Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft
File:                     D2991FF0EF094685597EA5146C4730F0270A9201.mft (raw, json)
Hash identifier:          jCwESAIqG4VzLF6AeHTSaO7b9wJWPVEuJKrN8Jbl+qQ=
Subject key identifier:   D7:BF:1F:BC:60:14:CE:1C:6C:E6:77:31:25:1A:34:7D:AA:53:1C:62
Authority key identifier: D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01
Certificate issuer:       /CN=D2991FF0EF094685597EA5146C4730F0270A9201
Certificate serial:       4F924555753FE90E5B94F54F29696E1C2A298846
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft
Manifest number:          0299
Signing time:             Thu 26 Mar 2026 20:59:57 +0000
Manifest this update:     Thu 26 Mar 2026 20:54:57 +0000
Manifest next update:     Fri 27 Mar 2026 22:52:57 +0000
Files and hashes:         1: D2991FF0EF094685597EA5146C4730F0270A9201.crl (hash: qbqjwK95wyJ0yO65fxXE1OBFRlNzJ2s0yy+28N+/SoU=)
                          2: 3137372e38342e32342e302f32322d3332203d3e20323632353737.roa (hash: C0u1aT3LDMhL5SLNpfi4dKOK4v/xmo0BwWf2GUw/OvQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl
                          rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 22:52:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:92:45:55:75:3f:e9:0e:5b:94:f5:4f:29:69:6e:1c:2a:29:88:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2991FF0EF094685597EA5146C4730F0270A9201
        Validity
            Not Before: Mar 26 20:54:57 2026 GMT
            Not After : Mar 27 22:52:57 2026 GMT
        Subject: CN=D7BF1FBC6014CE1C6CE67731251A347DAA531C62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c3:36:de:fe:b8:09:1c:37:4f:80:ad:e5:71:
                    fb:33:59:bc:7d:ab:02:30:53:d7:18:fb:56:9b:3e:
                    ba:3a:2d:f7:c3:65:9f:74:7e:c4:71:c5:e3:c6:38:
                    f2:ca:2c:03:a6:72:0f:e9:05:a9:de:7a:74:2b:ba:
                    dd:af:7f:93:5e:fd:72:06:92:09:db:e5:06:d6:e3:
                    5c:95:ac:2e:61:5a:e6:26:c3:62:19:a8:08:99:19:
                    9e:05:bf:71:23:98:cb:35:cd:2b:a5:77:1e:54:6d:
                    a0:3a:71:b0:a0:2c:9e:d4:f2:85:7c:55:f2:2a:15:
                    5e:18:6b:eb:0c:71:ee:11:da:96:4a:14:b1:fc:c1:
                    8f:7e:8e:c5:30:5a:0d:21:8a:89:86:fa:76:4f:b1:
                    1c:75:52:42:64:99:f4:9e:9f:37:ae:32:f8:81:49:
                    4f:09:b9:c1:64:f1:e4:80:5b:fb:78:cb:35:42:09:
                    86:c6:dd:44:f0:43:e4:e4:29:ec:13:0f:d9:de:f6:
                    63:1d:24:c3:89:cd:c5:13:93:20:aa:f7:48:16:c3:
                    8f:98:bc:b2:ff:c8:98:98:68:34:2f:67:e1:a2:5f:
                    0d:8d:0d:14:8c:db:36:a1:23:ed:c1:43:11:e4:fd:
                    ac:46:ab:c8:22:53:26:d5:d3:02:99:c4:20:5c:ff:
                    26:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BF:1F:BC:60:14:CE:1C:6C:E6:77:31:25:1A:34:7D:AA:53:1C:62
            X509v3 Authority Key Identifier:
                keyid:D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:71:9f:0f:c9:16:a8:f2:29:e8:55:3f:36:f4:74:7b:62:ab:
         b7:23:9a:c6:89:1a:86:66:37:48:78:e6:d1:c6:c7:28:b2:ba:
         f6:89:cc:ac:84:5f:47:2e:83:20:92:58:0d:34:fd:e3:e2:8b:
         74:af:19:72:68:1a:c8:e2:c2:01:39:8e:3c:54:c0:f0:c6:d0:
         99:a0:df:c9:ce:05:8a:b4:6b:a2:c0:7c:3c:b8:26:8f:77:f3:
         ff:cf:78:22:fd:ab:71:2d:4d:4a:26:ff:7e:4f:18:50:14:ce:
         d1:4f:79:bb:34:aa:93:ae:1a:84:fd:86:67:c2:25:11:b6:54:
         34:28:00:90:6e:8d:ea:99:c7:a7:b2:f3:14:af:15:92:4b:a0:
         45:a4:d4:f5:20:e9:ba:86:89:d4:c0:cc:b2:b6:f8:85:23:ff:
         c0:ae:d2:97:8d:98:ee:45:a0:4a:bd:8d:37:c2:4e:3b:45:b8:
         35:f2:c3:87:85:e7:bb:ba:40:fd:99:22:96:0b:27:f3:8a:e0:
         1d:fd:d6:4d:c9:22:80:63:65:88:2e:70:57:7f:9b:55:23:76:
         a0:f2:87:0c:7c:07:b4:14:aa:6f:2c:87:d7:8c:0b:0e:dd:09:
         69:0b:33:61:6b:6f:df:76:90:b9:81:3a:9c:5f:bf:4a:59:be:
         c9:37:2c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:02:50 2026 by rpki-client