Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FJQ7iVw9ULpfmfBV9JwEVDjYyTnFstRT3iBrF3e3Yf2z/0/C3FFCD90B027382FDB2A2EA78823282F4E8039A3.mft
File:                     C3FFCD90B027382FDB2A2EA78823282F4E8039A3.mft (raw, json)
Hash identifier:          DYLumUDrwIf7bMuceBmzfVRpraa5cXRfNhAf99DYhOY=
Subject key identifier:   04:96:15:A6:84:D9:0A:3D:D3:1D:BD:97:E5:B5:02:25:AD:A2:C5:F9
Authority key identifier: C3:FF:CD:90:B0:27:38:2F:DB:2A:2E:A7:88:23:28:2F:4E:80:39:A3
Certificate issuer:       /CN=C3FFCD90B027382FDB2A2EA78823282F4E8039A3
Certificate serial:       0C659264DB5BB4754E0D0EBC9C6E4C761B822E40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3FFCD90B027382FDB2A2EA78823282F4E8039A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJQ7iVw9ULpfmfBV9JwEVDjYyTnFstRT3iBrF3e3Yf2z/0/C3FFCD90B027382FDB2A2EA78823282F4E8039A3.mft
Manifest number:          E1
Signing time:             Thu 26 Mar 2026 03:44:46 +0000
Manifest this update:     Thu 26 Mar 2026 03:39:46 +0000
Manifest next update:     Fri 27 Mar 2026 05:04:46 +0000
Files and hashes:         1: 34352e3138312e3131362e302f32322d3234203d3e20323639323231.roa (hash: 3VR2tRHys0rckh/3rahOd8k/ebCOEiGxkZ99rxqzT00=)
                          2: 323830343a363133383a3a2f33322d3438203d3e20323639323231.roa (hash: T01+x/vREwV33AzOYArGAX++e9FGALmTd+n1jJu8hwU=)
                          3: C3FFCD90B027382FDB2A2EA78823282F4E8039A3.crl (hash: XzT8nfvJ9kmVloaqSkqgaHmu+LsLka5+Wm21Xo3dSi0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FJQ7iVw9ULpfmfBV9JwEVDjYyTnFstRT3iBrF3e3Yf2z/0/C3FFCD90B027382FDB2A2EA78823282F4E8039A3.crl
                          rsync://rpki-repo.registro.br/repo/FJQ7iVw9ULpfmfBV9JwEVDjYyTnFstRT3iBrF3e3Yf2z/0/C3FFCD90B027382FDB2A2EA78823282F4E8039A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3FFCD90B027382FDB2A2EA78823282F4E8039A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 05:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:65:92:64:db:5b:b4:75:4e:0d:0e:bc:9c:6e:4c:76:1b:82:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3FFCD90B027382FDB2A2EA78823282F4E8039A3
        Validity
            Not Before: Mar 26 03:39:46 2026 GMT
            Not After : Mar 27 05:04:46 2026 GMT
        Subject: CN=049615A684D90A3DD31DBD97E5B50225ADA2C5F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3b:e9:d0:4c:b3:0c:08:4c:bf:4c:26:c0:85:
                    57:8a:cd:92:9b:b7:32:dd:91:66:60:48:06:6f:41:
                    f0:a3:b9:e3:d2:cc:7b:b0:80:e3:ee:0d:d1:48:e4:
                    28:10:52:ed:2e:95:8e:23:86:fc:d7:57:f6:2f:06:
                    b1:ec:df:38:2f:7e:ca:c1:11:ea:57:b6:3e:46:02:
                    90:c9:d3:95:37:6e:04:6a:ff:21:d7:b4:49:7c:bf:
                    e1:cb:99:dc:8e:d1:24:3e:bb:a0:b5:b5:ae:1a:d7:
                    17:7f:7a:d9:a3:81:63:6d:07:dc:ab:20:c5:a4:47:
                    e0:de:01:e5:e1:d7:82:e7:1a:d6:90:8a:09:49:5b:
                    70:ce:e7:22:b9:22:32:99:c8:ec:e6:03:66:18:1f:
                    9c:87:3c:14:86:ac:13:f5:09:28:ae:03:fd:12:66:
                    5e:0d:b4:f3:47:8b:06:17:6f:a1:f9:82:29:8c:9f:
                    91:fb:75:6a:a3:86:19:bc:01:00:e7:23:1c:38:30:
                    2c:ce:4a:21:62:e1:4e:8a:f9:ca:ce:b3:8d:de:d0:
                    46:48:bc:ed:2e:03:ef:90:0d:80:5f:c7:98:dd:05:
                    5b:39:ef:19:cb:37:38:81:da:f3:b2:b9:06:eb:8d:
                    fd:14:18:fe:9e:c8:b4:4b:22:19:06:06:07:38:5f:
                    18:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:96:15:A6:84:D9:0A:3D:D3:1D:BD:97:E5:B5:02:25:AD:A2:C5:F9
            X509v3 Authority Key Identifier:
                keyid:C3:FF:CD:90:B0:27:38:2F:DB:2A:2E:A7:88:23:28:2F:4E:80:39:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJQ7iVw9ULpfmfBV9JwEVDjYyTnFstRT3iBrF3e3Yf2z/0/C3FFCD90B027382FDB2A2EA78823282F4E8039A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3FFCD90B027382FDB2A2EA78823282F4E8039A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJQ7iVw9ULpfmfBV9JwEVDjYyTnFstRT3iBrF3e3Yf2z/0/C3FFCD90B027382FDB2A2EA78823282F4E8039A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:00:27:27:00:69:07:a3:19:77:84:45:d4:6c:6a:78:e4:27:
         0c:3f:0c:f2:28:69:59:a6:06:2d:a5:30:95:70:02:a0:19:ea:
         f8:52:02:b3:61:06:92:db:d5:98:c5:65:c1:a9:50:c6:f6:32:
         c2:2e:9e:66:fb:81:0e:87:70:f6:26:9e:41:b7:fa:4c:44:8e:
         38:15:42:75:db:f2:e8:09:64:40:29:db:bd:76:96:14:1c:88:
         87:87:4d:c6:f4:4f:88:73:9b:08:d4:d1:53:14:26:2d:55:f3:
         89:ab:9d:7f:f4:f8:62:96:6c:07:d2:e8:1b:81:13:71:89:5a:
         8b:7a:d8:6e:64:e2:42:ba:3a:2f:4c:7a:17:8b:2d:60:cb:ab:
         1d:b3:1d:32:2c:33:2f:a6:2d:c3:8b:ba:e7:56:f8:da:f4:1c:
         97:8b:e6:78:f4:64:dc:da:07:27:66:91:61:ad:8e:25:25:99:
         9c:f4:89:be:65:11:e8:6d:61:19:c7:13:33:6b:c5:9c:4b:89:
         df:1a:98:49:46:3b:73:dc:96:fe:25:a9:5c:d3:63:04:da:8d:
         53:8c:b0:0e:14:7d:9b:4b:c6:fe:d9:21:a1:59:44:58:cd:bd:
         ea:2f:7f:f3:7d:28:5a:8a:bd:5b:18:3a:67:33:81:ca:de:dd:
         8c:d8:8b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:44:31 2026 by rpki-client