Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/2A1E293AF462BBB064E158DF90216CA118423530.mft
File:                     2A1E293AF462BBB064E158DF90216CA118423530.mft (raw, json)
Hash identifier:          V72yLdSpxUNfqlyyrjhqEqGRHjAs3Di5xgLTi6AJ07g=
Subject key identifier:   98:E9:5B:36:A2:0E:DC:4D:16:93:67:DA:EB:F6:B1:FB:5B:B7:EF:D3
Authority key identifier: 2A:1E:29:3A:F4:62:BB:B0:64:E1:58:DF:90:21:6C:A1:18:42:35:30
Certificate issuer:       /CN=2A1E293AF462BBB064E158DF90216CA118423530
Certificate serial:       44C23700B22201F493B1E5D9B3B2E154B2E8ECDF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A1E293AF462BBB064E158DF90216CA118423530.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/2A1E293AF462BBB064E158DF90216CA118423530.mft
Manifest number:          010F
Signing time:             Sun 20 Sep 2026 12:22:19 +0000
Manifest this update:     Sun 20 Sep 2026 12:17:19 +0000
Manifest next update:     Mon 21 Sep 2026 13:19:19 +0000
Files and hashes:         1: 323830343a383136633a3a2f33322d313238203d3e20323732343533.roa (hash: 5nuQh5d5QZe/oLs556NO5nS+62Gs/Ht+YQIGa7+sGMg=)
                          2: 2A1E293AF462BBB064E158DF90216CA118423530.crl (hash: OWRL+Q8a7/ZP1CIOFOQ+dAYtqa5SKZVZi+Ta1MiaE2w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/2A1E293AF462BBB064E158DF90216CA118423530.crl
                          rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/2A1E293AF462BBB064E158DF90216CA118423530.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A1E293AF462BBB064E158DF90216CA118423530.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 13:19:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c2:37:00:b2:22:01:f4:93:b1:e5:d9:b3:b2:e1:54:b2:e8:ec:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A1E293AF462BBB064E158DF90216CA118423530
        Validity
            Not Before: Sep 20 12:17:19 2026 GMT
            Not After : Sep 21 13:19:19 2026 GMT
        Subject: CN=98E95B36A20EDC4D169367DAEBF6B1FB5BB7EFD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e4:ad:0f:a2:f8:18:6f:34:d9:0b:32:04:3c:
                    dc:52:1e:71:76:ea:ee:57:49:b6:7b:31:dc:0d:d3:
                    ee:ac:d6:56:b2:a2:ef:8e:49:67:20:94:1f:7e:bf:
                    05:14:27:df:12:9e:9a:04:0f:f5:5c:15:18:ca:8b:
                    80:52:82:2e:2f:cc:dd:78:4a:e8:ef:66:0f:73:9d:
                    51:1a:84:c0:4f:f4:ab:5e:6c:8d:4e:87:4d:a7:1d:
                    77:26:12:08:33:17:f5:ac:84:d9:58:cf:54:86:f8:
                    c6:61:17:1e:28:e3:39:96:91:32:a9:29:04:e4:3e:
                    ec:16:54:b5:ae:7d:f8:03:7d:09:69:ca:44:fc:39:
                    9e:d7:42:f5:e5:e0:a2:94:92:7b:f4:2b:13:30:69:
                    1b:80:8e:38:70:49:1f:ac:3c:dd:df:b1:ec:34:8d:
                    79:67:38:34:d4:7d:43:8d:24:7d:19:b8:7c:93:ec:
                    6a:9c:4c:3e:ed:fc:ce:9a:89:52:47:c6:6a:6b:67:
                    01:3a:7f:dc:bc:eb:1e:f4:c4:d0:4b:df:80:85:6f:
                    7e:3e:87:78:4d:39:f7:cf:1f:ff:9b:ca:92:05:fd:
                    47:6c:11:9d:bb:70:79:2d:77:f8:e7:b4:1e:22:d7:
                    9b:aa:e5:24:6e:82:2d:bf:34:b7:a9:61:c9:2e:d9:
                    99:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E9:5B:36:A2:0E:DC:4D:16:93:67:DA:EB:F6:B1:FB:5B:B7:EF:D3
            X509v3 Authority Key Identifier:
                keyid:2A:1E:29:3A:F4:62:BB:B0:64:E1:58:DF:90:21:6C:A1:18:42:35:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/2A1E293AF462BBB064E158DF90216CA118423530.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A1E293AF462BBB064E158DF90216CA118423530.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/2A1E293AF462BBB064E158DF90216CA118423530.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:92:b4:58:93:8a:df:93:6c:21:eb:93:d6:61:3a:51:02:01:
         ce:d5:5f:f1:61:08:8c:33:64:24:fc:43:5f:dd:37:d5:f2:e2:
         4f:1b:29:40:de:6a:10:4b:79:2d:88:b7:f1:fa:8d:95:4d:31:
         9e:07:60:61:91:2b:cb:71:bb:a2:bb:fb:31:89:60:63:a6:93:
         bc:1b:aa:8e:53:e4:25:c4:79:ec:16:d5:54:a9:f9:12:20:55:
         4b:ff:34:8c:c6:09:ee:f5:f1:48:0c:8f:9c:70:4f:27:54:76:
         c7:5c:80:02:fc:2d:e3:b5:f8:26:66:2b:18:9e:95:83:5f:dd:
         cf:d5:d2:67:b4:b4:31:a9:ff:ef:68:83:bc:ba:2a:c8:0b:cb:
         df:88:c1:b6:ba:32:2b:0d:58:42:82:c7:89:30:68:de:67:73:
         2d:ce:d7:b1:a2:3c:fd:e8:f9:ca:9f:54:5c:ce:68:7a:27:94:
         76:47:4b:fd:28:2a:ce:74:bf:0e:aa:b9:26:1b:39:9b:4e:0e:
         ff:bc:64:02:cc:4e:88:89:eb:fe:a9:44:81:01:73:a2:5a:b2:
         26:eb:1d:1a:8d:7a:d6:42:94:95:c3:ae:9a:bb:3c:9c:53:37:
         85:d6:96:e5:70:0c:c4:63:e6:dc:4d:ac:61:10:a3:2c:fb:72:
         c3:69:4e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:20:07 2026 by rpki-client