Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/2D1EF950AB5C855E2D7C436153A72A554B109A82.mft
File:                     2D1EF950AB5C855E2D7C436153A72A554B109A82.mft (raw, json)
Hash identifier:          uUOFq5dEc3UdhgLMU2pIekZb+bBd0PNtvxopt4wR5+g=
Subject key identifier:   4E:D3:99:AC:02:42:7A:80:62:95:27:99:0E:89:1D:ED:99:F4:BC:3A
Authority key identifier: 2D:1E:F9:50:AB:5C:85:5E:2D:7C:43:61:53:A7:2A:55:4B:10:9A:82
Certificate issuer:       /CN=2D1EF950AB5C855E2D7C436153A72A554B109A82
Certificate serial:       27E1ECA9B71AE7458CE66A3D7A04B4AC18DF3891
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1EF950AB5C855E2D7C436153A72A554B109A82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/2D1EF950AB5C855E2D7C436153A72A554B109A82.mft
Manifest number:          AC
Signing time:             Fri 27 Mar 2026 01:42:37 +0000
Manifest this update:     Fri 27 Mar 2026 01:37:37 +0000
Manifest next update:     Sat 28 Mar 2026 05:24:37 +0000
Files and hashes:         1: 2D1EF950AB5C855E2D7C436153A72A554B109A82.crl (hash: 2IumLsZ6ZxCNtVYLxoWIcOrqMpk3bwbZCtdX1jURf/Y=)
                          2: 34352e3137392e3233362e302f32322d3234203d3e20323639313934.roa (hash: 9XKlOaXo1boKhZ8u6jhTAvFM1SYhtP3pxuiTKXEUgyc=)
                          3: 34352e3138302e3231362e302f32322d3234203d3e20323639313934.roa (hash: EleUzIZ2L1WjQrMkkSahgzdoaMB+XmS+wYmMHH4Uznk=)
                          4: 323830343a363064343a3a2f33322d3634203d3e20323639313934.roa (hash: C5FDVefJNQXuIZxOWfS/a5JxiA1PkR9WZm1zM84u5So=)
                          5: 3136382e3138312e3235322e302f32322d3234203d3e20323639313934.roa (hash: ilDFulKS4bBuP1yxoPhNPLm+sEHq1vZt/8rx4r/eGJo=)
                          6: 34352e3233382e3233362e302f32322d3234203d3e20323639313934.roa (hash: fIEnniI3ew2/ggMja7nrt2Lc8QnalEG6BVIWI89EiZQ=)
                          7: 3137302e3234372e32382e302f32322d3234203d3e20323639313934.roa (hash: DNsUeQBfgZ7LTHPxZgl1A65EbLDyfgKC9LJuWXuZ344=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/2D1EF950AB5C855E2D7C436153A72A554B109A82.crl
                          rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/2D1EF950AB5C855E2D7C436153A72A554B109A82.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1EF950AB5C855E2D7C436153A72A554B109A82.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 05:24:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e1:ec:a9:b7:1a:e7:45:8c:e6:6a:3d:7a:04:b4:ac:18:df:38:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D1EF950AB5C855E2D7C436153A72A554B109A82
        Validity
            Not Before: Mar 27 01:37:37 2026 GMT
            Not After : Mar 28 05:24:37 2026 GMT
        Subject: CN=4ED399AC02427A80629527990E891DED99F4BC3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1c:e4:e8:2b:11:7f:d0:8e:ca:3c:74:fb:44:
                    5e:b5:bf:53:84:6f:84:77:dd:a8:e4:09:c1:d5:a8:
                    5b:1b:4b:63:37:e1:c1:2e:2d:a7:0f:75:45:49:cb:
                    a6:7c:c5:39:2c:52:d0:80:65:be:49:eb:ae:7c:4f:
                    7e:fd:bc:57:18:91:b8:b2:d9:70:7f:eb:06:ca:85:
                    57:f2:e2:b4:c9:c2:49:eb:a8:e5:3a:48:8e:ee:7c:
                    ac:bb:3f:09:30:4e:0f:db:ec:ff:46:52:6b:a9:4d:
                    3e:65:b5:0d:03:5b:cb:ae:ea:14:04:88:ee:58:aa:
                    b7:7c:d3:29:e4:c1:ce:6c:b3:53:91:80:68:ae:2b:
                    55:34:08:d6:93:73:4f:d3:d1:58:2f:28:26:fb:e1:
                    20:3b:32:cf:a4:ea:3e:37:6d:82:40:92:db:11:24:
                    64:29:25:91:c9:de:32:31:db:82:fe:d4:09:a8:b4:
                    da:67:f5:2f:f4:f2:12:13:38:bf:3a:45:7c:01:0e:
                    2c:51:ee:e2:0a:94:37:1b:46:a0:05:a6:bd:e8:2b:
                    e0:f6:d4:ad:bb:42:b6:35:35:b6:01:8c:21:e0:a7:
                    1b:bc:71:f1:ea:49:b0:b8:fd:4e:71:f5:06:80:75:
                    b8:94:7b:4e:d0:f0:61:f9:d8:6c:8f:a8:4d:32:25:
                    c6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D3:99:AC:02:42:7A:80:62:95:27:99:0E:89:1D:ED:99:F4:BC:3A
            X509v3 Authority Key Identifier:
                keyid:2D:1E:F9:50:AB:5C:85:5E:2D:7C:43:61:53:A7:2A:55:4B:10:9A:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/2D1EF950AB5C855E2D7C436153A72A554B109A82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1EF950AB5C855E2D7C436153A72A554B109A82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/2D1EF950AB5C855E2D7C436153A72A554B109A82.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:fc:21:b3:47:06:94:15:01:ee:fc:51:5d:97:28:b3:a7:ac:
         e4:45:ae:63:e6:aa:44:e0:80:f2:89:99:df:24:8f:f4:0e:55:
         07:58:1f:5f:b4:ef:1a:f7:92:12:69:42:3d:c7:cb:fd:84:f8:
         e5:51:22:34:53:5a:67:3c:0a:2d:53:68:44:a9:4a:6e:e8:9f:
         85:ea:34:52:47:a2:ec:30:d7:46:6a:7d:38:3d:60:e3:90:5c:
         7a:77:b2:f2:1a:86:34:c8:33:3d:12:32:57:9c:65:96:0b:6f:
         f8:c6:98:94:32:e3:54:5a:80:40:97:98:c0:a4:09:03:41:fe:
         22:e1:54:a0:b4:00:81:a4:4e:35:5a:4c:b0:0b:d2:c1:ab:ed:
         39:e3:2e:bb:51:e3:47:b7:7c:38:1e:b3:b3:b3:dc:ef:3d:b7:
         9d:b9:50:65:16:37:d1:86:96:92:2b:49:40:20:24:4b:ab:71:
         65:74:ee:d1:b2:1b:3a:96:f0:39:f4:86:22:1d:4c:77:11:26:
         91:02:3c:d2:24:f4:c8:6b:51:e0:e0:9e:5d:81:56:32:06:3a:
         c5:93:62:9a:fd:53:a6:fc:d7:d9:da:36:5f:28:27:b1:8c:e6:
         a6:5e:38:92:b0:5a:98:94:9c:f2:18:5b:cd:78:31:53:b6:79:
         0d:85:f3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:33:12 2026 by rpki-client