Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FnbNUbnKno4bxE7nsVgb2wzncDHBDNC51kQfAuWKXuSu/0/3A9A16C5AFDA3E5C86158032A511D6B7B9AAB7B2.mft
File:                     3A9A16C5AFDA3E5C86158032A511D6B7B9AAB7B2.mft (raw, json)
Hash identifier:          bunI4t8YMsE7tVZ7vKDTNPHG5lIxr++WFzI23ENBGD8=
Subject key identifier:   77:82:03:5F:D2:D0:90:5B:08:26:5E:C6:DE:67:6F:A0:FD:DF:3D:B8
Authority key identifier: 3A:9A:16:C5:AF:DA:3E:5C:86:15:80:32:A5:11:D6:B7:B9:AA:B7:B2
Certificate issuer:       /CN=3A9A16C5AFDA3E5C86158032A511D6B7B9AAB7B2
Certificate serial:       752F286B811EBD11FA27270BFF2E6FC0C70E9CA1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9A16C5AFDA3E5C86158032A511D6B7B9AAB7B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FnbNUbnKno4bxE7nsVgb2wzncDHBDNC51kQfAuWKXuSu/0/3A9A16C5AFDA3E5C86158032A511D6B7B9AAB7B2.mft
Manifest number:          3B
Signing time:             Wed 25 Mar 2026 06:19:34 +0000
Manifest this update:     Wed 25 Mar 2026 06:14:34 +0000
Manifest next update:     Thu 26 Mar 2026 06:49:34 +0000
Files and hashes:         1: 3A9A16C5AFDA3E5C86158032A511D6B7B9AAB7B2.crl (hash: hs5vVMv3jVIgrvSpjV5kCbQYCKa9jqTMXQc5cTDiKRI=)
                          2: 3139312e33372e37322e302f32312d3234203d3e20323633333536.roa (hash: NmoL4KMqKcBMKRZLOaJd0riTW3KjaCQ7xeDtx4by8u0=)
                          3: 323830343a313465303a3a2f33322d3430203d3e20323633333536.roa (hash: vteVs0b25nuRE2c/fNxUoYPZODCf5PjnwZy7PVlT3Tw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FnbNUbnKno4bxE7nsVgb2wzncDHBDNC51kQfAuWKXuSu/0/3A9A16C5AFDA3E5C86158032A511D6B7B9AAB7B2.crl
                          rsync://rpki-repo.registro.br/repo/FnbNUbnKno4bxE7nsVgb2wzncDHBDNC51kQfAuWKXuSu/0/3A9A16C5AFDA3E5C86158032A511D6B7B9AAB7B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9A16C5AFDA3E5C86158032A511D6B7B9AAB7B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 06:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:2f:28:6b:81:1e:bd:11:fa:27:27:0b:ff:2e:6f:c0:c7:0e:9c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A9A16C5AFDA3E5C86158032A511D6B7B9AAB7B2
        Validity
            Not Before: Mar 25 06:14:34 2026 GMT
            Not After : Mar 26 06:49:34 2026 GMT
        Subject: CN=7782035FD2D0905B08265EC6DE676FA0FDDF3DB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6b:18:f9:a0:f4:bf:33:52:1a:0e:2b:d5:85:
                    a6:f6:86:c8:84:6c:89:1f:9f:e8:38:19:54:f3:fd:
                    1f:c1:48:f8:50:0c:c5:d1:a7:22:1a:61:bb:bb:4e:
                    45:c9:ea:54:30:dd:e0:12:45:ed:d4:9c:ff:1d:f9:
                    69:9c:43:47:e4:37:87:2a:d9:d2:bb:b3:cf:f6:30:
                    da:9e:9a:88:40:98:30:b1:f3:ca:4a:d1:af:4e:9c:
                    ff:e1:31:db:93:83:7e:33:a5:65:e5:e6:7b:14:22:
                    7f:ce:d1:a7:1e:74:fa:b6:8b:9d:4d:a7:86:06:52:
                    65:bc:bc:4a:29:e6:b6:6e:e5:7a:d5:d1:65:d6:a3:
                    f5:1d:94:ac:ba:42:4b:8e:e6:c7:53:75:9b:88:3f:
                    7c:f4:01:33:06:21:d3:83:39:34:ec:2b:9d:22:1a:
                    0e:48:11:b4:93:b4:f2:d3:0b:20:8e:35:39:52:ff:
                    01:91:28:14:bc:28:85:95:01:c1:74:a5:c3:5e:10:
                    ca:33:c7:e8:42:3f:87:2d:09:42:94:65:eb:70:5b:
                    b3:f6:8d:16:68:c2:25:f5:da:b1:33:d1:df:52:6c:
                    6c:6d:8c:f3:e4:2e:2c:23:ac:24:f1:a3:55:18:94:
                    30:ae:f9:7f:8b:3e:0b:a6:fc:6d:6e:e1:54:e2:35:
                    41:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:82:03:5F:D2:D0:90:5B:08:26:5E:C6:DE:67:6F:A0:FD:DF:3D:B8
            X509v3 Authority Key Identifier:
                keyid:3A:9A:16:C5:AF:DA:3E:5C:86:15:80:32:A5:11:D6:B7:B9:AA:B7:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FnbNUbnKno4bxE7nsVgb2wzncDHBDNC51kQfAuWKXuSu/0/3A9A16C5AFDA3E5C86158032A511D6B7B9AAB7B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9A16C5AFDA3E5C86158032A511D6B7B9AAB7B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FnbNUbnKno4bxE7nsVgb2wzncDHBDNC51kQfAuWKXuSu/0/3A9A16C5AFDA3E5C86158032A511D6B7B9AAB7B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:be:cf:f8:b9:95:b9:c3:63:d2:dc:0a:83:2c:1b:b6:cf:e5:
         a1:5b:23:15:4d:6f:04:b6:12:4b:21:1a:f7:85:22:bb:3c:76:
         bc:95:aa:5c:e6:44:1f:6b:b9:23:8a:86:8e:d2:9f:47:1d:fd:
         2f:ca:16:6a:01:23:c7:77:30:44:86:f1:1e:83:0f:0b:4e:44:
         10:0d:a2:d5:9d:7a:72:5b:82:09:70:1c:bf:bb:c1:0c:0b:7f:
         43:f3:d3:d5:d9:bd:a5:d5:90:97:02:08:2e:7d:cd:56:ae:f7:
         06:5c:e0:e1:4e:86:54:95:af:3d:9a:20:3a:04:be:0a:8b:73:
         b2:eb:7d:c3:8c:89:c4:c8:e2:94:ae:23:01:e3:95:f4:0e:71:
         3d:57:a3:b3:8f:e1:63:34:e0:cb:f8:f1:85:9c:d8:dc:0f:ab:
         5e:99:1f:30:a7:ac:1a:a8:59:95:32:a1:13:eb:08:11:2f:b8:
         68:ca:ce:9c:5f:9e:7d:64:17:ef:d3:c5:ce:f7:2d:60:e1:c8:
         d1:0a:b7:ac:7f:67:52:8d:0c:1f:9b:5b:8f:8a:ad:28:89:b7:
         85:62:32:fc:bd:b6:8b:34:2c:b3:1f:c6:8a:6f:60:f2:f3:bb:
         e7:2c:0a:e5:c4:79:14:93:16:12:29:95:b9:fd:86:02:88:62:
         5f:05:77:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:17:58 2026 by rpki-client