Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6RkuESo9G5bXQYuQFUoQTkXqZ4ZEp5NpVuqdVPzkbDuA/0/2305E5DBBAEB234FDCD1EEE924ABE6067A2D6941.mft
File:                     2305E5DBBAEB234FDCD1EEE924ABE6067A2D6941.mft (raw, json)
Hash identifier:          fxd7n+yjd9umXlIIJ/nnjHFhYpxt1QKzWCMuKvrNeQQ=
Subject key identifier:   7A:0D:C6:94:5C:D3:E1:87:47:C0:F6:7C:70:A0:1F:06:46:ED:45:F8
Authority key identifier: 23:05:E5:DB:BA:EB:23:4F:DC:D1:EE:E9:24:AB:E6:06:7A:2D:69:41
Certificate issuer:       /CN=2305E5DBBAEB234FDCD1EEE924ABE6067A2D6941
Certificate serial:       13FBAD5D68FD252AB22E47595DB566BB4FC8C7DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2305E5DBBAEB234FDCD1EEE924ABE6067A2D6941.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6RkuESo9G5bXQYuQFUoQTkXqZ4ZEp5NpVuqdVPzkbDuA/0/2305E5DBBAEB234FDCD1EEE924ABE6067A2D6941.mft
Manifest number:          0133
Signing time:             Thu 26 Mar 2026 08:37:17 +0000
Manifest this update:     Thu 26 Mar 2026 08:32:17 +0000
Manifest next update:     Fri 27 Mar 2026 09:29:17 +0000
Files and hashes:         1: 3138312e3139312e3137322e302f32332d3233203d3e20323637343434.roa (hash: Ap1uF7zmhGdL/x/0/5k0VyoHtfCpitDCZ1fkP8mqfaw=)
                          2: 323830343a343139633a3a2f33322d3332203d3e20323637343434.roa (hash: Kf8SrB9LU8UasS3rW8qleuFcvBiTy4Vg/1ieEZC/y3U=)
                          3: 323830343a343139633a383030303a3a2f33332d3333203d3e20323637343434.roa (hash: xB+W9EKU1cWK6E91QMM2WNRrxUIdoCzd75spr0vq1wc=)
                          4: 323830343a343139633a3a2f33332d3333203d3e20323637343434.roa (hash: wI/yd0JauFQi5toaoTWpuAEoI0JyT4t2HSlKcQlRQdU=)
                          5: 3138312e3139312e3137322e302f32322d3232203d3e20323637343434.roa (hash: 3CMQ2OqaW6Em5EFQeVpXQdAA9SHqMIwvqBM5wvJcC9g=)
                          6: 2305E5DBBAEB234FDCD1EEE924ABE6067A2D6941.crl (hash: ssz7DEzgIKPw1S1at2y1RwSeevITwr7w4eeaDED2btA=)
                          7: 3138312e3139312e3137342e302f32332d3233203d3e20323637343434.roa (hash: +RsrqPyQHq7/1pdb4b2O1ncOYrJgTzMEZ57FhWjCt98=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6RkuESo9G5bXQYuQFUoQTkXqZ4ZEp5NpVuqdVPzkbDuA/0/2305E5DBBAEB234FDCD1EEE924ABE6067A2D6941.crl
                          rsync://rpki-repo.registro.br/repo/6RkuESo9G5bXQYuQFUoQTkXqZ4ZEp5NpVuqdVPzkbDuA/0/2305E5DBBAEB234FDCD1EEE924ABE6067A2D6941.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2305E5DBBAEB234FDCD1EEE924ABE6067A2D6941.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 09:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:fb:ad:5d:68:fd:25:2a:b2:2e:47:59:5d:b5:66:bb:4f:c8:c7:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2305E5DBBAEB234FDCD1EEE924ABE6067A2D6941
        Validity
            Not Before: Mar 26 08:32:17 2026 GMT
            Not After : Mar 27 09:29:17 2026 GMT
