Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
File:                     8EAA572CDAB740A56977FFFC602F113E473F2E77.mft (raw, json)
Hash identifier:          YazkBb68EfIMDYJ+y1nJurZd0WDdchBNhDeJIBHk6js=
Subject key identifier:   12:9C:CE:D4:2C:2B:AF:44:F3:8E:22:F4:E6:22:43:60:79:76:A9:69
Authority key identifier: 8E:AA:57:2C:DA:B7:40:A5:69:77:FF:FC:60:2F:11:3E:47:3F:2E:77
Certificate issuer:       /CN=8EAA572CDAB740A56977FFFC602F113E473F2E77
Certificate serial:       495AA3108C04CD86A817FE8EF80AD3F75F9AADC2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
Manifest number:          03C1
Signing time:             Thu 26 Mar 2026 02:17:29 +0000
Manifest this update:     Thu 26 Mar 2026 02:12:29 +0000
Manifest next update:     Fri 27 Mar 2026 03:23:29 +0000
Files and hashes:         1: 3138362e3230392e3232342e302f32302d3232203d3e203533313534.roa (hash: s5oM/YKgACeZENr2SH18ungMSV8453Z2MUy+KChUs/I=)
                          2: 8EAA572CDAB740A56977FFFC602F113E473F2E77.crl (hash: MfJxKDukZohTRZbFapslIT4X2DcBKGJpndbmH2xeICI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.crl
                          rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 03:23:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:5a:a3:10:8c:04:cd:86:a8:17:fe:8e:f8:0a:d3:f7:5f:9a:ad:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAA572CDAB740A56977FFFC602F113E473F2E77
        Validity
            Not Before: Mar 26 02:12:29 2026 GMT
            Not After : Mar 27 03:23:29 2026 GMT
        Subject: CN=129CCED42C2BAF44F38E22F4E62243607976A969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8b:72:45:ee:5f:9c:1e:27:c2:0a:60:b0:3b:
                    a5:0f:0c:02:eb:30:db:b0:5e:d0:52:2b:d2:1f:0a:
                    e4:79:c5:0f:65:ef:3f:01:62:a7:7d:c1:5d:ea:f9:
                    fb:32:40:1d:dd:9a:7f:29:4c:02:f3:03:08:83:e4:
                    2c:aa:bf:83:e3:b0:14:f4:dd:49:22:06:14:89:82:
                    3a:43:86:fe:3f:bb:90:4c:4e:0b:75:a9:8b:09:56:
                    bc:da:67:29:e9:56:e5:e4:ae:5a:32:a7:52:ea:cc:
                    45:e7:e6:d4:53:01:d8:7e:aa:8f:a0:9a:61:dc:53:
                    50:3e:5d:01:33:df:52:15:43:78:45:b2:9b:e5:66:
                    b0:89:47:ac:ad:74:67:ef:cf:3b:16:13:ac:55:e6:
                    1f:49:7e:9b:d7:f8:a0:00:45:e8:f7:86:f8:37:99:
                    12:6d:f8:2c:ec:b8:b3:e9:91:f6:9c:7f:1c:7b:4d:
                    86:70:86:4e:c5:25:16:1b:e5:a0:9f:c7:20:47:61:
                    19:5d:47:a9:ff:6b:46:38:2f:24:f3:81:2d:b6:41:
                    98:00:72:4b:86:a5:41:2f:76:f5:74:0f:11:c8:fb:
                    f0:d3:3c:36:41:e3:0e:e6:ff:47:67:77:44:9f:7b:
                    c4:74:8c:c6:0c:23:63:9c:09:81:a2:f5:c8:9e:34:
                    5a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9C:CE:D4:2C:2B:AF:44:F3:8E:22:F4:E6:22:43:60:79:76:A9:69
            X509v3 Authority Key Identifier:
                keyid:8E:AA:57:2C:DA:B7:40:A5:69:77:FF:FC:60:2F:11:3E:47:3F:2E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:17:01:9c:5e:93:73:97:03:80:a2:fc:11:d7:e6:6c:ab:59:
         23:d8:6b:18:96:4f:e9:84:9e:6f:a8:99:d0:22:2a:89:91:f6:
         d2:ce:1a:66:f8:2d:8e:26:01:10:17:07:8e:5d:cb:68:20:3f:
         74:c9:b4:31:98:d7:ca:f9:c1:ac:bf:2c:e4:f6:f5:9d:fe:20:
         44:b4:9e:97:e8:1e:c2:21:71:a4:1a:8e:57:89:45:ac:e8:73:
         52:8c:a1:52:9e:24:29:2b:7b:2e:42:97:93:05:c7:b5:12:00:
         9d:6b:72:87:2f:e1:07:80:bc:ee:b6:34:23:be:78:2e:38:96:
         d9:33:b9:78:67:cb:26:cd:75:b3:21:ae:0c:d2:94:ba:9a:fd:
         83:ed:7d:d2:f8:26:3c:3f:78:d2:03:54:f9:78:ea:31:95:65:
         11:4f:ec:1a:91:8e:60:c2:b1:d1:e3:3d:91:dd:10:26:e9:78:
         58:10:b4:8f:d0:d1:b2:c0:e5:ec:82:68:5e:a0:22:63:b5:d0:
         e3:e8:56:c6:b1:37:8b:9c:e2:6a:bd:39:60:95:9d:9e:67:9d:
         9d:96:fa:01:bf:0c:21:a3:09:5d:13:42:bd:7a:7f:7a:a9:61:
         d8:a0:90:39:99:9b:9a:d7:39:3e:f3:7f:7e:e4:b3:15:1e:bb:
         6d:73:3a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:17:26 2026 by rpki-client