Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.mft
File:                     A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.mft (raw, json)
Hash identifier:          8KtbOYOPBKd0JcW7tLtn3NqRbTYdVqn3qLdk4ebrf4s=
Subject key identifier:   F9:14:5A:1B:0A:17:F0:D8:6E:03:76:C5:95:EE:7B:A9:75:22:9E:3B
Authority key identifier: A1:CC:88:C7:FD:49:EE:B4:16:9B:CC:7F:C3:66:DD:AD:75:0C:14:78
Certificate issuer:       /CN=A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478
Certificate serial:       2FB00865430609A7AA64D3997DE5C41257D0D42D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.mft
Manifest number:          0253
Signing time:             Thu 26 Mar 2026 15:28:43 +0000
Manifest this update:     Thu 26 Mar 2026 15:23:43 +0000
Manifest next update:     Fri 27 Mar 2026 16:05:43 +0000
Files and hashes:         1: 323830343a373865633a313030303a3a2f33362d3336203d3e20323731323734.roa (hash: w/ttojJgIZcqEiQAlXRIgGEwx/SyE+eV3XcDR+wm3Ec=)
                          2: 323830343a373865633a333030303a3a2f33362d3336203d3e20323731323734.roa (hash: VXjFelkFSdFKx8Y2J6XhU5Ptn2Vi5wT4GfSbDJZEwlc=)
                          3: A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.crl (hash: +33p0OxHms6gF7QHGJdhGJc3fVU234ra49/qt5FI/cM=)
                          4: 323830343a373865633a323030303a3a2f33362d3336203d3e20323731323734.roa (hash: okARzhUwSA++CaIQiE7G5p/lPgXuBrz6+YAreZuSaj8=)
                          5: 3139302e31322e3133362e302f32322d3234203d3e20323731323734.roa (hash: bahN75Khgj6xlNi2kbbIn1LBVS+TPCRezuTrNZ9yFgM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.crl
                          rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:05:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:b0:08:65:43:06:09:a7:aa:64:d3:99:7d:e5:c4:12:57:d0:d4:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478
        Validity
            Not Before: Mar 26 15:23:43 2026 GMT
            Not After : Mar 27 16:05:43 2026 GMT
        Subject: CN=F9145A1B0A17F0D86E0376C595EE7BA975229E3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e7:d5:0e:1d:93:fe:0a:72:9d:92:ba:21:c8:
                    0a:f3:12:67:ce:07:9d:95:b2:e5:38:12:69:fc:67:
                    e5:44:0f:40:c5:85:dc:cb:4e:f4:9b:8b:48:50:92:
                    1a:be:69:b3:fd:7b:f9:60:96:58:51:23:a9:4c:80:
                    4d:f4:0c:41:35:dc:43:de:19:1d:1a:16:6a:5b:24:
                    87:e6:bb:f7:54:ca:5b:ca:1d:42:9e:9d:4c:e5:98:
                    5d:07:74:59:e1:3c:8c:27:06:d4:1f:b4:31:1b:51:
                    d5:77:73:80:02:5a:0c:71:75:2a:2d:21:c2:5b:13:
                    02:b2:9c:49:05:70:e3:ff:1e:1d:93:52:52:36:fc:
                    19:a0:06:22:34:94:da:3f:ac:7f:24:77:21:7c:19:
                    c7:3a:16:7b:22:30:da:0d:52:4e:8a:a3:57:6c:05:
                    70:dd:82:7c:71:b1:97:17:7a:01:f4:c8:ee:d7:84:
                    9a:0d:73:ff:fa:67:f8:f6:ab:c3:66:ba:d7:e6:fe:
                    e2:63:e5:d8:4d:91:64:03:47:6d:a2:a1:29:af:a9:
                    06:e7:78:62:32:0c:b9:f8:90:c0:fe:93:18:8a:f1:
                    10:33:20:01:60:38:1d:66:87:de:b8:f5:23:6d:3f:
                    14:d0:dc:ec:2a:5c:23:aa:56:4c:31:94:ad:d5:00:
                    5e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:14:5A:1B:0A:17:F0:D8:6E:03:76:C5:95:EE:7B:A9:75:22:9E:3B
            X509v3 Authority Key Identifier:
                keyid:A1:CC:88:C7:FD:49:EE:B4:16:9B:CC:7F:C3:66:DD:AD:75:0C:14:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:39:75:0c:b9:2e:a6:cc:b8:51:05:48:9f:ab:dd:35:58:1f:
         94:23:33:5f:98:95:96:aa:98:0c:9c:29:1c:78:39:75:5b:54:
         c5:e1:28:89:e4:52:3a:72:65:cf:82:22:96:8d:85:da:9e:f1:
         89:33:e0:32:ff:97:9e:81:28:93:79:b0:fc:c6:50:7f:4c:d2:
         be:0c:b1:63:9d:68:8d:db:31:ab:61:e5:49:7d:16:4e:9d:db:
         66:cc:fd:60:6d:18:ad:bf:b4:e2:7b:72:35:ac:cc:b3:40:77:
         cd:7d:dd:22:40:ae:da:fb:0f:24:af:8e:37:4c:27:4f:da:d7:
         71:21:c1:c9:af:0c:40:2a:00:03:b6:7f:ed:9e:98:9d:76:95:
         c0:19:0d:c1:38:b5:d2:06:b9:e0:1f:28:f0:7f:e1:35:41:b3:
         cb:f0:9c:1d:9e:71:42:e9:dc:35:f3:5f:19:ac:d9:78:db:25:
         4e:1e:8e:14:1c:8f:0a:41:a3:2d:d3:8c:fa:cb:f6:8a:0c:f8:
         97:2d:03:24:6c:0c:2d:f0:a7:a9:57:d5:f8:2c:59:09:ba:6b:
         e5:50:b3:cf:c5:14:3f:56:cf:1b:87:7c:1c:cd:5f:90:ba:74:
         68:96:4b:c0:34:31:45:e0:d0:26:9d:7c:f0:03:f4:43:5f:65:
         bf:a9:c3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:16:15 2026 by rpki-client