Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
File:                     CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft (raw, json)
Hash identifier:          vt7AqMrpLZqPAH7XxaHCAl9udpKPY51NvapZV8ZIoHk=
Subject key identifier:   02:91:D2:6C:DB:18:A6:BD:07:84:42:A2:2E:B9:07:66:18:88:2C:CB
Authority key identifier: CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB
Certificate issuer:       /CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB
Certificate serial:       3B6398F33A3C6EA02B09A89994BBEA10D06C6A54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
Manifest number:          0155
Signing time:             Sun 22 Feb 2026 14:48:29 +0000
Manifest this update:     Sun 22 Feb 2026 14:43:29 +0000
Manifest next update:     Mon 23 Feb 2026 15:58:29 +0000
Files and hashes:         1: 3230302e37332e3231362e302f32322d3332203d3e20323730343833.roa (hash: qPbY/Y5KTREkyqW2QiIL32k9wQU5JL6mlwrA4y4yItU=)
                          2: 323830343a366361383a3a2f33322d313238203d3e20323730343833.roa (hash: 6OBQoF3ZC6oqC9TdhCOjF/406cX3oVdeis5NNiOogbc=)
                          3: CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl (hash: 10XXTfajsQwanXvFAxfR7x3hboPkvBQc65LpesAgZQs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl
                          rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 15:58:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:63:98:f3:3a:3c:6e:a0:2b:09:a8:99:94:bb:ea:10:d0:6c:6a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB
        Validity
            Not Before: Feb 22 14:43:29 2026 GMT
            Not After : Feb 23 15:58:29 2026 GMT
        Subject: CN=0291D26CDB18A6BD078442A22EB9076618882CCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8d:20:e8:a7:14:c5:c4:27:1a:94:4d:de:81:
                    b6:3e:b6:74:11:0e:c8:3c:13:ac:e2:a7:a7:84:6b:
                    35:df:7e:ea:df:47:26:60:ed:66:c1:55:cf:06:70:
                    19:db:77:e5:01:c6:79:79:81:15:2f:f3:69:f8:3c:
                    56:4d:c0:f6:61:f0:28:7b:fe:2b:79:2f:4d:74:1c:
                    9e:a4:ab:47:b6:bf:cb:3c:c0:bd:80:31:06:f4:84:
                    e3:99:32:5e:87:45:f4:78:b0:cd:0a:f9:c2:57:a0:
                    a9:02:a2:e6:10:7b:28:05:3f:9c:49:8b:39:46:ce:
                    ac:12:5e:70:c0:15:dc:59:d6:ae:49:bc:1a:19:a9:
                    77:55:78:4b:97:87:6a:b1:1a:95:15:31:31:b9:0f:
                    e1:aa:73:45:bd:ad:9b:c4:db:7d:46:6b:9e:e1:a7:
                    b3:b7:95:1e:0b:c3:7f:5b:96:b5:07:e5:aa:ed:11:
                    4a:9a:de:98:6b:1a:a2:38:f5:40:e1:f8:55:98:aa:
                    b1:d0:11:9c:42:61:74:fb:15:04:b3:20:1d:53:fe:
                    ee:6b:74:e5:bb:dd:a5:ee:f5:60:2b:dd:fa:48:46:
                    2a:70:de:1f:d9:3b:e2:b6:86:e0:97:de:a7:cd:26:
                    32:2a:9c:05:28:64:85:02:62:1a:cf:6d:50:cc:6f:
                    3f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:91:D2:6C:DB:18:A6:BD:07:84:42:A2:2E:B9:07:66:18:88:2C:CB
            X509v3 Authority Key Identifier:
                keyid:CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:3d:af:54:71:3c:eb:d3:ab:fd:dc:7f:77:a1:61:57:bc:fc:
         e0:d2:f5:29:0a:83:00:5e:cd:22:16:fc:89:58:16:dd:45:e8:
         be:eb:e9:49:da:94:5c:3b:7b:25:2b:ef:3b:f1:27:80:60:b8:
         34:4e:50:70:2f:31:94:bf:61:64:f9:18:5e:13:c3:bf:be:3e:
         a9:84:47:2d:41:40:3d:c1:f6:11:d2:28:6e:4e:4c:17:e7:9d:
         47:16:b1:4b:b2:15:50:e5:db:3e:87:5b:f2:a5:ba:f7:de:ae:
         b1:bf:a7:3e:43:c0:a2:0f:12:7f:87:4c:6c:14:14:0a:90:23:
         99:56:75:ff:d0:66:c8:29:cc:66:3f:ab:3f:70:17:f5:53:2e:
         68:d5:b9:86:2f:f5:d1:fc:2c:f4:f6:b0:89:51:b4:4a:a9:b0:
         22:44:ed:ce:f8:dc:7b:92:9d:67:fc:5b:16:f5:16:ab:ec:5d:
         8a:eb:71:49:6c:8a:d4:36:7d:4a:e5:b3:37:80:45:54:76:1e:
         ba:02:07:c5:82:b1:59:2c:68:6a:51:78:7a:01:6a:64:4f:8c:
         cd:ee:5d:35:78:08:cf:0e:28:a2:09:d8:15:db:05:4a:cd:dd:
         a2:28:7a:a5:b5:8f:02:5e:45:8f:14:b5:06:0c:21:78:fc:fb:
         99:57:94:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 01:49:33 2026 by rpki-client