Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/987C49173148EC0A164D79BE3F0B7F94AF367573.mft
File:                     987C49173148EC0A164D79BE3F0B7F94AF367573.mft (raw, json)
Hash identifier:          DqGjm1fR0ErcgZGiQIT3DBKl2+bIBfjKCe31DFSnMEQ=
Subject key identifier:   2A:D2:C2:E0:D0:BA:94:84:FA:AB:61:A3:19:21:9E:C5:79:C0:76:3D
Authority key identifier: 98:7C:49:17:31:48:EC:0A:16:4D:79:BE:3F:0B:7F:94:AF:36:75:73
Certificate issuer:       /CN=987C49173148EC0A164D79BE3F0B7F94AF367573
Certificate serial:       1963FF6164627AA3855EBE63436AC28876163F0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/987C49173148EC0A164D79BE3F0B7F94AF367573.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/987C49173148EC0A164D79BE3F0B7F94AF367573.mft
Manifest number:          9F
Signing time:             Wed 25 Mar 2026 14:27:11 +0000
Manifest this update:     Wed 25 Mar 2026 14:22:11 +0000
Manifest next update:     Thu 26 Mar 2026 16:45:11 +0000
Files and hashes:         1: 987C49173148EC0A164D79BE3F0B7F94AF367573.crl (hash: SokaNjD17eHgoL7Wa463p//acS9CVbAL/1Fa+pVZufo=)
                          2: 323830343a393636343a3a2f33322d3334203d3e20323734333334.roa (hash: XIGTCoQg/BSob8oqo96n3uBMyrck0rCAY0jz87O7OUY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/987C49173148EC0A164D79BE3F0B7F94AF367573.crl
                          rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/987C49173148EC0A164D79BE3F0B7F94AF367573.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/987C49173148EC0A164D79BE3F0B7F94AF367573.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 16:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:63:ff:61:64:62:7a:a3:85:5e:be:63:43:6a:c2:88:76:16:3f:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=987C49173148EC0A164D79BE3F0B7F94AF367573
        Validity
            Not Before: Mar 25 14:22:11 2026 GMT
            Not After : Mar 26 16:45:11 2026 GMT
        Subject: CN=2AD2C2E0D0BA9484FAAB61A319219EC579C0763D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:58:5d:35:69:0d:ab:44:55:bd:95:d4:0b:73:
                    3c:a4:86:43:40:a7:60:ae:a9:e4:23:8a:79:db:30:
                    8b:a4:02:11:78:5e:ea:87:c8:1f:1c:0a:8d:56:6b:
                    c3:43:64:b1:54:72:00:37:34:45:fa:f3:80:96:a4:
                    b6:7e:55:3b:8c:a0:63:8a:1d:12:9b:f9:a3:1f:bf:
                    db:dd:c6:0d:5c:02:5d:dd:d0:99:20:38:6c:2f:ed:
                    ec:29:29:d2:dc:1b:ed:8a:50:bd:b8:27:b4:ab:17:
                    5f:90:64:a4:e2:94:3d:a3:62:8a:76:5c:76:40:85:
                    91:02:40:97:33:f5:da:6e:9d:94:f4:07:a6:f0:69:
                    6a:43:7c:db:af:e7:ab:1a:1a:3f:4d:be:fc:04:73:
                    f3:5f:10:4c:5a:f0:82:cd:56:fe:ed:93:80:ac:74:
                    35:df:61:f7:8f:21:32:8d:ef:76:97:81:49:f7:ad:
                    70:93:b9:29:62:60:d8:ec:1a:4a:40:89:6f:41:60:
                    53:f5:c9:3b:78:77:ff:fc:9e:4c:44:a0:5f:ce:a1:
                    74:29:f3:35:00:d4:69:80:9f:55:02:04:93:bc:77:
                    4a:9c:af:42:82:1c:6f:bb:46:7f:b2:31:11:4e:79:
                    11:a2:fc:cc:fe:d5:94:22:be:97:cc:55:65:40:7f:
                    d6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D2:C2:E0:D0:BA:94:84:FA:AB:61:A3:19:21:9E:C5:79:C0:76:3D
            X509v3 Authority Key Identifier:
                keyid:98:7C:49:17:31:48:EC:0A:16:4D:79:BE:3F:0B:7F:94:AF:36:75:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/987C49173148EC0A164D79BE3F0B7F94AF367573.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/987C49173148EC0A164D79BE3F0B7F94AF367573.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/987C49173148EC0A164D79BE3F0B7F94AF367573.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ae:51:04:b9:c6:30:f6:1b:69:18:ea:b0:f7:00:54:b3:04:
         37:cb:d4:f2:90:3a:0a:3f:33:72:13:c0:db:84:71:5b:74:0f:
         e8:a1:86:9c:b1:5f:b6:87:93:78:9a:61:35:ba:60:3a:b8:78:
         fd:7e:59:3d:2c:a0:b4:66:02:8b:5b:d9:95:b5:dc:28:c1:56:
         b5:28:7d:62:6f:1f:17:76:40:38:35:04:ae:2d:5d:b5:c4:50:
         68:45:b4:07:9f:ac:07:0a:15:33:57:29:7e:eb:f2:37:6d:8c:
         8d:c1:b4:23:ea:9e:5b:d8:dc:89:19:1e:f4:a3:31:ca:30:70:
         9f:9b:0a:ab:e0:3c:ae:47:1b:10:68:67:50:5f:9a:00:49:17:
         1d:96:43:4b:05:2f:95:19:da:0a:c5:c5:29:f9:fe:09:ab:1c:
         81:62:9c:3b:e5:25:05:25:8b:06:27:89:8b:e2:f2:8f:2c:06:
         c3:4e:33:71:02:e1:7f:10:5b:df:4b:d5:b7:9e:c3:a9:c9:ac:
         6d:5f:03:80:c4:ef:96:3e:56:f2:02:a0:71:a6:aa:32:0d:bf:
         17:f6:a3:7b:ba:b0:a9:cf:13:b8:27:7d:31:7a:90:40:f3:19:
         78:2a:3a:f3:b2:d9:35:20:99:45:cd:64:1e:bd:13:fc:07:74:
         d3:e0:f1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:52:17 2026 by rpki-client