Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft
File:                     A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft (raw, json)
Hash identifier:          V8p54PoWprSPd+MPSrRFhch2I84N/HRU1bIFfSQdXM8=
Subject key identifier:   F8:E8:88:61:26:8A:EF:90:B5:17:AB:65:19:8B:33:29:0F:5E:FF:F0
Authority key identifier: A3:F1:68:F0:E5:0A:90:E4:1A:73:6F:E0:D5:FA:91:97:65:E1:B5:E6
Certificate issuer:       /CN=A3F168F0E50A90E41A736FE0D5FA919765E1B5E6
Certificate serial:       3541785556672B29831D3A2DBC1407D30FC79995
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft
Manifest number:          03D3
Signing time:             Wed 08 Apr 2026 05:21:02 +0000
Manifest this update:     Wed 08 Apr 2026 05:16:02 +0000
Manifest next update:     Thu 09 Apr 2026 08:07:02 +0000
Files and hashes:         1: 323830343a313634633a3a2f33322d3332203d3e20323633323830.roa (hash: TTezDLDgWcUhvqWmHpV5i1KSmmSwrsQoqFayy4r5BNQ=)
                          2: 323830343a313634633a6661633a3a2f34382d3438203d3e20323633323830.roa (hash: QQuIO52jW5fpy195mW2GtIgKO2yWujKaQpD2wCgiQ3M=)
                          3: 323830343a313634633a616263623a3a2f34382d3438203d3e20323633323830.roa (hash: xrJw53QFZW5nrMZxRv20z+3U45+1VZvVfPziruNz6FE=)
                          4: 323830343a313634633a63623a3a2f34382d3438203d3e20323633323830.roa (hash: XVDZJLn2jsM19rPj80JYeF5XtdtjfD3ULyuvEfl7Uvg=)
                          5: 3137392e3130392e38382e302f32312d3234203d3e20323633323830.roa (hash: 4M8SIlxdY3/Aa0Sl6N59GDgEzrNP00eYvFq4t/+1lu8=)
                          6: 323830343a313634633a66613a3a2f34382d3438203d3e20323633323830.roa (hash: rhsxwkC+s3lWxN9jmR4AJFO6jBF/ENN0OcINE2Eb+ss=)
                          7: A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl (hash: pqvQO8eSjpbQZhsl33/kxJmUKFGPX0f3oPhC39PVpi0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl
                          rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 08:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:41:78:55:56:67:2b:29:83:1d:3a:2d:bc:14:07:d3:0f:c7:99:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3F168F0E50A90E41A736FE0D5FA919765E1B5E6
        Validity
            Not Before: Apr  8 05:16:02 2026 GMT
            Not After : Apr  9 08:07:02 2026 GMT
        Subject: CN=F8E88861268AEF90B517AB65198B33290F5EFFF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:42:fc:72:0c:d8:38:1a:0b:e1:8a:1d:2c:84:
                    0e:66:4e:34:50:17:9e:d2:62:cb:d3:c5:f5:bc:1f:
                    23:f0:eb:33:9f:e3:34:bc:f3:86:24:b7:a5:8c:75:
                    cd:94:18:3f:9b:35:a5:e7:41:6b:22:ba:e0:58:47:
                    b2:ae:bb:82:d5:07:9f:84:b1:b9:43:52:61:3b:0a:
                    97:33:a7:ab:f2:77:1f:59:03:79:ba:a4:a1:06:12:
                    27:72:ae:1c:de:2d:83:85:32:40:0b:01:3e:47:c1:
                    23:dd:49:46:a3:ad:f8:1d:3d:8a:8a:e2:44:e6:46:
                    c0:ef:c3:38:e8:8b:89:2f:ed:c5:1d:60:f2:64:e7:
                    7e:39:84:f2:71:e5:4a:0e:0a:9d:2a:00:3f:23:17:
                    ea:9b:24:e7:ab:b5:fa:a5:ad:dc:ff:a0:85:a8:20:
                    4f:b9:7f:b0:e0:e0:a8:5d:43:54:31:1b:fa:c4:8e:
                    09:ae:bc:aa:04:8c:69:3f:e8:5f:bb:36:aa:ff:0e:
                    7d:c8:5d:d9:cf:75:47:4b:49:75:fc:25:f6:1b:8c:
                    8d:63:c1:45:03:38:b1:72:7c:cf:18:98:2e:ef:6b:
                    04:ec:b5:85:83:8a:01:24:dd:5b:22:f2:d1:9b:db:
                    d1:21:3d:50:ac:52:b5:7f:e3:29:d0:85:8f:7e:6b:
                    eb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E8:88:61:26:8A:EF:90:B5:17:AB:65:19:8B:33:29:0F:5E:FF:F0
            X509v3 Authority Key Identifier:
                keyid:A3:F1:68:F0:E5:0A:90:E4:1A:73:6F:E0:D5:FA:91:97:65:E1:B5:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:9b:63:4a:8c:44:ff:aa:69:55:4b:7e:1b:9d:e8:0c:11:3b:
         b6:cc:f0:86:d4:07:b0:67:2b:f3:57:5a:53:2e:95:7d:3a:f3:
         bb:05:fe:58:3a:4b:18:71:3b:c5:a5:28:41:e5:e3:75:2e:c0:
         f4:04:2e:1d:2c:0f:e9:78:63:25:97:bf:e5:01:d5:6a:49:ea:
         6d:06:83:ba:b2:8b:92:b3:7e:f5:a1:ab:83:83:ca:52:5b:5e:
         d9:61:d2:4f:a3:71:b1:9c:67:04:b3:50:3a:98:5e:43:89:1f:
         d1:9f:c3:19:39:0f:44:69:1b:37:52:fe:f6:60:5b:95:3b:a1:
         50:f2:46:ed:ed:ec:c5:eb:57:6f:5b:03:5b:30:9b:55:03:55:
         fa:0b:88:b1:0c:0f:1a:74:00:da:0b:dc:3b:0f:06:cd:07:a9:
         6d:a0:25:18:2c:b8:e3:37:4f:7d:f4:76:89:da:7b:d4:fa:14:
         de:2a:32:1e:ab:c3:7e:f5:c0:97:d4:a6:d6:0b:bc:4a:77:90:
         ae:a0:5a:e0:04:97:60:da:60:c2:f9:8a:6c:fc:40:ff:77:c8:
         50:79:57:fc:15:16:ad:c8:36:85:e5:f8:90:8b:63:a3:db:f8:
         e2:9b:59:fb:9d:8e:39:b3:32:fd:7b:e2:bc:24:8f:f1:39:8c:
         dd:64:09:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 18:13:56 2026 by rpki-client