Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft
File:                     8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft (raw, json)
Hash identifier:          a5UbcNytL33OP0cwEQxjpPTOMO6f43U9NrVais1NZAM=
Subject key identifier:   C4:1A:3F:9E:CB:D4:71:23:2E:E6:7C:44:51:26:FE:37:08:41:CF:17
Authority key identifier: 8A:87:3C:3D:C0:61:82:1F:FE:F1:C2:0E:64:84:51:B8:FE:64:6F:AE
Certificate issuer:       /CN=8A873C3DC061821FFEF1C20E648451B8FE646FAE
Certificate serial:       0ADC7A5D07D9B72F5880697DC67FF8C449F9553D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A873C3DC061821FFEF1C20E648451B8FE646FAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft
Manifest number:          0228
Signing time:             Wed 25 Mar 2026 04:56:36 +0000
Manifest this update:     Wed 25 Mar 2026 04:51:36 +0000
Manifest next update:     Thu 26 Mar 2026 08:21:36 +0000
Files and hashes:         1: 8A873C3DC061821FFEF1C20E648451B8FE646FAE.crl (hash: HwJw043OXTKSf0KznfZMgyPITYsiSszy7gCrdEVqE7o=)
                          2: 323830343a393266383a3a2f33322d3438203d3e20323734373436.roa (hash: xrBw+tyD5bElOqfetil1V/FMPu3k1B6V57Df9jInyxM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.crl
                          rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A873C3DC061821FFEF1C20E648451B8FE646FAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 08:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:dc:7a:5d:07:d9:b7:2f:58:80:69:7d:c6:7f:f8:c4:49:f9:55:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A873C3DC061821FFEF1C20E648451B8FE646FAE
        Validity
            Not Before: Mar 25 04:51:36 2026 GMT
            Not After : Mar 26 08:21:36 2026 GMT
        Subject: CN=C41A3F9ECBD471232EE67C445126FE370841CF17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d9:69:6d:1f:d8:c0:4c:64:ac:94:35:33:fd:
                    1c:67:12:cc:8a:eb:c1:3a:2c:03:71:ee:24:bf:b7:
                    ca:23:cf:09:3c:88:fb:d5:4f:80:69:72:f0:68:93:
                    f1:2d:d4:11:35:9c:a6:1b:0d:8a:66:7b:51:e7:0b:
                    04:75:05:25:47:8b:56:34:34:b7:24:6b:43:4f:19:
                    1e:8e:8e:a2:2e:ce:e8:e4:82:12:f3:83:f8:08:9a:
                    2c:5d:15:6a:f8:07:fc:bf:12:19:c2:c7:e2:91:15:
                    45:b8:36:41:22:29:d8:94:87:43:9b:60:d2:5f:5c:
                    56:ba:4d:fc:03:52:f1:6c:e9:d8:e8:2c:59:f1:67:
                    aa:6f:0c:eb:a4:a7:d6:b1:d1:6e:aa:c6:70:97:f2:
                    a2:cc:73:ea:44:dd:0a:b0:b1:ba:c3:af:cf:c0:08:
                    3c:c6:b2:45:c1:4d:e5:44:f8:0a:20:da:8f:60:b2:
                    1d:38:2f:23:5b:e2:4b:3f:88:6b:d2:1a:b6:a9:74:
                    ba:cf:b9:dd:53:7d:bb:3f:b1:7b:d1:c6:f5:e2:9e:
                    5f:9a:8d:28:94:c2:a5:ec:45:dd:cc:e8:43:2c:f8:
                    0e:0e:b3:d5:4e:7f:f1:2b:5e:39:38:8e:bf:b3:6a:
                    ed:89:74:80:7d:66:88:92:d7:78:39:73:57:82:0e:
                    c8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:1A:3F:9E:CB:D4:71:23:2E:E6:7C:44:51:26:FE:37:08:41:CF:17
            X509v3 Authority Key Identifier:
                keyid:8A:87:3C:3D:C0:61:82:1F:FE:F1:C2:0E:64:84:51:B8:FE:64:6F:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A873C3DC061821FFEF1C20E648451B8FE646FAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:36:63:fb:7b:2c:17:b9:3c:4d:2b:43:11:2a:46:18:30:47:
         3b:62:f3:d6:c5:96:50:22:1e:7f:9a:dc:6f:a8:ae:0c:f2:2b:
         1c:c4:77:a4:38:ed:4a:07:e4:38:12:10:79:c9:77:53:92:19:
         91:f8:27:65:a7:dd:92:f6:65:ab:ab:6b:16:03:8a:8f:52:55:
         bb:80:ea:19:ba:70:d4:09:49:4e:4c:a7:c6:d3:2e:48:a0:8c:
         33:62:32:f9:30:6a:4c:65:13:8c:df:7d:b3:33:9f:dd:3c:18:
         6c:4a:fe:14:2f:1b:1a:25:59:b0:e2:ce:89:f3:98:93:ab:3f:
         78:c4:66:e9:40:e1:84:25:37:1b:d8:c8:45:c2:bf:1b:d6:c7:
         1d:88:d1:5b:fc:2e:19:53:a8:4e:c3:aa:db:de:dc:70:fa:5b:
         fe:56:c6:0d:c4:58:59:f8:f0:ca:a8:e8:65:4f:ce:99:34:a1:
         a8:46:25:63:51:91:e3:08:83:d9:6a:ab:70:14:cf:91:dc:cb:
         55:c7:c3:8b:9d:48:35:ec:72:87:0f:97:02:3e:17:7b:8d:7d:
         4d:50:c3:1c:60:bb:46:7e:69:ac:3c:d5:3f:4d:4f:54:2f:c5:
         0e:76:ce:0b:d8:b9:a0:be:12:20:b5:bf:ab:38:98:9c:52:5c:
         df:0b:6a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:23:38 2026 by rpki-client