Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.mft
File:                     D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.mft (raw, json)
Hash identifier:          WU6lSqrZr6sMd4WtaMDsj1OJN8xShojTgbv2RzbQfJI=
Subject key identifier:   69:A6:FD:78:07:43:15:8A:A3:38:E8:C2:45:6F:3F:AF:82:F1:C4:DA
Authority key identifier: D1:AF:45:7C:CB:4B:D1:09:9B:B1:11:DD:D7:9C:7A:52:53:14:8C:3F
Certificate issuer:       /CN=D1AF457CCB4BD1099BB111DDD79C7A5253148C3F
Certificate serial:       60CCE75D3984C7A65DF1BB05AA82F0AD7B3C6B44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.mft
Manifest number:          3E
Signing time:             Thu 26 Mar 2026 13:30:36 +0000
Manifest this update:     Thu 26 Mar 2026 13:25:36 +0000
Manifest next update:     Fri 27 Mar 2026 15:39:36 +0000
Files and hashes:         1: 323830343a336163383a3a2f33322d313238203d3e20323636313039.roa (hash: R3uhZoJSvdBAFSKZLP45MaoIVASbthNAoqzbBhFGlmI=)
                          2: 34352e352e3233362e302f32322d3332203d3e20323636313039.roa (hash: X1mFsLI4Qx5oGKiy8k7VNSxBc0vv6a0K1FRl2fNhhiQ=)
                          3: D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.crl (hash: 9fyaFAGahBxrRxHetWfoYVFkWJaFtkwoVTFtEZ4Lw00=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.crl
                          rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 15:39:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:cc:e7:5d:39:84:c7:a6:5d:f1:bb:05:aa:82:f0:ad:7b:3c:6b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1AF457CCB4BD1099BB111DDD79C7A5253148C3F
        Validity
            Not Before: Mar 26 13:25:36 2026 GMT
            Not After : Mar 27 15:39:36 2026 GMT
        Subject: CN=69A6FD780743158AA338E8C2456F3FAF82F1C4DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:37:a7:cc:19:87:7b:66:78:4f:03:40:a0:2c:
                    da:ef:d4:c1:d5:46:90:8b:1f:82:bf:18:0e:3c:b7:
                    20:ab:0b:0e:9b:1a:4a:22:99:95:41:0b:ce:09:73:
                    cd:84:fd:6d:a0:0b:13:f4:e1:ab:6e:92:cf:12:65:
                    dc:f1:2a:19:47:68:4a:0f:c6:f7:30:14:4e:f2:ed:
                    1a:50:97:66:5e:67:57:f4:c9:6c:c3:ab:45:0c:d3:
                    13:53:ae:85:60:07:4e:68:61:1f:53:a0:19:b8:f6:
                    36:25:66:42:23:20:32:1d:f5:ba:01:45:da:78:76:
                    77:63:aa:c2:46:db:ee:18:53:a2:49:19:27:18:f5:
                    de:91:90:a3:25:4b:fe:68:0b:86:5d:ae:c3:76:8b:
                    95:23:98:78:86:80:3b:6f:76:b7:ad:79:97:f7:3b:
                    77:95:ef:7a:e9:b4:33:85:a6:02:0c:5b:30:0e:d4:
                    37:fe:44:1f:ed:37:54:61:3f:a9:f3:41:1a:af:c8:
                    6d:17:c1:09:39:c2:9b:21:70:df:4b:26:87:f4:9e:
                    cb:8b:9f:29:9d:be:4e:77:78:1b:e2:2b:5b:10:fd:
                    42:ac:9a:e3:b2:97:7c:58:4f:bb:80:77:6c:4a:aa:
                    f2:6e:c1:c5:52:9a:bb:06:a4:93:12:85:7b:fb:97:
                    20:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A6:FD:78:07:43:15:8A:A3:38:E8:C2:45:6F:3F:AF:82:F1:C4:DA
            X509v3 Authority Key Identifier:
                keyid:D1:AF:45:7C:CB:4B:D1:09:9B:B1:11:DD:D7:9C:7A:52:53:14:8C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:0e:03:3a:ae:b0:df:c5:0b:87:40:d0:69:8f:87:a7:76:2c:
         97:b5:0f:6a:55:41:57:7f:d1:08:ef:25:76:6b:54:6f:cd:c6:
         60:6e:79:09:58:f4:b5:7a:4b:c5:0f:ed:f3:9f:cc:f1:c4:1a:
         a1:e7:3a:3d:28:49:39:ba:24:01:e8:4b:07:b2:0a:d3:03:89:
         e6:8c:52:7c:c8:df:33:ce:44:b7:1c:b6:78:78:9e:3f:d6:33:
         03:54:43:ab:f6:70:f1:de:a6:ff:23:d5:de:cf:16:04:b2:2c:
         d3:e0:39:a8:e5:2d:61:65:3e:71:2e:d9:6f:9e:2f:0c:a4:67:
         7b:2e:a0:e5:c5:6b:5f:6d:80:77:8c:b0:be:10:01:86:07:10:
         f3:0e:07:0a:71:d7:be:6f:6d:5d:66:ce:16:90:b1:2a:77:69:
         91:1c:a9:36:48:49:15:df:3e:ad:c1:ae:a9:c0:c1:5d:b1:9b:
         93:87:df:b6:a0:62:f7:29:95:b1:94:ce:8e:9e:00:c5:27:c6:
         79:fe:a4:c6:a4:9d:b9:5b:09:96:de:32:0d:6f:6c:c0:9e:ed:
         6e:79:4b:fb:89:61:eb:50:80:9b:20:04:bc:1f:c0:c2:35:b3:
         be:c6:41:81:dd:0f:6d:8d:ad:c6:77:92:83:b2:e7:0b:35:5e:
         91:f0:ba:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:16:28 2026 by rpki-client