Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
File:                     2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft (raw, json)
Hash identifier:          cqi9/sJO4IRHqgY1Liyu2CNmZiuCY4xAOzjh7qAEN8E=
Subject key identifier:   B0:82:4A:FC:DB:A4:31:78:F6:6B:43:0B:CC:31:F1:7B:0B:0A:D8:38
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Certificate issuer:       /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial:       55BBAFD7B1161B88AF2AA46C16B69652408B7C68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
Manifest number:          0457
Signing time:             Thu 26 Mar 2026 18:25:46 +0000
Manifest this update:     Thu 26 Mar 2026 18:20:46 +0000
Manifest next update:     Fri 27 Mar 2026 19:14:46 +0000
Files and hashes:         1: 3230312e34392e3232342e302f32342d3234203d3e20323634383836.roa (hash: ++ugqH7qMsyxgNLQ32J4ivX4zvjk1Pqdamg3TT9MM3w=)
                          2: 3230312e34392e3232352e302f32342d3234203d3e20323730393539.roa (hash: KiQwHqW4L5k313W7Ix2tqfggra0fzCmTud2HSdaR8Rc=)
                          3: 3230312e34392e3232362e302f32342d3234203d3e20323634383836.roa (hash: yDVdGefqd/JPquVpOo1etJWmqeotROjXdnZ1AmqUSek=)
                          4: 3137392e3130382e34342e302f32322d3234203d3e20323634383836.roa (hash: rKw9q9mAIQ5r7wogKwSlvCJxAkuKxwHfPP9Xf+mGr84=)
                          5: 3230312e34392e3232382e302f32322d3234203d3e203532353332.roa (hash: eXlDeqx/uIJYF2z6711Ka9h3ZAq+z/JbyUI6PROlpnk=)
                          6: 3136382e3232372e3138302e302f32322d3234203d3e20323634383836.roa (hash: bJNYzdZRQO3W+8pXD/AhXGlYjw3ihA+UJ5PrLFttN2c=)
                          7: 2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl (hash: R9OZYiP7oy1DzjGpSnn6nkvKBcc1xqqRBQfXrNNWEE0=)
                          8: 3230312e34392e3233362e302f32322d3234203d3e203532353332.roa (hash: crwNQAzkQgVzyySk2+Vvl5Tz9YU9DHls0pPUE2tU5c8=)
                          9: 3230312e34392e3233322e302f32322d3234203d3e20323634383836.roa (hash: mHPFOGNKvdgc/zI811HdfbTjLQWNbiDqxL/El5Lm3fA=)
                          10: 3230312e34392e3232372e302f32342d3234203d3e20323634383836.roa (hash: XwZwnGLQtwgwMmBOul4r3/MIGHfpZbt+/M93PODrJok=)
                          11: 323830343a326635633a3a2f33322d3332203d3e20323634383836.roa (hash: U7Fi83OtEplHzns2oD2Hh+s6/kT6Yq/unz43USIFpcY=)
                          12: 3230312e34392e3232352e302f32342d3234203d3e20323634383836.roa (hash: 479anbVOZnSsEI99gJ7YrU3FPGiheVTxdi+9lXBt+14=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 19:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:bb:af:d7:b1:16:1b:88:af:2a:a4:6c:16:b6:96:52:40:8b:7c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
        Validity
            Not Before: Mar 26 18:20:46 2026 GMT
            Not After : Mar 27 19:14:46 2026 GMT
        Subject: CN=B0824AFCDBA43178F66B430BCC31F17B0B0AD838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8d:0c:7f:8d:9c:28:7b:8d:3e:65:e1:b0:dc:
                    5a:bb:46:01:fd:7c:65:db:ba:a6:04:49:55:51:8c:
                    21:de:d9:ea:33:aa:28:86:11:9a:22:3f:a0:ce:a9:
                    17:97:63:fd:eb:7f:a8:0a:7c:c5:c2:da:a0:22:4e:
                    03:b0:db:06:cd:fb:db:de:58:b5:1e:bd:7a:fe:51:
                    e6:8b:86:30:85:88:66:15:42:7c:3e:72:c2:83:89:
                    69:e6:fb:8a:91:38:d3:9c:de:4f:10:12:fa:9f:78:
                    f3:ae:5c:ae:a4:c5:d5:74:4b:1d:67:20:39:da:c1:
                    28:26:87:d6:21:3a:84:6b:e2:21:54:bd:14:cf:cd:
                    9c:18:11:52:ce:d0:70:ae:e1:ef:c6:7d:43:4e:95:
                    06:74:62:97:37:e6:f7:b7:d4:f9:96:0e:1e:ef:a5:
                    92:56:57:d6:d9:01:8b:87:44:62:ab:48:27:10:3f:
                    eb:ad:25:1b:6d:0f:96:06:b1:6c:b9:5a:57:f8:54:
                    be:53:e2:0c:5e:66:77:c7:2f:71:9b:b6:c2:16:9c:
                    cd:24:37:ac:85:46:38:03:7a:12:08:ab:c8:d3:d0:
                    92:58:ca:66:0d:fc:dc:3c:0b:06:eb:aa:6a:d6:3e:
                    e0:17:08:b4:9c:ba:68:13:33:ad:f5:b6:e0:d0:c6:
                    ea:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:82:4A:FC:DB:A4:31:78:F6:6B:43:0B:CC:31:F1:7B:0B:0A:D8:38
            X509v3 Authority Key Identifier:
                keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:7a:a1:b1:a9:c7:37:ee:cc:72:e6:3c:a3:05:c2:95:4c:66:
         91:09:81:73:34:c3:eb:69:2f:96:29:ea:6c:9e:84:0a:66:8b:
         a4:83:40:4d:2a:7e:8c:d9:89:65:67:a6:05:1a:6c:9e:8c:13:
         02:b9:97:d1:b0:35:0e:76:1d:c5:fd:13:a3:81:74:94:09:3c:
         10:c7:20:ab:ad:df:09:f6:55:e9:a6:0f:f7:61:3d:8d:51:fb:
         9b:5e:5f:fd:b3:5d:27:bc:ac:83:4d:96:76:29:49:c0:a1:8f:
         e4:50:7d:3a:48:83:81:e8:40:6e:3b:7f:22:0f:b5:07:ae:9a:
         9c:60:3c:80:c4:83:f1:3b:57:75:c2:ea:b0:ad:71:98:94:bb:
         04:b9:f9:a9:0f:86:93:d4:09:61:0c:8c:f2:b3:c7:b4:68:e0:
         00:4a:57:13:f9:03:b7:2e:14:f0:85:f6:7c:10:c5:75:23:87:
         53:68:46:20:64:3a:a7:11:90:9b:a5:3a:76:51:fa:9f:51:b8:
         5e:e5:c2:a4:ed:14:7f:2d:39:c0:b8:73:d2:70:ed:62:ea:5d:
         bd:96:4a:1e:b7:15:f7:8a:55:44:e0:e0:ec:aa:be:5e:67:cd:
         fb:12:f0:4a:7d:13:d4:13:87:bc:ec:6d:d6:3d:57:0c:9b:ca:
         bd:8e:d1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:21:32 2026 by rpki-client