Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3thFF2xH21QKA7skKqFf66ZKKbAS4YXN9cnKpmgG97/0/2CAB1C289EF59800412C4E92F4D6B555D8A67C4D.mft
File:                     2CAB1C289EF59800412C4E92F4D6B555D8A67C4D.mft (raw, json)
Hash identifier:          dlodJ9VjkC3KPgNmlVdRCHrxuIGIEbAWLSu4oNaQ2tk=
Subject key identifier:   99:23:9C:DA:09:3D:D5:CC:E7:F4:2B:11:9D:99:98:AC:8F:52:A4:10
Authority key identifier: 2C:AB:1C:28:9E:F5:98:00:41:2C:4E:92:F4:D6:B5:55:D8:A6:7C:4D
Certificate issuer:       /CN=2CAB1C289EF59800412C4E92F4D6B555D8A67C4D
Certificate serial:       3D236373912B6C4738BBCE3D5416BF1EAE85F44E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAB1C289EF59800412C4E92F4D6B555D8A67C4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3thFF2xH21QKA7skKqFf66ZKKbAS4YXN9cnKpmgG97/0/2CAB1C289EF59800412C4E92F4D6B555D8A67C4D.mft
Manifest number:          1D
Signing time:             Fri 24 Jul 2026 02:59:17 +0000
Manifest this update:     Fri 24 Jul 2026 02:54:17 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:17 +0000
Files and hashes:         1: 2CAB1C289EF59800412C4E92F4D6B555D8A67C4D.crl (hash: NJyTMFcB+dDU1+3J0gjxtOAnbUKQKexBhaquVF8P/Is=)
                          2: 323830343a353838383a3a2f33322d3332203d3e20323638313330.roa (hash: XpOjkriMLpeYBwgLe2vsMIsQKuO2sLNC+3Vdv4RUlx4=)
                          3: 34352e3136392e3230382e302f32322d3232203d3e20323638313330.roa (hash: Vo5nUg4g+7c5iNtX0p0+I9CsbwieHxWKFkGB+9+fxaA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3thFF2xH21QKA7skKqFf66ZKKbAS4YXN9cnKpmgG97/0/2CAB1C289EF59800412C4E92F4D6B555D8A67C4D.crl
                          rsync://rpki-repo.registro.br/repo/5T3thFF2xH21QKA7skKqFf66ZKKbAS4YXN9cnKpmgG97/0/2CAB1C289EF59800412C4E92F4D6B555D8A67C4D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAB1C289EF59800412C4E92F4D6B555D8A67C4D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:23:63:73:91:2b:6c:47:38:bb:ce:3d:54:16:bf:1e:ae:85:f4:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CAB1C289EF59800412C4E92F4D6B555D8A67C4D
        Validity
            Not Before: Jul 24 02:54:17 2026 GMT
            Not After : Jul 25 05:00:17 2026 GMT
        Subject: CN=99239CDA093DD5CCE7F42B119D9998AC8F52A410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:8a:5e:a2:b6:ee:85:e6:e1:32:37:16:d3:1b:
                    7b:48:ce:82:2a:bc:5d:a1:76:4d:26:00:31:11:53:
                    89:d5:11:28:a9:2a:2a:9f:68:61:d4:ff:6a:80:b9:
                    da:2b:5b:e5:dd:2a:8a:7b:bf:84:25:f8:86:ee:5c:
                    68:98:c4:fa:77:55:5e:3f:e3:38:65:b1:99:6e:6a:
                    4c:2f:04:69:cf:c7:3d:cc:6f:12:06:dd:68:04:37:
                    fc:fd:3d:a1:9f:73:82:50:c6:49:46:59:f3:ea:3e:
                    fc:a4:59:a0:27:7a:d3:df:7f:fa:a8:ee:26:fd:05:
                    6b:5e:d0:bf:ca:08:c4:bc:ee:9f:98:89:40:6c:d1:
                    11:01:c8:2c:b5:ae:10:b1:65:eb:5e:cc:d4:c2:80:
                    70:c1:13:d5:d1:d3:ca:7a:84:01:08:25:86:04:de:
                    5c:e2:67:b6:06:c0:40:87:bf:a6:8b:06:2a:4f:e1:
                    7d:04:67:83:7f:ad:2a:9b:6b:27:23:a8:fa:49:4a:
                    e2:29:df:e1:4c:3c:51:30:0e:9b:a6:d6:b1:4d:03:
                    59:ca:0e:d3:32:53:ab:60:90:54:1e:d9:b3:d2:d7:
                    48:8b:3c:f4:e5:9b:79:e6:13:34:7f:eb:df:25:9f:
                    a8:60:bc:35:7c:87:2e:a8:cf:14:26:a1:12:92:7a:
                    f8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:23:9C:DA:09:3D:D5:CC:E7:F4:2B:11:9D:99:98:AC:8F:52:A4:10
            X509v3 Authority Key Identifier:
                keyid:2C:AB:1C:28:9E:F5:98:00:41:2C:4E:92:F4:D6:B5:55:D8:A6:7C:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3thFF2xH21QKA7skKqFf66ZKKbAS4YXN9cnKpmgG97/0/2CAB1C289EF59800412C4E92F4D6B555D8A67C4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAB1C289EF59800412C4E92F4D6B555D8A67C4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3thFF2xH21QKA7skKqFf66ZKKbAS4YXN9cnKpmgG97/0/2CAB1C289EF59800412C4E92F4D6B555D8A67C4D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:1a:70:61:1e:52:af:52:d0:85:ad:56:72:47:72:07:61:4d:
         13:2a:9b:e7:22:d5:53:eb:44:53:88:8b:eb:92:7d:58:ba:66:
         ac:5b:48:30:cc:ba:8f:8c:d0:a9:82:29:58:c9:75:5b:dd:d6:
         86:5a:ed:05:e9:29:93:c4:8e:48:15:a9:67:0f:4e:22:a9:7d:
         12:44:a0:40:aa:34:16:be:23:58:b2:01:3c:8a:00:31:79:e7:
         23:fa:63:d9:31:92:b4:b2:25:78:c5:ed:08:0c:89:5b:a7:bc:
         d4:8f:18:04:c7:f6:6d:51:23:34:cf:dd:28:11:b2:cb:ed:4e:
         5d:a2:d2:35:f1:6b:02:64:09:69:65:1b:93:e6:ac:ea:a5:5d:
         62:32:91:e1:86:38:e4:e7:45:75:12:c1:91:f4:8d:ce:4a:05:
         0e:95:b8:fc:0a:48:20:00:b2:e5:cf:83:f6:ee:a7:b6:04:55:
         40:cc:46:e2:c4:42:a9:03:e6:05:02:c8:cd:f8:a4:a8:da:ca:
         7e:d3:67:b4:cd:1d:f1:aa:7f:dd:e1:97:c9:b3:ab:9b:dd:85:
         f0:80:c8:42:e8:11:82:94:29:6f:48:96:75:4e:54:61:ac:c3:
         54:0a:f9:23:c1:59:41:78:ee:94:e4:13:2b:d5:5d:8a:ba:06:
         05:03:2c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:53:35 2026 by rpki-client