Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.mft
File:                     642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.mft (raw, json)
Hash identifier:          gVw8uwlNhjjOfyg36RuPGMrLqojryOwTdnoo51K6vLk=
Subject key identifier:   F5:80:FD:86:90:F3:9C:F0:42:3F:08:76:3C:E8:25:2E:19:B9:95:33
Authority key identifier: 64:2E:A2:7E:A1:27:6F:A1:CA:55:EF:3F:D8:87:CF:C6:DD:A0:5C:47
Certificate issuer:       /CN=642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47
Certificate serial:       4474EC8D50D9370A12BB5E0BE5753032FFD00B9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.mft
Manifest number:          028A
Signing time:             Thu 26 Mar 2026 14:38:43 +0000
Manifest this update:     Thu 26 Mar 2026 14:33:43 +0000
Manifest next update:     Fri 27 Mar 2026 18:13:43 +0000
Files and hashes:         1: 3137392e3132342e3231362e302f32312d3234203d3e20323633363234.roa (hash: ySrq0TOlfP8kIAyPYS5kMiMrMoRNNxMUFpLpQKEk7AM=)
                          2: 642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.crl (hash: AeklopVAZm2bpclGBkr3hhcFJfocOdSakcctZSgUxio=)
                          3: 323830343a313033343a3a2f33322d3334203d3e20323633363234.roa (hash: TC9J3Nn0ZudRv7S7y2y2+94LDFH1YRi4KkQrwFzS3R8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.crl
                          rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 18:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:74:ec:8d:50:d9:37:0a:12:bb:5e:0b:e5:75:30:32:ff:d0:0b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47
        Validity
            Not Before: Mar 26 14:33:43 2026 GMT
            Not After : Mar 27 18:13:43 2026 GMT
        Subject: CN=F580FD8690F39CF0423F08763CE8252E19B99533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f0:e3:d2:a3:47:81:cf:18:fd:e9:ed:1d:33:
                    f8:84:02:28:17:af:8d:c1:64:1e:d5:0a:30:59:a1:
                    45:0e:e3:3b:b8:58:7e:de:c4:13:f7:4d:e3:a8:7e:
                    d9:49:13:a1:2f:4c:eb:7f:3f:9e:a6:fe:22:60:3b:
                    39:fd:46:db:fe:6f:41:d3:ca:d4:32:43:91:82:6e:
                    e5:eb:42:d7:36:8e:76:41:93:7a:60:a0:38:43:2a:
                    60:a4:e6:1d:80:5e:ac:bf:a4:0c:c9:39:64:bf:c2:
                    f7:49:bb:72:86:8c:64:03:ed:65:4d:fd:69:5d:89:
                    e3:20:32:b7:15:4b:fa:ab:57:15:f4:23:ad:05:70:
                    7b:2a:97:0c:52:bd:74:50:58:55:f6:22:e4:b5:b7:
                    18:fe:c7:3c:b9:61:a8:10:84:8e:fe:0f:07:c8:5c:
                    47:69:10:84:81:ee:a2:24:8d:b8:31:30:a5:3f:83:
                    95:ae:48:37:22:dc:22:ff:43:50:e1:ae:fe:a8:ba:
                    5f:43:4b:88:68:ba:a5:b8:c2:23:bc:74:48:84:d3:
                    34:da:d3:d5:50:bd:7b:6e:56:47:18:70:d7:55:79:
                    0c:7b:fa:eb:3f:8e:bc:3f:dd:a9:6b:32:36:fc:80:
                    73:31:8e:87:b4:38:18:ba:fd:3b:eb:63:64:68:8d:
                    3a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:80:FD:86:90:F3:9C:F0:42:3F:08:76:3C:E8:25:2E:19:B9:95:33
            X509v3 Authority Key Identifier:
                keyid:64:2E:A2:7E:A1:27:6F:A1:CA:55:EF:3F:D8:87:CF:C6:DD:A0:5C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:a9:19:55:f8:58:15:2e:82:c9:d1:d3:8f:cc:bb:5d:c4:b0:
         ea:36:9e:ca:3b:40:86:5a:62:74:92:3d:56:cb:0f:f4:36:54:
         b0:dd:92:86:ca:39:5c:12:dc:32:15:44:1d:ec:70:11:e5:32:
         a6:26:0d:00:b3:04:bb:8a:85:e4:e3:53:d7:a3:c8:7f:5c:ee:
         ac:9f:bd:25:08:6e:9a:52:21:ce:dd:a0:d6:e9:27:78:da:b5:
         36:f8:ac:b1:97:4b:ee:d9:81:fa:60:a0:c3:3a:5d:3e:1b:91:
         66:06:85:5f:02:37:f1:ac:ad:1c:08:ae:6f:08:7d:f0:3a:8b:
         d9:a9:e0:6f:53:21:3b:33:ac:c7:0a:f5:26:56:62:4b:b6:9f:
         be:74:08:88:6c:7d:d5:30:92:3f:ba:c8:7d:87:f3:f2:83:e2:
         7e:b8:a8:a4:21:cc:20:68:af:6e:fd:3d:43:37:9d:59:c1:a1:
         7e:10:df:03:5a:76:da:a4:15:43:8a:fc:8c:11:6f:d8:43:7a:
         a1:5e:0d:93:68:b3:45:d4:7b:2d:21:8d:b9:26:a0:cc:87:a1:
         36:c5:44:36:6f:f8:10:3e:1f:f1:98:73:14:be:20:74:9b:8d:
         f0:53:bb:98:f2:05:94:3c:90:4e:e9:b0:bb:78:11:36:a9:42:
         05:94:de:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:53:04 2026 by rpki-client