Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/0/9901424A1C0C11086F07F736ECE94A4814F0E7CC.mft
File:                     9901424A1C0C11086F07F736ECE94A4814F0E7CC.mft (raw, json)
Hash identifier:          wBcMg2Eo/sYGOd/bRHpU6sV52HbcKi/dNTGohED2Dwk=
Subject key identifier:   53:30:36:3A:AC:F7:6C:A2:EF:A3:FE:D8:F1:37:08:76:CF:57:83:3E
Authority key identifier: 99:01:42:4A:1C:0C:11:08:6F:07:F7:36:EC:E9:4A:48:14:F0:E7:CC
Certificate issuer:       /CN=9901424A1C0C11086F07F736ECE94A4814F0E7CC
Certificate serial:       1D2E8FAC04FC5A640E96DD6C01A1DD28AABAE139
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9901424A1C0C11086F07F736ECE94A4814F0E7CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/0/9901424A1C0C11086F07F736ECE94A4814F0E7CC.mft
Manifest number:          0228
Signing time:             Wed 25 Mar 2026 15:37:56 +0000
Manifest this update:     Wed 25 Mar 2026 15:32:56 +0000
Manifest next update:     Thu 26 Mar 2026 19:16:56 +0000
Files and hashes:         1: 3137372e33392e3231362e302f32312d3234203d3e203532373935.roa (hash: vfYXS5YyZ9R7QW4TMdg0EEVh1uvORZaUwgrbJktcSdw=)
                          2: 9901424A1C0C11086F07F736ECE94A4814F0E7CC.crl (hash: IdLMboLnRHpuH7qAPYJ5Ff6Qc/xLAf6G3ILjJlax3ow=)
                          3: 323830343a323134343a3a2f33322d3438203d3e203532373935.roa (hash: vslPq2Oqmyo0N9/xY+1YupHyG3/O5dLmSIdR3bj/1Cs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/0/9901424A1C0C11086F07F736ECE94A4814F0E7CC.crl
                          rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/0/9901424A1C0C11086F07F736ECE94A4814F0E7CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9901424A1C0C11086F07F736ECE94A4814F0E7CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 19:16:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:2e:8f:ac:04:fc:5a:64:0e:96:dd:6c:01:a1:dd:28:aa:ba:e1:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9901424A1C0C11086F07F736ECE94A4814F0E7CC
        Validity
            Not Before: Mar 25 15:32:56 2026 GMT
            Not After : Mar 26 19:16:56 2026 GMT
        Subject: CN=5330363AACF76CA2EFA3FED8F1370876CF57833E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8a:91:dd:a3:3d:51:ce:9c:dd:df:f0:90:a0:
                    55:98:ce:7d:b4:fc:33:3a:06:69:64:38:d3:e2:53:
                    f2:3a:c3:02:bc:a7:c0:7c:1f:47:f4:5f:6f:f5:c2:
                    97:7e:96:24:33:8e:37:64:4a:aa:62:27:92:2c:b3:
                    7b:5a:18:09:92:cf:85:05:a5:75:03:21:4b:94:f5:
                    b7:85:e2:8e:b0:47:ae:9f:9b:1f:85:9c:e7:f6:0e:
                    20:f3:1d:e5:e5:e3:19:5c:b8:ed:fe:c8:cb:34:21:
                    ba:4d:3f:4c:fd:10:03:2d:d6:fb:1d:b4:bc:90:16:
                    fe:e5:8b:c6:5b:3b:41:f8:46:5f:61:cc:ed:9a:6f:
                    9a:a9:d7:41:2e:38:bb:33:eb:b5:7f:a6:0f:11:8d:
                    d9:6e:66:78:24:c9:24:f9:5e:54:d0:9a:d4:6d:4c:
                    0e:6a:f9:d8:f1:e7:69:4b:61:63:c2:89:17:21:c5:
                    58:70:ee:73:15:06:96:34:be:7c:29:1e:9e:fa:78:
                    f1:a9:94:06:72:1b:c9:ee:8a:0a:e3:ef:49:e4:70:
                    12:97:fd:0a:9b:8c:e2:56:07:b5:df:71:cc:ee:3c:
                    7b:8f:b5:6e:00:ee:21:e2:78:41:d3:d6:2c:87:1a:
                    d3:34:c2:d3:45:6c:06:3e:96:a8:78:03:e4:85:30:
                    44:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:30:36:3A:AC:F7:6C:A2:EF:A3:FE:D8:F1:37:08:76:CF:57:83:3E
            X509v3 Authority Key Identifier:
                keyid:99:01:42:4A:1C:0C:11:08:6F:07:F7:36:EC:E9:4A:48:14:F0:E7:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/0/9901424A1C0C11086F07F736ECE94A4814F0E7CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9901424A1C0C11086F07F736ECE94A4814F0E7CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/0/9901424A1C0C11086F07F736ECE94A4814F0E7CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:cb:76:e6:ef:b5:17:fe:c4:a8:c8:ce:dc:20:5c:9d:04:1a:
         b6:90:ac:29:49:c1:95:8b:48:32:24:cc:80:ed:33:e9:89:07:
         62:ad:53:f9:be:c0:07:b0:8a:fd:cb:06:85:b7:8a:b7:26:67:
         df:a7:14:81:27:45:ca:d2:fb:ed:cd:71:51:9f:f3:61:ba:0f:
         e1:67:c0:fa:72:c5:7f:47:dd:20:fe:2b:9e:fe:20:db:b9:a3:
         ef:33:e5:58:37:56:00:35:0e:b5:1f:6a:30:d4:89:b7:fb:66:
         1d:40:81:59:41:0a:29:00:91:f3:00:27:ee:a7:0a:6f:01:5a:
         17:83:b1:39:1a:e0:f1:94:2c:b6:21:2f:e8:cf:8a:f6:15:7c:
         d9:84:d4:0c:e7:61:5a:90:ca:ad:58:9a:f3:82:61:a8:4c:ea:
         71:1a:27:47:e2:85:9e:26:9b:64:22:66:e1:1d:ec:7b:b3:27:
         bd:6d:d3:c1:4c:64:46:d9:c6:60:6c:c6:e2:79:2e:2c:cf:95:
         fe:ea:b8:49:25:2a:2e:66:a4:5b:f9:d6:27:cf:ff:79:47:8c:
         26:d2:28:7f:d3:3e:13:fa:d8:b5:f5:fc:e5:47:fa:87:3f:63:
         60:9c:58:d1:c3:b1:af:5e:35:00:77:c6:31:17:77:9e:7d:2a:
         c5:4e:20:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:03:53 2026 by rpki-client