Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.mft
File:                     4C3C8E91B1D1C28D4FE82E67165715503E9CA786.mft (raw, json)
Hash identifier:          KLDbwP3JxwUkblIuefYW2pZTk9B8khfUZE7wz5QHU/g=
Subject key identifier:   BC:EA:88:5E:4D:7C:77:53:E3:8F:73:F8:96:2D:31:02:DD:E7:17:77
Authority key identifier: 4C:3C:8E:91:B1:D1:C2:8D:4F:E8:2E:67:16:57:15:50:3E:9C:A7:86
Certificate issuer:       /CN=4C3C8E91B1D1C28D4FE82E67165715503E9CA786
Certificate serial:       08D1AEF8A6DAB0539A0F9BE4D0D957F1AA4D864E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.mft
Manifest number:          1C
Signing time:             Wed 25 Mar 2026 08:07:34 +0000
Manifest this update:     Wed 25 Mar 2026 08:02:34 +0000
Manifest next update:     Thu 26 Mar 2026 11:15:34 +0000
Files and hashes:         1: 323830343a373264343a383030303a3a2f33332d3333203d3e20323730383738.roa (hash: zpZpU0xMXG/kg+gpq/CNeedFLRekLley2r6r2QFFfQQ=)
                          2: 3138362e3139342e322e302f32332d3233203d3e20323730383738.roa (hash: oOHBGJ/seEbEDdPGwT4eWL46QUn62RIhOGEs1i6QbBc=)
                          3: 3138362e3139342e302e302f32322d3232203d3e20323730383738.roa (hash: 8JaemSQpYfITP2b4QYH6E87LxDcWSBcYX2Dhev/xXzU=)
                          4: 3138362e3139342e302e302f32332d3233203d3e20323730383738.roa (hash: N++qvqMWqypLC2nBGgOlDpr30wb5fAqGHpkT2FpI6CI=)
                          5: 4C3C8E91B1D1C28D4FE82E67165715503E9CA786.crl (hash: +7pHzBgkIARyRiuhxxOkQVYd2SsQyxkCWhfJyJYr7QA=)
                          6: 323830343a373264343a3a2f33322d3332203d3e20323730383738.roa (hash: nIFTOsm+qixJuTHWI2QHSvq6SamjJ4f6oLwwejS2tHY=)
                          7: 323830343a373264343a3a2f33332d3333203d3e20323730383738.roa (hash: gwy1MJHFaIVB9n6maZJaBjhiX5UPprQmJ0Fz+2+56ww=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.crl
                          rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 11:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d1:ae:f8:a6:da:b0:53:9a:0f:9b:e4:d0:d9:57:f1:aa:4d:86:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C3C8E91B1D1C28D4FE82E67165715503E9CA786
        Validity
            Not Before: Mar 25 08:02:34 2026 GMT
            Not After : Mar 26 11:15:34 2026 GMT
        Subject: CN=BCEA885E4D7C7753E38F73F8962D3102DDE71777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9f:99:f1:ca:57:8d:79:69:67:45:07:2e:67:
                    6f:32:93:db:55:f8:9b:7a:57:5b:ac:2f:76:37:93:
                    dd:9c:57:e1:61:6e:b6:2d:c9:34:83:f6:69:79:05:
                    6a:d0:6f:bb:00:94:36:cd:4e:fa:17:38:a1:da:bb:
                    90:ee:f8:5d:58:ce:1d:a5:41:96:d2:f3:12:f7:d0:
                    3e:b9:bd:bc:a7:27:9f:02:00:d8:c8:0e:98:74:40:
                    23:e0:c1:54:9a:34:5d:c6:a9:5a:9d:c6:76:df:d2:
                    19:72:cd:47:ec:04:c0:4d:3e:26:cc:ec:b7:6f:e3:
                    ef:c2:c6:8b:bf:c7:fe:ff:c4:07:c2:b6:5f:d1:33:
                    be:95:f2:76:9d:5e:c7:ab:10:df:8c:c4:da:f2:5a:
                    43:04:12:92:38:22:d1:08:61:45:53:a5:34:db:48:
                    d5:88:2c:35:0f:09:94:61:b8:70:5d:26:18:3b:b0:
                    6e:6c:09:c2:ac:10:34:d7:78:69:b6:a7:fc:44:c5:
                    99:8f:f7:6c:a5:1b:87:86:b7:29:ad:2b:91:8d:30:
                    a1:26:41:26:42:96:d8:85:55:cf:e4:8c:a1:ea:a9:
                    22:e4:6a:2f:87:2f:b7:f2:95:42:17:a2:7d:d5:39:
                    83:c4:ac:0a:c4:71:29:8f:b8:68:ed:eb:b2:2b:38:
                    04:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:EA:88:5E:4D:7C:77:53:E3:8F:73:F8:96:2D:31:02:DD:E7:17:77
            X509v3 Authority Key Identifier:
                keyid:4C:3C:8E:91:B1:D1:C2:8D:4F:E8:2E:67:16:57:15:50:3E:9C:A7:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:ff:18:8b:e1:96:0b:74:21:0c:b1:91:3c:2b:d0:41:48:6f:
         b5:c5:14:c4:7e:cb:ac:12:cf:4d:7e:d5:87:80:2b:02:c9:47:
         1b:70:d2:2a:aa:36:55:4c:f7:2d:0f:6e:75:0b:1c:07:6e:f6:
         26:47:a4:5c:2b:77:97:85:d3:a3:31:f1:1e:8f:5a:21:3e:05:
         84:8e:34:42:5f:9d:bf:dd:d4:9e:e4:38:08:a3:f7:18:1f:b0:
         ce:b0:70:d3:74:98:f4:3d:59:6a:c6:07:00:b0:28:9e:f8:a6:
         f5:8b:52:a3:62:bc:20:38:eb:77:34:38:a4:c2:6a:df:22:fe:
         25:f8:38:39:79:ae:76:6d:33:0a:90:da:5d:38:aa:cf:0c:4f:
         14:dd:08:6f:5b:97:ed:e9:8b:8c:21:37:35:53:36:5e:b1:8b:
         84:66:c4:48:d6:40:e0:c6:37:0e:9d:a3:a1:bc:da:d4:5d:fa:
         ab:59:86:72:86:3f:42:67:a3:43:60:7b:fc:ef:1d:75:f4:52:
         74:e9:55:6d:83:6d:7c:57:f5:9f:cc:fc:a4:e5:a5:3c:75:83:
         51:6c:f0:90:ae:08:a1:ef:cd:3d:1c:f4:04:1e:06:5b:a1:8f:
         c4:02:98:cb:f4:d9:de:07:f4:59:ea:dd:02:ad:e7:06:4b:5a:
         9c:5d:80:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:44:38 2026 by rpki-client