Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft
File:                     3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft (raw, json)
Hash identifier:          xDCi9XQOoeRLNfDqDHPEyP6/yAZEqx7KBaAacDGkGik=
Subject key identifier:   2F:E7:31:C8:DD:85:C4:DE:53:30:50:8B:25:B4:BD:75:E4:A9:7F:67
Authority key identifier: 3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1
Certificate issuer:       /CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1
Certificate serial:       384734CB80AAE6748F3FAA30EC49E4D3A6969356
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft
Manifest number:          03A2
Signing time:             Sun 01 Mar 2026 23:33:36 +0000
Manifest this update:     Sun 01 Mar 2026 23:28:36 +0000
Manifest next update:     Tue 03 Mar 2026 00:03:36 +0000
Files and hashes:         1: 3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl (hash: GAfrTSTOelpp46A8szKLgMuCsEqEe+Z4xXYCrdBB8lY=)
                          2: 34352e3137352e3232382e302f32332d3233203d3e20323638393133.roa (hash: 8i34fQq4t0JzP8JRIPn/y0bpe/PzMo2bjI4IkVeVfGI=)
                          3: 34352e3137352e3233312e302f32342d3234203d3e20323638393133.roa (hash: 7HthnmuiFL+QZBUBOm+JQ0vVcX9DwEFThjzaPHstPe8=)
                          4: 34352e3137352e3233302e302f32342d3234203d3e20323638393133.roa (hash: fjYN5ohW9UrvVn/jIhNTevNUqaEhTqTJbLSiX3l8FZM=)
                          5: 34352e3137352e3233302e302f32332d3233203d3e20323638393133.roa (hash: E2IJqLpJqhC2sN0pmwaDrIfmgjIrQSv124eOj2oH/FU=)
                          6: 34352e3137352e3232382e302f32322d3232203d3e20323638393133.roa (hash: MRmZ3/n2BmAbob40eZUZLgh7jvK3EY54pvvHXanBsB8=)
                          7: 34352e3137352e3232392e302f32342d3234203d3e20323638393133.roa (hash: JMFBfHNLCD10KXYNGspE+0vvATZxPRJS05hw83vbUpw=)
                          8: 34352e3137352e3232382e302f32342d3234203d3e20323638393133.roa (hash: TkNoZjEoAL/+boDq6uIF15NzTTplqQZFmhlSYsLYMmw=)
                          9: 323830343a356338343a3a2f33322d313238203d3e20323638393133.roa (hash: 4psnTXdLSw12WNhcpdrrRdiW1o6SQJjb27/rcdEonew=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl
                          rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 00:03:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:47:34:cb:80:aa:e6:74:8f:3f:aa:30:ec:49:e4:d3:a6:96:93:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1
        Validity
            Not Before: Mar  1 23:28:36 2026 GMT
            Not After : Mar  3 00:03:36 2026 GMT
        Subject: CN=2FE731C8DD85C4DE5330508B25B4BD75E4A97F67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:16:ce:d5:2b:3b:b8:15:1b:c8:70:ea:67:07:
                    65:5e:b1:09:8c:3a:3c:ca:3b:9e:d0:5e:6d:63:03:
                    46:bb:7f:3f:bd:38:00:b9:ba:36:b7:83:fd:c6:7e:
                    05:c0:65:c0:9a:b3:99:24:43:40:bc:5a:59:d4:b8:
                    0b:b8:56:3c:33:94:b7:4d:87:e3:50:82:04:8a:ac:
                    64:3e:41:ee:fd:ba:df:74:87:4c:55:93:5a:ff:0a:
                    b4:33:6d:a8:e4:41:44:d1:6e:5b:a0:58:bb:b5:da:
                    7d:67:38:b1:d8:01:c7:dd:1d:d5:a2:5d:2c:10:83:
                    5c:fb:16:22:0f:d3:3c:ed:ba:ed:84:68:ad:2d:d1:
                    d3:be:46:c6:6c:c8:0d:67:9e:e5:5c:81:73:8e:30:
                    50:dc:cc:66:d5:ce:f8:2d:94:2a:c9:95:a4:6f:dc:
                    09:aa:81:96:43:11:24:c6:ad:97:04:56:44:a0:bc:
                    35:88:03:3c:3b:8f:86:ab:1a:d6:c8:9f:6c:b7:dd:
                    12:e7:3b:74:31:0e:b9:86:ce:fb:d2:06:14:85:2b:
                    63:ca:80:ae:d7:1d:07:75:61:fa:1a:53:2e:86:70:
                    85:0d:93:49:ea:40:b1:e0:4e:51:cd:42:f7:d3:7d:
                    68:15:f7:b7:d3:e9:fa:7d:1f:02:90:e8:7e:43:bb:
                    ea:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E7:31:C8:DD:85:C4:DE:53:30:50:8B:25:B4:BD:75:E4:A9:7F:67
            X509v3 Authority Key Identifier:
                keyid:3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:41:d9:2b:8a:08:c1:54:32:7b:9a:3b:ce:14:9a:ec:09:82:
         b1:34:c7:df:e7:51:e5:28:e1:f6:f6:ae:99:27:e7:9d:1a:0e:
         5d:a8:d6:54:51:dd:57:11:52:d2:d1:ae:d0:d6:0b:cf:75:b4:
         8b:3f:79:42:76:be:68:78:06:5b:ce:0e:c4:ca:6f:52:fa:f7:
         74:41:59:21:a4:07:c8:c3:c6:e1:51:b4:d7:b0:0e:be:3b:98:
         fd:8b:57:54:62:b9:6c:aa:41:da:fb:a9:1c:35:e3:21:df:ad:
         d6:8d:09:e8:63:66:c3:ca:c1:74:33:38:a7:f9:2c:e5:ae:0f:
         50:1b:6b:49:0d:1a:0b:3f:ab:de:ed:e7:2f:88:f2:a1:2a:91:
         e8:1b:cb:11:14:ba:d5:59:63:4c:87:06:8b:d4:0f:35:80:b5:
         38:c7:cb:eb:83:86:d2:7b:53:ee:fa:6e:ea:06:39:22:ac:e2:
         d1:5e:bb:89:a2:26:9f:52:61:fc:97:fa:66:c8:03:6a:d6:87:
         fd:22:90:57:ff:fa:f6:99:f4:d0:38:c3:96:ae:8f:a5:a3:3c:
         c0:92:a3:18:a8:f7:2a:b2:bb:9e:75:1b:89:a3:67:8f:6b:2c:
         d3:18:89:9c:4a:d5:53:df:27:d7:5d:ba:3a:11:b7:43:1f:ef:
         1b:01:f9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:57:03 2026 by rpki-client