Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/51rP7fVEa68Yk92mfRznp8gYveqQ7bzTNZWogh8asGwd/0/2A17BA4545BE1F2D2EACE11546AB40974E43C371.mft
File:                     2A17BA4545BE1F2D2EACE11546AB40974E43C371.mft (raw, json)
Hash identifier:          bp/KhhSKKKqmxAiX578IowYgY5UwwqXl/MH7NiLK9CY=
Subject key identifier:   D7:B4:6B:74:94:FA:72:C5:16:56:CF:BC:A5:9C:8C:51:C6:DC:11:FD
Authority key identifier: 2A:17:BA:45:45:BE:1F:2D:2E:AC:E1:15:46:AB:40:97:4E:43:C3:71
Certificate issuer:       /CN=2A17BA4545BE1F2D2EACE11546AB40974E43C371
Certificate serial:       43BCDD10AC8022363C36302A378F0CCC4DD2E532
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A17BA4545BE1F2D2EACE11546AB40974E43C371.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51rP7fVEa68Yk92mfRznp8gYveqQ7bzTNZWogh8asGwd/0/2A17BA4545BE1F2D2EACE11546AB40974E43C371.mft
Manifest number:          5C
Signing time:             Fri 24 Jul 2026 12:47:51 +0000
Manifest this update:     Fri 24 Jul 2026 12:42:51 +0000
Manifest next update:     Sat 25 Jul 2026 15:36:51 +0000
Files and hashes:         1: 2A17BA4545BE1F2D2EACE11546AB40974E43C371.crl (hash: phd4KVMrFx5jAwbc9Jg2Xi2Y/AZHrJRzhNDfg7TkhFg=)
                          2: 323830343a393562633a3a2f33322d313238203d3e20323734353432.roa (hash: FQaZooBpoVFpZserhejOUp1JZLGHQv8t4h6uUH6ilCo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51rP7fVEa68Yk92mfRznp8gYveqQ7bzTNZWogh8asGwd/0/2A17BA4545BE1F2D2EACE11546AB40974E43C371.crl
                          rsync://rpki-repo.registro.br/repo/51rP7fVEa68Yk92mfRznp8gYveqQ7bzTNZWogh8asGwd/0/2A17BA4545BE1F2D2EACE11546AB40974E43C371.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A17BA4545BE1F2D2EACE11546AB40974E43C371.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:bc:dd:10:ac:80:22:36:3c:36:30:2a:37:8f:0c:cc:4d:d2:e5:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A17BA4545BE1F2D2EACE11546AB40974E43C371
        Validity
            Not Before: Jul 24 12:42:51 2026 GMT
            Not After : Jul 25 15:36:51 2026 GMT
        Subject: CN=D7B46B7494FA72C51656CFBCA59C8C51C6DC11FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:62:5d:c6:93:8c:2d:dd:06:d8:aa:83:92:01:
                    b7:2e:9e:56:a4:09:93:84:8f:a8:51:86:0a:d9:37:
                    1e:0a:1d:89:a6:48:ea:70:57:81:50:8a:e1:64:39:
                    26:71:c5:d4:0d:1e:8b:16:c1:01:ae:eb:4c:73:ec:
                    46:d7:ad:ec:f8:1a:e5:54:d3:83:de:4f:6c:f7:fe:
                    ba:6e:b8:bc:c8:2d:96:08:2f:b2:46:37:98:ba:75:
                    7c:ed:6a:4c:75:0d:c7:1e:18:db:0a:ed:12:8a:1a:
                    7e:5d:8c:91:6b:11:04:4b:f6:c0:1f:49:51:d2:a7:
                    75:e8:61:fd:8e:eb:64:b5:b5:88:1b:bd:f1:f7:3c:
                    5a:d8:0e:64:5d:ed:34:b5:b8:ee:97:ff:eb:5f:cb:
                    5c:53:a0:bd:bd:ed:fc:25:61:a4:32:df:a6:26:02:
                    6c:3b:49:00:53:62:92:e5:97:c5:1d:11:9b:ce:45:
                    d6:fb:a6:ee:09:29:40:c8:5a:00:7f:1a:f1:a8:60:
                    95:45:75:28:b0:fe:60:0b:79:29:06:72:dd:6f:9d:
                    c2:f5:75:46:11:a6:36:f3:4c:9f:b3:aa:a5:a2:4a:
                    47:ab:41:2a:48:27:9a:63:a1:07:da:ca:fb:87:cd:
                    8d:69:69:e4:b1:3e:bf:8e:36:05:0c:b4:83:59:5b:
                    cd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B4:6B:74:94:FA:72:C5:16:56:CF:BC:A5:9C:8C:51:C6:DC:11:FD
            X509v3 Authority Key Identifier:
                keyid:2A:17:BA:45:45:BE:1F:2D:2E:AC:E1:15:46:AB:40:97:4E:43:C3:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51rP7fVEa68Yk92mfRznp8gYveqQ7bzTNZWogh8asGwd/0/2A17BA4545BE1F2D2EACE11546AB40974E43C371.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A17BA4545BE1F2D2EACE11546AB40974E43C371.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51rP7fVEa68Yk92mfRznp8gYveqQ7bzTNZWogh8asGwd/0/2A17BA4545BE1F2D2EACE11546AB40974E43C371.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:21:7e:f4:8d:08:48:5e:12:df:dc:9f:87:36:46:61:07:0e:
         ef:fa:c9:83:32:f5:48:b8:31:c3:9f:05:b5:c4:db:11:d0:ca:
         4e:1c:df:ef:db:13:4a:3f:1d:68:58:f2:f0:bf:04:04:29:1d:
         5b:b0:ac:32:9b:b5:7b:cd:37:59:14:ce:70:a4:fd:e3:d7:49:
         cb:74:ae:9e:2b:fe:ff:0b:1e:be:20:06:33:f3:4a:0c:37:c4:
         58:a7:e1:f1:7f:7d:88:98:6b:3c:a7:e1:13:ae:dc:89:8d:0a:
         12:9c:96:ae:66:73:3a:80:a8:af:a5:ed:44:03:4a:fe:a4:c6:
         de:66:ea:5e:01:20:0c:d7:83:a3:c4:97:35:65:6d:29:5e:47:
         82:d9:14:9d:d0:18:5d:70:83:c1:5c:6d:97:a5:26:50:c8:2e:
         37:9a:f3:f6:9e:62:1a:09:f9:c6:5b:ea:1c:64:4a:1a:78:28:
         18:78:8b:62:9a:17:89:07:3c:8c:03:64:30:41:c4:bb:32:b9:
         ce:8d:ba:50:6c:a1:82:69:54:b7:7f:ae:9a:2c:8e:39:1a:58:
         a4:bc:5c:da:b7:c3:0c:dc:14:da:2b:3c:d8:7a:4a:6e:7d:40:
         ac:52:cb:08:e3:c4:f8:af:b7:22:4c:bf:b4:4f:62:7a:7a:d7:
         15:14:79:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:20:44 2026 by rpki-client