Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FTd5GkVhgoQqSKm59GC2wFbjsEREaq8uZa4yaCTwqCyn/0/7A21AF4B7D1AFEC22E788E71A5AF504BBC6800BC.mft
File:                     7A21AF4B7D1AFEC22E788E71A5AF504BBC6800BC.mft (raw, json)
Hash identifier:          Ksq95CYcI3SabZebF+TPdNcsbcQYPe6lkDFELzHSvqE=
Subject key identifier:   DD:98:9D:63:AE:AF:CD:E1:A4:47:83:F1:B3:E7:32:1C:C8:12:2B:16
Authority key identifier: 7A:21:AF:4B:7D:1A:FE:C2:2E:78:8E:71:A5:AF:50:4B:BC:68:00:BC
Certificate issuer:       /CN=7A21AF4B7D1AFEC22E788E71A5AF504BBC6800BC
Certificate serial:       172F89016D9C017EB1ECA96CF07D326C5F3970CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A21AF4B7D1AFEC22E788E71A5AF504BBC6800BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FTd5GkVhgoQqSKm59GC2wFbjsEREaq8uZa4yaCTwqCyn/0/7A21AF4B7D1AFEC22E788E71A5AF504BBC6800BC.mft
Manifest number:          0A
Signing time:             Wed 25 Mar 2026 19:55:18 +0000
Manifest this update:     Wed 25 Mar 2026 19:50:18 +0000
Manifest next update:     Thu 26 Mar 2026 20:42:18 +0000
Files and hashes:         1: 323830343a393631383a3a2f33322d3332203d3e20323734353639.roa (hash: Ys5shJUETKK2hz6jpkE9KrgYHhv31/mxgs6UXyo2tKg=)
                          2: 7A21AF4B7D1AFEC22E788E71A5AF504BBC6800BC.crl (hash: ZByRqTd5jRyqU69Q+5Hzh2bl4v6AqEWrWRyGdTeQpQA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FTd5GkVhgoQqSKm59GC2wFbjsEREaq8uZa4yaCTwqCyn/0/7A21AF4B7D1AFEC22E788E71A5AF504BBC6800BC.crl
                          rsync://rpki-repo.registro.br/repo/FTd5GkVhgoQqSKm59GC2wFbjsEREaq8uZa4yaCTwqCyn/0/7A21AF4B7D1AFEC22E788E71A5AF504BBC6800BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A21AF4B7D1AFEC22E788E71A5AF504BBC6800BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 20:42:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:2f:89:01:6d:9c:01:7e:b1:ec:a9:6c:f0:7d:32:6c:5f:39:70:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A21AF4B7D1AFEC22E788E71A5AF504BBC6800BC
        Validity
            Not Before: Mar 25 19:50:18 2026 GMT
            Not After : Mar 26 20:42:18 2026 GMT
        Subject: CN=DD989D63AEAFCDE1A44783F1B3E7321CC8122B16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:dc:68:16:e1:28:9a:78:c6:86:16:44:71:00:
                    bf:3f:30:b9:07:6d:41:09:19:d8:5f:7f:b8:bc:0b:
                    69:92:a6:78:58:94:6f:d2:38:e2:c1:de:57:f7:c6:
                    68:56:77:4a:6b:45:c8:d5:4d:f0:8b:77:b3:03:68:
                    75:5f:79:8b:ad:8e:d2:00:67:8f:4f:7d:89:e6:66:
                    9c:b3:03:b5:8c:76:fa:d9:1d:1d:80:8f:b4:02:a5:
                    96:93:5c:7f:23:cf:cc:a8:b3:8f:15:ed:e7:90:96:
                    cf:cf:ef:5e:fd:f2:0e:ed:ca:7c:e3:09:a2:61:3d:
                    76:c9:b1:b7:c2:65:6b:fa:a3:6e:12:71:cb:5e:49:
                    76:48:fa:52:17:0f:6c:7d:bf:9f:5f:35:0c:d4:f1:
                    8a:8d:98:2a:54:14:a3:2a:11:6e:4c:42:dd:2c:cc:
                    76:64:a5:bd:6d:28:a6:a8:4e:5c:f8:08:9c:c3:e9:
                    23:2a:6b:76:9d:24:14:99:a0:5c:10:0e:ae:63:2a:
                    c2:af:79:87:f6:0b:03:d7:bc:3a:49:ee:39:8c:33:
                    4f:7b:4f:a6:92:e0:a9:54:e3:f1:40:81:d4:81:bf:
                    49:0a:b7:ff:6b:41:01:55:94:88:76:8b:21:0f:75:
                    7f:d9:92:1a:38:4f:a4:87:f7:18:78:38:94:a2:b9:
                    da:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:98:9D:63:AE:AF:CD:E1:A4:47:83:F1:B3:E7:32:1C:C8:12:2B:16
            X509v3 Authority Key Identifier:
                keyid:7A:21:AF:4B:7D:1A:FE:C2:2E:78:8E:71:A5:AF:50:4B:BC:68:00:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FTd5GkVhgoQqSKm59GC2wFbjsEREaq8uZa4yaCTwqCyn/0/7A21AF4B7D1AFEC22E788E71A5AF504BBC6800BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A21AF4B7D1AFEC22E788E71A5AF504BBC6800BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FTd5GkVhgoQqSKm59GC2wFbjsEREaq8uZa4yaCTwqCyn/0/7A21AF4B7D1AFEC22E788E71A5AF504BBC6800BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:67:0c:81:47:72:6d:5d:cb:e8:2c:df:19:9b:cf:31:2e:a3:
         a4:80:b6:1e:32:57:e3:47:44:5d:a7:bc:7b:34:23:22:b2:da:
         33:93:3c:9d:aa:ea:13:a9:0c:20:b7:a4:c9:40:37:1a:be:1e:
         a7:7a:29:79:39:6e:99:9e:53:5c:2d:63:95:96:65:ff:81:33:
         9c:b2:07:83:bd:2a:f9:96:73:a5:a7:76:29:78:a4:24:01:88:
         b8:cc:42:87:66:b8:40:42:b7:29:85:34:ed:ff:73:14:c9:8b:
         4b:04:f7:92:2b:1f:7a:54:eb:11:9c:ed:21:8e:a8:5e:20:4a:
         b8:e5:d9:56:a6:45:9d:cb:7f:1f:77:ce:8d:2a:5f:c8:d9:33:
         bc:98:1a:96:1c:85:5c:d2:44:6c:32:ac:03:59:e7:49:63:5e:
         1a:1e:58:29:d8:1a:e5:ef:8e:72:b2:23:2b:38:ae:4a:bb:90:
         ea:a5:0e:2c:6d:03:09:1c:b4:0f:91:8d:0f:88:a8:6b:0d:c3:
         10:dc:f9:26:0a:44:aa:57:79:18:64:bc:6f:28:7d:e6:04:a0:
         2b:8c:c8:c8:20:3c:b3:90:dc:43:bc:eb:da:c6:f6:37:52:61:
         dd:21:c2:87:0f:3d:e1:d9:9b:96:4f:e3:1f:23:0b:38:99:93:
         50:28:52:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:18:26 2026 by rpki-client