Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft
File:                     3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft (raw, json)
Hash identifier:          QmRl4AsAOCfiR73DPr3wCXiuCdjBTbfW0Ab8+vsGVEg=
Subject key identifier:   D7:84:DC:4D:CF:CD:A8:50:82:50:1C:32:82:29:66:54:07:2E:A5:22
Authority key identifier: 3D:BE:C7:71:F5:B3:B1:E1:95:09:34:62:3A:EE:C5:51:9C:E7:1A:05
Certificate issuer:       /CN=3DBEC771F5B3B1E1950934623AEEC5519CE71A05
Certificate serial:       6DA557BFD8736764855AE0B10291068D278ED917
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft
Manifest number:          03C9
Signing time:             Thu 26 Mar 2026 14:02:48 +0000
Manifest this update:     Thu 26 Mar 2026 13:57:48 +0000
Manifest next update:     Fri 27 Mar 2026 17:55:48 +0000
Files and hashes:         1: 34352e3139312e3234302e302f32322d3234203d3e20323730323430.roa (hash: d8Gpdl8CzADmCV40oRwRoqcQ46pxhA4yx3WnEbFWHA8=)
                          2: 3DBEC771F5B3B1E1950934623AEEC5519CE71A05.crl (hash: ryHOuvTGqp1YK3CQrGVzG9bY3ZWrlzYCLOIAzFYGEPU=)
                          3: 323830343a363866383a3a2f33322d3438203d3e20323730323430.roa (hash: N6i/RtI6YRrDG2InP5FP0p99E5RYq9bqHB0OUqhZ7BQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.crl
                          rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:55:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a5:57:bf:d8:73:67:64:85:5a:e0:b1:02:91:06:8d:27:8e:d9:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DBEC771F5B3B1E1950934623AEEC5519CE71A05
        Validity
            Not Before: Mar 26 13:57:48 2026 GMT
            Not After : Mar 27 17:55:48 2026 GMT
        Subject: CN=D784DC4DCFCDA85082501C3282296654072EA522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fb:f7:d5:53:8f:e1:4d:ce:6d:c4:2d:bf:24:
                    59:63:35:84:64:fd:df:2c:8d:11:5c:98:4b:13:5b:
                    ef:66:97:eb:5f:a3:8a:90:c8:d1:73:24:56:42:48:
                    36:09:c0:bf:56:9e:08:19:ae:fc:12:4a:9b:ba:17:
                    8c:ab:7f:d4:d6:de:8f:99:90:b4:22:96:57:86:a3:
                    a4:c1:cc:8a:0d:ce:24:82:0d:e8:98:98:e9:21:ac:
                    2c:c4:ad:99:25:76:8d:f7:2f:12:c8:e3:f6:f7:a8:
                    a5:6b:4d:d8:75:67:84:6b:31:4a:d5:cb:ae:f9:ca:
                    64:7d:f0:44:34:e0:c7:70:f5:94:14:1c:b0:98:f6:
                    fd:78:2e:75:48:ca:b5:60:79:98:92:92:bc:c3:00:
                    dd:d9:68:a1:15:3f:77:1d:7c:01:8e:1f:aa:37:9e:
                    0c:3e:9b:a1:dd:b0:0b:46:c8:b4:2a:9e:90:93:8d:
                    65:11:d2:c3:ea:02:6e:17:43:5e:e3:92:5b:78:43:
                    d3:bd:6e:57:93:09:ed:e0:21:12:fe:64:89:56:5c:
                    35:fa:0a:43:09:97:ad:3e:20:4a:8c:8e:f2:5a:3a:
                    ef:6c:b2:b8:36:7d:5f:c8:40:b1:3d:2e:4f:2d:4f:
                    cb:3f:05:09:0a:a1:99:ee:c5:74:b8:7a:45:fc:10:
                    a7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:84:DC:4D:CF:CD:A8:50:82:50:1C:32:82:29:66:54:07:2E:A5:22
            X509v3 Authority Key Identifier:
                keyid:3D:BE:C7:71:F5:B3:B1:E1:95:09:34:62:3A:EE:C5:51:9C:E7:1A:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d2:ff:ec:65:fd:1d:ba:1d:72:aa:b5:7e:dc:40:c2:a3:48:
         e5:8d:2e:56:f2:4a:e6:02:e7:eb:b5:ca:38:f3:78:e2:2b:95:
         aa:67:a7:a4:40:59:f6:10:81:1a:90:41:1c:29:49:56:e4:38:
         39:ea:4a:84:a0:8f:24:80:87:d5:26:cc:5b:74:56:03:f3:02:
         7e:8d:73:02:72:17:a9:a2:14:e3:67:69:af:ed:8c:d3:86:3e:
         ad:81:df:de:29:b2:ab:a4:2d:91:e0:81:1c:86:40:7e:9e:5c:
         ca:f8:5f:80:0f:b9:00:00:5f:a0:4a:e7:5b:0d:b7:a5:98:65:
         0c:e8:d4:6d:be:cd:89:71:5d:3e:b2:e6:67:e7:0c:da:b2:34:
         17:fc:2e:cc:b4:99:c2:f7:02:7e:51:8c:6b:6a:e9:30:e9:12:
         dd:4a:76:00:fb:b5:8d:ac:8d:30:7a:18:b8:8e:0f:55:84:cf:
         4b:f1:8e:cc:ad:a9:8f:0f:78:db:5a:c2:ac:d3:66:e3:5b:1b:
         32:9c:2e:ea:9a:66:55:c1:31:d0:2b:d5:ab:08:fe:d5:d3:6d:
         fd:a7:5e:7a:f2:e7:91:6d:52:da:ed:78:21:a8:29:b2:5a:a6:
         17:2c:a6:4c:92:b9:c0:76:f5:b9:e1:e6:e8:5d:42:81:56:93:
         31:bc:e6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:59:16 2026 by rpki-client