Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.mft
File:                     2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.mft (raw, json)
Hash identifier:          YTka/LeG259kBrBPhf2U6oE0vfYtxnx6vxm8pppQM1o=
Subject key identifier:   EE:CE:48:90:A5:50:C7:A1:F9:4F:51:31:14:3C:8E:14:0A:C5:93:3F
Authority key identifier: 2D:55:01:BF:A7:D7:EF:AD:FE:71:E9:E5:C4:5B:C8:D3:92:40:88:7C
Certificate issuer:       /CN=2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C
Certificate serial:       186BF7D4B5FB9C2E0DEBE0C374F635E74D272F2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.mft
Manifest number:          3D
Signing time:             Sun 01 Mar 2026 22:02:08 +0000
Manifest this update:     Sun 01 Mar 2026 21:57:08 +0000
Manifest next update:     Tue 03 Mar 2026 01:11:08 +0000
Files and hashes:         1: 2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.crl (hash: cgj5AdkuPhYtn34b8mzpdiIHXKZWWCFGuZxXg8bqoUk=)
                          2: 323830343a343235303a3a2f33322d3438203d3e20323637343932.roa (hash: 2SO6QSBGyBlimyPTsuFW5fiFM0SEVXclucf8ertVkmQ=)
                          3: 3230312e3138322e31322e302f32322d3234203d3e20323637343932.roa (hash: Mor/AX9x3PD93JwVYU649U4lY58zvYUpWPLIEVgiRAo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.crl
                          rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 01:11:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:6b:f7:d4:b5:fb:9c:2e:0d:eb:e0:c3:74:f6:35:e7:4d:27:2f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C
        Validity
            Not Before: Mar  1 21:57:08 2026 GMT
            Not After : Mar  3 01:11:08 2026 GMT
        Subject: CN=EECE4890A550C7A1F94F5131143C8E140AC5933F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c9:22:c9:db:fe:67:26:be:ad:ee:d1:ce:c5:
                    25:2e:46:51:64:e3:c3:79:9c:34:85:27:f0:ff:f8:
                    ed:d1:d8:38:49:74:ae:eb:06:17:88:1a:78:14:be:
                    8a:6b:b1:2a:b9:05:6d:3b:f0:94:96:06:c2:9b:84:
                    8c:c7:14:20:ea:85:e3:19:ac:e2:9a:b6:d5:97:dd:
                    ad:7d:92:80:2a:35:ab:f0:7b:ff:15:f2:16:f6:f1:
                    07:eb:56:64:28:9a:01:b2:1c:4d:dc:aa:83:11:eb:
                    cd:c4:70:6a:8c:e3:37:c5:d5:9e:32:98:47:45:71:
                    1e:18:bf:6f:25:82:a1:95:60:98:93:59:25:18:77:
                    c5:33:7d:50:cb:9d:50:20:7f:10:bc:80:b9:91:55:
                    89:ed:27:a1:60:ac:43:ec:d6:37:78:9a:11:0d:d6:
                    06:f8:28:0c:91:8b:6b:f9:56:78:61:ca:66:54:55:
                    0f:fd:f4:95:55:7b:8a:b5:98:c7:12:6f:51:16:cf:
                    24:7c:2d:64:48:2a:61:7d:30:d0:2d:e3:10:8b:c2:
                    80:85:94:17:7c:a1:7e:d8:16:dd:e3:ca:d4:c6:fc:
                    58:f6:c7:f4:a4:a4:08:cf:94:a1:c8:bb:38:32:54:
                    83:f9:c3:f6:26:a8:9e:31:f4:bb:77:35:61:b0:35:
                    7e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:CE:48:90:A5:50:C7:A1:F9:4F:51:31:14:3C:8E:14:0A:C5:93:3F
            X509v3 Authority Key Identifier:
                keyid:2D:55:01:BF:A7:D7:EF:AD:FE:71:E9:E5:C4:5B:C8:D3:92:40:88:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:a6:7f:ed:44:f3:27:4e:6e:34:b8:57:bd:ff:b6:e5:7d:62:
         0e:d0:40:b8:a2:de:1b:57:95:d1:ff:f0:62:58:73:77:ba:e5:
         4a:20:75:c7:f3:ee:c5:04:28:64:64:0f:93:d2:75:9b:e2:b6:
         bc:6d:8a:ca:c6:0d:72:a0:65:ff:45:86:67:0d:77:04:59:42:
         47:92:cc:1d:9a:e0:da:ac:90:c5:74:72:7f:8a:5e:59:fc:91:
         6b:74:f0:b7:e4:09:fa:1e:17:2e:d9:6e:16:ed:70:4b:7f:1a:
         dd:e7:e7:6b:19:36:f9:14:6b:0a:7b:96:df:4f:03:5e:fa:58:
         d4:a4:ed:d8:a0:4a:ab:14:f6:75:3b:40:43:74:33:50:18:19:
         23:58:c1:e7:05:10:ea:3f:f5:6c:3e:2e:4e:81:19:f4:62:2f:
         52:5a:6a:eb:70:6c:61:db:8e:68:0a:a3:d7:28:e6:46:44:c0:
         e1:7c:6d:a7:f4:3b:c6:c3:ff:f8:06:4f:59:88:b8:8e:fa:15:
         f1:de:a6:7b:67:c2:40:1c:09:9b:ee:5e:c0:f3:60:9d:a5:6a:
         d1:fe:1d:5e:57:0b:53:0e:50:5c:71:a0:c4:e6:15:4b:24:67:
         38:8e:81:ac:f8:d7:fd:39:73:b6:ff:cc:0d:43:43:a0:c2:e1:
         c9:fa:bf:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:37:45 2026 by rpki-client