Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft
File:                     3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft (raw, json)
Hash identifier:          iLgbPFFGQcjE0SJemuKe8H0IBACvshaREmiZXkrA3Tc=
Subject key identifier:   BE:F4:41:B8:D0:2C:E6:AC:3D:3B:51:E9:C4:09:DC:72:C5:0C:CF:AD
Authority key identifier: 3A:FA:C4:1D:B1:2E:69:24:E2:22:CD:6C:84:07:E7:F6:04:E6:DE:C8
Certificate issuer:       /CN=3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8
Certificate serial:       4900874E0E8DEDE91269CCCD77C0CE2975A78C6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft
Manifest number:          0B
Signing time:             Sun 22 Feb 2026 22:21:00 +0000
Manifest this update:     Sun 22 Feb 2026 22:16:00 +0000
Manifest next update:     Tue 24 Feb 2026 00:52:00 +0000
Files and hashes:         1: 3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.crl (hash: 7ejarpEnfeu4HJPkEn9twsjczhvBwudIdAZKHMhGDr8=)
                          2: 3137372e36362e3134382e302f32322d3332203d3e203532383437.roa (hash: RmplN4gP0rfEH49EGPOjX6lPM+6EM+VZfi1Fjdb3I/8=)
                          3: 323830343a313038343a3a2f33322d313238203d3e203532383437.roa (hash: MohA+nzFZQ4H9VfNB5+Ii/NodtcpuqwWIRY2fOZl5r8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.crl
                          rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 00:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:00:87:4e:0e:8d:ed:e9:12:69:cc:cd:77:c0:ce:29:75:a7:8c:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8
        Validity
            Not Before: Feb 22 22:16:00 2026 GMT
            Not After : Feb 24 00:52:00 2026 GMT
        Subject: CN=BEF441B8D02CE6AC3D3B51E9C409DC72C50CCFAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f8:71:81:a9:f6:a6:d1:98:4a:e2:1a:40:a3:
                    ad:5b:fc:43:34:8d:eb:1c:57:be:76:ed:f3:79:a2:
                    33:31:be:ce:c7:e9:87:81:15:96:4e:68:53:11:6e:
                    92:05:04:92:94:80:bc:36:ed:41:46:db:b8:c7:41:
                    ed:a7:bc:05:89:5f:45:e6:24:14:4c:84:d1:82:3b:
                    cc:cd:66:3b:d1:03:47:c0:fb:f2:5b:37:53:f1:5f:
                    eb:38:a8:b4:cc:15:08:ec:50:50:1b:a3:6d:7d:c3:
                    37:eb:a4:23:6f:77:82:34:8f:44:7e:1f:d3:b8:43:
                    c0:4e:02:32:c6:92:cc:6a:a9:e6:3a:b0:b1:4b:6f:
                    1b:44:2d:24:47:7d:63:42:77:03:f7:63:e1:8b:a3:
                    8a:ae:4b:f8:7a:8a:7d:90:2f:da:8e:aa:89:0c:30:
                    da:f8:de:6e:b0:b9:8c:cf:7c:6c:6c:fc:26:56:34:
                    b3:2c:e5:a0:2e:d0:72:fd:64:ba:fa:65:e1:9b:a9:
                    76:f6:11:01:53:9c:40:6b:65:b5:7f:a8:84:1b:d3:
                    ec:9e:08:26:c6:1f:b1:ac:e6:7b:f9:4b:87:d6:2b:
                    d2:b7:30:06:3b:76:b6:8b:49:be:82:e5:1c:90:3b:
                    58:cb:0e:99:21:5f:55:f4:72:23:49:c5:a4:46:d9:
                    af:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F4:41:B8:D0:2C:E6:AC:3D:3B:51:E9:C4:09:DC:72:C5:0C:CF:AD
            X509v3 Authority Key Identifier:
                keyid:3A:FA:C4:1D:B1:2E:69:24:E2:22:CD:6C:84:07:E7:F6:04:E6:DE:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:0c:fe:e2:aa:8f:64:f3:83:4d:24:c7:bb:fb:2d:61:10:9b:
         42:34:ec:2e:19:4d:e8:60:64:41:86:23:d6:d0:91:ad:2e:4d:
         c6:71:ba:a6:a4:2f:3e:39:ba:99:a6:db:c5:f6:50:38:6e:e7:
         30:41:60:31:25:20:32:a5:24:a1:da:d3:05:91:19:70:ae:e1:
         c4:6e:95:68:d1:1c:48:1b:6b:3a:91:06:00:07:d2:a0:a0:96:
         5b:2e:99:10:96:65:78:36:8d:73:7d:d1:9b:0c:14:fb:47:17:
         98:ce:09:c9:cd:a3:e2:74:05:9e:82:5c:bc:5b:7f:5c:3b:bd:
         48:e9:80:d2:07:ac:59:32:cb:d1:71:22:86:6d:2e:f5:49:90:
         9a:85:b9:89:f5:00:10:5e:d5:48:4b:4d:70:f4:f9:99:0f:6d:
         d2:6e:09:bd:91:e0:3b:9e:a7:e6:62:f2:d0:dc:9a:b3:b1:d5:
         51:72:2e:22:21:69:de:0c:19:2a:dc:10:08:ee:0f:34:2f:d4:
         e7:94:84:41:73:2f:8c:ff:13:da:a1:b5:60:92:e2:ee:1c:fd:
         98:8e:e1:aa:5a:39:d2:8b:6d:a1:83:ca:c5:f8:ad:03:1f:af:
         55:87:01:0b:f6:6e:b0:51:44:2f:d4:d9:af:f7:37:77:37:43:
         41:3c:b0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:45:37 2026 by rpki-client