Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft
File:                     4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft (raw, json)
Hash identifier:          0TzD7zKzPK2LHMkuho86t59A0aAPFZd4GnSYr0PLXjA=
Subject key identifier:   3C:0D:53:E7:66:06:C8:A9:F3:BA:40:FF:E5:5C:A0:E4:E3:A9:37:49
Authority key identifier: 4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2
Certificate issuer:       /CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
Certificate serial:       333BA24BC334B1D39D319F9BDEDBFFC3F32E202C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft
Manifest number:          035F
Signing time:             Wed 25 Mar 2026 07:50:39 +0000
Manifest this update:     Wed 25 Mar 2026 07:45:39 +0000
Manifest next update:     Thu 26 Mar 2026 09:09:39 +0000
Files and hashes:         1: 3136382e3139352e3131322e302f32322d3332203d3e20323033.roa (hash: 00PKsBk9VFXLGHuN46631LO5RdQZjuj+PXNdS05CZDc=)
                          2: 3136382e3139352e3131322e302f32322d3234203d3e203532363339.roa (hash: +EzznQxnyhDO/IEnAF7S6JqmOB0qExVp1TNw0b9W0uE=)
                          3: 4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl (hash: KrpnghAHwZ6S30Uh6y/f8VAfbplVHsWyWYNMBq7AAMw=)
                          4: 323830343a6439303a3a2f33322d3536203d3e20323033.roa (hash: EKftNov2xkWY0hw68Pm1DGz9068vsDgwuQ0aP05E7X4=)
                          5: 323830343a6439303a3a2f33322d3334203d3e203532363339.roa (hash: W7HIC9Fkv+etQTXxD4VMRegv80coHuVVrxXsVAw3P3Q=)
                          6: 323830343a6439303a3a2f33322d3536203d3e20323032.roa (hash: AKpku7Hv//FGkEL6gpuUMpFSOcFa7GsB7oiC/13pvXk=)
                          7: 3136382e3139352e3131322e302f32322d3332203d3e2033333536.roa (hash: fQp7FmGtmgusxlEJub1Rxn4k2ANzAf2TLEwsbx/v51w=)
                          8: 3137392e39362e3137362e302f32312d3332203d3e2033333536.roa (hash: U9HURwzfa2wNyJP938wy03r24OPQKdmrGaliTMRCjJA=)
                          9: 323830343a6439303a3a2f33322d3536203d3e2033333536.roa (hash: BV1blz4/VpmTLoN14nzkUFJp0b9wDMriWT8Rjdyw3Hk=)
                          10: 3137392e39362e3137362e302f32312d3332203d3e20323033.roa (hash: IqaMZm0/ytBSKo0Z/HNKPC8JyAq91/JbOHZChfNs07g=)
                          11: 3136382e3139352e3131322e302f32322d3332203d3e20323032.roa (hash: rKJXZnk2Vm0/VJ+uKRGRJnFeWYC/Fd8iFecxOodg/bs=)
                          12: 3137392e39362e3137362e302f32312d3332203d3e20323032.roa (hash: bIjkBcK7BA4Q3FiPmspwfXcxXj6ZbFurSi3b0/ksKU0=)
                          13: 3137392e39362e3137362e302f32312d3234203d3e203532363339.roa (hash: 0J2FyqIVWaNAXgu1IzZHcSmpenYq23iGByXwqmNaoRs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl
                          rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 09:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:3b:a2:4b:c3:34:b1:d3:9d:31:9f:9b:de:db:ff:c3:f3:2e:20:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
        Validity
            Not Before: Mar 25 07:45:39 2026 GMT
            Not After : Mar 26 09:09:39 2026 GMT
        Subject: CN=3C0D53E76606C8A9F3BA40FFE55CA0E4E3A93749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e3:11:78:eb:b6:37:68:a7:f0:0f:55:7d:54:
                    f1:09:9b:d9:40:c0:ea:97:4e:70:10:8f:d8:b4:60:
                    64:17:0f:26:53:a7:a7:7d:0a:0f:96:21:93:c0:86:
                    0c:0b:a2:c4:08:ff:46:b7:1d:fd:a7:29:e4:78:c2:
                    3a:e2:28:64:7b:0e:25:bd:5c:e6:bf:1e:cb:90:b4:
                    d5:84:ff:34:0d:4a:7b:ac:3f:13:4f:5f:a9:f1:95:
                    10:0c:69:22:9e:44:8d:21:8e:a7:2d:12:01:b8:bf:
                    28:be:fe:2c:5f:a2:6f:5f:61:4d:fe:85:f2:90:bf:
                    ae:81:1a:20:b6:e5:c7:5e:e9:03:10:10:46:e2:e7:
                    ad:ce:d6:ee:95:63:79:27:91:a1:e7:0c:fa:dd:d9:
                    cb:b7:e2:66:c1:21:99:7a:3e:d6:14:59:f6:c5:1b:
                    22:80:d5:99:ba:d3:e0:57:3e:67:60:0a:d5:58:59:
                    30:f2:07:06:92:4f:f7:71:ee:22:ac:ce:ca:8d:6d:
                    76:0e:d9:cc:24:bd:44:83:8b:14:af:77:cf:a7:82:
                    19:2c:a9:3d:99:c1:81:96:ef:a2:be:fd:2b:ff:b0:
                    51:d9:cd:e2:b2:34:9f:0a:3d:41:48:d9:af:18:04:
                    6d:8d:ef:5d:30:da:fe:d6:eb:97:27:fa:bc:a9:cf:
                    77:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:0D:53:E7:66:06:C8:A9:F3:BA:40:FF:E5:5C:A0:E4:E3:A9:37:49
            X509v3 Authority Key Identifier:
                keyid:4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:5a:a9:d2:9f:be:cc:19:1e:69:3f:30:86:c5:4b:ec:5c:43:
         f3:f6:c9:4f:cd:44:3e:d2:24:1b:20:1f:95:d5:ea:1f:a9:9c:
         c9:99:66:09:b9:11:9b:f6:19:80:26:58:ca:60:10:f0:b0:39:
         e6:58:13:5e:df:53:a2:ab:09:4d:1c:22:0e:eb:fd:5c:93:aa:
         95:37:00:48:cf:51:af:8e:70:4d:f1:d6:4d:b0:f2:79:c1:39:
         2e:b0:a7:8c:f4:9c:51:a3:bd:28:4d:e5:c8:5c:65:bb:e2:94:
         82:9a:19:71:e6:d0:60:85:9d:67:26:00:cb:72:19:dd:1d:e7:
         96:0f:45:6f:49:5b:37:b5:ed:92:42:f3:6e:a6:53:57:9a:f4:
         a1:b2:af:41:2e:0b:ed:15:c5:54:e3:82:32:24:b1:32:cf:35:
         b9:97:29:1e:6a:68:fe:51:4a:52:ea:24:d4:23:8e:26:ba:a0:
         84:18:d8:56:f3:27:4c:8e:16:2d:2e:f7:7e:68:1b:cc:e7:cc:
         33:0e:c9:a3:8f:ec:f4:32:28:31:09:60:a4:a4:47:a0:bc:99:
         f8:45:58:ea:0a:1c:40:bd:bc:29:03:6c:35:ad:dc:c1:25:48:
         a1:78:63:55:b5:fd:33:e7:8d:68:97:3e:13:f7:3d:3a:52:d4:
         55:3f:18:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:47:40 2026 by rpki-client