Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.mft
File:                     0D483B0825B3E88C6437693FB9EC26E45EAACF21.mft (raw, json)
Hash identifier:          o+Su/kVt0hUpI46n+5G6U/luQSNCWXECz2ufoXV8Q9E=
Subject key identifier:   42:9A:17:5C:52:A3:50:7E:01:73:68:28:43:94:53:58:99:4C:EE:7C
Authority key identifier: 0D:48:3B:08:25:B3:E8:8C:64:37:69:3F:B9:EC:26:E4:5E:AA:CF:21
Certificate issuer:       /CN=0D483B0825B3E88C6437693FB9EC26E45EAACF21
Certificate serial:       3712DA3853310A96DD54BAA1BE59BEA8B0DF431F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.mft
Manifest number:          03AF
Signing time:             Thu 26 Mar 2026 13:41:08 +0000
Manifest this update:     Thu 26 Mar 2026 13:36:08 +0000
Manifest next update:     Fri 27 Mar 2026 14:01:08 +0000
Files and hashes:         1: 3137372e38362e3132312e302f32342d3234203d3e203532383532.roa (hash: 1wW5U3WsNP/ZX01+ILuOqKoFA0VmLeDz/FkfVpTfAKQ=)
                          2: 0D483B0825B3E88C6437693FB9EC26E45EAACF21.crl (hash: xdYpUarYFCyk5unHlLTh4YqNTcaP0QacMq0BUu7Gp6k=)
                          3: 323830343a3833303a3a2f33322d3430203d3e203532383532.roa (hash: OAY+O492sH9oOGRpJqR13+gX5LH1Nb82jzo1Fv50v3k=)
                          4: 3137372e38362e3132322e302f32332d3233203d3e203532383532.roa (hash: w2C0YHP6tf1oR+p6FNid1d+ORCrxq2BRdn7N2dRiGnc=)
                          5: 3137372e38362e3132302e302f32342d3234203d3e203532383532.roa (hash: EPieHgmaGEVf3YfI/OOnumcY8u8IJJlQ7zjgs37/Frk=)
                          6: 3137372e38362e3132322e302f32342d3234203d3e203532383532.roa (hash: kJMeobJprT0+wLJ8n5BjgRNF1amzGVzH7xZoXcf7hlk=)
                          7: 3137372e38362e3132332e302f32342d3234203d3e203532383532.roa (hash: Vhf+Gm/t/lcZ5ryFdwgoAZi1Z7lspn/x883RGHeOy7M=)
                          8: 323830343a3833303a3a2f33322d3336203d3e203532383532.roa (hash: ekg8K2eBRmjb06YgaGyifxBIGAFhbn5LACu2Hnan5To=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.crl
                          rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 14:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:12:da:38:53:31:0a:96:dd:54:ba:a1:be:59:be:a8:b0:df:43:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D483B0825B3E88C6437693FB9EC26E45EAACF21
        Validity
            Not Before: Mar 26 13:36:08 2026 GMT
            Not After : Mar 27 14:01:08 2026 GMT
        Subject: CN=429A175C52A3507E0173682843945358994CEE7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:39:b0:07:b5:72:3e:18:44:d5:d5:2f:fd:77:
                    f9:ac:cc:08:5b:9a:14:91:8c:8a:fb:a9:b9:7f:c6:
                    1f:a3:17:cf:23:06:02:a7:e1:91:5e:cc:42:ef:5d:
                    c2:57:cf:c3:31:ab:48:8a:7b:e6:a0:6a:55:b1:92:
                    8e:f7:b6:b1:40:c5:4e:d7:3e:67:ca:59:7a:3a:41:
                    22:20:aa:13:2c:8f:4e:4f:62:6d:ef:f2:44:60:e5:
                    8d:45:4c:73:54:e6:32:0a:fe:a5:a9:59:d2:0e:20:
                    93:19:35:2b:f3:68:27:f3:d2:ce:5a:96:32:53:20:
                    c7:28:e5:5d:e1:b9:2e:8f:10:b9:33:3f:ec:0b:31:
                    ae:eb:eb:7f:33:ab:4c:e3:e7:ce:1d:85:93:26:17:
                    92:5e:17:4c:99:42:b1:df:70:2e:45:e3:cb:8c:42:
                    26:87:fd:ed:f0:bc:cb:66:ee:3a:ad:65:68:79:df:
                    f5:bb:95:45:8e:71:30:ae:05:a6:39:3e:55:3a:d3:
                    81:5a:22:e5:68:1e:29:98:c6:72:a2:68:55:70:76:
                    b0:b4:4e:21:e1:9c:ca:3c:55:3c:75:61:77:df:a1:
                    b8:2e:1a:0f:3c:9a:27:6f:a9:0a:88:2c:e7:79:0d:
                    5f:80:3b:05:dc:95:7e:c9:12:3e:79:e8:43:4a:63:
                    04:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9A:17:5C:52:A3:50:7E:01:73:68:28:43:94:53:58:99:4C:EE:7C
            X509v3 Authority Key Identifier:
                keyid:0D:48:3B:08:25:B3:E8:8C:64:37:69:3F:B9:EC:26:E4:5E:AA:CF:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:43:fd:fa:cb:e9:fa:5a:59:c7:6c:1b:53:75:8e:da:12:e2:
         f6:61:d4:51:86:68:aa:4c:11:4a:d0:94:6f:00:25:c8:87:0c:
         86:80:94:93:82:5f:39:bf:bc:25:52:e6:d6:e6:24:f0:a6:eb:
         a7:40:5f:4c:2d:9d:64:0b:fb:2f:c5:43:63:5d:16:e4:15:a8:
         75:ab:f1:92:71:92:b7:e0:82:50:a7:8e:e8:c4:d3:19:16:55:
         ab:f7:71:40:2a:cb:8c:e7:92:70:92:06:a4:23:d4:f2:a7:c5:
         57:5c:a1:b8:a0:8b:eb:0b:ee:12:c3:de:93:63:9e:a1:b2:49:
         06:54:d2:57:d9:25:a9:03:da:98:fe:7a:11:de:05:a1:fa:d5:
         40:22:d5:36:dd:a1:04:55:68:5b:58:5a:1e:56:49:8f:66:ce:
         56:b8:56:e8:36:f2:22:97:c3:ea:40:8c:a6:b5:84:6a:64:40:
         d3:52:e2:d8:05:38:32:cd:96:b8:74:c7:2e:1a:e4:58:a8:22:
         6a:ca:a6:d3:61:7b:2b:e1:fb:4d:05:12:89:0b:90:ae:df:24:
         0a:c1:1f:07:59:9c:cb:23:f5:8e:04:ab:84:ab:7e:bf:3b:ab:
         22:1f:8b:49:eb:5f:b9:db:54:e4:b8:85:5b:46:83:33:53:bc:
         f2:fc:7a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:32:58 2026 by rpki-client