Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft
File:                     0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft (raw, json)
Hash identifier:          LI47speby78mS+oRHj6h+VaHMqElCe8T+Qgcff1ali8=
Subject key identifier:   82:31:4D:10:75:F6:B1:8A:25:27:1D:8F:1F:43:FC:8A:29:9B:6F:03
Authority key identifier: 0A:5B:FC:44:9B:C0:AE:94:F2:60:C5:0A:31:DC:BF:BC:31:83:91:E8
Certificate issuer:       /CN=0A5BFC449BC0AE94F260C50A31DCBFBC318391E8
Certificate serial:       5AA056D1FDCC48C9FAD677327F381EC0F32D363E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft
Manifest number:          03C4
Signing time:             Thu 26 Mar 2026 12:35:46 +0000
Manifest this update:     Thu 26 Mar 2026 12:30:46 +0000
Manifest next update:     Fri 27 Mar 2026 13:10:46 +0000
Files and hashes:         1: 3134332e302e3136342e302f32322d3234203d3e20323634303134.roa (hash: CvPt6i/FKK2bJ2KHKaQ02WILQwDUCCrNQlOgIBapYng=)
                          2: 0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl (hash: QqHvgjPIosDNqpOXBoXCObgyVN2uhAFxPO38JInpbrs=)
                          3: 323830343a323936633a3a2f33322d3438203d3e20323634303134.roa (hash: 2dadztaER+9gyBL5gmUFWVyA0Rshw1nGZx22j2sUlE8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl
                          rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 13:10:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a0:56:d1:fd:cc:48:c9:fa:d6:77:32:7f:38:1e:c0:f3:2d:36:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5BFC449BC0AE94F260C50A31DCBFBC318391E8
        Validity
            Not Before: Mar 26 12:30:46 2026 GMT
            Not After : Mar 27 13:10:46 2026 GMT
        Subject: CN=82314D1075F6B18A25271D8F1F43FC8A299B6F03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d9:16:a7:d1:5d:be:59:53:38:9e:d2:c7:10:
                    72:24:76:bc:9e:d6:68:e0:d2:fa:5f:86:8f:32:ec:
                    69:26:35:2b:36:e9:07:19:5d:dc:e9:fb:8b:20:a0:
                    b4:99:3e:af:1d:76:b0:87:25:17:76:f6:f1:28:6c:
                    17:45:98:b1:f8:17:dd:f1:1a:a7:89:2d:fc:02:f8:
                    64:c0:24:fe:57:bb:1e:55:81:8d:22:15:8a:25:0e:
                    fc:89:24:b9:84:2e:f6:42:13:18:8d:9e:77:9d:35:
                    0f:42:41:50:96:33:26:fe:03:ba:00:70:24:60:67:
                    0d:f3:c8:06:33:f4:28:b9:c2:3c:bb:52:58:9c:ba:
                    8c:81:0f:f9:cb:e7:33:30:2f:fe:3d:40:6d:6d:5d:
                    cc:cd:e8:14:50:d3:11:50:5d:13:c8:e2:3c:d3:a2:
                    d1:2c:bc:7c:22:a6:5b:35:a8:0f:76:fb:76:0a:bc:
                    be:0a:52:8f:b1:85:93:b9:04:dc:84:e4:7c:ae:8b:
                    70:5d:f3:58:66:fa:e5:ff:1f:3c:92:3a:ae:6d:69:
                    1a:fa:96:c4:17:18:cf:9c:15:5d:ca:93:75:f7:c3:
                    f9:3f:72:94:b5:ec:f2:7f:ca:c8:c7:cc:60:fc:2d:
                    0f:f2:7b:90:da:42:3b:39:15:64:5a:e2:a0:6d:b7:
                    4f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:31:4D:10:75:F6:B1:8A:25:27:1D:8F:1F:43:FC:8A:29:9B:6F:03
            X509v3 Authority Key Identifier:
                keyid:0A:5B:FC:44:9B:C0:AE:94:F2:60:C5:0A:31:DC:BF:BC:31:83:91:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:6c:5a:96:ae:09:ce:5f:27:83:92:75:d0:c4:c0:00:6e:8f:
         bc:26:0a:48:c4:1d:18:ba:38:fa:d8:62:e3:77:41:8e:f6:62:
         ed:4f:79:38:46:93:c3:e6:62:91:6c:42:2d:db:87:ee:19:66:
         a0:ae:3a:72:c6:46:92:74:96:4f:d1:e8:57:4f:56:40:e1:64:
         d4:5d:ff:94:4b:47:3a:26:41:57:93:d2:02:fd:9a:fa:f1:59:
         c7:fe:d9:bc:cb:3e:73:b7:27:3d:23:6e:d9:37:2a:88:8e:67:
         3d:b5:79:39:44:99:bb:ce:6b:d3:62:e7:aa:ec:03:9e:ef:4f:
         fa:3f:13:a0:06:fc:32:1b:4d:10:26:cb:67:bf:4f:b4:17:fb:
         3c:5f:06:f7:76:cc:8c:46:0f:7c:7e:9f:49:6f:30:b5:4a:90:
         de:9a:02:7f:91:6f:3d:b8:fc:26:21:1d:01:16:93:d9:37:b9:
         16:b6:c7:38:ed:23:6f:9c:5c:5a:34:61:ea:b9:8e:73:61:1d:
         d7:16:e6:c9:78:cc:74:d7:bf:b1:3e:77:4e:7b:eb:69:da:4c:
         e8:aa:bd:48:95:7f:64:d3:06:f7:3d:4b:a4:fe:d5:1e:a3:ae:
         9b:5b:00:1c:41:73:9e:21:16:57:84:3f:08:ac:49:eb:c1:00:
         a3:26:ad:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:59:01 2026 by rpki-client