Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.mft
File:                     BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.mft (raw, json)
Hash identifier:          AqGg32GSwa4IdteeHY/ZsjyyDnv/JAuJBk/ZZrfy6jA=
Subject key identifier:   91:F4:FA:5E:E4:03:91:5B:42:A7:4F:45:E0:0C:BE:9F:EE:40:88:0F
Authority key identifier: BE:7C:82:FC:D9:1A:11:CE:5A:95:DC:F8:07:06:99:2C:F9:D2:92:EC
Certificate issuer:       /CN=BE7C82FCD91A11CE5A95DCF80706992CF9D292EC
Certificate serial:       7243F5FF86D3E79852081A6DB5DCE25FD86AEE7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.mft
Manifest number:          03C2
Signing time:             Thu 26 Mar 2026 15:50:18 +0000
Manifest this update:     Thu 26 Mar 2026 15:45:18 +0000
Manifest next update:     Fri 27 Mar 2026 16:19:18 +0000
Files and hashes:         1: 323830343a346262383a3a2f33322d3438203d3e20323637333236.roa (hash: mrdC12ssF/EFgJsQ0Si4SqgK5FtF0n2HQ2ZxK5V1ck0=)
                          2: BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.crl (hash: Jh9j/zMHLUjGolUbr4gBQUjENrc6GFwqRrDNniS5Jz4=)
                          3: 34352e3233332e3138342e302f32322d3234203d3e20323637333236.roa (hash: k2Geiq2fdPKN5Y0awi2EUurKAkTEhSZ47v4jRMXE57Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.crl
                          rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:19:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:43:f5:ff:86:d3:e7:98:52:08:1a:6d:b5:dc:e2:5f:d8:6a:ee:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7C82FCD91A11CE5A95DCF80706992CF9D292EC
        Validity
            Not Before: Mar 26 15:45:18 2026 GMT
            Not After : Mar 27 16:19:18 2026 GMT
        Subject: CN=91F4FA5EE403915B42A74F45E00CBE9FEE40880F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:91:af:91:b4:08:60:14:17:ad:52:54:7f:ca:
                    78:44:b3:d8:33:dc:67:46:1f:26:81:29:c0:39:06:
                    2e:67:78:0b:7c:84:82:a3:68:ca:67:46:06:b9:b1:
                    47:42:db:bb:61:22:ec:49:97:b9:4d:6f:8e:3a:7f:
                    35:a0:c4:4b:4e:c7:82:ea:1f:90:a6:09:d2:ac:c4:
                    c5:71:00:f0:1e:88:97:ff:b9:2c:8e:91:f8:45:56:
                    2d:91:dd:c9:61:04:81:2c:bd:0a:07:04:5a:9d:b3:
                    2b:bb:70:32:6b:af:b3:f9:65:00:1b:a0:63:1e:87:
                    4a:9b:a2:a5:c9:43:51:fc:b1:3a:77:29:57:a4:83:
                    b3:a2:a0:40:37:c9:fe:37:83:61:3f:03:9e:9a:7b:
                    33:d5:c9:74:02:cf:7e:40:83:85:e1:34:96:17:57:
                    33:fc:b0:4a:cc:74:02:ac:e7:11:8b:8a:68:78:14:
                    9d:ef:56:b6:47:14:73:dd:b9:1a:45:3d:f0:a5:97:
                    a2:72:77:a3:b6:57:75:18:17:44:12:56:63:31:d9:
                    7e:36:7a:b5:64:a4:90:b7:fa:da:53:e9:e2:b8:5a:
                    6f:b3:80:32:b4:07:cc:81:2e:a4:f8:6c:65:c6:2a:
                    75:a6:cd:f0:f6:60:39:54:99:c1:a0:d1:2c:19:bf:
                    9a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F4:FA:5E:E4:03:91:5B:42:A7:4F:45:E0:0C:BE:9F:EE:40:88:0F
            X509v3 Authority Key Identifier:
                keyid:BE:7C:82:FC:D9:1A:11:CE:5A:95:DC:F8:07:06:99:2C:F9:D2:92:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:61:cf:ab:2a:a4:96:08:c3:d4:e1:2e:b4:50:b8:97:12:d7:
         aa:2e:3c:50:c5:83:f6:b6:ff:93:3f:46:9d:14:89:b9:3c:82:
         19:e3:51:52:04:72:93:60:b4:f2:06:fb:e5:99:a1:fb:ed:cc:
         64:c1:76:97:87:35:bd:a5:ca:9b:a4:b0:5a:9f:5d:47:b0:3f:
         44:36:e1:25:62:39:a1:26:fa:96:72:c5:c4:7c:4b:9d:48:b9:
         71:5a:f7:0a:2d:bc:0c:7e:a8:6e:48:55:d1:07:ce:81:07:2c:
         d2:cb:5d:81:82:d9:94:a2:5c:d6:d4:0c:55:88:f9:47:86:50:
         da:a3:ea:61:0a:89:37:35:d6:90:82:6a:20:78:5f:e0:07:a6:
         ea:c6:69:11:7f:ba:0a:98:ca:e5:a7:c6:f4:b9:f9:f3:a2:5b:
         b3:33:13:7c:c1:4a:57:63:ea:27:0e:d7:b6:d6:2c:05:0d:15:
         36:31:e4:bc:3a:f1:74:9f:49:d6:6a:0a:f5:9b:be:9a:6f:ce:
         2e:80:55:01:cd:7b:f3:15:03:96:1b:f2:41:2a:2f:d5:0d:2e:
         b2:2d:89:91:59:0b:63:b6:b3:44:96:d1:64:8a:cd:ab:74:7d:
         38:4b:8c:51:7a:92:36:27:9f:67:2a:98:bd:45:78:4b:b8:13:
         b4:02:87:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:56:01 2026 by rpki-client