Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.mft
File:                     3CF129D24760CA58DEE1B42CDACAE4407710A219.mft (raw, json)
Hash identifier:          KcXLGPhAabflDZKc9oJfNNaDJpM+ikthsbT5Azr4nG4=
Subject key identifier:   4E:85:CF:A3:6A:C6:0F:59:09:4C:D8:C6:DE:D3:A8:E3:79:9F:94:DA
Authority key identifier: 3C:F1:29:D2:47:60:CA:58:DE:E1:B4:2C:DA:CA:E4:40:77:10:A2:19
Certificate issuer:       /CN=3CF129D24760CA58DEE1B42CDACAE4407710A219
Certificate serial:       3A37D89C635273CC9C6359F532F9FFC68A508D5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.mft
Manifest number:          03EA
Signing time:             Wed 13 May 2026 11:32:32 +0000
Manifest this update:     Wed 13 May 2026 11:27:32 +0000
Manifest next update:     Thu 14 May 2026 15:03:32 +0000
Files and hashes:         1: 3139302e392e37362e302f32342d3234203d3e20323731363432.roa (hash: nWBliZcuMS4fmQOHN5Nll4pSAWLUcsBAHarUQVzjgBs=)
                          2: 3139302e392e37362e302f32322d3232203d3e20323731363432.roa (hash: kr/r3PO/7vdnAEHt8ALIr7FCT5sBitRu/RARjgG6GNg=)
                          3: 3139302e392e37392e302f32342d3234203d3e20323731363432.roa (hash: Wespzmxs6uklNiLmAPFne1g/78aJmYQQC5QIGcuavZ8=)
                          4: 3CF129D24760CA58DEE1B42CDACAE4407710A219.crl (hash: co0ZwC1MG+p70tXxlWmAcGn3FkR3eOqI3jG8i7F8iY0=)
                          5: 3139302e392e37372e302f32342d3234203d3e20323731363432.roa (hash: S4dt16V98rZiW43mWmTaVNmhHv244JuRrAZ1wISsdXk=)
                          6: 3139302e392e37382e302f32342d3234203d3e20323731363432.roa (hash: yUDHAb3echhaxyK0aFJwqXrNZTw3ttn6+O68XjiGtAQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.crl
                          rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 15:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:37:d8:9c:63:52:73:cc:9c:63:59:f5:32:f9:ff:c6:8a:50:8d:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CF129D24760CA58DEE1B42CDACAE4407710A219
        Validity
            Not Before: May 13 11:27:32 2026 GMT
            Not After : May 14 15:03:32 2026 GMT
        Subject: CN=4E85CFA36AC60F59094CD8C6DED3A8E3799F94DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f3:ed:d6:fa:01:e6:a4:bd:75:cc:66:b5:cd:
                    52:cf:d2:d0:81:c1:59:d8:44:97:a6:fb:bb:70:b3:
                    df:0f:cb:81:61:78:48:a4:2b:05:5b:99:82:11:71:
                    e1:88:f8:3f:54:f5:45:24:10:fe:55:a2:00:80:f7:
                    73:0c:9e:45:d4:59:8c:05:2c:be:c7:ad:bb:b4:48:
                    bf:81:0e:17:7b:d9:03:dc:f8:e7:02:b6:f5:e4:72:
                    63:2a:86:7a:87:08:e5:82:01:2f:ef:63:d9:82:b8:
                    e5:5f:83:0b:6f:27:f2:a3:67:ae:23:52:6a:58:56:
                    ac:5f:11:27:1b:5a:a9:fe:f9:0f:78:dd:32:03:84:
                    5e:13:a1:52:36:94:04:2a:18:8e:73:36:fb:11:39:
                    30:42:21:d1:91:7d:53:af:26:ae:2c:a0:f8:21:9c:
                    df:c6:38:3d:43:86:11:d3:44:8e:1d:c0:84:43:30:
                    b9:6f:44:1a:bd:ad:8b:56:8a:15:a8:ef:d1:97:89:
                    e6:e4:11:23:71:87:48:97:0d:b4:57:dc:9f:47:86:
                    a7:d3:3d:ca:fd:86:8b:62:07:b5:5e:b5:10:54:61:
                    a9:b8:e9:1d:83:37:58:92:55:50:e5:5d:c0:21:21:
                    52:94:85:17:fe:00:b2:16:ec:e1:71:0b:03:2e:42:
                    aa:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:85:CF:A3:6A:C6:0F:59:09:4C:D8:C6:DE:D3:A8:E3:79:9F:94:DA
            X509v3 Authority Key Identifier:
                keyid:3C:F1:29:D2:47:60:CA:58:DE:E1:B4:2C:DA:CA:E4:40:77:10:A2:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:87:13:67:d8:02:d0:15:4f:2b:bf:19:24:c8:4d:8f:cb:cf:
         e5:16:3c:4d:d9:4f:b1:73:6f:56:1f:40:52:40:3e:92:d3:07:
         70:b7:08:a5:dd:9e:a4:a9:a3:dd:c4:49:01:9f:09:02:51:81:
         8f:b7:57:22:03:e0:23:e8:15:76:68:51:b4:80:da:07:f5:28:
         63:bd:ca:f4:aa:23:c1:75:14:2f:78:fb:c5:38:84:45:aa:21:
         04:0d:56:7d:6c:06:c1:97:57:f8:52:f2:e1:a6:69:52:03:de:
         50:15:48:2b:c1:5d:01:17:8e:eb:04:a1:2d:d0:6c:23:cf:e4:
         ef:24:bd:44:f0:87:0a:e0:a2:4f:e8:d2:36:53:19:a3:17:ed:
         44:45:e3:b6:47:30:12:bd:b6:22:a8:15:6b:62:da:e6:02:98:
         80:71:d3:10:95:62:fc:af:d3:ca:43:f0:87:4f:2e:dd:4a:40:
         7e:2d:43:ba:92:33:b9:0e:3a:54:75:b0:f5:97:3d:02:ef:88:
         f0:74:92:ca:ae:ec:53:67:41:14:6f:2e:11:4f:eb:76:fe:bd:
         58:93:80:2b:23:01:80:0e:2d:4e:fe:c8:8a:f7:ea:f5:b6:15:
         7f:c3:6b:52:01:22:bc:9c:d5:3d:7a:6c:0b:b0:c1:6b:42:12:
         02:fa:0e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:53:46 2026 by rpki-client