Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft
File:                     9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft (raw, json)
Hash identifier:          n0JwSLDeb5+us0ryPPkgp3y5YAD0Y7it47ZzLX77d5o=
Subject key identifier:   64:93:90:4D:B2:00:24:92:58:02:0F:CD:8D:E6:0B:33:9A:AF:8C:61
Authority key identifier: 9C:96:A5:BD:45:B0:FB:8E:B4:DC:60:35:24:F9:AF:E8:41:D3:0D:5A
Certificate issuer:       /CN=9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A
Certificate serial:       76086E4FE70A0755D24B05C8421024DD5F310E8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft
Manifest number:          0350
Signing time:             Wed 25 Mar 2026 14:18:40 +0000
Manifest this update:     Wed 25 Mar 2026 14:13:40 +0000
Manifest next update:     Thu 26 Mar 2026 15:28:40 +0000
Files and hashes:         1: 3133322e3235352e31362e302f32322d3232203d3e20313938393439.roa (hash: nnDvhWK0LXRtGbYTKQP4TrycepyGAr59vAkt2tuh7mE=)
                          2: 3137372e3135352e38382e302f32312d3231203d3e20313938393439.roa (hash: PXFq4MyZ9l520M2BPNIlomttZn9u6RK0qeVMJMr6ZJs=)
                          3: 3136382e3232382e3130342e302f32322d3234203d3e20323633353836.roa (hash: rgpcqEBw/6xlqS8WEKJnjQSuNRzcCbcMWUc188ZsBrY=)
                          4: 3133382e3131372e36342e302f32322d3234203d3e20323633353836.roa (hash: fXfboTPcVmcsKoPSJSHRy8UwiwNEyGoQv+7iPwATm0A=)
                          5: 3133322e3235352e31362e302f32322d3234203d3e20323633353836.roa (hash: sTeZiCPYeUDs6CjQlF6oSnGzG0jAMwAmHwVN9MYVKrk=)
                          6: 323830343a6637343a3a2f33322d3332203d3e20313938393439.roa (hash: tDo6StoBdhhZGDterYlKws173jnJih2e0Fr5a3GykrY=)
                          7: 3137372e3135352e38382e302f32312d3234203d3e20323633353836.roa (hash: 7dK9IjQo7l30GXdriklsLv1LlGLMCS0TSARyyYDtDWM=)
                          8: 3136382e3232382e3130342e302f32322d3232203d3e20313938393439.roa (hash: 8nWkn3Sqf0AfYJvaYyNOiHbYJdg3M6r7Var0f4+1yXg=)
                          9: 3133382e3131372e36342e302f32322d3232203d3e20313938393439.roa (hash: LmGWyMO+3XZhMui31SJKmhtEFb943k+2pywheF8/mmg=)
                          10: 323830343a6637343a3a2f33322d3438203d3e20323633353836.roa (hash: 52lsjaJNpUCe2AcAV81o+4/grCzfEtC6pQ/EefJtw3A=)
                          11: 9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.crl (hash: yvY4P+glK21Txu6LBFCsPsmMIDtp5KBAbFqxLWdAUfY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.crl
                          rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 15:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:08:6e:4f:e7:0a:07:55:d2:4b:05:c8:42:10:24:dd:5f:31:0e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A
        Validity
            Not Before: Mar 25 14:13:40 2026 GMT
            Not After : Mar 26 15:28:40 2026 GMT
        Subject: CN=6493904DB200249258020FCD8DE60B339AAF8C61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:96:a6:ec:dd:f1:29:e3:fb:c7:58:fb:62:13:
                    73:89:6d:fd:a4:01:02:56:b1:f7:1e:22:3b:28:5f:
                    c2:06:1d:d5:43:a5:30:fe:5a:04:9d:d6:6a:4f:67:
                    38:03:fb:7f:12:a9:ae:8f:c6:55:85:54:b5:e6:3d:
                    0d:b5:d2:a9:60:4a:9d:30:25:6d:d1:72:6b:f1:21:
                    cf:d3:b4:53:c2:f4:19:ff:73:b0:51:5d:38:ab:ea:
                    06:ef:4e:51:b9:6d:cf:c5:db:58:c8:bb:d0:6e:81:
                    5a:03:28:ee:fd:b7:34:87:c2:bf:eb:b1:78:fd:8f:
                    55:4b:51:1f:65:46:12:10:fc:d9:08:35:ea:d1:e6:
                    65:c1:e7:91:5a:83:7d:e5:ac:76:79:e7:cd:44:f1:
                    15:ef:da:39:b7:a1:47:2b:5d:cc:e6:d1:56:e2:c4:
                    b3:5f:77:c6:37:b6:de:e6:2e:0e:e8:94:31:1a:b0:
                    58:ee:eb:19:d6:24:bf:c2:00:f5:63:11:8b:54:ee:
                    69:c5:f4:bc:4c:2d:92:66:66:26:84:29:c7:aa:72:
                    dd:f7:55:6b:7a:a2:6f:a2:20:27:58:a1:22:e0:72:
                    4c:16:78:87:89:0a:c8:71:b5:95:8a:b0:94:88:29:
                    60:0b:a6:bf:36:e7:49:57:15:68:92:1e:15:89:dc:
                    8d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:93:90:4D:B2:00:24:92:58:02:0F:CD:8D:E6:0B:33:9A:AF:8C:61
            X509v3 Authority Key Identifier:
                keyid:9C:96:A5:BD:45:B0:FB:8E:B4:DC:60:35:24:F9:AF:E8:41:D3:0D:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:48:ef:d0:63:97:7b:f7:c8:b9:0f:51:3d:a3:1c:31:0e:55:
         49:ec:2c:e5:8b:a5:24:88:d1:eb:e0:66:52:b2:ad:45:68:9c:
         c2:92:0e:2a:f3:89:ec:5b:88:30:7c:56:aa:77:07:81:67:07:
         60:b4:62:f7:fb:7c:e3:4f:38:c3:b1:b6:66:9c:0d:d4:8f:f2:
         3c:ef:49:45:db:6f:45:fb:88:7c:47:fa:9b:cc:92:ad:1b:83:
         d5:67:3e:82:04:c1:1b:2c:75:f5:71:0d:e4:fd:b7:cc:c0:44:
         4d:e1:19:bc:62:54:81:6f:aa:68:fa:67:a4:20:2b:05:80:8a:
         d9:19:7a:2d:37:36:9c:b5:e2:39:ff:00:4e:6c:8b:8b:8c:f3:
         75:cd:b6:22:01:cd:9f:8f:6a:ff:09:56:22:fa:3c:15:40:01:
         76:36:2e:04:09:02:55:e0:2b:9a:38:a9:17:67:05:17:ce:35:
         98:e4:51:80:9f:ef:13:8a:8e:3f:e7:19:ce:70:41:da:5c:1b:
         47:be:dc:1c:8b:35:52:f1:2e:1a:d7:cf:40:46:79:3d:66:d9:
         92:26:86:7e:21:38:26:26:ac:b5:b2:0d:c1:eb:68:80:e0:5b:
         3e:19:8c:13:7d:e4:07:8d:0e:0a:8b:36:78:4c:59:f3:c3:2f:
         cf:62:ad:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:14:23 2026 by rpki-client