Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft
File:                     A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft (raw, json)
Hash identifier:          WxLdxHx6g8qON9sMf0oAbyxcQ5Aw6wljlUmWn7cglCc=
Subject key identifier:   3F:B9:63:3B:63:ED:19:AF:E2:C5:D1:CC:30:30:98:23:FC:09:14:3A
Authority key identifier: A3:F1:68:F0:E5:0A:90:E4:1A:73:6F:E0:D5:FA:91:97:65:E1:B5:E6
Certificate issuer:       /CN=A3F168F0E50A90E41A736FE0D5FA919765E1B5E6
Certificate serial:       5C57AFB655A66C877F22DFB9675CDE531D7EC30D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft
Manifest number:          0411
Signing time:             Sun 24 May 2026 00:05:57 +0000
Manifest this update:     Sun 24 May 2026 00:00:57 +0000
Manifest next update:     Mon 25 May 2026 01:36:57 +0000
Files and hashes:         1: 323830343a313634633a63623a3a2f34382d3438203d3e20323633323830.roa (hash: XVDZJLn2jsM19rPj80JYeF5XtdtjfD3ULyuvEfl7Uvg=)
                          2: 323830343a313634633a616263623a3a2f34382d3438203d3e20323633323830.roa (hash: xrJw53QFZW5nrMZxRv20z+3U45+1VZvVfPziruNz6FE=)
                          3: 323830343a313634633a3a2f33322d3332203d3e20323633323830.roa (hash: TTezDLDgWcUhvqWmHpV5i1KSmmSwrsQoqFayy4r5BNQ=)
                          4: 323830343a313634633a66613a3a2f34382d3438203d3e20323633323830.roa (hash: rhsxwkC+s3lWxN9jmR4AJFO6jBF/ENN0OcINE2Eb+ss=)
                          5: 323830343a313634633a6661633a3a2f34382d3438203d3e20323633323830.roa (hash: QQuIO52jW5fpy195mW2GtIgKO2yWujKaQpD2wCgiQ3M=)
                          6: A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl (hash: w+YdBWWNPLvGsnEduAxuUW992NC04GjsABPXrY4Z3cA=)
                          7: 3137392e3130392e38382e302f32312d3234203d3e20323633323830.roa (hash: 4M8SIlxdY3/Aa0Sl6N59GDgEzrNP00eYvFq4t/+1lu8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl
                          rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 01:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:57:af:b6:55:a6:6c:87:7f:22:df:b9:67:5c:de:53:1d:7e:c3:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3F168F0E50A90E41A736FE0D5FA919765E1B5E6
        Validity
            Not Before: May 24 00:00:57 2026 GMT
            Not After : May 25 01:36:57 2026 GMT
        Subject: CN=3FB9633B63ED19AFE2C5D1CC30309823FC09143A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d3:d1:91:93:2f:6d:b7:7c:72:30:23:0c:5d:
                    8f:ec:e2:89:6e:eb:9e:c6:4e:70:29:a4:31:ea:db:
                    f6:f5:9e:36:6a:f4:8b:99:b3:b5:ce:d5:0b:bc:33:
                    c2:6e:0d:2e:55:f6:a5:01:5d:49:2c:dc:7f:14:3a:
                    1c:87:a5:97:2e:39:fb:5c:14:3f:7f:06:0b:f1:ad:
                    c9:74:72:08:3a:2b:66:b3:8c:a4:90:fc:c4:a6:10:
                    4a:01:5d:5e:a4:0e:03:37:8a:4a:90:50:c4:8c:94:
                    01:72:bb:07:2e:20:84:dc:c6:d3:74:3f:72:b1:63:
                    a9:b1:21:0f:19:31:b2:95:43:40:37:a5:dc:a4:b7:
                    dd:e4:f3:f6:83:02:9a:d4:40:e1:7d:8c:ae:b7:44:
                    b2:37:72:98:2a:fc:d0:cc:df:3d:fd:f0:c6:56:07:
                    5b:d7:be:64:19:f0:48:74:ab:2f:e6:ff:51:f7:40:
                    91:18:b4:8a:33:a6:e0:15:96:cd:1c:36:dc:7f:05:
                    17:bd:86:80:6e:27:30:c9:6c:7e:e2:2e:4d:ed:7b:
                    0c:7a:70:8b:01:12:00:3c:5b:16:a4:aa:ad:e7:5d:
                    d1:21:9e:39:3b:29:69:1b:e4:29:88:0b:bf:ef:f5:
                    ba:b5:43:d7:fb:0d:15:10:85:03:ab:21:aa:fa:fd:
                    c0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B9:63:3B:63:ED:19:AF:E2:C5:D1:CC:30:30:98:23:FC:09:14:3A
            X509v3 Authority Key Identifier:
                keyid:A3:F1:68:F0:E5:0A:90:E4:1A:73:6F:E0:D5:FA:91:97:65:E1:B5:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:27:4b:16:dd:3c:d3:73:e3:5f:d0:5a:07:8a:9b:3b:31:dd:
         b0:7f:e2:dd:05:54:71:61:f9:49:9a:ba:3f:b1:9e:96:a6:08:
         39:c4:f8:33:9e:0d:2a:96:12:67:6e:1b:76:6d:23:84:95:6a:
         af:01:e0:48:12:bc:42:7c:71:78:a3:6f:14:fb:4f:91:6b:48:
         03:c4:de:38:ab:e3:4f:52:9e:21:bd:ed:6e:06:94:be:e7:5a:
         de:36:a0:a7:6c:a1:05:2a:cb:f9:6b:3f:0c:40:55:39:22:c2:
         cd:fd:1d:d8:ec:6f:bb:ec:1b:f8:c5:32:90:8b:03:a0:34:5e:
         13:de:1f:f3:19:b9:29:b8:84:b5:41:c4:dd:18:b7:be:24:d2:
         15:8e:a9:f8:bf:43:19:d3:c9:20:3d:6c:67:2f:1c:73:2f:fe:
         1e:9a:ee:b8:e1:a0:25:ae:7c:63:90:ba:30:49:a5:82:e1:38:
         e3:4f:e8:a0:6c:f0:48:65:30:77:53:3b:a7:e1:ee:7a:e2:cf:
         ad:f0:8b:b3:9b:e6:4f:5a:7e:4b:73:2a:26:b8:ae:2d:d3:71:
         fc:58:20:c2:73:18:db:2c:64:7a:9e:57:98:fa:b3:c2:bb:1c:
         90:a7:8d:3b:5e:6d:10:e6:e9:90:a7:3f:e1:0d:5e:c7:9d:51:
         ca:a5:e6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 13:32:20 2026 by rpki-client