Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft
File:                     3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft (raw, json)
Hash identifier:          eTQTdORBGtAH6u9rDxsMi9ma9dLIveAYNDci0hAHR2c=
Subject key identifier:   2D:BD:3F:D9:EB:96:94:C2:C0:49:DA:6D:B1:AE:CB:F8:50:65:C1:0F
Authority key identifier: 3A:FA:C4:1D:B1:2E:69:24:E2:22:CD:6C:84:07:E7:F6:04:E6:DE:C8
Certificate issuer:       /CN=3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8
Certificate serial:       235BC43911793372CA3ADFB7902BB95C2152CDF2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft
Manifest number:          FB
Signing time:             Sat 22 Aug 2026 18:39:28 +0000
Manifest this update:     Sat 22 Aug 2026 18:34:28 +0000
Manifest next update:     Sun 23 Aug 2026 21:44:28 +0000
Files and hashes:         1: 3137372e36362e3134382e302f32322d3332203d3e203532383437.roa (hash: RmplN4gP0rfEH49EGPOjX6lPM+6EM+VZfi1Fjdb3I/8=)
                          2: 323830343a313038343a3a2f33322d313238203d3e203532383437.roa (hash: MohA+nzFZQ4H9VfNB5+Ii/NodtcpuqwWIRY2fOZl5r8=)
                          3: 3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.crl (hash: stgGt2IOZcAq1QKrgFzXJhyHMQ1YEX0XbDJUXkzrt88=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.crl
                          rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 21:44:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:5b:c4:39:11:79:33:72:ca:3a:df:b7:90:2b:b9:5c:21:52:cd:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8
        Validity
            Not Before: Aug 22 18:34:28 2026 GMT
            Not After : Aug 23 21:44:28 2026 GMT
        Subject: CN=2DBD3FD9EB9694C2C049DA6DB1AECBF85065C10F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:52:be:14:d8:da:c3:9d:41:60:b1:b3:87:e5:
                    01:fc:39:f4:40:32:a9:e8:cf:3e:0f:b2:1f:9a:bb:
                    56:4c:e6:b9:59:fb:dc:58:f8:75:8a:51:1d:b6:e6:
                    f7:6d:ad:47:dc:7e:74:a0:21:77:0f:5a:ef:78:3e:
                    8c:97:79:ba:50:2e:cf:7e:d0:3e:75:1e:e9:df:cf:
                    b7:78:80:97:8c:6e:8f:13:8c:d4:a6:14:41:9f:72:
                    2b:21:b3:7b:5d:b6:ff:f3:c2:9e:ed:0b:71:c5:3e:
                    ac:8b:2b:36:dd:f6:b6:e6:90:78:a5:26:8f:6f:7e:
                    7b:75:59:d4:86:f0:f0:85:6e:3d:53:04:e3:2e:ef:
                    a3:c2:5f:1b:42:ea:d5:38:2b:2e:4e:f1:13:f5:34:
                    06:75:58:a9:88:f5:40:6c:47:ce:77:be:6e:d9:1a:
                    e8:cd:10:c5:fc:a7:aa:8b:00:b5:fd:c3:81:f4:f5:
                    fd:00:fc:ce:34:b1:bd:3d:78:09:c9:b5:a4:c2:10:
                    85:8b:d7:16:6c:bd:b4:87:b1:aa:77:fe:f7:99:33:
                    ea:f7:b5:00:d9:8e:46:1b:d5:b5:49:9b:eb:59:e6:
                    cd:8e:cb:82:19:d3:41:b7:24:04:7b:31:27:62:ee:
                    3d:3e:39:7e:c2:47:b1:cb:7d:89:c2:bf:19:66:ed:
                    7b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BD:3F:D9:EB:96:94:C2:C0:49:DA:6D:B1:AE:CB:F8:50:65:C1:0F
            X509v3 Authority Key Identifier:
                keyid:3A:FA:C4:1D:B1:2E:69:24:E2:22:CD:6C:84:07:E7:F6:04:E6:DE:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:35:ee:3b:79:a1:ea:ec:17:0f:4e:c3:db:29:07:66:52:51:
         18:c6:e5:de:9e:b2:04:5d:63:43:d9:e8:7a:6e:ac:ec:b4:a0:
         68:5e:86:b7:81:0a:5c:7a:14:e7:c3:2a:ee:32:d7:e3:71:b1:
         2b:0e:60:fc:eb:c1:58:e5:4d:05:d3:47:4b:da:1d:47:f2:9e:
         03:8e:f2:60:4d:a8:4b:ca:f5:f6:e1:bd:08:88:98:9f:48:3c:
         d1:c3:dd:b8:5e:e6:5d:66:1d:6d:09:0c:ba:a2:06:8c:bf:6a:
         fa:b8:aa:85:32:47:0b:e2:15:96:fb:09:32:0b:8c:2e:94:23:
         24:ec:90:67:0d:dc:35:4d:80:97:7d:16:14:66:99:d8:ec:ad:
         a1:a5:4a:08:f9:56:2d:69:7b:05:bb:73:4e:9b:70:a0:72:82:
         e3:ae:15:03:73:42:50:f4:47:45:c3:b1:a1:28:3b:53:87:56:
         95:27:41:ed:da:d5:8d:b6:df:e9:2d:3a:28:40:ce:bf:2c:1b:
         49:20:a3:b7:bc:5e:e0:66:08:8a:9e:16:e9:bc:af:25:b6:89:
         35:8a:68:61:bd:22:28:6f:a2:be:9f:b0:65:e4:42:e6:22:f1:
         4e:78:7e:9d:b1:5e:ed:8d:51:07:72:54:3d:bc:fa:35:49:fd:
         1d:7a:df:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 11:14:50 2026 by rpki-client