Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/9DA88B6F3B632645AAB2D6EBD7B0FB33A25B6EFF.mft
File:                     9DA88B6F3B632645AAB2D6EBD7B0FB33A25B6EFF.mft (raw, json)
Hash identifier:          YXCBLMJRlR+y0PUdqjs7dBx5k9i4Pawf4aK9jFnHl40=
Subject key identifier:   A3:9D:4A:85:83:15:57:5D:4D:B4:AC:19:7F:81:87:01:FD:48:E3:6F
Authority key identifier: 9D:A8:8B:6F:3B:63:26:45:AA:B2:D6:EB:D7:B0:FB:33:A2:5B:6E:FF
Certificate issuer:       /CN=9DA88B6F3B632645AAB2D6EBD7B0FB33A25B6EFF
Certificate serial:       33D1B48C02302E339E32B4593ACB508EF072DC0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DA88B6F3B632645AAB2D6EBD7B0FB33A25B6EFF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/9DA88B6F3B632645AAB2D6EBD7B0FB33A25B6EFF.mft
Manifest number:          0B
Signing time:             Thu 26 Mar 2026 12:53:17 +0000
Manifest this update:     Thu 26 Mar 2026 12:48:17 +0000
Manifest next update:     Fri 27 Mar 2026 14:24:17 +0000
Files and hashes:         1: 323830343a376566303a3a2f33322d313238203d3e20323731363536.roa (hash: GzhABxJ+rOyZHFRSiFqpMo+BDl4EeOq1JSUMVjl9Xk0=)
                          2: 34352e3138362e3233322e302f32322d3332203d3e20323731363536.roa (hash: hazhkzA9XsB1IncN4SAQrBCuVIMAuIETpzobHMU0CPY=)
                          3: 9DA88B6F3B632645AAB2D6EBD7B0FB33A25B6EFF.crl (hash: dvdpMT77uk/2CGRJghjN18x19c1iG7fBMLAf/Jh5vyA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/9DA88B6F3B632645AAB2D6EBD7B0FB33A25B6EFF.crl
                          rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/9DA88B6F3B632645AAB2D6EBD7B0FB33A25B6EFF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DA88B6F3B632645AAB2D6EBD7B0FB33A25B6EFF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 14:24:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d1:b4:8c:02:30:2e:33:9e:32:b4:59:3a:cb:50:8e:f0:72:dc:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DA88B6F3B632645AAB2D6EBD7B0FB33A25B6EFF
        Validity
            Not Before: Mar 26 12:48:17 2026 GMT
            Not After : Mar 27 14:24:17 2026 GMT
        Subject: CN=A39D4A858315575D4DB4AC197F818701FD48E36F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8b:c8:b5:ce:a5:13:5b:78:74:de:4f:c1:e9:
                    98:11:ee:bf:b1:4e:5d:bd:e7:74:ed:d4:c6:05:05:
                    a0:83:27:ca:c6:f6:6b:53:85:3f:f6:d9:9e:dc:e6:
                    c5:22:ee:2c:d3:9a:b2:af:75:48:8e:20:70:16:3c:
                    5e:c7:25:fc:df:af:b5:dd:38:5d:f1:04:f5:26:db:
                    99:9e:58:58:77:3c:ed:16:3d:fa:44:70:05:e2:28:
                    33:c9:df:58:66:73:8a:43:c6:14:12:be:6f:34:0b:
                    0a:c6:f5:99:f2:a0:c4:2f:96:a6:dc:03:57:73:8a:
                    a0:fa:b7:f0:a5:32:16:ad:68:7c:7e:4e:fb:7c:a9:
                    40:9e:01:d9:a6:47:44:27:1b:88:81:3c:a6:69:e7:
                    12:fe:97:2a:1d:9b:14:80:82:81:64:2f:d8:8b:11:
                    66:34:aa:84:71:57:4f:dd:97:d3:3c:9a:2a:0f:45:
                    f6:99:be:48:94:f1:23:0e:7a:ed:77:14:82:a4:c5:
                    9e:d8:91:c7:04:5a:e1:8e:54:d1:fa:0b:c2:ac:de:
                    6b:50:f1:04:cc:69:3b:dd:f0:02:94:ef:f6:66:bd:
                    9c:41:2f:c6:a3:fc:e2:e9:61:84:f5:76:90:62:4d:
                    08:3d:9a:d7:14:a7:57:fe:b4:25:fa:9a:aa:5c:76:
                    c9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:9D:4A:85:83:15:57:5D:4D:B4:AC:19:7F:81:87:01:FD:48:E3:6F
            X509v3 Authority Key Identifier:
                keyid:9D:A8:8B:6F:3B:63:26:45:AA:B2:D6:EB:D7:B0:FB:33:A2:5B:6E:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/9DA88B6F3B632645AAB2D6EBD7B0FB33A25B6EFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DA88B6F3B632645AAB2D6EBD7B0FB33A25B6EFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/9DA88B6F3B632645AAB2D6EBD7B0FB33A25B6EFF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:b5:77:6d:54:9a:09:bc:2c:9c:6b:a4:e4:6c:24:ce:61:9b:
         1a:09:fe:ad:9b:29:11:f0:70:b6:46:32:92:ae:e6:7d:8d:cb:
         d2:f1:aa:9f:f5:51:6d:aa:bc:4d:2b:31:16:b6:81:21:6d:7d:
         a6:d7:da:00:a3:17:19:e4:96:a6:e3:5f:74:07:f6:21:92:06:
         20:3d:c9:9a:b8:ae:80:bf:b8:5d:85:d0:0a:5e:64:a6:cb:3d:
         e9:1b:26:0a:7c:56:f7:a4:26:e1:40:15:ac:60:4f:0a:a3:eb:
         bd:a8:5c:ac:ec:c2:bf:fe:50:2e:bd:38:64:1c:cd:14:84:81:
         b9:77:38:22:c3:ce:bc:5a:cf:22:ef:7d:16:fe:3a:18:79:f8:
         95:00:f2:32:44:1f:52:b7:c2:82:fc:c7:88:a7:ca:f5:2b:fe:
         95:65:ad:3c:bd:72:37:d5:12:7e:51:0a:f7:66:9d:c1:71:c1:
         0a:93:5b:2d:60:d7:3b:0d:35:a2:e0:e1:1a:e4:2b:09:8d:52:
         3c:0c:bb:5b:88:d6:74:ba:59:5c:2b:ae:67:cc:aa:75:66:75:
         7e:13:21:74:a2:de:a2:21:ca:f5:0b:0c:63:82:15:90:ec:57:
         9d:67:54:13:ab:e7:01:87:72:d2:bd:f3:2c:25:fa:51:81:17:
         f1:2c:fd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:35 2026 by rpki-client