Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/234C60379F9378C4E127C3D54D29A62E7B997221.mft
File:                     234C60379F9378C4E127C3D54D29A62E7B997221.mft (raw, json)
Hash identifier:          IPse9biEcZ4OQKGt/O4Ck4lMvPcfPDDbUPpRG7eLXNg=
Subject key identifier:   FF:A8:82:5E:E3:4E:86:41:C6:97:F5:AD:69:42:46:1D:F9:CE:42:D8
Authority key identifier: 23:4C:60:37:9F:93:78:C4:E1:27:C3:D5:4D:29:A6:2E:7B:99:72:21
Certificate issuer:       /CN=234C60379F9378C4E127C3D54D29A62E7B997221
Certificate serial:       6CD3490F92F00172F6620C1375D62A07C3E44636
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/234C60379F9378C4E127C3D54D29A62E7B997221.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/234C60379F9378C4E127C3D54D29A62E7B997221.mft
Manifest number:          4E
Signing time:             Wed 25 Mar 2026 14:14:58 +0000
Manifest this update:     Wed 25 Mar 2026 14:09:58 +0000
Manifest next update:     Thu 26 Mar 2026 15:53:58 +0000
Files and hashes:         1: 3139312e362e3136372e302f32342d3234203d3e20323636313936.roa (hash: DcpzxVfdu224aSUW+KYUYsiE3yVLrKQKsGB8gqS96rY=)
                          2: 34352e362e3136312e302f32342d3234203d3e20323636313936.roa (hash: lzdosAhgnWTTP1IA7sQm6TsGQk2FmPElJQsROVmH5m0=)
                          3: 34352e362e3136322e302f32342d3234203d3e20323636313936.roa (hash: Jm5Xwvn0nwGOSA6t1xNohRf6vK3TTOMMntH0aB7IaUc=)
                          4: 3139312e362e3136342e302f32342d3234203d3e20323636313936.roa (hash: dMRKwRr04ry0lpXJjM7GGX5Ko+ZjW+AYDcR73lsFM94=)
                          5: 34352e362e3136302e302f32342d3234203d3e20323636313936.roa (hash: l9q5DNyRqrImXk6aVCEXpAeClZO0Gzltom+gjVAFD3g=)
                          6: 3139312e362e3136352e302f32342d3234203d3e20323636313936.roa (hash: 1q1tplSMXWd4d/s3xolfxPXWrYvP6DPXcA6NRFBvW8Q=)
                          7: 323830343a336333343a3a2f33322d3332203d3e20323636313936.roa (hash: xNNYyZIYIfCRc9ephZTWllP1/zc5K39iUge6pfmVnj0=)
                          8: 234C60379F9378C4E127C3D54D29A62E7B997221.crl (hash: b6IHseJKdDTIWq1sZ6TwIfAqNZVYCBkaCeC5c/XhQhk=)
                          9: 323830343a336333343a3530303a3a2f34382d3438203d3e20323636313936.roa (hash: +q3cBzv9ah4LjoIZGEiSavYgLm+YZUrAJpD5FEJhSfE=)
                          10: 3139312e362e3136362e302f32342d3234203d3e20323636313936.roa (hash: JcqJ1JUCwJUTVM4RA0XdQF5QTj31IkdcWEykHOwVraI=)
                          11: 34352e362e3136332e302f32342d3234203d3e20323636313936.roa (hash: g35Sjh28sxgZX6f/xrgWjyPnLdYRLssWItWv8LOQOUk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/234C60379F9378C4E127C3D54D29A62E7B997221.crl
                          rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/234C60379F9378C4E127C3D54D29A62E7B997221.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/234C60379F9378C4E127C3D54D29A62E7B997221.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 15:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d3:49:0f:92:f0:01:72:f6:62:0c:13:75:d6:2a:07:c3:e4:46:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234C60379F9378C4E127C3D54D29A62E7B997221
