Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.mft
File:                     620FC0DB62F1480AC8CF9B22F3885A9A4268099E.mft (raw, json)
Hash identifier:          3qASt1jKnJJkcbSrZyEvQ2ALhx2xgDWr2oU0Fs/i0WY=
Subject key identifier:   AA:89:E2:44:A4:D5:A1:E3:FA:B6:E0:77:60:22:0C:77:33:92:F4:BC
Authority key identifier: 62:0F:C0:DB:62:F1:48:0A:C8:CF:9B:22:F3:88:5A:9A:42:68:09:9E
Certificate issuer:       /CN=620FC0DB62F1480AC8CF9B22F3885A9A4268099E
Certificate serial:       4D63B7123EFB7ECDC69F320BB511A92C59518FB4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.mft
Manifest number:          03BA
Signing time:             Wed 25 Mar 2026 05:40:37 +0000
Manifest this update:     Wed 25 Mar 2026 05:35:37 +0000
Manifest next update:     Thu 26 Mar 2026 07:28:37 +0000
Files and hashes:         1: 323830343a353866343a3a2f33322d3335203d3e20323638313630.roa (hash: b8ZflRBRZYUCTjoDZks0kQVO5YM463yEBD86Af0XQPs=)
                          2: 34352e3137302e3134342e302f32322d3234203d3e20323638313630.roa (hash: uPqJ/lcRwLp4Q6zQTLWyQJf4jer1z3xHO1uT8VlXETw=)
                          3: 620FC0DB62F1480AC8CF9B22F3885A9A4268099E.crl (hash: B2oQMsIXaG//OnD3GdXjO7onZtQHe/B6MYso4qzOmsg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.crl
                          rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 07:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:63:b7:12:3e:fb:7e:cd:c6:9f:32:0b:b5:11:a9:2c:59:51:8f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620FC0DB62F1480AC8CF9B22F3885A9A4268099E
        Validity
            Not Before: Mar 25 05:35:37 2026 GMT
            Not After : Mar 26 07:28:37 2026 GMT
        Subject: CN=AA89E244A4D5A1E3FAB6E07760220C773392F4BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a1:a0:ff:15:84:2a:63:75:f6:44:63:49:e6:
                    da:3f:53:55:9c:52:a0:d5:b5:9c:eb:ec:61:e5:95:
                    9d:b2:8a:4c:6c:00:15:b3:01:2c:d3:18:41:fa:ce:
                    17:11:d0:6a:94:49:59:d3:f2:1d:fb:d3:39:4d:ae:
                    26:ad:c5:3e:be:65:b9:f6:f6:33:a1:66:4c:bd:bb:
                    13:55:1c:18:4f:33:a9:f5:87:36:7a:3d:7d:8d:de:
                    82:18:de:d8:3c:1f:86:6a:30:d4:9b:22:7b:2e:4d:
                    20:60:2e:be:0b:19:d4:1f:ca:36:68:ab:d1:44:c3:
                    2e:3f:af:c1:2d:be:42:b1:06:4a:8a:34:8f:93:af:
                    9f:d8:7e:5b:15:ac:14:40:b7:07:e4:45:dd:86:92:
                    1d:6d:14:90:78:f7:16:b9:c6:d4:bf:c9:5a:1d:77:
                    fd:a5:ad:0f:72:6b:25:9f:c6:10:5c:c4:23:89:90:
                    57:fe:f5:8b:80:d9:ea:d1:20:33:70:ce:2e:9a:2b:
                    b8:45:f8:dc:0c:19:60:96:5d:3c:ee:72:76:2c:a7:
                    a7:da:4a:42:45:1e:d6:cb:31:f7:f8:b6:65:1c:22:
                    67:1d:b1:e5:38:a5:37:31:8f:cc:cd:d2:11:af:0d:
                    c0:98:12:1f:bc:c7:d6:8a:67:f6:c2:88:1a:bd:2d:
                    33:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:89:E2:44:A4:D5:A1:E3:FA:B6:E0:77:60:22:0C:77:33:92:F4:BC
            X509v3 Authority Key Identifier:
                keyid:62:0F:C0:DB:62:F1:48:0A:C8:CF:9B:22:F3:88:5A:9A:42:68:09:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:1f:da:ed:4b:35:6c:e0:79:12:22:35:b3:70:e0:fa:eb:e3:
         c7:89:f4:83:d2:71:dc:35:94:b5:8b:35:4e:c3:b9:b9:ec:8e:
         87:31:e4:4a:52:0f:7a:f5:99:77:36:2b:7c:2e:00:40:28:c7:
         53:26:44:18:a0:9c:da:b1:84:62:b3:ea:f8:5c:f9:b0:ed:3e:
         a7:13:5c:6f:98:6f:db:eb:cf:43:47:dd:0b:9e:af:0d:df:44:
         a6:d8:9c:75:00:97:43:ef:41:7b:5e:8c:53:59:11:79:70:1b:
         70:b6:06:95:06:82:79:fa:11:d3:21:5d:a0:27:97:d3:21:f2:
         57:43:26:dd:8d:4a:df:06:10:52:2d:a0:b0:45:37:f7:39:e5:
         d5:73:bc:7c:ad:a7:6c:cc:52:e2:e7:90:fd:9f:60:11:6f:5d:
         53:f4:a2:93:24:6f:24:5f:c9:f3:ec:b8:6b:01:09:54:ae:fc:
         71:50:42:a7:35:85:91:d1:3c:63:4d:eb:3f:4f:7f:01:ca:8e:
         4a:5b:07:dc:83:6e:56:3b:a5:4f:3c:a8:69:f2:c5:6d:af:cc:
         6b:1d:28:8e:f1:97:5e:14:98:b1:a4:63:10:3b:fb:6c:f3:94:
         47:06:f6:3e:be:10:13:9f:7a:74:f9:16:e1:24:b4:46:82:24:
         28:d5:12:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:59:34 2026 by rpki-client