Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft
File:                     8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft (raw, json)
Hash identifier:          +67yUniIMyIZRrlFSxlywfHvc1/BSlbehdRrk/rmFSc=
Subject key identifier:   47:CC:7B:AB:59:19:7A:BC:9F:34:27:65:CA:D1:C8:E0:CD:03:BB:15
Authority key identifier: 8A:9C:87:7C:E4:96:B4:F3:FA:BB:A1:D4:99:6C:34:FC:8B:BF:99:BB
Certificate issuer:       /CN=8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB
Certificate serial:       2C5312D3BD02435DC87FBAC552BF469991DFD062
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft
Manifest number:          02D2
Signing time:             Thu 26 Mar 2026 02:21:24 +0000
Manifest this update:     Thu 26 Mar 2026 02:16:24 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:24 +0000
Files and hashes:         1: 323830343a343132343a3a2f33322d313238203d3e20323636303036.roa (hash: sXEB3N632CJdoLkCeni+7IpZM2jJ3mGY/w149wdeu3w=)
                          2: 3133312e3139362e3232342e302f32322d3332203d3e20323636303036.roa (hash: 67sP77oehV8OsJ5C0Di39/vL9cRCepWrYKC3lCcA8nA=)
                          3: 8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl (hash: yymz8XlFKja4YhGdVcJUZ/S7zoMlb1YPB/O11bOLuCk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl
                          rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 06:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:53:12:d3:bd:02:43:5d:c8:7f:ba:c5:52:bf:46:99:91:df:d0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB
        Validity
            Not Before: Mar 26 02:16:24 2026 GMT
            Not After : Mar 27 06:01:24 2026 GMT
        Subject: CN=47CC7BAB59197ABC9F342765CAD1C8E0CD03BB15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bd:7d:45:95:86:3b:a7:30:f1:3c:b8:1a:66:
                    8d:4d:4b:73:5f:3a:24:cd:c3:18:cd:a6:e3:c8:d7:
                    e3:27:1e:5b:fa:cc:f6:9e:af:c4:6a:6b:7d:3d:7d:
                    a5:70:95:98:ce:57:f1:32:f4:aa:38:bd:d0:cd:2d:
                    88:41:a6:bd:df:c5:c9:82:0d:6c:99:a1:d2:3c:9a:
                    52:4b:2e:5a:74:c1:7a:38:a0:2a:19:4c:71:d9:4a:
                    08:56:43:bc:c8:f5:46:fb:73:ed:83:8e:56:af:18:
                    24:eb:07:d1:3b:14:fa:0f:25:51:db:0d:84:b7:c2:
                    48:58:38:3b:e9:b9:bb:69:1f:10:83:36:56:e3:fc:
                    49:29:f8:1f:84:34:a7:1d:cf:83:46:19:14:ab:96:
                    3e:f5:69:3f:e6:14:3a:7e:e6:05:38:cd:32:a7:e0:
                    90:5a:d9:9f:51:3c:be:f9:25:25:c7:ac:c7:e0:df:
                    64:4a:71:87:20:ea:9c:54:3e:86:d7:2b:4e:c1:0b:
                    13:6c:62:dc:6b:50:e0:ee:b4:b2:1a:8b:e6:2f:06:
                    68:61:c3:8b:1d:2c:30:d2:bc:7c:d9:2e:a3:7d:5c:
                    62:35:34:b1:cb:86:e0:96:47:9c:11:cd:6e:95:5c:
                    6e:83:31:6f:69:ee:d4:58:e8:29:6c:73:2d:29:23:
                    c2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:CC:7B:AB:59:19:7A:BC:9F:34:27:65:CA:D1:C8:E0:CD:03:BB:15
            X509v3 Authority Key Identifier:
                keyid:8A:9C:87:7C:E4:96:B4:F3:FA:BB:A1:D4:99:6C:34:FC:8B:BF:99:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:dd:7b:5b:6a:e9:c7:c3:35:32:0d:ba:1c:63:cb:83:cc:2a:
         d6:b5:e0:63:cb:13:66:b8:36:b8:4e:5a:14:f0:84:d2:25:0c:
         e9:98:d0:9e:16:4e:cf:a2:d8:41:b9:16:13:c6:2d:42:ce:d2:
         6d:de:f2:26:50:09:21:42:4a:d5:ab:a5:22:79:94:da:18:a6:
         16:c3:d9:1f:d1:ac:44:db:82:c8:5b:ac:d0:17:d5:b4:eb:46:
         1b:d8:f8:06:c4:53:e9:d7:8b:60:91:ce:61:64:a6:d3:79:cf:
         e4:01:68:85:19:18:8b:02:10:27:83:d4:c9:c2:06:8e:23:12:
         c5:00:e6:90:fc:e4:f0:9c:cb:78:ef:80:aa:30:d4:8e:d3:23:
         8e:60:d9:b8:f5:da:54:27:dc:00:db:9e:6d:e9:37:c1:34:61:
         f1:ad:b3:d6:17:1a:f0:3c:48:a3:7c:aa:c1:86:6e:26:35:bb:
         47:3b:50:d3:69:a7:86:56:29:92:cc:1a:d5:d7:bc:52:b3:4b:
         78:3c:cb:64:93:dd:74:d7:ba:36:e9:53:7b:8b:1c:53:29:00:
         c1:8b:06:23:b9:4b:03:66:b5:49:2b:0a:65:77:01:5b:f0:f6:
         87:e0:b0:f9:83:07:0c:41:aa:62:6d:d3:5c:76:42:be:07:1e:
         e4:4c:aa:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:03:07 2026 by rpki-client