        Subject: CN=7A0DC6945CD3E18747C0F67C70A01F0646ED45F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d5:e1:e7:be:eb:88:c5:63:5e:5b:52:2a:a7:
                    24:df:e9:01:8b:68:ea:48:34:6f:f6:65:f6:36:a3:
                    40:ac:98:ad:f0:f5:36:a9:d6:bb:15:7f:8d:5b:67:
                    d6:ac:f1:10:12:5f:39:95:16:cd:7b:fd:2e:bc:6c:
                    f5:7f:ae:83:fb:75:32:6e:b8:32:6a:a1:f1:6c:0b:
                    b9:bb:24:0a:2e:21:24:c7:8c:86:47:3e:88:ce:c1:
                    43:eb:0a:21:19:d3:f3:e0:d1:2f:e9:dc:17:1e:6d:
                    a7:17:df:33:bb:bf:07:9e:d1:29:0f:17:07:65:09:
                    b6:19:ab:b2:09:45:dd:70:b3:95:9c:11:a0:05:72:
                    2b:02:ea:bc:ce:00:cc:9b:79:89:60:bd:e4:7c:01:
                    87:2f:40:a3:7e:01:83:05:77:0a:55:23:1b:4a:f3:
                    89:ce:33:6a:47:1b:38:09:9d:2b:0b:c1:bb:f5:37:
                    ed:8b:9e:6f:40:57:b3:fd:7a:7d:54:72:38:65:a1:
                    fa:60:93:88:49:f1:ab:8c:3c:68:05:2e:78:db:7b:
                    c5:ea:28:38:72:e7:1d:c6:f2:fd:28:84:db:86:b7:
                    c7:24:bb:a5:3f:5e:be:fe:ae:4b:61:8a:a3:6b:5e:
                    ff:3e:90:41:f0:8d:c9:d3:09:43:22:92:12:71:2e:
                    26:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0D:C6:94:5C:D3:E1:87:47:C0:F6:7C:70:A0:1F:06:46:ED:45:F8
            X509v3 Authority Key Identifier:
                keyid:23:05:E5:DB:BA:EB:23:4F:DC:D1:EE:E9:24:AB:E6:06:7A:2D:69:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6RkuESo9G5bXQYuQFUoQTkXqZ4ZEp5NpVuqdVPzkbDuA/0/2305E5DBBAEB234FDCD1EEE924ABE6067A2D6941.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2305E5DBBAEB234FDCD1EEE924ABE6067A2D6941.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6RkuESo9G5bXQYuQFUoQTkXqZ4ZEp5NpVuqdVPzkbDuA/0/2305E5DBBAEB234FDCD1EEE924ABE6067A2D6941.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:c9:95:3b:6a:b5:e3:92:f4:7c:0e:99:e2:82:b2:43:25:c5:
         5a:5e:88:a5:bb:44:18:10:80:4c:4e:74:9a:9f:42:d4:be:ad:
         5c:c9:dd:80:9d:f7:a5:ca:2e:f8:62:2d:18:b4:f8:37:49:8f:
         02:85:75:43:f6:f5:97:38:56:d2:2a:c2:e8:14:0c:a5:73:f5:
         ad:e2:1b:e1:30:0c:37:54:e2:c1:8c:e4:b7:94:65:3a:c6:bc:
         ce:8e:39:aa:a8:95:7d:99:e8:e7:81:6b:ae:e8:3a:c0:14:a8:
         45:eb:63:99:f6:b0:64:ce:b5:ed:0c:c0:60:3c:ef:df:9c:39:
         df:98:23:92:ed:85:cd:aa:70:ec:1c:19:1b:8a:db:8a:0d:a3:
         e9:ca:57:88:b9:c3:2b:50:b5:6f:4d:01:21:47:39:9b:77:7d:
         64:64:23:31:53:64:d9:a3:11:bd:0e:f1:cf:bf:b5:99:b9:65:
         94:24:53:b0:8f:94:cc:1b:d7:08:41:72:f3:fc:a7:bf:d5:de:
         7a:c1:51:7e:5e:db:04:bd:03:a3:a6:56:65:55:2c:f6:10:a9:
         99:7e:8e:74:cc:b5:4b:fc:5d:f6:aa:b2:42:1b:f7:de:3f:c6:
         bc:7f:34:5b:dd:59:91:2e:d5:25:d8:71:44:84:3e:a3:c6:8a:
         02:73:2c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:55:15 2026 by rpki-client