Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.mft
File:                     AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.mft (raw, json)
Hash identifier:          VE4V/cR2edj2prlOZKi8LOPN/PHqH9sdKnCDSpxUv2Q=
Subject key identifier:   A9:C1:57:12:1E:1C:84:F4:D7:85:D0:F8:31:03:FF:29:5B:26:86:AF
Authority key identifier: AE:0C:16:86:3F:4E:C3:36:AB:79:66:D9:9D:0A:DD:1C:C8:B7:4E:F8
Certificate issuer:       /CN=AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8
Certificate serial:       45FDD6E1887363151DDAF7F5D3F33838F56C10E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.mft
Manifest number:          029C
Signing time:             Thu 26 Mar 2026 03:41:41 +0000
Manifest this update:     Thu 26 Mar 2026 03:36:41 +0000
Manifest next update:     Fri 27 Mar 2026 05:47:41 +0000
Files and hashes:         1: 323830343a323533633a3a2f33322d313238203d3e20323634323637.roa (hash: lJfA/yR5OSfz2uZV5mR5QEGG1Hs/os0F7/PG4G01w8o=)
                          2: 3133382e3131382e3232342e302f32322d3332203d3e20323634323637.roa (hash: nVS1ig476qeVEp3ktQ874Yh7cQPZ9tR3j/G5N42qT4o=)
                          3: AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.crl (hash: ZyesSdcu445AFdXkeD/bS36KDQlb7+KtLBizTctv9GQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.crl
                          rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 05:47:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:fd:d6:e1:88:73:63:15:1d:da:f7:f5:d3:f3:38:38:f5:6c:10:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8
        Validity
            Not Before: Mar 26 03:36:41 2026 GMT
            Not After : Mar 27 05:47:41 2026 GMT
        Subject: CN=A9C157121E1C84F4D785D0F83103FF295B2686AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c6:42:c5:3d:6d:d1:a9:14:b5:85:91:ec:ef:
                    72:56:b4:81:57:73:7a:46:78:72:fc:d5:7f:36:13:
                    79:a5:a6:4f:56:59:66:ce:f7:f0:d2:e0:31:2e:85:
                    0d:5e:d8:00:23:66:42:44:51:6a:18:26:2e:83:aa:
                    ba:ea:20:b1:8c:41:13:fe:b3:74:03:4c:42:11:24:
                    3c:ef:10:30:00:fe:c6:e0:3b:0a:dd:30:5a:2e:df:
                    d9:00:d7:71:88:7b:93:5c:d9:19:d8:1d:0c:ac:28:
                    50:6d:57:99:89:51:65:c4:d0:18:fe:5a:73:2e:d5:
                    bb:07:b5:9e:f1:24:81:80:ef:a2:bc:ee:b8:d6:68:
                    f7:f5:48:32:47:72:c0:63:81:9b:4d:10:90:2c:37:
                    a9:7c:42:1d:24:6d:9e:35:5d:ad:06:fd:93:46:fb:
                    d9:3d:76:72:9f:0d:53:e3:36:4c:75:0f:2c:d0:49:
                    82:8f:f3:64:23:19:6a:d6:a4:f1:41:4f:63:2c:9e:
                    c6:51:57:30:10:73:14:5b:81:ea:39:66:2c:96:9b:
                    66:a3:0a:f0:ae:11:2f:18:94:1f:4f:dd:2e:60:4f:
                    f0:ea:00:2f:d7:df:b8:8e:11:da:00:b4:91:c9:96:
                    89:89:ad:d6:2e:7e:6b:e7:65:9a:99:5e:5a:5e:cd:
                    c7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C1:57:12:1E:1C:84:F4:D7:85:D0:F8:31:03:FF:29:5B:26:86:AF
            X509v3 Authority Key Identifier:
                keyid:AE:0C:16:86:3F:4E:C3:36:AB:79:66:D9:9D:0A:DD:1C:C8:B7:4E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:68:97:de:19:ab:a6:13:87:c2:06:28:c2:c8:9b:72:de:19:
         9a:83:be:29:8a:01:31:f6:49:19:4a:70:af:a7:14:d6:2a:2f:
         e8:5a:a7:10:02:ea:84:37:46:d2:4a:2b:94:1d:5c:fd:f1:2a:
         39:a2:38:e1:08:84:30:f5:8a:b5:bf:f1:6b:6b:f4:f6:13:95:
         68:60:20:64:6e:1f:23:0d:88:3d:bd:18:58:b6:80:08:5b:17:
         67:d8:eb:fb:1e:2f:2a:69:8b:46:f6:9f:b3:af:c1:58:84:e4:
         16:2e:ce:95:91:f9:c3:cd:3c:7d:4f:7e:e7:89:57:e4:d1:94:
         a7:93:35:18:84:b5:bc:94:de:d1:21:ed:5f:a9:2b:7b:69:d9:
         5b:b5:5d:d9:6d:fb:6b:dc:f1:90:1c:e0:aa:75:db:24:3a:63:
         c3:4f:fa:88:42:18:25:f7:a7:c0:97:06:3b:66:7d:af:55:03:
         f1:92:f6:b8:81:7a:32:5b:b7:f9:44:f8:4d:69:ab:08:31:4b:
         f7:1e:0b:14:9b:7d:83:5a:01:b8:d6:3a:68:e0:35:4b:ac:08:
         57:e8:4a:03:07:14:9d:88:7c:33:de:a9:3d:09:f6:ae:11:03:
         a0:0f:96:63:cd:c7:75:16:4f:5b:ed:e6:d7:00:13:df:78:2f:
         ea:22:90:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:45:58 2026 by rpki-client