Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.mft
File:                     1BE8995FC9C395145A97456B64442AC68C0DF4EB.mft (raw, json)
Hash identifier:          60KVTzzUUahzLfPO45k685kskddSt9tqD1EPuPFWFZE=
Subject key identifier:   FA:1E:28:91:79:4F:14:CA:C2:8A:FE:3A:D8:62:B5:0E:11:92:B7:10
Authority key identifier: 1B:E8:99:5F:C9:C3:95:14:5A:97:45:6B:64:44:2A:C6:8C:0D:F4:EB
Certificate issuer:       /CN=1BE8995FC9C395145A97456B64442AC68C0DF4EB
Certificate serial:       75FA0B8ABC39C603FE283D8B9AB89B772CD461E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE8995FC9C395145A97456B64442AC68C0DF4EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.mft
Manifest number:          02A1
Signing time:             Thu 26 Mar 2026 14:56:14 +0000
Manifest this update:     Thu 26 Mar 2026 14:51:14 +0000
Manifest next update:     Fri 27 Mar 2026 15:12:14 +0000
Files and hashes:         1: 34352e3233362e3131362e302f32322d3234203d3e20323638323335.roa (hash: aevkZNp1r0p7IWRIUz8od2ybg+zKEryAACHQcwg1UxI=)
                          2: 323830343a346530383a3a2f33322d3634203d3e20323638323335.roa (hash: XH1N2cfxCmBT8VcK9qJsDfraONQoZ81C4Yo8ki7quN0=)
                          3: 1BE8995FC9C395145A97456B64442AC68C0DF4EB.crl (hash: beKRBCFZBHPNESmcZ1xQ2R0m7GfEVIiTETb+QYLimlc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.crl
                          rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE8995FC9C395145A97456B64442AC68C0DF4EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 15:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:fa:0b:8a:bc:39:c6:03:fe:28:3d:8b:9a:b8:9b:77:2c:d4:61:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE8995FC9C395145A97456B64442AC68C0DF4EB
        Validity
            Not Before: Mar 26 14:51:14 2026 GMT
            Not After : Mar 27 15:12:14 2026 GMT
        Subject: CN=FA1E2891794F14CAC28AFE3AD862B50E1192B710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:64:d8:62:1d:e2:ee:f8:40:68:ab:68:28:cb:
                    d9:a6:f6:b9:45:95:59:c0:0f:d0:42:08:58:03:bb:
                    4e:66:40:d6:54:7e:92:5f:ef:da:00:5b:5f:43:88:
                    dd:1a:ef:8e:11:98:dd:8c:f7:41:36:2b:e4:15:e8:
                    1c:1f:c0:96:64:cd:97:91:35:81:ef:b7:ef:f4:cc:
                    f6:9b:85:07:09:31:36:e6:c2:87:d4:f6:9b:56:ae:
                    7b:87:85:3e:16:c1:9b:15:03:b0:e1:b7:50:ac:04:
                    29:1e:9c:2f:84:25:1d:74:ff:6f:e4:95:ba:4a:ab:
                    5a:d9:be:94:d5:ce:5d:1b:a3:92:2c:d8:71:68:d7:
                    d1:ef:3a:75:71:9d:f7:23:52:e8:41:15:1c:e1:02:
                    64:d0:95:c0:2e:ff:0c:66:79:48:ca:f0:be:07:af:
                    86:8f:c8:11:10:d4:9d:c8:5c:bb:c8:d0:03:f9:60:
                    64:c1:7b:48:e0:8b:fa:fb:16:78:f1:82:bc:a1:df:
                    fb:95:69:3e:f6:71:95:e8:e9:6f:e9:f0:aa:dc:b2:
                    92:6a:61:e4:76:cc:7d:3c:b7:41:61:7d:e3:5a:9e:
                    cb:a9:be:f3:52:3d:6a:66:cf:67:14:02:fe:16:99:
                    ca:c2:da:ed:db:44:3c:d6:8e:31:6c:71:38:13:7c:
                    ff:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:1E:28:91:79:4F:14:CA:C2:8A:FE:3A:D8:62:B5:0E:11:92:B7:10
            X509v3 Authority Key Identifier:
                keyid:1B:E8:99:5F:C9:C3:95:14:5A:97:45:6B:64:44:2A:C6:8C:0D:F4:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE8995FC9C395145A97456B64442AC68C0DF4EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:7d:0b:84:11:04:5f:60:2c:65:a5:f2:b6:64:bf:d9:47:55:
         82:e4:24:3c:aa:e9:a0:bd:90:18:96:f3:43:12:9c:bf:96:c1:
         f8:2f:3f:6d:e7:be:cf:09:52:84:bf:e5:be:9e:c0:f6:e0:44:
         e9:f0:32:a9:be:3e:7b:ca:91:0d:a5:33:d2:e3:4f:6c:e2:27:
         b8:42:fe:bf:77:b7:b4:bb:f7:70:56:e3:2c:66:58:00:6e:65:
         ab:42:84:c4:3f:a1:0c:33:41:1e:31:00:02:d9:38:43:6c:a0:
         bf:33:8a:99:d9:7c:c5:8f:a7:bd:e4:51:cb:33:eb:f8:93:46:
         5a:d7:24:e0:ae:6c:b8:04:f3:c1:19:67:59:7e:2a:8c:51:c9:
         7b:1d:65:e9:61:f3:2b:05:92:7c:c6:d7:a3:17:f7:3f:ba:bd:
         07:e5:bf:b6:3a:cc:ed:37:77:ea:40:9e:6f:86:a2:36:d8:84:
         d0:a3:65:68:6b:8b:a0:c6:59:f5:63:46:1a:33:69:71:d1:d9:
         db:71:45:d9:ec:f9:9b:ab:df:43:3d:e4:1c:f1:78:34:74:92:
         e4:dc:e7:46:64:93:a0:86:5a:e0:1b:1b:b6:07:ec:f6:6d:2d:
         75:3a:56:36:a0:44:b1:f4:a0:f3:ce:b1:74:a9:6b:e6:c2:22:
         7b:f9:a0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:45:20 2026 by rpki-client