Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
File:                     4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft (raw, json)
Hash identifier:          YcBNJPZsPSqL+lscs2XNX50KULdqjnwPd48DZ7Ww5j4=
Subject key identifier:   54:BF:C7:60:C3:21:05:43:FD:70:D8:AB:A5:BD:53:44:E4:0D:EF:74
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Certificate issuer:       /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial:       7F45BF2388136E8BD58E7899D7D769EA59562E3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
Manifest number:          03C3
Signing time:             Thu 26 Mar 2026 09:58:59 +0000
Manifest this update:     Thu 26 Mar 2026 09:53:59 +0000
Manifest next update:     Fri 27 Mar 2026 11:11:59 +0000
Files and hashes:         1: 3133382e39392e3234382e302f32322d3234203d3e203238313330.roa (hash: 9Rp2TO7BTKMKfkwKNLeNyOVcWIkqKv52BNlNVld9FO0=)
                          2: 3138362e3235312e3134382e302f32322d3234203d3e203238313330.roa (hash: q6WyP+0wXnvtz8TBjO6FuJlIl6JE0dp4RvztsVXxGLQ=)
                          3: 3138362e3235312e3134342e302f32322d3234203d3e20313938393439.roa (hash: TI+xbECcd0ssnEUdmmE4CRRNLGYoyZJTQxH3bQZJABA=)
                          4: 3138362e3235312e3134342e302f32322d3234203d3e203238313330.roa (hash: omx3Go0xEFfn9d46a5ZS7lvGySxA23rM99rpi91rI/U=)
                          5: 3137302e3135302e3136342e302f32322d3234203d3e20313938393439.roa (hash: UAFAwG0hGkP1SBdxAkjQd4ojfnY8SzZy73NlOzMeo7k=)
                          6: 3133382e39392e3234382e302f32322d3234203d3e20313938393439.roa (hash: JFgOAfaCkDvhO3DvTS0Qbkh4hqxcjc4Mkh93PAg9Yak=)
                          7: 3134332e3230382e34302e302f32322d3234203d3e20313938393439.roa (hash: 4Qi0aLvcavk+XvJgKsPFCEwgWnot/utUq1Fz3BuRK7k=)
                          8: 323830343a3262383a3a2f33322d3438203d3e203238313330.roa (hash: FI2pqfToMX8taegBaUKnnWSZoRkgfYYeD0Wm3SgQ2UI=)
                          9: 3138372e31392e39362e302f32302d3234203d3e20313938393439.roa (hash: Ujx4iveKIGyW/dLSj5iqqN7kW9U1qM2i08ZFZz1KnbQ=)
                          10: 4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl (hash: FgkkWONJ1JNWiNt3SG1Ng5gcb1UJnDUwa9SA08vPscE=)
                          11: 3138372e31392e39362e302f32302d3234203d3e203238313330.roa (hash: FdHO8n/Cw9Tf5Q6J4PKxz18H6a7RJMaFmJr1S1UfhUA=)
                          12: 3138362e3232372e39362e302f32302d3234203d3e203238313330.roa (hash: 5SPcMRkHPjy1RvcG/dN0d8mdz4GS720G0SsAuaz4x1E=)
                          13: 3137302e3135302e3136342e302f32322d3234203d3e203238313330.roa (hash: 0hzauCV0wT/MtZnP9UvS6g3zV0qIZFtSS0+M16KdCig=)
                          14: 3138362e3232372e39362e302f32302d3234203d3e20313938393439.roa (hash: QxqX7sUYkj9/cMLOk2t81C5D5tq3JmGCVhoBTqOLW24=)
                          15: 3138362e3235312e3134382e302f32322d3234203d3e20313938393439.roa (hash: vm/gPaGTpZPD9kYfzKAuvj9V92Tmc55qNWhLrxuEQlw=)
                          16: 3134332e3230382e34302e302f32322d3234203d3e203238313330.roa (hash: OEu9n/LrBCkl9Fru/02oN45kLw6bxKnNlcp4REf0G9E=)
