Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft
File:                     CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft (raw, json)
Hash identifier:          iqK9W6ywgHf/Ikm12QzNP1WfAxnKhC8BeIGWnyjSfUo=
Subject key identifier:   1F:FA:F5:EF:01:02:8B:5A:7D:F5:4F:EF:3F:6D:F6:F8:81:65:F5:42
Authority key identifier: CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9
Certificate issuer:       /CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9
Certificate serial:       4C55DF90975965E7FF9E43C8B33B94D640817A8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft
Manifest number:          03C2
Signing time:             Thu 26 Mar 2026 13:51:02 +0000
Manifest this update:     Thu 26 Mar 2026 13:46:02 +0000
Manifest next update:     Fri 27 Mar 2026 16:33:02 +0000
Files and hashes:         1: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl (hash: TYSuhki2a411uUZP1uo8MntPiiNl9+FbVHlr5Fq8Y5Q=)
                          2: 3137372e3232322e3233322e302f32312d3233203d3e20323633343030.roa (hash: 7KaEu9sw42ksNhOklCsT9hgtSIgophy55hML3k/smrA=)
                          3: 323830343a313561343a3a2f33322d3434203d3e20323633343030.roa (hash: SXY+DqRaOha9W6rUgVkvX8kWfmFQeH74nzcZCLBrSxg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl
                          rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:55:df:90:97:59:65:e7:ff:9e:43:c8:b3:3b:94:d6:40:81:7a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9
        Validity
            Not Before: Mar 26 13:46:02 2026 GMT
            Not After : Mar 27 16:33:02 2026 GMT
        Subject: CN=1FFAF5EF01028B5A7DF54FEF3F6DF6F88165F542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:83:4b:d0:91:d7:e6:e6:0e:43:f2:3d:a8:39:
                    5a:ea:cb:19:91:d6:0f:cd:e1:e0:b2:77:e9:a4:bd:
                    2f:b1:4b:6e:8f:2a:62:06:c8:29:52:2c:62:16:3d:
                    cb:2f:a3:4d:49:cf:96:32:79:fd:b9:eb:c6:81:84:
                    96:e7:b2:f4:26:3e:bf:aa:fc:c1:2a:f3:dc:bb:71:
                    77:be:b3:fd:4f:bf:c4:8c:f5:c9:d6:30:03:ad:d2:
                    fe:26:63:aa:89:7f:49:3d:c0:bc:aa:a4:49:3e:7c:
                    49:71:84:52:b4:65:cb:d6:74:90:0b:4f:d1:de:09:
                    51:d1:ee:31:48:86:50:3b:f6:a2:11:07:a5:59:bc:
                    e5:58:ba:b2:0f:71:6c:eb:f8:cf:c2:8a:ab:cf:f8:
                    6a:7b:15:8c:50:eb:10:93:79:d0:c2:65:45:eb:6e:
                    eb:80:d0:e0:54:7e:98:89:db:b7:83:81:fc:2b:27:
                    4a:dc:21:86:79:22:33:62:8f:de:c6:44:4a:18:96:
                    18:82:d6:3d:4e:99:8e:78:7e:e5:9b:d1:08:c2:01:
                    e2:90:fa:c9:38:fe:b2:46:15:d3:e8:b3:d1:5e:70:
                    fd:35:18:bf:a5:c9:fd:b0:55:8b:f0:ba:9b:47:16:
                    03:d3:51:61:ce:e2:06:a7:8b:b1:b8:9c:97:6f:c0:
                    6b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FA:F5:EF:01:02:8B:5A:7D:F5:4F:EF:3F:6D:F6:F8:81:65:F5:42
            X509v3 Authority Key Identifier:
                keyid:CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:5d:66:17:38:d2:a2:32:0c:ca:8b:9c:73:15:45:42:45:b9:
         e3:26:a8:bc:4a:66:57:28:ac:12:ed:7f:c4:76:50:60:07:51:
         70:19:59:c2:cd:02:19:b5:17:f1:5a:e4:21:7b:16:ca:d9:ac:
         2d:72:35:cc:d5:13:28:ff:23:e4:56:b4:5f:97:f1:a9:2e:9b:
         93:95:60:61:5b:aa:96:86:80:52:5f:db:fd:f1:2f:0e:71:cf:
         b6:fa:67:87:8a:4f:e7:17:98:bc:f6:f6:8b:06:15:b7:3d:1e:
         6a:10:b8:79:0a:83:65:9e:40:31:ea:a1:55:ae:8f:48:8d:4b:
         dc:43:61:9d:87:9e:87:8d:a1:d4:7d:b2:52:64:52:0a:c7:d8:
         98:b2:6d:8f:0b:f9:26:76:16:a1:b8:ca:9e:1f:8e:d2:e3:c8:
         94:b1:d8:70:a9:d2:93:c7:0e:a9:22:19:f0:65:10:86:61:c7:
         a4:b2:2d:77:88:e0:93:98:90:4d:c1:c2:00:e6:e6:ac:7e:0f:
         9e:54:e8:f9:7c:2c:0f:22:c0:99:3a:9d:04:69:68:d0:08:16:
         fb:88:24:32:c8:b2:39:84:2b:2d:e6:e7:59:32:ea:b1:cb:3b:
         64:8f:af:65:23:54:32:a3:64:1a:c4:f1:2d:dd:07:02:70:72:
         21:46:e5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:38:34 2026 by rpki-client