Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.mft
File:                     AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.mft (raw, json)
Hash identifier:          maYjObvKbNlAxiRYbNRws4xpI6MhqYGhd6z+PZWVkxE=
Subject key identifier:   D2:02:14:15:B4:A4:55:54:71:1B:D4:9A:30:04:AF:24:AF:6F:6C:4B
Authority key identifier: AF:79:14:C7:87:AF:DC:BF:CF:FF:DD:94:5C:5A:0E:CF:D8:DB:C6:B1
Certificate issuer:       /CN=AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1
Certificate serial:       1B636C559BE8DCE413FD6800B4DD7C895C75AA83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.mft
Manifest number:          2A
Signing time:             Sun 22 Feb 2026 10:30:09 +0000
Manifest this update:     Sun 22 Feb 2026 10:25:09 +0000
Manifest next update:     Mon 23 Feb 2026 11:47:09 +0000
Files and hashes:         1: 323830343a313936383a3a2f33322d3333203d3e203631373933.roa (hash: Wd/p9rxZeRNtdLw7pCb+SI9h8E3bnh81/slgtlu7lm4=)
                          2: 3230312e3133302e32382e302f32332d3233203d3e203631373933.roa (hash: 9N/yY5xSgudsEsolG/pBkhgACjFcaRjOcxdoqF/fIbs=)
                          3: 3230312e3133302e32382e302f32342d3234203d3e203631373933.roa (hash: cduWhJRQ20YXhY+noeq1eBunIZ9DAWfrUGPlyUQJ/tE=)
                          4: AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.crl (hash: jlg8SRtrZZDij/NOWD5cTO5sbYwJ0H/i6GIrfgIdOPY=)
                          5: 3230312e3133302e32382e302f32322d3232203d3e203631373933.roa (hash: jNDllEgGrJuXZMqh8Ht+HDjxLYB/3bSY60qoVEf4WTs=)
                          6: 3230312e3133302e32392e302f32342d3234203d3e203631373933.roa (hash: GwrYc7SpOYAs3Tu7JLmIVEnT30gP3yG9gu1hD3QguaY=)
                          7: 3230312e3133302e33302e302f32332d3233203d3e203631373933.roa (hash: 5AIW8AQBAzw39tP4hWh+c4DHpWL0TtFo3ncHalKxhQc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.crl
                          rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 11:47:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:63:6c:55:9b:e8:dc:e4:13:fd:68:00:b4:dd:7c:89:5c:75:aa:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1
        Validity
            Not Before: Feb 22 10:25:09 2026 GMT
            Not After : Feb 23 11:47:09 2026 GMT
        Subject: CN=D2021415B4A45554711BD49A3004AF24AF6F6C4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a2:69:fc:e5:ae:98:2a:2b:82:55:4f:68:71:
                    c1:5c:40:ad:15:f0:ca:3c:86:80:db:2e:1e:1e:e3:
                    c8:68:e2:49:95:19:b9:e9:39:62:3f:a1:4c:c3:c9:
                    6d:b2:97:dd:84:c4:43:74:d7:f3:0c:74:a6:48:5f:
                    38:d2:55:73:f2:7a:54:b2:05:37:fb:df:72:c3:7a:
                    bb:e5:44:5b:1b:e0:a7:81:ac:5d:7f:73:bf:79:84:
                    96:24:85:c1:f3:ce:20:bc:74:ce:4f:49:be:c6:e4:
                    70:be:e8:38:2c:ec:c3:0b:07:5f:82:a9:fd:3c:a9:
                    47:d2:fb:a2:3a:26:35:f5:0e:e5:77:91:7e:7c:e1:
                    ce:37:77:58:d9:05:99:39:da:0b:24:2e:29:58:5e:
                    7a:45:41:26:14:20:4a:7f:99:bc:e7:40:69:36:eb:
                    1c:87:62:43:d4:c6:01:9a:3b:b8:8c:ec:5d:41:6d:
                    88:f5:f3:67:3e:0d:67:82:e6:df:a5:31:53:bb:32:
                    89:1c:f3:93:a2:76:ac:65:e8:7a:08:77:c8:77:25:
                    bb:cb:28:c6:49:55:d9:71:f8:25:ff:5a:1d:40:3b:
                    1b:18:65:12:1f:c9:c8:6d:b0:4a:f4:95:b1:bd:99:
                    ed:42:b2:f4:01:44:a0:ba:28:df:d4:6c:c4:8e:cf:
                    db:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:02:14:15:B4:A4:55:54:71:1B:D4:9A:30:04:AF:24:AF:6F:6C:4B
            X509v3 Authority Key Identifier:
                keyid:AF:79:14:C7:87:AF:DC:BF:CF:FF:DD:94:5C:5A:0E:CF:D8:DB:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:0f:55:31:b9:65:a7:06:a7:d7:c6:09:53:42:0e:af:a9:f6:
         30:9c:18:36:24:1f:5a:6a:60:60:4a:fd:13:3b:a9:41:7d:dc:
         21:45:b4:c8:09:7a:32:6b:f0:e9:d1:16:8b:43:35:25:78:c4:
         1f:db:4f:35:35:52:6f:9f:10:03:14:5a:f1:7f:6a:0c:5f:84:
         e5:66:75:0a:77:e3:80:a8:c0:1a:dd:b8:3f:ad:e2:91:bb:46:
         26:7b:7f:da:ac:2a:e1:35:fc:72:aa:da:66:17:aa:d5:8e:26:
         df:df:36:5f:6c:c5:35:d8:04:b3:9a:8c:60:8f:10:34:12:53:
         d2:d0:12:37:8d:87:c3:3d:8a:e8:19:e9:05:1b:22:08:3f:66:
         80:4b:22:87:57:f1:0d:c0:d2:3e:c6:cb:09:0d:ec:f1:0d:5f:
         1c:e7:07:6b:5c:ad:88:3f:ca:52:66:08:23:b0:fd:dc:24:f0:
         7f:ba:d7:98:3d:61:cf:d4:47:6c:34:19:35:b6:73:cc:ee:3c:
         8f:97:b5:31:cd:ae:a0:5d:ec:8d:f1:be:56:bb:df:3f:42:e9:
         d1:97:a5:87:f7:b2:f4:69:0a:58:2d:77:ad:fe:ea:70:7c:5f:
         14:a7:d5:ba:aa:90:dc:54:db:eb:b2:8b:59:80:d4:ec:d1:25:
         46:b9:27:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 03:59:36 2026 by rpki-client