Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft
File:                     7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft (raw, json)
Hash identifier:          nOs/43yrT5mUoS9Vc9VhqS550ClZAVEiFiTbxC3K2Rw=
Subject key identifier:   33:E0:D0:45:DE:AF:67:BB:58:52:02:B9:0A:FA:F7:70:E6:A3:86:59
Authority key identifier: 74:47:20:7E:A4:3E:9C:EF:DB:A7:4A:D2:CD:66:F8:9C:E6:AF:98:17
Certificate issuer:       /CN=7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817
Certificate serial:       21AA81592154908BF58986C354F437D6AFDD9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft
Manifest number:          EA
Signing time:             Mon 02 Mar 2026 07:38:21 +0000
Manifest this update:     Mon 02 Mar 2026 07:33:21 +0000
Manifest next update:     Tue 03 Mar 2026 07:45:21 +0000
Files and hashes:         1: 34352e3233342e34382e302f32322d3232203d3e20323637333533.roa (hash: efCaDnSNHaCNsUZJZ2BRsQIelnrquDotvL3pslOlzNQ=)
                          2: 34352e3233342e35312e302f32342d3234203d3e20323637333533.roa (hash: vUJF9gs5xQMqDUw81LvKpvr9X6AUaWZsW9NYWQWl1Go=)
                          3: 34352e3233342e35302e302f32332d3233203d3e20323637333533.roa (hash: /vSap4te8guh+qAqqLmYZImHb8QA8jgej13kbYH5e3Y=)
                          4: 7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.crl (hash: wfN3MY6vigeEAJYYVTgzdeWuuFk/mAWiXUsu2B+nD1E=)
                          5: 34352e3233342e35302e302f32342d3234203d3e20323637333533.roa (hash: N+XUMWcII3BAqNP4TTCzSCeQwh2jC9OmWVd+xl4z8DY=)
                          6: 323830343a346332383a3a2f33322d3332203d3e20323637333533.roa (hash: Kmsr+UXvwv+S9FvagZVWzDR/evsnsCJePVvlO07EQgE=)
                          7: 34352e3233342e34392e302f32342d3234203d3e20323637333533.roa (hash: dZH8ZxBMw0oZDUrL/jw2vuUaVyuoflPFTd7ol71clGw=)
                          8: 34352e3233342e34382e302f32342d3234203d3e20323637333533.roa (hash: LyeM55h+f+yfzNTGWUrTsVrUxrvRTN+/Fl74HTUvAlM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.crl
                          rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 07:45:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:aa:81:59:21:54:90:8b:f5:89:86:c3:54:f4:37:d6:af:dd:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817
        Validity
            Not Before: Mar  2 07:33:21 2026 GMT
            Not After : Mar  3 07:45:21 2026 GMT
        Subject: CN=33E0D045DEAF67BB585202B90AFAF770E6A38659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:22:9d:4d:69:ca:fb:0e:21:d6:1d:8c:d4:3b:
                    69:13:1d:6d:eb:d4:05:fe:27:97:bc:ab:8c:03:55:
                    00:d2:27:a3:02:03:c3:2a:21:7a:c7:b5:cd:a8:7a:
                    83:74:96:b1:2b:01:c9:e4:25:7a:2a:6d:31:fc:60:
                    fb:43:56:af:9a:52:f3:38:83:48:39:9f:ca:d2:2c:
                    f9:a9:53:ae:77:5c:85:d8:ac:09:82:9d:06:cb:a7:
                    6b:fb:c2:8e:c7:b4:df:2b:42:9f:ae:94:68:13:0d:
                    2e:9b:4e:51:53:7b:91:b0:22:b8:91:50:9a:d5:a3:
                    5f:37:ac:72:53:e8:23:52:2e:90:e2:73:f2:81:7f:
                    57:5b:d6:03:7b:9c:37:b6:c8:3d:b9:72:37:1d:bb:
                    9a:3c:6c:aa:42:c9:b8:bb:ff:27:ed:0e:a2:f2:b6:
                    15:a0:07:12:dd:cd:25:17:e9:82:65:c8:5b:65:77:
                    74:cd:1a:bf:08:86:35:65:93:2a:46:ed:01:97:ce:
                    c2:bc:59:31:9f:22:b3:98:da:23:e6:68:32:50:76:
                    3f:56:66:d1:68:bc:95:81:cf:3f:11:f1:cf:1a:4d:
                    bb:6c:76:bd:cf:9e:9f:73:f6:83:07:dc:0e:80:25:
                    d0:7c:f3:a3:ae:4b:a4:a7:55:91:02:73:90:0f:e0:
                    1c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E0:D0:45:DE:AF:67:BB:58:52:02:B9:0A:FA:F7:70:E6:A3:86:59
            X509v3 Authority Key Identifier:
                keyid:74:47:20:7E:A4:3E:9C:EF:DB:A7:4A:D2:CD:66:F8:9C:E6:AF:98:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:2b:25:ef:d8:76:d1:19:67:97:8b:71:eb:ae:f1:48:86:8e:
         68:5b:11:d1:fe:0d:58:4d:bb:4e:e7:7d:b2:47:8a:45:78:e8:
         de:8e:46:12:33:4f:53:be:84:46:79:51:1f:c7:ae:0c:9d:32:
         b8:cc:05:a8:7d:23:30:a8:fc:7e:11:3a:64:29:c8:4a:d9:50:
         2b:ee:d5:6d:be:cf:95:15:0a:24:be:d2:26:05:ff:66:a4:a9:
         72:9e:64:f7:4d:f3:2e:1b:ab:27:2c:1f:e4:60:b6:1b:b4:48:
         d2:5d:dc:dd:df:04:ef:00:c8:f5:be:b3:44:c7:9b:47:33:f8:
         91:61:cf:dc:80:0d:16:5c:e2:92:53:6b:51:68:eb:49:80:fa:
         65:bb:3b:95:58:e4:58:b3:3d:66:8b:66:75:bd:c6:09:cc:da:
         59:1f:2b:47:5f:c9:a6:75:26:08:31:4d:be:7e:ff:dc:43:07:
         85:6f:6f:16:88:53:5f:c6:78:22:e4:15:f1:c6:70:66:4f:bb:
         94:df:f0:d9:b3:3a:d5:61:59:96:49:72:94:f8:96:6d:0e:e2:
         0d:0e:66:dd:2e:75:2a:bf:3d:91:08:25:54:23:cd:24:15:0a:
         fe:13:47:1a:d6:48:e1:b9:59:cf:52:e0:e8:b5:5a:e9:c9:6d:
         8b:8d:15:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:05 2026 by rpki-client