Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft
File:                     8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft (raw, json)
Hash identifier:          g1jprZ7XGc6GmRtx7fYYllgCeW4lqmP4Vd168mO1XeU=
Subject key identifier:   65:12:75:8B:F2:7C:9A:97:1D:E4:A9:B0:98:12:D9:82:62:BC:51:3A
Authority key identifier: 8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
Certificate issuer:       /CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Certificate serial:       44D572D0B400107755813A4AA0994ED6B1E1BB46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft
Manifest number:          02AE
Signing time:             Thu 26 Mar 2026 06:50:21 +0000
Manifest this update:     Thu 26 Mar 2026 06:45:21 +0000
Manifest next update:     Fri 27 Mar 2026 07:16:21 +0000
Files and hashes:         1: 3139322e3134342e36362e302f32332d3233203d3e20323636313738.roa (hash: D4627DR8A/Yx8sOp5ZyW7rLwAu5i+B/sIX2FXoXySBU=)
                          2: 3133382e39372e3134352e302f32342d3234203d3e20323636313738.roa (hash: HiCD2aNFCD2gdPv7DAFPyFKNJzqsvNngQzMJGV9Hy3A=)
                          3: 3139322e3134342e36352e302f32342d3234203d3e20323636313738.roa (hash: Q0IfG4q0aaE6deEnWBfPSgqMy370Uc0PPGVTB7I0T4Y=)
                          4: 3139322e3134342e36342e302f32342d3234203d3e20323636313738.roa (hash: Y7wWmCKJQWPPPvEuNiGWiJC32jLM3Rj077YoMp/O8rQ=)
                          5: 8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl (hash: ce5K6aNhxiXQLHhaAvYu+12cO3U68dUmcyQ9hkuv6Tc=)
                          6: 3139322e3134342e36342e302f32332d3233203d3e20323636313738.roa (hash: i/GAFmfbSdcJ6NioCdEiixxEfCz8mRf1MONaM2ODrXg=)
                          7: 3133382e39372e3134362e302f32342d3234203d3e20323636313738.roa (hash: 7334nlQg/xpg15NrQIjdp536ocTOIU6vJfkWVg6TQMU=)
                          8: 3139322e3134342e36362e302f32342d3234203d3e20323636313738.roa (hash: zucAfQu0ifHpmqC5xLZPVAPRi4zTTLUEUK9iVex/Cks=)
                          9: 3133382e39372e3134372e302f32342d3234203d3e20323636313738.roa (hash: UoF7SOSrCd44zeXktu5ZCPyIu5hdVWA41pO5DzfhYJk=)
                          10: 3133382e39372e3134342e302f32342d3234203d3e20323636313738.roa (hash: MQSsEBmbTFs+u836IYuAxkGUz5TinycGzPBh0NSq8PI=)
                          11: 3139322e3134342e36342e302f32322d3232203d3e20323636313738.roa (hash: S1bJy5QJE0LNVISg6s/zzbDwrWW/KG0G15HkJX2hzyE=)
                          12: 3139322e3134342e36372e302f32342d3234203d3e20323636313738.roa (hash: EMJjEIPjqb0pJuc8k5iqWPchZ1P4du9stTcPeibH9XA=)
                          13: 323830343a336265343a3a2f33322d3438203d3e20323636313738.roa (hash: pbTRcYqu0xp7wJ3/QTzOzuX2E0FB18LAxEe5+ZoQvPI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl
                          rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 07:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d5:72:d0:b4:00:10:77:55:81:3a:4a:a0:99:4e:d6:b1:e1:bb:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
        Validity
            Not Before: Mar 26 06:45:21 2026 GMT
            Not After : Mar 27 07:16:21 2026 GMT
        Subject: CN=6512758BF27C9A971DE4A9B09812D98262BC513A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1f:87:a0:12:30:33:b9:d8:db:86:5b:c1:19:
                    67:6e:c9:3c:63:2b:e3:75:95:3a:7d:62:76:b9:4e:
                    37:23:38:10:a4:86:09:ba:91:70:66:57:84:3c:e6:
                    77:06:82:5a:4c:2d:0f:d2:5b:ae:95:d6:ef:c0:7f:
                    ec:b2:a1:fd:dd:e9:7a:b2:86:b2:fc:8e:0f:d8:35:
                    0d:60:d2:4e:6d:98:89:d4:20:45:23:77:b4:53:8f:
                    e4:ff:93:4e:4b:82:4a:15:7a:e2:4f:a9:ca:4c:4e:
                    0e:18:32:70:1a:7f:5c:80:8f:0f:e8:6f:a2:e3:e3:
                    23:55:a2:1c:71:25:77:c9:f1:48:ee:ce:0a:40:4d:
                    d1:96:38:bf:30:24:d2:96:30:dc:3d:bc:0f:31:09:
                    f3:00:03:a5:eb:37:da:41:91:e5:6e:90:75:8d:73:
                    2f:56:a5:e0:50:01:a4:f6:79:15:8a:1b:6c:77:49:
                    d6:ed:ec:08:e2:3e:2b:4f:c2:12:b6:88:33:bf:d2:
                    a3:57:f8:00:42:0a:81:a5:6a:ca:fe:94:34:fc:28:
                    89:03:41:2b:32:c8:d5:5e:1d:aa:9e:c0:77:3f:b1:
                    d0:a9:55:c0:18:e9:f6:54:e8:5d:98:d4:99:41:f8:
                    27:62:1c:5c:29:5a:57:4f:df:e9:4c:0c:1f:86:41:
                    b6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:12:75:8B:F2:7C:9A:97:1D:E4:A9:B0:98:12:D9:82:62:BC:51:3A
            X509v3 Authority Key Identifier:
                keyid:8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:5e:88:77:56:ec:4c:a2:bc:08:1f:26:cb:69:53:7f:13:bb:
         17:68:ad:1e:7c:93:f0:f3:8b:22:fc:27:cd:7a:de:ac:36:a4:
         9c:e8:3c:2b:21:7d:6b:82:20:ca:07:92:df:2b:5e:56:ca:ef:
         87:64:31:2a:bf:15:9b:6d:3d:3a:5e:04:85:95:0e:38:54:0b:
         1e:57:08:2f:f8:9c:89:79:6e:db:31:c2:b7:0e:cd:2f:2a:18:
         3a:e1:eb:00:fc:0a:f4:65:41:8a:53:22:af:08:55:fb:6a:53:
         53:a5:f1:e1:65:ef:1a:b7:dd:de:c3:80:6f:36:c3:14:ec:d7:
         96:bc:52:97:25:4e:fa:50:c1:f7:fd:fe:27:d7:3b:ac:30:0f:
         0f:d8:cb:9a:dd:8c:5c:af:ae:24:48:e8:45:b2:25:9a:11:37:
         dd:ae:14:b5:3c:20:e7:c2:54:dc:17:53:70:63:84:75:95:b7:
         21:ee:5b:9e:8c:55:97:ef:c6:fa:a1:2b:f0:9e:93:07:79:da:
         11:fe:f8:cb:92:ba:9b:c8:0f:04:11:17:02:01:94:bb:cc:19:
         53:6a:7a:06:1b:bd:c9:cd:81:78:9c:fe:e3:1c:ac:51:df:21:
         b2:ea:55:cb:ca:ed:e8:f5:02:25:b0:78:cd:99:54:a0:5b:ea:
         45:95:22:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:03:09 2026 by rpki-client