Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft
File:                     5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft (raw, json)
Hash identifier:          zbJuCdviVoxaV/N4BmrboqTUqlANFmdfme2LuPBOvWU=
Subject key identifier:   4E:6D:96:DB:0A:FE:FB:C4:00:CA:93:3F:2C:DF:CF:5C:F4:13:3D:E8
Authority key identifier: 5B:A4:DD:BB:E9:74:E5:C2:A2:5A:95:2B:F4:43:11:47:F1:D1:95:BD
Certificate issuer:       /CN=5BA4DDBBE974E5C2A25A952BF4431147F1D195BD
Certificate serial:       580C7CFD7F7F99C565091D8D6D64D8C5F57EB064
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft
Manifest number:          0207
Signing time:             Sun 01 Mar 2026 09:49:39 +0000
Manifest this update:     Sun 01 Mar 2026 09:44:39 +0000
Manifest next update:     Mon 02 Mar 2026 10:14:39 +0000
Files and hashes:         1: 5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.crl (hash: W1Nj8H12nLdrvamdsiq1+naj89dDGOSTxII9u6TzF1Y=)
                          2: 3230312e3138322e3137362e302f32322d3332203d3e20323637353238.roa (hash: co898g/e6gpNmTwkvo7w+mddSVtU8rvkvoxnhxCBmvQ=)
                          3: 323830343a343263633a3a2f33322d313238203d3e20323637353238.roa (hash: PIlRQltrUdhiGTMrlNBLmA0cy+LED9T3Iu4ZRFUOcso=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.crl
                          rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 10:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:0c:7c:fd:7f:7f:99:c5:65:09:1d:8d:6d:64:d8:c5:f5:7e:b0:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BA4DDBBE974E5C2A25A952BF4431147F1D195BD
        Validity
            Not Before: Mar  1 09:44:39 2026 GMT
            Not After : Mar  2 10:14:39 2026 GMT
        Subject: CN=4E6D96DB0AFEFBC400CA933F2CDFCF5CF4133DE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4b:e2:3e:2d:50:46:ae:35:ea:ce:32:9b:c7:
                    19:d4:7c:3c:03:78:b3:0b:1c:3f:a9:d3:5e:d0:b2:
                    bc:c3:77:a6:44:6e:46:94:78:0e:4f:ac:c3:24:93:
                    c5:b8:ac:bf:65:d1:b2:0a:9d:96:c9:ac:c4:e4:d1:
                    ca:da:35:63:cb:3d:a0:7a:db:9e:97:7a:16:b0:65:
                    d5:ab:d6:52:95:c2:7b:ac:f4:d5:d5:e3:72:84:a0:
                    48:d9:49:9b:bd:14:cd:ce:16:62:97:43:89:f4:2a:
                    74:5f:07:36:93:66:20:88:2d:a2:cc:01:33:de:91:
                    46:a3:0a:ef:ea:14:68:da:aa:4a:c5:1a:92:eb:3d:
                    61:8a:48:a0:be:9f:c2:b4:01:f5:9e:ab:2a:cd:f4:
                    dc:e4:49:51:76:5c:c2:77:2e:1c:e9:d1:ca:aa:40:
                    68:a6:93:31:5f:93:de:a3:67:ae:74:a5:2d:84:3f:
                    f9:06:9d:50:81:1e:18:62:5c:cc:bb:58:04:58:9b:
                    ab:47:8d:8c:52:be:d4:5a:f6:1f:7b:b3:a8:c5:42:
                    54:70:21:06:a1:cf:e1:8c:fd:77:7c:fa:7e:4e:00:
                    71:09:79:74:1c:81:76:58:06:ea:2f:5b:c1:44:93:
                    fe:63:cd:5b:80:7d:d5:9d:74:84:3a:b0:29:37:c6:
                    80:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6D:96:DB:0A:FE:FB:C4:00:CA:93:3F:2C:DF:CF:5C:F4:13:3D:E8
            X509v3 Authority Key Identifier:
                keyid:5B:A4:DD:BB:E9:74:E5:C2:A2:5A:95:2B:F4:43:11:47:F1:D1:95:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:6f:43:27:4b:7e:9d:cc:db:56:1c:b9:db:b3:82:08:4f:24:
         2c:38:02:2e:a0:51:02:b5:f6:6d:63:60:f7:d6:9b:b9:1d:08:
         b8:79:56:b6:bb:3f:2b:cd:e4:7c:76:56:8c:ce:b9:fd:02:e6:
         07:9d:8a:d6:5b:d6:7c:8e:b0:af:36:d5:85:ed:38:b7:01:44:
         7c:2c:af:c9:59:c1:2a:7e:ae:4f:88:b7:dd:82:fa:90:f5:b3:
         86:e0:5a:2f:a9:61:2a:d5:34:ef:73:30:23:c6:73:b4:64:08:
         68:98:b5:b8:bd:69:3f:7d:8a:a1:a6:7f:5f:1b:d9:82:b1:03:
         56:79:a8:b3:5d:a0:c5:7f:70:55:d7:5a:22:4d:12:6c:67:8e:
         b0:00:d7:70:23:09:2f:b6:b8:7b:c4:78:7c:28:9f:eb:3b:39:
         95:10:cb:72:2d:ac:eb:fa:32:b9:4a:1c:0a:d1:19:8c:2a:95:
         b1:4c:7c:30:85:79:74:b2:d3:81:6c:bd:fb:2d:51:f3:19:86:
         7c:2f:32:a6:3b:b8:1e:6c:68:3d:bd:e7:11:8f:98:0e:33:59:
         08:e6:e4:9b:24:95:fb:d6:37:b8:a1:3a:22:43:af:55:48:6f:
         c6:33:95:e7:4d:c3:26:89:5b:c5:94:b0:09:12:d7:98:41:7e:
         7b:a0:9c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:16:32 2026 by rpki-client