Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft
File:                     2D59905C3FCA5BDA34D7101B088D80451D026C47.mft (raw, json)
Hash identifier:          vuoP4+HHmyHpBHDu3keKR0KzpqrodjV2pa3p1IFuRmU=
Subject key identifier:   B9:DB:8F:56:77:1A:96:11:F4:C5:DD:5D:3D:C7:ED:17:10:38:C6:0B
Authority key identifier: 2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47
Certificate issuer:       /CN=2D59905C3FCA5BDA34D7101B088D80451D026C47
Certificate serial:       380FB0ECB4F309473E7E6544082040A1948C5548
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft
Manifest number:          03FF
Signing time:             Wed 13 May 2026 02:37:33 +0000
Manifest this update:     Wed 13 May 2026 02:32:33 +0000
Manifest next update:     Thu 14 May 2026 06:13:33 +0000
Files and hashes:         1: 2D59905C3FCA5BDA34D7101B088D80451D026C47.crl (hash: CTazb7QY/um8nIYnjaIzkE7rAN2dxMLPKSdtqp0xL9w=)
                          2: 323830343a323439633a3a2f33322d3438203d3e20323634323333.roa (hash: BCUCHvZ6lEHs09wycHj5SXJHCb72dl7JptkA3RY+Zc4=)
                          3: 3137302e38302e3130302e302f32322d3234203d3e20323634323333.roa (hash: qV9NZPspM3KKVhmVe1DENEA4d8wOeW2+jk1EM4bR4c0=)
                          4: 3133382e3131372e3131362e302f32322d3234203d3e20323634323333.roa (hash: J7bbVsqDbFPyg+gwra+5+pRDDykaqcSlWQ/kD7KeIGo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl
                          rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 06:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:0f:b0:ec:b4:f3:09:47:3e:7e:65:44:08:20:40:a1:94:8c:55:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D59905C3FCA5BDA34D7101B088D80451D026C47
        Validity
            Not Before: May 13 02:32:33 2026 GMT
            Not After : May 14 06:13:33 2026 GMT
        Subject: CN=B9DB8F56771A9611F4C5DD5D3DC7ED171038C60B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6f:74:3f:fa:e7:bb:d7:e3:44:21:34:2c:ce:
                    4d:77:09:5e:9a:f5:cb:80:67:d5:d7:f5:65:90:df:
                    c2:43:5e:5f:d7:d7:f8:08:fc:c9:47:ce:29:b9:51:
                    40:89:c1:ea:53:e0:8a:0a:aa:d1:26:e3:6d:97:c7:
                    76:4e:25:4c:95:93:c9:68:7f:06:b4:30:8a:0b:24:
                    71:92:80:c9:99:81:90:0d:3f:9c:6b:79:88:92:29:
                    5d:ed:e9:31:b5:b1:1b:0b:39:0d:89:58:4b:f5:23:
                    2e:6b:9b:9c:9d:bd:4a:8f:1f:03:9c:ab:a9:22:c5:
                    7b:86:d4:ab:1a:aa:a2:3d:07:7d:4f:ff:1a:f0:67:
                    69:f0:83:6a:ac:38:4e:96:dc:e0:25:d4:c0:f2:04:
                    0b:6a:ea:2f:39:11:0e:d7:bc:ae:40:d9:2e:d0:1c:
                    f4:47:2b:7c:11:ea:f1:b2:6a:90:b3:06:fa:a4:95:
                    52:ac:4d:04:09:1b:0e:c2:93:8e:d5:e6:61:d7:35:
                    d1:7f:1e:0e:a8:3a:e2:59:15:f2:76:4f:e5:5c:4d:
                    41:dd:32:45:25:43:9c:ec:6a:13:d7:60:a1:93:36:
                    47:3e:a8:a7:61:aa:31:76:2a:d1:25:2b:61:54:f4:
                    74:dc:aa:38:71:73:cb:74:ad:7e:e8:ce:e0:27:24:
                    54:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DB:8F:56:77:1A:96:11:F4:C5:DD:5D:3D:C7:ED:17:10:38:C6:0B
            X509v3 Authority Key Identifier:
                keyid:2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c5:63:85:45:61:05:19:0c:cf:9a:b3:94:67:aa:6b:36:0f:
         c1:ff:b3:1d:b5:ce:e6:a6:e0:eb:3f:f5:32:1b:c0:a6:e0:55:
         03:69:02:fe:f4:90:8f:bb:fa:ed:bd:b9:29:8e:f1:89:fb:f2:
         93:98:e8:48:a4:46:5f:2f:dc:ca:a8:55:31:8d:4d:30:c8:b2:
         15:05:71:e5:bc:e2:0d:72:71:b6:32:a2:fa:d2:a6:61:68:22:
         12:af:5e:23:35:05:fb:bc:78:d5:4f:d1:29:76:44:4f:b5:fb:
         cc:af:12:8a:30:70:8b:c3:e1:48:96:fb:d7:0a:1c:0f:56:12:
         ab:9c:0c:56:70:8c:65:8c:1e:21:a7:2d:7e:44:a3:97:b6:51:
         47:ee:60:8e:0c:91:d0:c6:ff:af:78:28:e8:92:f9:75:22:68:
         8b:b1:4f:c4:02:c5:44:54:ec:7d:fd:d8:13:f2:95:1b:d5:28:
         da:b8:81:6d:2f:08:b9:12:f4:81:76:24:59:24:ad:a2:f6:d8:
         40:b1:62:f1:71:8c:f9:37:69:64:6f:c8:dd:1c:54:38:b1:77:
         46:74:0a:66:ae:67:67:51:76:6a:ff:95:6c:68:ee:d0:5e:28:
         cc:c1:f5:05:46:df:59:3f:de:8b:09:e5:1c:4f:83:c9:3f:b9:
         f1:96:db:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:50:20 2026 by rpki-client