                          17: 323830343a3163633a3a2f33322d3438203d3e203238313330.roa (hash: Kne6QM8DQbSR/zgmLOoLRyaupfqmCeV0gbVUI5cBqso=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
                          rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 11:11:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:45:bf:23:88:13:6e:8b:d5:8e:78:99:d7:d7:69:ea:59:56:2e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
        Validity
            Not Before: Mar 26 09:53:59 2026 GMT
            Not After : Mar 27 11:11:59 2026 GMT
        Subject: CN=54BFC760C3210543FD70D8ABA5BD5344E40DEF74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:dd:e5:52:28:51:9d:9a:33:f1:4d:9b:70:9d:
                    b8:19:c0:2c:8e:10:98:18:1a:9e:d9:c9:58:a5:88:
                    4e:ea:2a:c9:17:bb:32:ad:2c:c1:25:b6:96:6a:f4:
                    cf:dd:c1:15:67:5e:a7:2f:3c:80:95:b1:ef:47:7d:
                    38:21:06:8a:88:a2:eb:20:26:82:f6:8c:1d:64:44:
                    65:83:13:a5:46:d7:e4:76:6d:e8:2f:48:eb:5d:6d:
                    85:53:00:90:f2:7e:5a:3d:8e:2d:69:0a:f4:44:42:
                    62:55:9f:e1:75:35:ca:1d:f6:38:93:33:11:f0:c6:
                    e9:93:36:ad:31:22:42:f8:8b:b6:88:8c:e8:9c:0e:
                    14:a5:d5:5f:48:56:0f:5b:53:f6:dc:8c:2f:3c:68:
                    76:c6:3c:6e:56:fa:6a:60:dd:c0:91:6f:63:04:b4:
                    90:80:e1:d2:73:1b:66:73:77:1c:0c:73:67:fc:ab:
                    55:cb:7a:e5:2b:9d:81:17:ab:8f:34:54:68:81:a4:
                    f4:30:b4:ad:93:7c:bc:bd:9f:ac:4c:f4:c4:71:87:
                    e5:56:96:48:da:93:b6:1e:e1:51:0c:85:17:72:ef:
                    83:9a:76:54:f8:e2:8f:8e:e2:83:10:16:13:1b:f1:
                    84:46:07:e9:51:6d:6a:4d:1f:57:df:50:1a:cb:dc:
                    75:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:BF:C7:60:C3:21:05:43:FD:70:D8:AB:A5:BD:53:44:E4:0D:EF:74
            X509v3 Authority Key Identifier:
                keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:f5:4c:e1:63:e6:32:b8:0c:3c:6d:06:52:20:0f:15:67:a6:
         16:c0:7c:6c:76:c2:f6:68:61:05:65:bc:3e:f0:06:35:68:c3:
         af:8d:c1:ba:bb:84:4d:a8:40:02:7e:8a:0f:11:2a:0e:aa:50:
         9f:bf:a6:e7:5c:b5:4a:36:27:46:11:2b:37:20:0b:43:31:f4:
         78:19:23:19:bf:c0:24:88:b1:c0:4c:40:23:1b:9f:82:41:4c:
         19:60:9a:cf:49:c9:1e:82:29:6a:94:26:82:6b:80:e7:e5:5a:
         39:15:af:d1:fc:81:9f:06:d3:b7:b6:ea:af:ce:3a:e6:87:7b:
         36:68:81:bc:d9:2d:8c:af:fe:52:fb:d9:92:59:41:81:08:7d:
         e0:6c:15:fc:cd:53:1c:1a:be:51:64:ee:d0:74:e5:13:5f:88:
         53:ca:82:3c:80:c8:95:98:87:bf:d1:a8:55:30:37:f8:4e:06:
         fe:e3:c9:0e:e7:9f:40:a3:b1:56:c0:45:00:47:32:f8:ba:79:
         50:b6:64:27:24:53:ed:e9:fd:e5:c6:54:ad:52:49:18:0a:dc:
         5b:49:7d:52:c5:da:14:ff:6d:a0:e8:c8:9b:9e:1a:3d:4f:37:
         6d:22:18:7e:9d:0a:a2:c6:71:20:4a:54:47:18:c9:52:bf:74:
         7c:46:a7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:18:03 2026 by rpki-client