Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.mft
File:                     250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.mft (raw, json)
Hash identifier:          Mqs1CZKbL5I4cuJCInCNLjfvkzZJPMtHB3vZE464e4I=
Subject key identifier:   7A:18:5E:3F:80:59:A2:3C:BD:ED:A4:21:22:DF:0E:37:6E:B7:65:E0
Authority key identifier: 25:0B:0A:D6:5A:4B:78:C6:4D:D4:D5:68:A2:5D:2C:2B:B2:7C:F8:6D
Certificate issuer:       /CN=250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D
Certificate serial:       680B033AAE4F7EAB2735BD461EE8CE06E51DDB25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.mft
Manifest number:          03BF
Signing time:             Thu 26 Mar 2026 08:51:46 +0000
Manifest this update:     Thu 26 Mar 2026 08:46:46 +0000
Manifest next update:     Fri 27 Mar 2026 12:08:46 +0000
Files and hashes:         1: 3139312e3234322e3139382e302f32332d3233203d3e20323633313433.roa (hash: bwRfzRBEN6OCYcWYenNjpcybKLc7h5APupWGkAS6aoA=)
                          2: 3139312e3234322e3139362e302f32332d3233203d3e20323633313433.roa (hash: /odd+Ifzze3NEC/rWSCGt7sN+x7Rpz4jrkNYIPyVaU8=)
                          3: 3139312e3234322e3139382e302f32342d3234203d3e20323633313433.roa (hash: 6sVT7eqV7pLXyEfMGVpca8KI+26gRBUR67tMYoe04Lw=)
                          4: 3139312e3234322e3139392e302f32342d3234203d3e20323633313433.roa (hash: ICLRIdn42YVM9rUAg0ixixh/jWgfEF2JXNYvjEsU6Ys=)
                          5: 3139312e3234322e3139362e302f32342d3234203d3e20323633313433.roa (hash: NffKAMy/TpvUA4R4ZtH+5xDDRxmfqwb6YQD46PTKXhE=)
                          6: 323830343a313736343a3a2f33322d3332203d3e20323633313433.roa (hash: ACCvjw8Tn1KHpRIJYcexFhK57meHywPKxz6/M67f7SU=)
                          7: 250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl (hash: TxEkjb96ZgsV2539BpshEFdvoqQsyFyvoO2HIjmNh+M=)
                          8: 3139312e3234322e3139372e302f32342d3234203d3e20323633313433.roa (hash: 44dxEZ1Zxdgt3NPnD/LJJAtQMffT0UufNKgss74SzR0=)
                          9: 3139312e3234322e3139362e302f32322d3232203d3e20323633313433.roa (hash: LpKTUvkgIf5SJBhR8+Bw97jrFOn5ZZfRI1194xwBGFI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl
                          rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 12:08:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:0b:03:3a:ae:4f:7e:ab:27:35:bd:46:1e:e8:ce:06:e5:1d:db:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D
        Validity
            Not Before: Mar 26 08:46:46 2026 GMT
            Not After : Mar 27 12:08:46 2026 GMT
        Subject: CN=7A185E3F8059A23CBDEDA42122DF0E376EB765E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2e:30:98:2a:74:3a:85:69:89:35:00:a8:f1:
                    43:eb:1b:83:30:85:d8:8e:de:04:3a:de:96:93:bc:
                    33:21:6f:90:e1:a2:37:5a:f2:e3:90:30:26:f4:0b:
                    42:04:01:20:7d:4d:57:8d:7f:14:15:42:6c:1f:28:
                    da:22:a5:4a:4d:57:71:b3:47:ef:96:56:9a:1a:38:
                    e4:95:4f:fd:87:e7:0e:2c:07:20:68:2a:b4:18:5c:
                    e1:77:a0:e2:ba:28:2e:3d:e0:54:c2:ed:4b:22:4e:
                    f7:2d:96:a3:50:5d:24:59:6c:61:83:8d:bf:9d:b0:
                    93:a2:be:c3:2d:f2:f7:ac:b6:c4:31:ac:00:71:f6:
                    cd:b5:32:86:d4:33:78:1b:f9:d5:55:5e:b2:5b:06:
                    6c:ff:e6:c6:ee:63:48:c3:0d:5d:bc:9a:53:08:c6:
                    c9:f9:0e:72:68:38:c8:5f:e3:22:7a:fe:79:b9:f9:
                    5d:7e:cd:77:0b:83:0c:e6:8d:f4:0a:26:fd:f4:12:
                    59:bb:2f:f5:2a:78:14:09:9c:63:f1:d7:22:4f:d5:
                    99:4e:44:bd:65:f6:4e:64:3e:76:d3:04:93:f3:c1:
                    44:47:9a:dc:71:09:38:fd:f2:cc:62:e5:8d:f8:63:
                    54:aa:9c:e9:a7:7c:23:53:2f:22:78:34:20:5b:75:
                    c9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:18:5E:3F:80:59:A2:3C:BD:ED:A4:21:22:DF:0E:37:6E:B7:65:E0
            X509v3 Authority Key Identifier:
                keyid:25:0B:0A:D6:5A:4B:78:C6:4D:D4:D5:68:A2:5D:2C:2B:B2:7C:F8:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:9e:3a:39:c0:27:68:35:d7:76:68:7c:67:5d:4a:da:61:f8:
         42:06:7d:b2:9c:97:44:38:a5:ea:e6:67:0c:8d:b8:18:d2:10:
         9b:5a:ae:ac:31:39:dc:f3:15:77:c2:be:13:10:74:b8:97:de:
         9d:f4:72:b2:5c:ee:be:41:16:8b:44:7a:6e:0b:b3:5f:4f:33:
         79:83:f4:12:05:32:e8:b8:f1:a3:d7:dd:f9:fc:42:f5:65:a1:
         28:2c:46:27:b0:28:bc:12:bc:d2:71:96:42:1c:6e:fd:00:f9:
         31:8d:54:9d:d7:da:46:e6:33:34:4b:f7:b7:cc:72:ca:08:22:
         c9:be:f6:82:57:03:90:57:f1:44:19:85:fd:79:22:f7:f7:2b:
         59:08:1b:23:1f:e3:a5:05:d1:77:10:51:72:59:08:2a:a0:81:
         f1:25:57:e2:62:f6:99:d0:23:06:67:fe:c4:24:8d:9e:d7:91:
         2b:50:77:08:ad:b0:a9:63:d9:7b:88:3b:84:a4:53:d8:fe:31:
         7d:49:f2:a7:e6:95:e6:27:e2:f5:d1:6b:12:b9:64:da:4d:16:
         f5:39:e5:38:fb:71:e1:6a:e7:c9:97:57:65:93:f9:6e:2b:40:
         09:23:a3:fb:76:b4:4a:4a:16:5b:55:09:c0:d6:c6:c9:37:99:
         f8:00:29:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:47:43 2026 by rpki-client