Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/5F4CA5F4C5FC5D108978F1DD1CD160123FF4D407.mft
File:                     5F4CA5F4C5FC5D108978F1DD1CD160123FF4D407.mft (raw, json)
Hash identifier:          taqtv5p0WqQKRDwCafw0BdMKp029ExO5B6fXMhKYBRg=
Subject key identifier:   C7:E3:E5:A8:14:DE:A3:05:C0:92:2D:BA:47:BF:B1:91:0D:11:BD:29
Authority key identifier: 5F:4C:A5:F4:C5:FC:5D:10:89:78:F1:DD:1C:D1:60:12:3F:F4:D4:07
Certificate issuer:       /CN=5F4CA5F4C5FC5D108978F1DD1CD160123FF4D407
Certificate serial:       4BF5032C9B72649C54758495357C1892687F134E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F4CA5F4C5FC5D108978F1DD1CD160123FF4D407.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/5F4CA5F4C5FC5D108978F1DD1CD160123FF4D407.mft
Manifest number:          0161
Signing time:             Wed 25 Mar 2026 08:41:21 +0000
Manifest this update:     Wed 25 Mar 2026 08:36:21 +0000
Manifest next update:     Thu 26 Mar 2026 11:09:21 +0000
Files and hashes:         1: 323830343a343535303a3a2f33322d313238203d3e20323636393138.roa (hash: 73ljTg3DP3AykB5fhf7t7iie/zTEkDLPGUgehQycqPw=)
                          2: 34352e3232342e3137362e302f32322d3332203d3e20323636393138.roa (hash: N9GnngUjTNjoK1tGJohawIiruhxmpVboOeyZkt912Vo=)
                          3: 5F4CA5F4C5FC5D108978F1DD1CD160123FF4D407.crl (hash: 1dnUNH2adPokZ1UTOoIWtaEhQhlLxUwAjqvv7Ce7Ym0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/5F4CA5F4C5FC5D108978F1DD1CD160123FF4D407.crl
                          rsync://rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/5F4CA5F4C5FC5D108978F1DD1CD160123FF4D407.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F4CA5F4C5FC5D108978F1DD1CD160123FF4D407.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 11:09:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f5:03:2c:9b:72:64:9c:54:75:84:95:35:7c:18:92:68:7f:13:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F4CA5F4C5FC5D108978F1DD1CD160123FF4D407
        Validity
            Not Before: Mar 25 08:36:21 2026 GMT
            Not After : Mar 26 11:09:21 2026 GMT
        Subject: CN=C7E3E5A814DEA305C0922DBA47BFB1910D11BD29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:00:04:32:87:72:bb:73:14:38:ae:df:70:55:
                    21:59:9c:0a:d6:d3:b1:bd:ca:fd:2d:54:cf:e3:2c:
                    08:1c:76:bb:ea:5e:f1:cd:7d:c7:3e:59:2d:c4:99:
                    7d:b3:b1:a9:21:aa:bd:fa:b6:2e:b1:66:75:67:86:
                    b6:83:d8:5a:3d:da:0c:1b:1d:f2:6e:c9:51:60:0b:
                    33:26:12:b7:43:ec:7b:2c:68:4a:a6:65:e5:f1:1d:
                    36:ba:f1:d1:f5:c8:0b:c8:b9:8d:f3:26:62:6f:14:
                    f7:a8:2b:1d:b0:00:5d:a6:29:52:17:e4:ea:1e:64:
                    a8:ce:05:ea:20:ee:f1:d1:fe:ed:fb:33:0f:b0:97:
                    01:ba:af:3c:00:b7:ec:c7:0d:1e:2c:19:4f:a3:14:
                    e2:11:3b:e5:30:2a:d6:95:3e:cd:8e:f7:04:d6:d2:
                    f8:bc:46:5c:e5:e0:8d:9d:cd:ce:8e:1d:82:fa:54:
                    4c:7a:d1:9b:f8:0d:13:bc:a4:5f:a0:95:8c:2d:64:
                    df:d8:b3:d2:9a:15:60:da:07:6c:02:ba:86:f6:83:
                    d0:67:4b:0b:7b:ef:0a:6f:ea:b2:90:b4:42:28:4b:
                    90:22:f4:36:91:74:10:91:a0:3b:a7:03:fb:9b:15:
                    f2:8a:c9:82:2c:c9:2c:c8:8d:a4:70:83:7d:aa:05:
                    ce:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E3:E5:A8:14:DE:A3:05:C0:92:2D:BA:47:BF:B1:91:0D:11:BD:29
            X509v3 Authority Key Identifier:
                keyid:5F:4C:A5:F4:C5:FC:5D:10:89:78:F1:DD:1C:D1:60:12:3F:F4:D4:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/5F4CA5F4C5FC5D108978F1DD1CD160123FF4D407.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F4CA5F4C5FC5D108978F1DD1CD160123FF4D407.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/5F4CA5F4C5FC5D108978F1DD1CD160123FF4D407.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:3f:ae:09:fe:cf:bf:b6:60:d3:56:08:b6:2e:3b:73:12:7a:
         1e:56:2e:72:ca:ff:9a:37:97:f3:61:ae:a3:28:64:2d:f4:1d:
         90:6d:e0:15:bc:45:ef:67:7e:74:44:71:e2:05:db:22:01:27:
         8d:a2:85:e5:9f:c8:90:3f:11:55:51:b0:4a:b7:48:8e:72:11:
         ff:ff:92:6f:e2:ad:96:d4:57:a6:28:6a:cb:82:40:d6:dd:d0:
         f2:e0:d6:44:af:05:f8:4b:c5:23:06:6e:0a:e4:41:6b:01:5d:
         6a:ca:91:b7:f9:1e:83:f0:a4:6a:b4:f7:ed:73:6b:0a:5b:18:
         17:d6:76:8b:74:09:16:e8:93:74:ef:20:b4:b9:87:c7:79:00:
         91:b5:84:3f:2f:5f:e6:87:1e:69:ed:0a:c5:96:2e:84:3f:d3:
         cd:bd:0f:66:6c:46:9e:d4:8b:18:09:9e:ef:fa:be:8c:a9:ff:
         7d:29:75:05:f7:f8:2f:61:d2:18:72:58:51:6f:df:a0:bd:c8:
         6c:37:0b:f0:a3:95:f1:0a:11:2e:82:1e:19:0a:9c:4b:ae:d8:
         ec:2d:99:82:25:06:3d:dd:13:b3:93:71:71:1e:4d:57:8e:e5:
         f1:aa:04:96:dc:81:8f:be:1b:0d:51:a8:89:25:f6:1c:ae:ec:
         5a:bf:64:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:14:48 2026 by rpki-client