Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft
File:                     0F9708322570D07CA4BE75EF484B6831664FE864.mft (raw, json)
Hash identifier:          yF1ux4gwW2/BiEOf9DXpIAW5sYSdsHMjXEkuoTWYWac=
Subject key identifier:   EC:CD:AC:B0:3A:B6:09:CB:1F:D5:3B:49:42:BE:FE:72:73:E8:73:C3
Authority key identifier: 0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64
Certificate issuer:       /CN=0F9708322570D07CA4BE75EF484B6831664FE864
Certificate serial:       1AB0276989A4EF1C03116386F3D96108A33348A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft
Manifest number:          03DC
Signing time:             Wed 08 Apr 2026 04:06:10 +0000
Manifest this update:     Wed 08 Apr 2026 04:01:10 +0000
Manifest next update:     Thu 09 Apr 2026 06:24:10 +0000
Files and hashes:         1: 3137302e38302e34392e302f32342d3234203d3e20323636333734.roa (hash: EhX66VpZbnhVDScH0Qoez565ystRem3Vy8v1TXBg9Yk=)
                          2: 0F9708322570D07CA4BE75EF484B6831664FE864.crl (hash: cChkjn/8y21YQAJ5SCMgVfyPF5pNxYoFpFxYCGL9XfY=)
                          3: 3137302e38302e34382e302f32322d3232203d3e20323636333734.roa (hash: MeparfLp7Iz8B/Z72Qoqi/a4d3zvPz6n8crVlI+FX5U=)
                          4: 3137302e38302e35312e302f32342d3234203d3e20323636333734.roa (hash: uCysVc1lML4BWmXNx9y7wZX5lR9FYwcoZzAp2MF74/A=)
                          5: 323830343a333664303a383030303a3a2f33332d3333203d3e20323636333734.roa (hash: iMih0NQjcACqcLmt+w0oTkgLMDObLAxqaD77FHVDdTE=)
                          6: 3137302e38302e34382e302f32342d3234203d3e20323636333734.roa (hash: N0g+TEuM83+qVx1uu9QMFdeIJuGRRXI3j0hxusJKQE4=)
                          7: 3137302e38302e35302e302f32332d3233203d3e20323636333734.roa (hash: /NgZQYnTS9w42llOLCP0aJZFd5VrOsWONzzDN/cH+c4=)
                          8: 323830343a333664303a3a2f33332d3333203d3e20323636333734.roa (hash: ILfaXmA8alvc6XtKl3oju+kl7De/K6TG8womMAt8/50=)
                          9: 3137302e38302e34382e302f32332d3233203d3e20323636333734.roa (hash: ZUwx8FJujJamKmHrEmLckHKXG3XsHvWKylvM3U8gyOY=)
                          10: 323830343a333664303a3a2f33322d3332203d3e20323636333734.roa (hash: vJSi+CLu+OHU9HXYLFKzd0mrGSQkqtG0UHjrkyoN9aA=)
                          11: 3137302e38302e35302e302f32342d3234203d3e20323636333734.roa (hash: 4SHb55z5RYKv3b9zt/DL+Avw47KfCE3hmg+wVfBxb2Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl
                          rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 06:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b0:27:69:89:a4:ef:1c:03:11:63:86:f3:d9:61:08:a3:33:48:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9708322570D07CA4BE75EF484B6831664FE864
        Validity
            Not Before: Apr  8 04:01:10 2026 GMT
            Not After : Apr  9 06:24:10 2026 GMT
        Subject: CN=ECCDACB03AB609CB1FD53B4942BEFE7273E873C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:84:6d:ff:ae:3a:91:3c:95:03:7c:91:a4:3d:
                    b2:9c:36:57:c9:e5:49:0e:20:b7:14:d0:a9:5d:4f:
                    3d:e9:e1:b4:b6:b1:3f:5c:34:b9:21:95:fd:67:62:
                    78:b9:a7:31:34:d7:a2:3b:0a:1a:84:6a:9a:64:27:
                    6d:e4:b8:e6:b4:87:54:0d:15:64:c0:ab:f9:3d:c3:
                    3f:56:66:6d:9c:ac:f7:2d:5f:8a:42:c1:ed:c5:65:
                    e3:18:1a:65:a8:90:8f:00:e0:8f:87:06:da:97:12:
                    30:d8:8f:78:6c:25:cd:4f:1f:7c:e1:ee:19:46:0b:
                    8f:d8:25:3a:b8:2e:93:4c:89:b3:46:00:aa:5b:28:
                    4c:3c:5d:2e:64:73:92:6b:b8:3c:a1:0a:d1:af:fc:
                    2a:a5:79:9b:b9:68:33:92:ec:c4:37:9d:a2:84:6b:
                    49:82:28:b1:79:6a:10:98:1c:9a:99:cd:36:36:f1:
                    ae:0c:44:5e:07:69:80:f0:e0:db:39:9a:35:6b:63:
                    24:79:a6:1c:1e:cf:56:fd:69:75:76:b1:fc:bd:d8:
                    12:9a:07:7e:33:33:08:49:7a:f9:3a:20:73:97:61:
                    57:d7:b4:79:d7:d2:8f:b2:77:1b:ed:df:79:19:2b:
                    9e:36:4e:a7:93:c6:fb:66:35:83:51:77:a0:ca:32:
                    dd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CD:AC:B0:3A:B6:09:CB:1F:D5:3B:49:42:BE:FE:72:73:E8:73:C3
            X509v3 Authority Key Identifier:
                keyid:0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:5e:08:93:fc:d3:57:d6:e0:a5:be:d1:3a:98:fb:89:ea:3f:
         6f:02:2c:d2:fb:5e:da:b5:f1:81:76:e9:54:2c:9f:a8:20:ab:
         92:e3:e1:23:da:98:50:90:1c:e1:60:2b:1b:f1:84:08:39:61:
         b1:84:7f:7c:e2:2f:8c:14:75:6f:2a:4d:84:9e:f8:23:1d:86:
         11:11:a6:d2:a9:71:e1:38:c9:16:14:79:65:3d:3f:5b:e8:1c:
         51:8b:3f:d1:7f:33:a8:f8:2d:27:6e:b9:ef:7e:69:d9:d6:4e:
         8d:fa:99:42:93:e2:fb:9f:6d:4c:0a:05:e4:b4:21:0c:a9:8a:
         05:e8:13:19:7d:dd:7e:2a:7e:34:39:13:15:76:25:a9:f8:31:
         71:e3:89:b5:6f:f0:75:1f:e0:75:2b:da:17:41:f8:ac:68:67:
         bc:60:ec:a4:00:cb:f7:07:23:d0:a5:2e:1e:04:7c:09:26:19:
         c2:95:4c:6b:a6:fb:ca:a7:f7:1f:ec:5c:dd:e9:5a:a8:08:33:
         15:c5:43:de:a8:26:0b:06:13:9b:07:96:bc:2c:35:8c:db:68:
         4b:ab:51:d4:0b:d2:b5:9c:2e:2a:f4:dc:55:6a:8a:4f:35:56:
         ec:1a:6d:bc:33:8c:96:8f:d1:29:99:25:05:c4:3d:f9:2f:8a:
         dd:ec:e5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:34:33 2026 by rpki-client