Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.mft
File:                     2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.mft (raw, json)
Hash identifier:          OKxFSjo4B3I2bKDAVZOlwHcfH62Tn3ZIwADJ4lOcquo=
Subject key identifier:   2B:21:43:8F:B8:57:8A:5C:20:5B:7C:00:41:69:E9:A5:AF:AF:3B:7B
Authority key identifier: 2F:B9:E5:4A:07:0B:DE:B6:47:5B:8A:F6:DF:9B:8E:98:3C:39:38:8A
Certificate issuer:       /CN=2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A
Certificate serial:       6B9073652C82672CA89C04C566FCD3D5771FBF36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.mft
Manifest number:          28
Signing time:             Thu 26 Mar 2026 17:04:25 +0000
Manifest this update:     Thu 26 Mar 2026 16:59:25 +0000
Manifest next update:     Fri 27 Mar 2026 17:09:25 +0000
Files and hashes:         1: 3230302e3135302e3234342e302f32332d3233203d3e20323731373434.roa (hash: h0Bcc4Kaexsqxf37FaMflL+ntKV9XIcRJFlokSmynOU=)
                          2: 2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.crl (hash: gfcsMPZQ6cBpmFtfZPmx5/fembz95asNcf421QZjK70=)
                          3: 3230302e3135302e3234342e302f32322d3232203d3e20323731373434.roa (hash: CF57GYqog4vWgDsMAeCZnms0BMlKG8i38MyRf491B80=)
                          4: 3230302e3135302e3234372e302f32342d3234203d3e20323731373434.roa (hash: Q4ErA+uffiU2U9ylXGP62YNPS3PcIYpq+M7J9p0P6Yc=)
                          5: 323830343a383035343a3a2f33322d3332203d3e20323731373434.roa (hash: bidTpxcTPOuioRG232kskgZmk/HYSevz0neRxBqbvR4=)
                          6: 3230302e3135302e3234342e302f32342d3234203d3e20323731373434.roa (hash: 0zBLXAQ+/soaucY9uJd9HdxEHGg4ikUPFrbum0P8dAI=)
                          7: 3230302e3135302e3234362e302f32342d3234203d3e20323731373434.roa (hash: NAFu2MLwXgi/G/JGYKHLr9SBn4y2OABNnodqi7v7w3Q=)
                          8: 3230302e3135302e3234362e302f32332d3233203d3e20323731373434.roa (hash: mOkG//y2ad5GgxdXqcEBIJysZKbHLZlo3vYzSmQfgj4=)
                          9: 3230302e3135302e3234352e302f32342d3234203d3e20323731373434.roa (hash: LXRPzEKoYdVqGndvrysov6bdfa5+G5JDey02U6R15nE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.crl
                          rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:09:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:90:73:65:2c:82:67:2c:a8:9c:04:c5:66:fc:d3:d5:77:1f:bf:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A
        Validity
            Not Before: Mar 26 16:59:25 2026 GMT
            Not After : Mar 27 17:09:25 2026 GMT
        Subject: CN=2B21438FB8578A5C205B7C004169E9A5AFAF3B7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fc:69:67:e4:9b:e2:cf:33:0c:fe:e1:61:c0:
                    56:49:3f:12:36:bb:14:e5:c6:e0:c3:57:bb:cc:f2:
                    90:75:74:40:f1:03:14:58:25:e3:de:db:80:8d:12:
                    0d:fc:d6:2f:f3:77:6b:8f:ce:58:d8:7e:c9:65:7c:
                    d7:bd:cd:c1:ee:83:3f:a2:68:56:3a:97:6c:f6:bd:
                    7d:22:7f:53:99:41:5a:b2:81:6c:f0:a9:ce:50:d0:
                    21:38:c4:8f:86:76:b5:1d:a1:38:30:36:ed:6c:27:
                    21:c9:5a:c6:58:f4:f8:6f:31:c9:d7:46:fb:63:49:
                    6c:41:6a:f6:98:83:c8:25:d4:49:bd:f9:f6:5b:4d:
                    72:0d:c6:17:79:0e:89:75:51:10:f0:ba:f0:ee:7d:
                    58:39:aa:aa:d8:52:ee:a1:1a:8a:0c:ef:1f:c3:3d:
                    8d:05:e7:09:46:3c:b9:74:80:c6:91:87:cb:a4:2b:
                    9a:2c:96:6f:12:a9:27:5f:61:2c:99:81:b2:72:21:
                    a9:fb:74:3b:df:c5:36:14:cf:20:d4:8e:40:2e:7c:
                    7b:3d:ef:7d:22:0d:ff:65:3d:5c:c7:8b:23:a6:f2:
                    61:eb:cd:92:13:30:69:f6:3b:03:b5:8e:d5:9b:b3:
                    a5:c9:0c:47:2b:99:58:60:7f:a7:76:47:a1:31:62:
                    e1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:21:43:8F:B8:57:8A:5C:20:5B:7C:00:41:69:E9:A5:AF:AF:3B:7B
            X509v3 Authority Key Identifier:
                keyid:2F:B9:E5:4A:07:0B:DE:B6:47:5B:8A:F6:DF:9B:8E:98:3C:39:38:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:24:41:e3:6d:58:c6:12:53:88:e5:1a:1e:a3:4a:c2:41:02:
         ef:3f:05:57:fa:54:72:d4:fe:5f:59:e6:75:79:68:0a:c4:df:
         bb:3a:0b:bb:bd:ea:b3:8a:87:ca:0a:23:17:89:41:3f:cc:25:
         44:82:22:17:a7:94:dc:29:5b:74:eb:d3:37:75:4b:42:ed:3c:
         cc:55:ce:5e:04:cb:9e:98:38:08:b8:66:d4:e6:f7:28:36:b0:
         69:1f:0b:55:2f:59:b5:6a:f7:ba:86:f0:14:78:43:b3:99:b0:
         aa:7a:86:91:80:ae:6f:09:3b:76:ad:7d:75:98:a5:04:f4:6d:
         ea:6b:e2:db:9d:b2:33:f2:fe:8e:37:fa:a0:e9:b5:c9:bd:35:
         2a:b4:4b:97:14:44:88:a3:95:12:2a:20:f7:c0:91:18:b8:36:
         f8:b0:f5:87:19:62:2b:4b:41:f7:bd:e6:23:10:11:02:3c:f1:
         37:61:15:8d:d7:7e:b6:a6:98:73:6a:b5:1d:2e:8c:95:3e:87:
         96:e4:d8:f2:67:3f:e1:2c:d5:df:2a:fa:8d:b5:96:30:af:f2:
         0d:94:35:72:53:22:51:12:af:7d:29:60:3e:48:0a:4d:a0:09:
         93:a2:6b:88:f3:eb:00:32:b8:39:35:2e:b7:df:3b:2a:8c:c1:
         b6:6e:26:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:20:24 2026 by rpki-client