        Validity
            Not Before: Mar 25 14:09:58 2026 GMT
            Not After : Mar 26 15:53:58 2026 GMT
        Subject: CN=FFA8825EE34E8641C697F5AD6942461DF9CE42D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0e:a5:d4:f7:a2:f8:99:e3:f3:8d:aa:e5:f4:
                    d3:37:b7:df:7b:da:1e:aa:9c:26:e9:aa:0d:3d:20:
                    ae:04:87:c9:61:d0:36:7e:ba:34:ef:06:d3:58:02:
                    33:8f:44:99:bc:06:3e:b8:f3:3d:3c:b6:88:2a:87:
                    0c:c4:5e:b2:6e:06:c1:5c:b0:7b:1f:1f:31:a5:39:
                    3d:c0:1b:de:ac:cb:bd:9a:28:55:ee:69:46:98:97:
                    e4:03:e9:61:1b:68:4a:b2:19:03:3b:0e:f4:7a:0c:
                    59:70:3c:73:18:bb:f9:ee:b0:50:70:e9:71:31:c2:
                    42:5b:7f:66:93:8a:81:77:4b:54:f0:aa:82:a3:6f:
                    59:d6:7d:0f:20:61:ac:1a:0b:ee:c0:b3:50:35:a2:
                    46:af:6d:9a:c2:8b:60:fa:63:47:e7:4a:97:96:27:
                    95:6c:53:ac:c0:de:60:95:9e:c4:51:64:ac:96:e4:
                    21:48:5b:a7:1e:9d:13:93:eb:60:7c:81:f2:1d:3e:
                    a3:c3:36:f4:b6:d1:00:f9:12:0b:02:15:80:18:cd:
                    02:51:cf:d5:ad:f8:30:32:e6:54:01:34:88:d9:6f:
                    a5:4b:ad:bf:ec:b1:ad:b2:fa:57:42:99:ef:47:ab:
                    c7:d6:b4:3b:53:7b:59:f6:75:ec:32:35:5e:33:5c:
                    37:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A8:82:5E:E3:4E:86:41:C6:97:F5:AD:69:42:46:1D:F9:CE:42:D8
            X509v3 Authority Key Identifier:
                keyid:23:4C:60:37:9F:93:78:C4:E1:27:C3:D5:4D:29:A6:2E:7B:99:72:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/234C60379F9378C4E127C3D54D29A62E7B997221.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/234C60379F9378C4E127C3D54D29A62E7B997221.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/234C60379F9378C4E127C3D54D29A62E7B997221.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:83:83:de:0d:06:5b:0f:4d:02:82:a0:5e:86:b1:00:95:23:
         e8:a9:21:ae:87:ba:2d:04:e7:45:91:de:3d:88:f9:0a:13:1f:
         ad:01:15:e0:33:a2:f7:46:60:f5:40:47:84:9b:20:33:f7:9b:
         a7:1a:2b:d1:0c:da:04:e8:52:88:77:9e:cf:d9:4b:1c:af:1f:
         18:8c:59:f3:e5:bb:66:95:e6:10:b2:16:60:4b:94:e0:38:f8:
         b0:74:d1:7f:43:1d:83:fc:96:c8:c6:54:bb:4a:ac:ee:a8:4a:
         43:fa:2a:71:b4:33:a9:0a:45:5b:6f:c1:ce:0a:da:e0:06:87:
         e3:50:0a:ce:3c:4a:71:c2:ea:e2:7b:65:44:96:6a:0e:d2:00:
         91:b6:b0:fd:3e:3c:a4:2f:8c:43:e6:56:5b:f9:a9:1a:48:67:
         83:ad:1d:38:2e:41:8d:c5:a1:43:2a:7f:5a:90:f7:52:32:a6:
         aa:ac:29:fc:34:91:b1:6b:09:23:4e:54:c6:c2:2b:9e:12:27:
         d0:96:d0:f0:59:9f:6b:f2:64:ca:fb:69:de:7a:5d:b8:1b:20:
         78:6e:7b:06:96:82:ab:0f:f4:a0:3a:41:fa:1d:f0:8b:24:f3:
         dd:06:e0:53:cf:d4:22:50:7f:24:82:a8:59:f0:58:ce:04:5a:
         b3:34:47:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:58:30 2026 by rpki-client