Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.mft
File:                     F9FFCCDBCA691A6CB21B455057F486C3805DEF29.mft (raw, json)
Hash identifier:          HpIQneuIWcVbtHIVev0MzDYfcneSjJ95FHqdecgUUh4=
Subject key identifier:   0D:14:CA:FC:E8:42:44:C2:20:AA:89:70:60:A7:FC:24:67:31:3C:0E
Authority key identifier: F9:FF:CC:DB:CA:69:1A:6C:B2:1B:45:50:57:F4:86:C3:80:5D:EF:29
Certificate issuer:       /CN=F9FFCCDBCA691A6CB21B455057F486C3805DEF29
Certificate serial:       5C5F1E0342AC3BE65B801A311E8D495C6899775D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.mft
Manifest number:          02A4
Signing time:             Thu 26 Mar 2026 18:55:51 +0000
Manifest this update:     Thu 26 Mar 2026 18:50:51 +0000
Manifest next update:     Fri 27 Mar 2026 19:09:51 +0000
Files and hashes:         1: 34352e3138362e33322e302f32322d3234203d3e20323639343235.roa (hash: WeadiMRWfjBhsWA6ja8oa6XmGnV5Vbx9xZMXwuVLzMs=)
                          2: 323830343a363436343a3a2f33322d3438203d3e20323639343235.roa (hash: SUMeweuRDf4Hepv8n7A+Gg9WYtgslq7XKuehJm8jv3Y=)
                          3: F9FFCCDBCA691A6CB21B455057F486C3805DEF29.crl (hash: GDJQiZvVmTqVluIKxpxieiI5h1Ye0WOd9P2TzUth8v0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.crl
                          rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 19:09:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:5f:1e:03:42:ac:3b:e6:5b:80:1a:31:1e:8d:49:5c:68:99:77:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9FFCCDBCA691A6CB21B455057F486C3805DEF29
        Validity
            Not Before: Mar 26 18:50:51 2026 GMT
            Not After : Mar 27 19:09:51 2026 GMT
        Subject: CN=0D14CAFCE84244C220AA897060A7FC2467313C0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7d:f8:51:34:89:77:fd:69:53:10:9f:f1:dd:
                    d7:8b:6d:2f:47:e4:66:7a:d8:8a:01:25:6d:e2:ab:
                    77:bf:aa:5d:ff:f7:0d:6d:53:98:ab:ab:c5:39:d2:
                    8f:1f:cb:c4:9e:31:65:39:60:f7:db:be:db:7e:69:
                    bb:0f:75:58:df:98:a9:7d:dc:0d:a8:97:7d:32:16:
                    b7:cd:79:5e:b0:51:ab:b6:5e:6f:a8:ed:41:ef:da:
                    4b:da:d2:96:b8:66:aa:91:b2:d7:4c:50:ad:5c:d0:
                    8c:6a:cd:0c:3b:40:d0:81:69:f5:c9:f2:b7:e7:8b:
                    ca:49:b5:84:76:3a:a5:a1:c8:16:c5:e3:7a:4f:cd:
                    29:bb:d2:d6:b7:af:01:51:de:34:65:cb:af:bc:88:
                    e1:03:53:f4:a0:21:f9:24:15:16:ac:66:93:02:67:
                    f3:6a:a8:3b:58:87:f2:81:72:a4:6e:57:c0:7e:60:
                    c4:a0:d5:80:5c:bd:69:47:78:cd:9e:60:31:fa:74:
                    ec:7a:f8:33:7c:0a:df:b7:ea:97:62:c5:5c:a3:bd:
                    94:52:bb:01:6f:b4:a1:72:d8:bc:60:12:eb:7b:e7:
                    b3:94:0c:21:d8:41:cc:fb:05:bd:79:86:7e:84:f1:
                    fe:83:f1:ce:56:e1:7c:e6:2d:71:5a:df:18:c0:9b:
                    a1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:14:CA:FC:E8:42:44:C2:20:AA:89:70:60:A7:FC:24:67:31:3C:0E
            X509v3 Authority Key Identifier:
                keyid:F9:FF:CC:DB:CA:69:1A:6C:B2:1B:45:50:57:F4:86:C3:80:5D:EF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:00:83:c9:84:41:58:25:21:49:74:55:c6:20:fa:c0:53:08:
         37:19:73:b5:eb:6c:49:6d:cb:8d:66:3c:3a:71:07:76:41:6c:
         f1:bb:f5:b7:9f:68:f8:99:f9:24:af:bc:63:40:a2:c5:d4:4b:
         75:84:2e:1f:ce:7c:b0:78:b1:e5:14:2a:e7:b9:e6:be:fb:d2:
         5f:f6:c4:60:ef:73:5a:5f:8c:75:42:25:e0:31:ee:fb:03:70:
         f4:b7:61:9a:53:52:12:35:6e:f2:e2:b7:6d:a8:53:f9:3c:00:
         83:1a:af:53:7e:19:db:92:f0:1c:68:4a:8c:b4:64:e3:d1:08:
         66:99:09:69:09:44:b3:32:29:50:10:42:85:69:9b:32:9c:b6:
         2a:86:0d:61:34:e3:60:70:e6:74:96:4b:eb:18:ea:84:1c:ff:
         be:66:e0:ed:4d:4b:8e:57:64:a5:9e:99:78:02:86:a1:b7:32:
         ea:27:42:c0:0e:ae:f8:37:95:f1:4c:5c:26:da:b2:95:74:cc:
         14:0f:ec:1e:f2:d8:a5:e2:b9:33:46:8b:89:af:5e:ae:8c:4e:
         bc:4f:83:1c:ac:ab:51:1b:f5:cc:ae:39:98:ce:08:0d:44:93:
         9e:6a:54:46:2b:a7:70:4e:90:64:93:06:a3:b9:e0:63:e7:73:
         92:3d:91:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:21:39 2026 by rpki-client