Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft
File:                     21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft (raw, json)
Hash identifier:          1uciXhRGhsLoWkntEYOg0Ez2F9ygXzctZTCas4gnLSs=
Subject key identifier:   90:5D:71:E9:D2:CF:21:86:E7:3A:71:AA:6F:46:AB:F2:7A:12:40:B7
Authority key identifier: 21:CE:E9:B4:AE:71:66:71:BE:BD:32:60:3D:C5:A6:1B:CA:D3:58:98
Certificate issuer:       /CN=21CEE9B4AE716671BEBD32603DC5A61BCAD35898
Certificate serial:       27AE0556E7D81D20950A96B852C1681A3F0D018D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft
Manifest number:          2B
Signing time:             Mon 02 Mar 2026 04:46:36 +0000
Manifest this update:     Mon 02 Mar 2026 04:41:36 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:36 +0000
Files and hashes:         1: 21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl (hash: ioXuFQwtiesPrBeK5o2zISUAMuJMbmcWXaCZeU9pu3s=)
                          2: 3137302e37392e3137322e302f32322d3332203d3e20323636333033.roa (hash: MnJfs6TsiBi/pECmgTEXyD1yXOKpONV3xPLrn0GkifY=)
                          3: 323830343a333562633a3a2f33322d313238203d3e20323636333033.roa (hash: 95H0+MJ3bRg/tMB7uggONWwtz7iHZ69hxReH2hDfwGI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl
                          rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 07:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ae:05:56:e7:d8:1d:20:95:0a:96:b8:52:c1:68:1a:3f:0d:01:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CEE9B4AE716671BEBD32603DC5A61BCAD35898
        Validity
            Not Before: Mar  2 04:41:36 2026 GMT
            Not After : Mar  3 07:01:36 2026 GMT
        Subject: CN=905D71E9D2CF2186E73A71AA6F46ABF27A1240B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b7:08:02:26:62:d1:18:ad:ed:68:52:42:a5:
                    a3:3b:eb:e8:10:c3:44:55:96:25:9e:5b:b8:be:ba:
                    90:08:17:71:78:92:d8:ce:db:0c:f9:e0:c4:4b:1b:
                    14:21:4e:76:3d:5a:aa:65:50:d7:9b:39:52:25:97:
                    c6:c7:14:8f:20:1c:16:52:0c:67:44:ff:7c:96:65:
                    30:f8:7e:6a:09:b6:28:1b:a1:d1:2e:60:4c:4a:a1:
                    2f:d6:cf:bb:70:0c:33:4a:f4:b2:ed:1f:09:da:19:
                    57:e5:34:09:1a:f7:2f:1c:e9:48:23:b6:5f:5d:8c:
                    7e:b4:69:16:02:4e:06:37:e8:1e:bb:20:bc:9c:c4:
                    7b:51:94:3f:dc:a9:67:ec:51:ce:86:41:0c:da:c3:
                    6e:8f:d4:c2:d9:38:80:78:0a:57:38:0d:06:6b:1d:
                    6c:a6:a5:6d:80:25:07:5e:ee:72:2d:68:42:06:ce:
                    50:85:57:3d:e7:d6:6f:be:b9:5b:2b:e2:bd:40:96:
                    3c:35:30:6d:dd:e3:51:a6:8f:fe:a2:0c:df:f0:8d:
                    4e:c1:86:94:16:80:06:f3:53:e6:20:33:de:b8:b2:
                    a6:73:ee:2f:43:06:7f:3a:d3:d4:ff:16:79:75:2d:
                    54:13:f1:b8:00:0d:30:d6:11:bc:b6:ad:39:ae:2f:
                    2b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5D:71:E9:D2:CF:21:86:E7:3A:71:AA:6F:46:AB:F2:7A:12:40:B7
            X509v3 Authority Key Identifier:
                keyid:21:CE:E9:B4:AE:71:66:71:BE:BD:32:60:3D:C5:A6:1B:CA:D3:58:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:98:e5:e8:72:db:b8:97:a8:09:6f:ba:f9:4b:8b:79:52:e9:
         aa:a7:1e:c3:19:8f:da:4b:6d:a8:b7:c6:86:2f:43:2e:03:ee:
         fa:a6:12:d1:b8:a8:36:d7:4b:f9:06:57:75:23:43:cc:5f:f1:
         f1:96:37:f5:70:d8:27:34:e5:8a:90:57:2b:3a:d6:e5:6c:8a:
         b0:4f:aa:2e:f8:9c:08:2c:aa:aa:7e:3c:2b:52:29:94:60:cf:
         05:d2:c8:a3:70:9f:95:c1:64:86:85:cd:b4:49:35:95:22:8e:
         41:73:53:e7:04:c3:5b:91:fb:db:21:f7:7b:cf:97:ee:db:ce:
         6b:75:ef:cd:5d:b2:68:fa:36:0a:b6:2d:5b:88:d1:0e:c8:b6:
         13:c2:78:bc:cf:57:d9:f9:dc:cc:b1:16:bf:61:b7:5d:87:bc:
         2f:55:97:92:a1:d5:6a:a7:51:1c:8d:b9:bc:e9:5d:a3:09:a5:
         f6:bf:c6:95:de:13:2f:4f:9a:71:ff:60:41:80:e2:bc:4d:42:
         06:86:db:89:b0:a0:f3:64:1f:0a:ed:4d:fe:d5:09:89:e7:7d:
         48:5e:1d:05:d5:7d:10:61:7c:b7:73:7c:f8:28:d1:a5:44:4f:
         38:a8:1e:a8:d6:24:2f:c6:5b:e5:30:3f:aa:26:75:35:0e:cd:
         40:19:1d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:01:16 2026 by rpki-client