Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft
File:                     CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft (raw, json)
Hash identifier:          30ZjyvjX5QscYD1pNMSWFKrWV/1sqDdBWD4gnNOJT3E=
Subject key identifier:   FE:E7:51:F5:2A:64:E7:68:15:2C:A9:63:EC:DE:AC:D9:55:BB:40:DE
Authority key identifier: CA:F5:20:4B:41:16:9C:BB:F2:F6:8A:50:0E:03:6F:BA:6C:3C:3B:EF
Certificate issuer:       /CN=CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF
Certificate serial:       0B1DCDA896A30AE44BBD84E0FB69BAD114C3723A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft
Manifest number:          02CB
Signing time:             Mon 02 Mar 2026 04:04:57 +0000
Manifest this update:     Mon 02 Mar 2026 03:59:57 +0000
Manifest next update:     Tue 03 Mar 2026 07:00:57 +0000
Files and hashes:         1: CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl (hash: 5oj0/TOLNHFfl4DxMhTAx6p8FRQ0NHnf8ONHXlS/iS4=)
                          2: 323830343a366336633a3a2f33322d3438203d3e20323730343637.roa (hash: 8gZng/LcYVjRvdKcIWLphoxYezlVpCWANLcyK6msRE4=)
                          3: 3230302e35302e3230302e302f32322d3234203d3e20323730343637.roa (hash: qR6iS5F06BWnuM8HyC9ItrpXDfvJvjlt1MMd4yffj18=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl
                          rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 07:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:1d:cd:a8:96:a3:0a:e4:4b:bd:84:e0:fb:69:ba:d1:14:c3:72:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF
        Validity
            Not Before: Mar  2 03:59:57 2026 GMT
            Not After : Mar  3 07:00:57 2026 GMT
        Subject: CN=FEE751F52A64E768152CA963ECDEACD955BB40DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c2:18:b5:80:3c:3c:be:6a:b0:e8:e9:fb:af:
                    84:76:df:25:76:70:2c:7c:10:d8:eb:a2:12:cd:ab:
                    bd:42:d1:d6:c5:83:a9:32:df:3f:b1:46:2f:99:e7:
                    f5:cd:66:13:28:cd:96:78:6b:5c:f5:03:0f:31:f9:
                    74:3c:0c:41:b5:aa:98:7d:29:42:3f:0f:28:72:39:
                    50:f4:30:85:b3:a3:7f:46:76:e1:12:12:8d:53:6b:
                    18:bf:36:49:ae:72:47:c0:52:0d:64:20:8e:9d:9a:
                    a2:69:b9:eb:a1:61:14:f4:58:79:42:56:4d:62:cb:
                    dd:68:84:95:18:16:3d:47:7b:f2:64:dd:a9:7c:c1:
                    9d:57:3e:fa:be:ce:f4:3a:fe:cd:d1:51:16:c6:95:
                    3f:de:1a:7b:c5:25:80:6b:e0:49:66:76:46:4a:28:
                    ae:9e:dc:8d:4f:c4:91:77:90:c9:33:01:64:9c:d4:
                    4b:01:4f:ff:90:b2:6d:17:86:bb:c9:13:c2:06:4d:
                    01:29:cf:18:04:be:b9:f3:5f:45:33:24:6c:52:9c:
                    c6:e8:be:e4:28:a1:4c:17:5f:b5:d1:48:e4:c8:64:
                    12:0d:e2:fb:60:94:cd:ef:63:f6:04:fd:6d:a3:ea:
                    fd:cb:a5:ce:89:9c:27:fa:23:55:5d:0e:74:bd:f8:
                    83:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E7:51:F5:2A:64:E7:68:15:2C:A9:63:EC:DE:AC:D9:55:BB:40:DE
            X509v3 Authority Key Identifier:
                keyid:CA:F5:20:4B:41:16:9C:BB:F2:F6:8A:50:0E:03:6F:BA:6C:3C:3B:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:14:d1:3d:50:ce:dc:7c:ed:2a:1f:35:62:6d:63:39:d0:ad:
         99:e1:e0:da:b8:6a:25:f2:07:f9:12:dd:52:05:21:a8:11:ed:
         20:3b:94:aa:db:28:c0:49:2f:c8:8e:08:24:8a:da:24:83:6b:
         a6:4c:40:ac:b8:3e:19:7a:32:cf:3e:0e:4e:48:b6:9e:dd:b2:
         a0:69:a5:48:d7:62:af:45:20:fa:29:f6:fb:bf:bd:92:8c:7d:
         e5:bf:0b:31:bc:ac:b9:d9:df:43:22:3f:98:11:ae:73:24:4d:
         c1:07:c0:63:4f:aa:4d:9d:29:29:8d:f7:1f:4a:d2:3f:65:52:
         9b:75:57:e2:cb:84:e4:65:ac:eb:01:f8:a3:43:8e:71:7c:2b:
         bc:ed:04:99:ff:27:5a:4b:02:a6:70:c7:39:b9:c6:ca:61:b2:
         2c:52:f8:48:55:67:a4:7c:cd:e7:c0:55:08:2f:66:e7:dd:96:
         13:3c:1c:f4:de:15:1b:6b:44:ea:77:0c:c0:d4:1c:fa:25:44:
         9c:0c:0a:ee:ee:52:22:8d:c8:d1:1f:80:98:b7:02:f5:32:3c:
         95:70:80:51:8e:0f:80:4f:af:1a:88:94:10:41:fc:fd:30:9a:
         1a:de:25:20:e3:f9:c1:8c:2e:72:ac:bb:84:b6:f0:e6:dd:10:
         55:7f:5f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:18:44 2026 by rpki-client