Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/0/0F2F91EA6176E9C76467E71DE1A7A0A2C09320AA.mft
File:                     0F2F91EA6176E9C76467E71DE1A7A0A2C09320AA.mft (raw, json)
Hash identifier:          9Rt0NQowlIztLXPwiW/aMPtjeuZ2SIwRVlKHpY3XpiQ=
Subject key identifier:   F2:92:B4:7E:E4:55:8F:13:D3:88:D6:FB:2B:D8:27:94:C7:51:44:DA
Authority key identifier: 0F:2F:91:EA:61:76:E9:C7:64:67:E7:1D:E1:A7:A0:A2:C0:93:20:AA
Certificate issuer:       /CN=0F2F91EA6176E9C76467E71DE1A7A0A2C09320AA
Certificate serial:       0BB0F49D73AC71BDF0277942B6DBB2DACD943C1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F2F91EA6176E9C76467E71DE1A7A0A2C09320AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/0/0F2F91EA6176E9C76467E71DE1A7A0A2C09320AA.mft
Manifest number:          3A
Signing time:             Tue 07 Apr 2026 15:27:03 +0000
Manifest this update:     Tue 07 Apr 2026 15:22:03 +0000
Manifest next update:     Wed 08 Apr 2026 19:10:03 +0000
Files and hashes:         1: 3137302e37392e3230342e302f32322d3234203d3e20323636323937.roa (hash: 5oPlX5w0QaLm0HD/uiOXHJbIaw19sIS0IaXwP9u/BiQ=)
                          2: 0F2F91EA6176E9C76467E71DE1A7A0A2C09320AA.crl (hash: 7fWS1D+IG7gmcQcsCCJjJl4QKxAYhlhA7U6ffS8PZZw=)
                          3: 323830343a333561303a3a2f33322d3336203d3e20323636323937.roa (hash: ZYiz8QKAyGHeAUZkHgymObXmibR/gHMA4+nTgGppJEc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/0/0F2F91EA6176E9C76467E71DE1A7A0A2C09320AA.crl
                          rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/0/0F2F91EA6176E9C76467E71DE1A7A0A2C09320AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F2F91EA6176E9C76467E71DE1A7A0A2C09320AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 19:10:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b0:f4:9d:73:ac:71:bd:f0:27:79:42:b6:db:b2:da:cd:94:3c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F2F91EA6176E9C76467E71DE1A7A0A2C09320AA
        Validity
            Not Before: Apr  7 15:22:03 2026 GMT
            Not After : Apr  8 19:10:03 2026 GMT
        Subject: CN=F292B47EE4558F13D388D6FB2BD82794C75144DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:54:b5:d9:ee:5b:16:3a:ad:11:62:83:44:60:
                    10:77:39:bb:5b:2a:3c:0d:2d:f0:71:e9:b4:28:f0:
                    0c:d2:ea:d4:db:91:81:ec:c6:5c:d2:44:10:90:d7:
                    d5:f3:6c:e5:8c:6e:67:5b:2f:58:cf:94:1b:f5:40:
                    7d:3f:59:de:16:a1:e3:f0:29:f1:23:b4:e2:d9:f6:
                    d5:ab:76:69:a0:30:d4:21:0d:23:ce:a7:85:d2:92:
                    4e:5d:35:b5:c0:18:a5:0b:aa:ae:d6:85:c0:be:a4:
                    96:04:da:46:2c:b1:0a:9d:ef:bb:26:3a:e5:8e:7a:
                    68:5e:64:4a:e6:33:c4:fe:ac:59:96:b2:83:38:33:
                    8b:5e:7e:5c:05:34:1b:04:5c:45:ea:df:33:15:dc:
                    31:16:e5:59:57:09:3c:bd:d0:9b:39:55:73:f6:34:
                    19:5c:ad:30:23:e5:03:c0:7d:c5:e6:6f:b6:72:ae:
                    d8:36:a2:76:e9:0b:2e:8f:42:e9:38:17:dc:7d:74:
                    14:be:d3:21:77:a6:9b:ae:f5:db:24:c9:36:4a:7b:
                    bb:e7:66:c6:9f:22:87:73:6a:a9:bf:d7:26:8d:09:
                    35:95:ac:7e:d4:b9:15:67:70:6f:52:5a:9c:0e:7f:
                    bd:0a:51:30:76:08:b9:63:85:96:67:62:bc:5c:ee:
                    8a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:92:B4:7E:E4:55:8F:13:D3:88:D6:FB:2B:D8:27:94:C7:51:44:DA
            X509v3 Authority Key Identifier:
                keyid:0F:2F:91:EA:61:76:E9:C7:64:67:E7:1D:E1:A7:A0:A2:C0:93:20:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/0/0F2F91EA6176E9C76467E71DE1A7A0A2C09320AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F2F91EA6176E9C76467E71DE1A7A0A2C09320AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/0/0F2F91EA6176E9C76467E71DE1A7A0A2C09320AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:d1:2f:65:14:e5:00:29:b8:04:e6:c0:6a:00:43:be:c2:d3:
         75:3c:fb:1e:0e:2e:d3:60:95:83:84:36:8b:74:be:68:ea:da:
         c9:0a:72:41:05:be:66:17:ca:00:62:96:88:ba:57:5c:2d:e3:
         c8:e6:5e:12:16:be:ad:c1:63:ab:ee:9a:4b:2e:37:a9:f9:b2:
         31:74:c0:1c:23:d4:76:88:f0:bc:9b:c9:a7:31:3d:3c:06:a1:
         b6:e8:f9:db:2a:ea:04:27:e3:4f:25:9e:51:fe:0e:93:97:aa:
         7b:e9:85:ad:a0:25:03:56:86:b6:fc:9a:88:77:1f:60:c9:93:
         30:d6:f5:dd:f3:88:ec:a4:f5:a3:21:bf:6a:f5:70:2c:6b:be:
         d3:59:2d:f6:b3:8a:db:eb:c1:5b:e8:ed:04:c0:ad:ad:8a:c8:
         5d:1d:d0:e3:d3:99:9e:29:72:34:23:13:4b:fa:ee:27:6b:16:
         f3:b1:b7:b4:72:ef:00:2a:6b:80:8a:69:9a:de:38:f9:a5:65:
         69:a1:ba:cb:1a:bb:4e:19:45:08:02:37:7b:fd:fd:f9:95:82:
         c9:5d:48:8a:9c:2d:e1:43:65:ce:f6:96:d7:cf:8e:c1:1b:9e:
         ac:56:ef:d3:75:3a:ee:7d:c6:78:ec:66:3d:0f:94:af:0a:93:
         d4:94:4d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 07:39:52 2026 by rpki-client