c7:ff:b2:9c:1f:9d:20:f8:8c:3f:bd:e0:
         85:56:1f:39:d5:c3:dd:3e:b3:a4:34:20:5a:53:71:11:b6:a2:
         60:29:f7:c4:8a:6d:06:d2:7a:09:e0:f3:ac:85:aa:18:b3:7c:
         f9:1c:86:a8:07:a2:ff:ca:e0:7c:39:93:7f:8c:d1:45:da:16:
         a0:55:a5:e8:82:c4:56:4b:df:81:81:b9:60:6c:c5:35:42:99:
         41:ae:fe:60:3f:2f:26:5b:10:ea:c5:e1:d2:b7:03:cb:10:29:
         94:41:97:2d:a8:f5:ce:38:47:b2:6e:4b:0d:63:a2:c3:d6:f6:
         5c:91:96:c4:a8:73:40:3d:40:13:54:cc:0d:ac:3c:8c:c7:a5:
         96:fc:7c:51:15:19:68:48:41:4c:fd:e7:87:c3:d7:13:d2:73:
         21:72:a8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:00:35 2026 by rpki-client