Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.mft
File:                     090356FA0F721D9A2449A75F672A23DBF91DA79D.mft (raw, json)
Hash identifier:          ippB7Ezy9lvNBgAQ8W3GbCNnpECWNbTAcxgIvsO3uaM=
Subject key identifier:   2F:1F:47:70:FB:19:9C:17:76:49:3E:AA:B4:85:FB:22:9E:DC:BE:1C
Authority key identifier: 09:03:56:FA:0F:72:1D:9A:24:49:A7:5F:67:2A:23:DB:F9:1D:A7:9D
Certificate issuer:       /CN=090356FA0F721D9A2449A75F672A23DBF91DA79D
Certificate serial:       2121BC55199ABAAA77077B260A683E8A07931915
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090356FA0F721D9A2449A75F672A23DBF91DA79D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.mft
Manifest number:          6C
Signing time:             Thu 26 Mar 2026 16:22:54 +0000
Manifest this update:     Thu 26 Mar 2026 16:17:54 +0000
Manifest next update:     Fri 27 Mar 2026 18:05:54 +0000
Files and hashes:         1: 090356FA0F721D9A2449A75F672A23DBF91DA79D.crl (hash: zJvBhR07TU0ePIc1me6GgOVB4j+AMabDo7tW2Wcewus=)
                          2: 323830343a313964633a3a2f33322d3332203d3e203631383233.roa (hash: cyI9TnrAXG4EH1ifG0QJQ9pHFHDG0QDBoC7kzrFfLWo=)
                          3: 3230312e3232322e32342e302f32342d3234203d3e203631383233.roa (hash: MFj2Y8vN35UbFz/c4cSx/WpIcJn650ZPq1l2J6Fv7LU=)
                          4: 3230312e3232322e32372e302f32342d3234203d3e203631383233.roa (hash: 8yd6vMry85HJiPM7/L+kf1JkW05+VgR6cDI6fBW4j5Y=)
                          5: 3230312e3232322e32362e302f32342d3234203d3e203631383233.roa (hash: IuE9qEXXl1d2+xJJVVo1437qrmnar46Ql035+T2MD9w=)
                          6: 3230312e3232322e32352e302f32342d3234203d3e203631383233.roa (hash: UH+oFoq2yann0hghXVWtajLFKBb7Ef5WZDDqQ2Pw1dY=)
                          7: 3230312e3232322e32342e302f32322d3232203d3e203631383233.roa (hash: 98gQk7tfGUs9pRvDwbcZtGSi6xreh7ZTsgIuv3pcGUk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.crl
                          rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090356FA0F721D9A2449A75F672A23DBF91DA79D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 18:05:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:21:bc:55:19:9a:ba:aa:77:07:7b:26:0a:68:3e:8a:07:93:19:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090356FA0F721D9A2449A75F672A23DBF91DA79D
        Validity
            Not Before: Mar 26 16:17:54 2026 GMT
            Not After : Mar 27 18:05:54 2026 GMT
        Subject: CN=2F1F4770FB199C1776493EAAB485FB229EDCBE1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:81:5d:e7:55:b3:ff:33:fd:98:9f:3e:fd:ab:
                    28:9b:a3:91:b8:d5:3d:9c:3e:e6:14:61:bb:5a:45:
                    6a:94:cb:b0:a0:fc:05:d6:2e:37:fd:b6:ec:af:81:
                    c8:a4:f6:b7:fc:e1:ff:21:0f:82:c5:8b:a4:c8:8b:
                    eb:ef:e9:fb:5c:4f:27:82:7d:76:97:0d:04:0b:4c:
                    12:c0:b9:5f:4c:a1:5b:27:de:25:3d:67:a9:cd:94:
                    bf:d3:ca:c9:f6:d9:03:ce:ec:f4:9c:5e:1e:ed:9e:
                    6b:53:6c:1e:b6:b4:0a:9c:dc:4c:68:89:5f:80:d1:
                    ec:5e:8f:45:3a:95:d5:c8:b0:9b:d1:e4:83:8e:e9:
                    16:bd:5d:49:34:34:6c:d7:7b:2e:c8:da:ca:3a:dd:
                    bb:0e:5f:76:7b:3a:f5:8e:50:70:f5:b3:4a:b5:c6:
                    42:70:d3:18:85:bf:57:fa:95:14:18:59:6e:a3:63:
                    41:48:3d:b6:f9:1d:a9:5f:81:82:45:42:e2:09:50:
                    40:e7:2c:e7:6a:b6:19:3d:26:3d:8d:68:ee:25:83:
                    24:89:cc:01:53:92:46:ef:73:83:18:97:c8:05:61:
                    15:bf:b9:53:7f:63:b2:9b:fe:49:a4:9b:0d:8c:5c:
                    30:ca:ee:30:04:37:b7:63:91:f9:74:01:ba:1b:77:
                    68:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1F:47:70:FB:19:9C:17:76:49:3E:AA:B4:85:FB:22:9E:DC:BE:1C
            X509v3 Authority Key Identifier:
                keyid:09:03:56:FA:0F:72:1D:9A:24:49:A7:5F:67:2A:23:DB:F9:1D:A7:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090356FA0F721D9A2449A75F672A23DBF91DA79D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:df:60:34:8d:e9:f0:e9:c8:45:88:76:27:42:df:34:be:de:
         d6:93:24:83:ad:63:41:42:e7:d3:54:6a:27:db:cd:41:30:8d:
         8f:1c:2b:77:e5:4f:03:8b:a5:79:28:75:9c:d2:71:52:be:f0:
         79:ea:e1:6c:07:ce:95:1a:32:40:a4:41:f8:d3:32:a0:07:ff:
         ea:09:dc:8a:92:80:ef:cb:6e:2e:f4:e7:8e:2d:5d:5e:d5:7e:
         5e:28:bc:9f:5d:57:cf:10:49:62:2b:17:79:07:19:d3:d0:2d:
         06:5e:b0:21:2c:41:ee:8b:a2:f0:00:24:40:93:b3:ac:72:fb:
         5e:75:e1:5d:cc:bb:88:c8:ad:71:52:a7:2d:8d:51:37:6d:f0:
         b8:6d:1b:e3:cd:4f:dc:96:67:05:43:e1:3e:94:9c:c7:8a:1f:
         87:2b:3d:95:f4:58:49:b5:79:f9:c4:29:b7:cd:cb:7e:1a:24:
         bf:26:8b:57:ca:58:d1:c8:e9:36:85:0b:0c:1f:cd:a2:e8:46:
         4b:ff:b8:80:40:b8:e7:a0:03:bc:6e:89:a1:9d:b8:e7:5f:6a:
         bc:e1:a5:6e:62:19:cf:09:4e:46:b8:12:7b:ca:15:06:9b:d2:
         75:09:ae:58:68:6c:6e:f7:e0:fa:16:70:13:6f:e1:4d:ba:11:
         28:1b:73:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:06:20 2026 by rpki-client