Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
File:                     2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft (raw, json)
Hash identifier:          s4kbD8o3hD67SUi3jwSeXscLU6SyC2GUFF2ojaImUKo=
Subject key identifier:   D8:C5:CD:AD:0E:FE:06:3A:E1:92:CD:42:E1:07:59:8D:8E:52:6A:DA
Authority key identifier: 28:47:CC:C6:84:CE:30:8C:8C:DB:AF:04:E9:0C:9E:18:DB:33:AC:17
Certificate issuer:       /CN=2847CCC684CE308C8CDBAF04E90C9E18DB33AC17
Certificate serial:       70EC05358956CC4312C966217A9092C66871B956
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
Manifest number:          03A6
Signing time:             Sun 01 Mar 2026 05:01:55 +0000
Manifest this update:     Sun 01 Mar 2026 04:56:55 +0000
Manifest next update:     Mon 02 Mar 2026 05:27:55 +0000
Files and hashes:         1: 2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl (hash: jk94e1ek/6yFVcaJ2KnfQ8tHtJoCKfsA0pdb67PAN/M=)
                          2: 323830343a3866633a3a2f33322d3438203d3e20323633303433.roa (hash: A2Gpn8ZW5aoEGzgwjPMqPIr4WywGHZsk8HwfwI/eW/o=)
                          3: 3133382e3132312e3138342e302f32322d3234203d3e20323633303433.roa (hash: dOTcyk/Yg1CLHjEE7CrSkjNRl+YJedBSp33BbqS6EcI=)
                          4: 3137372e3132392e3139322e302f32322d3234203d3e20323633303433.roa (hash: smY/SAzd2Fuaf2YaSHRlggXrs8poIzwUXt+Sy0fZuxY=)
                          5: 3137392e3132352e35362e302f32322d3234203d3e20323633303433.roa (hash: TbDFL3gUdNfReddqFUYovFWPHWh7xwus0xT+10cp8M0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl
                          rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 05:27:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ec:05:35:89:56:cc:43:12:c9:66:21:7a:90:92:c6:68:71:b9:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2847CCC684CE308C8CDBAF04E90C9E18DB33AC17
        Validity
            Not Before: Mar  1 04:56:55 2026 GMT
            Not After : Mar  2 05:27:55 2026 GMT
        Subject: CN=D8C5CDAD0EFE063AE192CD42E107598D8E526ADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c3:f6:56:f4:63:27:3a:dc:f1:8e:5b:d4:73:
                    b8:1a:62:41:6e:e0:0b:2e:2a:69:3c:cd:6e:7a:d4:
                    b7:d2:46:a5:1f:43:e7:b1:52:4f:aa:91:b1:de:41:
                    aa:56:04:8a:36:ee:55:78:02:45:f8:bd:0b:4b:3d:
                    5a:2a:60:93:37:0b:c6:77:70:6c:23:cf:14:01:ab:
                    7b:5d:17:e2:64:70:d1:3e:2c:0c:39:c5:de:0c:e7:
                    0e:79:58:13:d8:dd:16:a0:e5:84:72:74:7d:fd:04:
                    2d:d1:c4:6f:db:b6:cd:3b:c6:b0:ca:d6:92:26:4e:
                    ef:5f:86:70:b6:d3:f4:5b:50:49:2d:02:3d:16:3c:
                    4c:1e:17:17:e7:ca:c1:3a:31:67:66:09:98:b5:27:
                    fc:a5:62:48:a7:03:65:81:2d:05:39:72:1f:0a:0e:
                    3c:c7:94:8c:da:a5:0a:d2:61:69:82:3c:0e:d9:8f:
                    fe:a3:fd:2a:3b:f8:5e:ba:c0:a5:b1:32:50:43:69:
                    94:51:3e:24:03:41:5e:d8:6e:9b:d7:81:6d:5e:b0:
                    b0:fd:0f:fb:86:f5:99:9f:a3:3d:e8:a5:32:f6:6e:
                    de:7d:e0:ff:b6:80:dc:0f:1e:98:72:31:51:86:c0:
                    52:a3:9e:4d:62:8b:32:b3:25:8c:e6:17:62:1e:fd:
                    e6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C5:CD:AD:0E:FE:06:3A:E1:92:CD:42:E1:07:59:8D:8E:52:6A:DA
            X509v3 Authority Key Identifier:
                keyid:28:47:CC:C6:84:CE:30:8C:8C:DB:AF:04:E9:0C:9E:18:DB:33:AC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:74:4a:cc:eb:b3:a9:48:d4:33:7d:f3:1f:7d:2e:e7:fe:89:
         7e:72:d7:c6:f2:e6:67:d5:04:90:b6:cb:35:b9:66:d6:92:37:
         12:4f:ad:da:dd:1c:91:cc:25:59:bc:fe:a6:26:5f:5f:84:ac:
         67:c7:42:b3:55:f6:9c:14:f1:52:0f:11:ec:75:d1:15:0e:8b:
         af:62:0c:22:e4:25:e3:fd:0f:2e:b8:1a:d6:91:a9:b9:55:aa:
         f0:71:85:8d:a1:ab:1b:dc:75:1b:81:84:9b:94:9a:90:49:eb:
         f9:ca:2d:e1:d7:5b:d3:50:f0:69:47:00:8f:1b:a2:7e:ba:f8:
         a9:20:90:77:ea:e6:6f:7e:e6:60:00:04:8d:d3:b2:fe:71:f8:
         21:e5:bd:6a:d1:c4:a5:7f:a9:5c:d8:f2:cc:03:43:be:a6:27:
         93:83:cb:8c:86:4d:3f:24:f9:82:af:e8:5b:6c:f8:2f:d5:76:
         64:d1:30:30:ac:6a:04:e9:ab:20:2f:a9:51:6a:67:e9:91:75:
         0b:4b:bf:1c:fd:92:9b:91:32:d9:e0:33:6a:af:50:9c:4b:7b:
         ba:c5:c5:9d:55:99:91:56:21:e3:99:01:e6:20:55:ed:dd:42:
         70:bf:d2:ff:c5:73:83:39:f7:8e:24:9d:f9:0a:a0:37:26:58:
         fe:68:b0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:06:48 2026 by rpki-client