Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.mft
File:                     2D7667AAA3EBB72048A79335E58D7FD1F8263830.mft (raw, json)
Hash identifier:          +9CWqsNMFiXAwQzzDJY4eekd98ojXL7pkf/cL/exFlY=
Subject key identifier:   53:25:05:E0:2A:76:32:10:B7:1B:FF:6E:A4:69:51:5C:2F:28:6B:F3
Authority key identifier: 2D:76:67:AA:A3:EB:B7:20:48:A7:93:35:E5:8D:7F:D1:F8:26:38:30
Certificate issuer:       /CN=2D7667AAA3EBB72048A79335E58D7FD1F8263830
Certificate serial:       28DA25161051C499198CF00093BC20C9AF6C66CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.mft
Manifest number:          0417
Signing time:             Mon 02 Mar 2026 02:50:00 +0000
Manifest this update:     Mon 02 Mar 2026 02:45:00 +0000
Manifest next update:     Tue 03 Mar 2026 02:50:00 +0000
Files and hashes:         1: 2D7667AAA3EBB72048A79335E58D7FD1F8263830.crl (hash: TwKRVwSEl6gZO1KybfhM7Zvn3swH+ZGui+DQ1SlGYmo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.crl
                          rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 02:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:da:25:16:10:51:c4:99:19:8c:f0:00:93:bc:20:c9:af:6c:66:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D7667AAA3EBB72048A79335E58D7FD1F8263830
        Validity
            Not Before: Mar  2 02:45:00 2026 GMT
            Not After : Mar  9 02:50:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:74:91:1f:84:0f:e0:a0:72:b3:17:86:72:29:
                    9d:00:bb:a1:1a:6a:9f:69:4c:e9:1c:9e:ab:e6:9f:
                    d9:84:c8:df:2b:ad:01:9a:e7:2d:cd:ac:68:a3:80:
                    d5:f0:bf:0e:5c:81:54:45:db:6c:f3:96:47:6d:bb:
                    ba:cc:3c:98:2f:a6:cd:80:84:3b:01:33:16:c8:fe:
                    fb:b8:78:af:51:ab:14:23:6e:b2:a7:85:e4:dd:9b:
                    8a:81:88:0c:b9:00:15:99:f1:16:47:91:bb:30:24:
                    47:b8:81:b4:a2:76:28:65:af:a0:43:8c:65:e1:77:
                    e9:ea:98:9b:4c:c5:23:62:3b:1b:38:af:f3:37:06:
                    37:06:b9:4f:9b:1b:a4:f0:87:6b:48:7b:ed:9a:26:
                    44:7e:22:e1:15:db:0d:19:48:fc:3b:8f:f6:4d:c6:
                    1c:5c:36:4e:e1:c9:c8:39:e8:f9:dc:0a:31:fb:da:
                    b5:0a:5b:e2:93:80:3f:53:02:e3:0c:f1:51:91:a2:
                    43:b5:d6:cf:71:fb:7f:fb:b0:a4:3d:4d:cf:b8:41:
                    0c:e4:11:b5:f2:30:1b:a5:a7:a4:13:50:84:f9:7c:
                    42:35:e3:97:dc:e8:3b:fe:33:aa:7a:1f:50:fa:04:
                    54:40:8f:c5:45:2f:3c:63:9b:1c:01:b6:8a:9e:b4:
                    54:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:25:05:E0:2A:76:32:10:B7:1B:FF:6E:A4:69:51:5C:2F:28:6B:F3
            X509v3 Authority Key Identifier:
                keyid:2D:76:67:AA:A3:EB:B7:20:48:A7:93:35:E5:8D:7F:D1:F8:26:38:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:4c:ff:05:a4:bc:61:54:41:3b:a4:1b:86:c5:72:98:64:53:
         5f:9a:b6:ba:4b:20:10:f6:ea:46:8f:9f:ec:2b:6f:90:4c:79:
         9d:d7:ac:46:70:ee:cd:87:1e:c5:37:59:5c:64:9a:9a:a2:31:
         3c:57:dc:a0:97:c2:4a:bd:00:57:07:f9:75:b1:6f:f8:48:ee:
         34:89:44:bd:a3:53:1d:10:80:08:4b:2a:36:9f:fd:c3:92:93:
         0a:d2:73:f5:de:bd:75:fc:fc:03:c0:98:f9:c5:21:a7:ff:66:
         a1:9c:8e:46:8c:6d:93:ba:48:da:4c:87:f0:7a:7a:53:c4:2c:
         d1:95:56:9f:7d:37:de:1f:98:7e:85:01:d9:55:4f:ea:f7:a0:
         f1:bf:e6:fc:9d:9e:21:09:6a:bb:1a:4f:06:75:5c:22:d0:56:
         b6:31:80:5b:66:b5:ad:d7:4a:58:53:d1:06:05:6e:65:93:07:
         e4:0c:d0:75:55:59:69:0d:5b:4d:50:f1:73:3a:5d:d7:8e:be:
         c1:44:b5:b7:3a:1c:28:6b:5d:6d:be:95:7b:11:ee:d2:23:6e:
         4d:f3:04:01:e5:f8:ec:ee:f9:bb:08:d5:00:16:84:62:a6:b2:
         e8:01:3e:06:2b:b9:37:27:e2:e8:5f:fb:97:9b:3c:c4:51:ee:
         e5:75:3f:21
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:55:27 2026 by rpki-client