Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/98BC0C92855F76759D28CD06035C9FF965BDF09F.mft
File:                     98BC0C92855F76759D28CD06035C9FF965BDF09F.mft (raw, json)
Hash identifier:          /lCF9yGv81jcs+mZxR4v0D25Wb21C4YUiL/jGkclEbc=
Subject key identifier:   0F:07:E5:19:FD:54:EF:09:B1:A8:DA:AA:B7:A1:82:34:BB:C0:19:BD
Authority key identifier: 98:BC:0C:92:85:5F:76:75:9D:28:CD:06:03:5C:9F:F9:65:BD:F0:9F
Certificate issuer:       /CN=98BC0C92855F76759D28CD06035C9FF965BDF09F
Certificate serial:       47BD66BDBC78DD6D16BA100E78C9799761C1F84F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98BC0C92855F76759D28CD06035C9FF965BDF09F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/98BC0C92855F76759D28CD06035C9FF965BDF09F.mft
Manifest number:          02A3
Signing time:             Thu 26 Mar 2026 06:46:13 +0000
Manifest this update:     Thu 26 Mar 2026 06:41:13 +0000
Manifest next update:     Fri 27 Mar 2026 06:48:13 +0000
Files and hashes:         1: 34352e3137322e3131322e302f32322d3234203d3e20323638373733.roa (hash: t+XjGLzXBnXntotjRrTq9Lj8Z53+sgV/xlqOeTYWMzk=)
                          2: 98BC0C92855F76759D28CD06035C9FF965BDF09F.crl (hash: 1lapR1S5ipqH//qg2T/MHo64X806ucolh7QE2WBc5co=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/98BC0C92855F76759D28CD06035C9FF965BDF09F.crl
                          rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/98BC0C92855F76759D28CD06035C9FF965BDF09F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98BC0C92855F76759D28CD06035C9FF965BDF09F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 06:48:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bd:66:bd:bc:78:dd:6d:16:ba:10:0e:78:c9:79:97:61:c1:f8:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98BC0C92855F76759D28CD06035C9FF965BDF09F
        Validity
            Not Before: Mar 26 06:41:13 2026 GMT
            Not After : Mar 27 06:48:13 2026 GMT
        Subject: CN=0F07E519FD54EF09B1A8DAAAB7A18234BBC019BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9f:22:88:a4:97:3d:66:fc:d4:90:5d:ba:64:
                    de:12:a1:6a:bf:db:29:d1:1e:a2:34:55:25:94:c0:
                    4a:67:98:7c:b5:cb:64:e2:a3:53:69:68:a8:58:3a:
                    7c:ee:33:ed:62:99:ed:74:5d:0a:28:97:f9:39:cd:
                    64:4f:e9:a0:ed:5e:ea:a2:2a:45:55:c9:ea:d1:1c:
                    81:db:f7:50:52:55:d9:8a:c6:cb:3d:c2:75:33:63:
                    b0:56:3a:49:b4:ae:f5:ba:20:f6:d3:1a:c9:31:e9:
                    2b:4b:0c:56:81:90:3d:66:b4:c9:8d:2f:01:74:db:
                    59:4e:ea:65:0a:72:1b:36:55:26:af:59:c9:20:1d:
                    67:66:87:9d:a6:9f:50:bc:3e:61:dc:ba:13:75:0a:
                    81:44:05:e3:ee:23:ee:9a:48:fd:fd:5a:be:da:1b:
                    27:2b:aa:85:ad:96:62:61:f6:e3:82:c1:52:8e:34:
                    77:aa:87:14:24:7c:c2:92:83:20:e7:70:f6:4c:e8:
                    cc:66:54:3b:3a:e4:6d:de:98:2e:53:ab:2a:68:e1:
                    c2:c5:54:6e:72:e9:5f:ad:55:34:91:55:8e:38:68:
                    8c:d9:da:5b:41:ff:c6:96:f4:49:7b:05:10:09:ae:
                    1c:7b:23:c5:6e:ba:25:e7:c7:b3:07:d3:a1:99:84:
                    a4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:07:E5:19:FD:54:EF:09:B1:A8:DA:AA:B7:A1:82:34:BB:C0:19:BD
            X509v3 Authority Key Identifier:
                keyid:98:BC:0C:92:85:5F:76:75:9D:28:CD:06:03:5C:9F:F9:65:BD:F0:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/98BC0C92855F76759D28CD06035C9FF965BDF09F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98BC0C92855F76759D28CD06035C9FF965BDF09F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/98BC0C92855F76759D28CD06035C9FF965BDF09F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:18:c4:fe:cf:a6:52:10:25:cb:6e:4c:91:1a:0a:23:30:06:
         3a:20:cd:73:e5:1c:b7:51:7d:80:48:cd:21:74:39:68:16:82:
         1b:a4:27:1c:e2:a6:f2:54:1d:49:c8:30:c9:b2:0a:0c:04:b0:
         3b:a5:46:c2:f3:3e:5e:57:25:bb:d6:42:dc:50:7c:6a:11:a2:
         20:3b:36:db:d4:83:47:b6:7c:57:2e:52:85:46:95:d6:8b:63:
         2b:9e:88:ac:6b:4d:c1:d4:06:a9:93:b5:43:45:43:3c:aa:ee:
         de:e8:2a:10:be:8d:bd:09:14:eb:20:87:ef:d2:4f:b7:ee:b6:
         f4:de:ef:30:9e:74:af:d3:50:5c:40:47:86:da:d9:61:9b:93:
         20:2d:44:ca:dc:fc:82:b7:b1:0d:6e:40:a7:31:c9:9c:ec:9d:
         d6:4f:89:6f:44:ad:25:60:b3:f0:43:bc:32:ea:c4:a4:ce:c1:
         b0:93:b0:cd:4a:a1:15:2a:f6:b7:c0:42:a0:12:04:f7:bb:bf:
         1d:11:61:0f:0a:91:c3:d4:5d:ac:ed:a8:65:a7:0d:bb:2f:fd:
         bc:3e:8d:0b:26:dd:bd:ed:d7:94:e9:fa:65:97:bc:7e:42:4d:
         23:4f:99:af:dc:5e:25:ec:14:cc:48:18:81:4e:44:41:c3:d0:
         5d:8f:a4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:44:45 2026 by rpki-client