Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft
File:                     D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft (raw, json)
Hash identifier:          dYZHiBXJ+/Em/hkRYkCOw8YdsA+mxRZxiwxmBphXEco=
Subject key identifier:   17:B6:85:9C:60:4D:FE:0F:25:1F:E2:81:AE:04:50:74:6A:1E:1F:C4
Authority key identifier: D7:8B:D4:9F:16:98:DE:94:8F:47:13:6B:6B:8D:24:84:F5:3C:56:D5
Certificate issuer:       /CN=D78BD49F1698DE948F47136B6B8D2484F53C56D5
Certificate serial:       7F6CD7590EA0A408D0FE3C86C2DE153FF3B1215C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D78BD49F1698DE948F47136B6B8D2484F53C56D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft
Manifest number:          01AA
Signing time:             Mon 02 Mar 2026 21:33:24 +0000
Manifest this update:     Mon 02 Mar 2026 21:28:24 +0000
Manifest next update:     Wed 04 Mar 2026 00:39:24 +0000
Files and hashes:         1: D78BD49F1698DE948F47136B6B8D2484F53C56D5.crl (hash: xTe/g8IMfsK1kI5gWkAhWS5dLJsVkwKhS0YvWyRn4OA=)
                          2: 3137372e3132382e3232382e302f32322d3332203d3e203238353932.roa (hash: ZuDr+uoivnY73ETayT+plzAx38hIjwRMmlYEOg/XzDw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.crl
                          rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D78BD49F1698DE948F47136B6B8D2484F53C56D5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 22:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:6c:d7:59:0e:a0:a4:08:d0:fe:3c:86:c2:de:15:3f:f3:b1:21:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D78BD49F1698DE948F47136B6B8D2484F53C56D5
        Validity
            Not Before: Mar  2 21:28:24 2026 GMT
            Not After : Mar  4 00:39:24 2026 GMT
        Subject: CN=17B6859C604DFE0F251FE281AE0450746A1E1FC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c7:00:91:7b:ee:79:d3:5d:6f:2c:a4:f5:f4:
                    01:d8:07:ff:31:4b:00:5e:67:4c:4b:28:e0:3d:52:
                    40:b0:d4:e4:ec:b2:9f:c2:a2:98:6d:d6:d4:cc:fa:
                    93:32:4b:1b:ab:3a:1f:6b:50:28:1a:eb:45:bb:37:
                    d9:9e:d5:6e:07:ab:20:b5:eb:46:44:d8:13:5e:6c:
                    5f:fb:f0:4d:71:fe:09:a9:17:57:38:65:14:ad:b7:
                    b6:6f:a1:22:fc:e3:e0:c5:cc:0c:9f:75:30:42:41:
                    76:39:9f:d0:2c:61:64:3b:19:a7:91:7d:11:42:1c:
                    b4:e5:da:ff:07:d9:34:c5:e4:29:aa:7d:fd:07:bf:
                    39:55:90:33:7b:b4:fa:f0:4f:9a:26:27:a9:14:ae:
                    b0:3b:fe:eb:c3:69:a3:ad:25:cc:d5:ab:a1:69:58:
                    b4:3c:0f:96:16:93:4e:56:90:47:85:66:e0:75:d7:
                    66:e9:44:89:9f:b1:79:eb:34:1f:a1:95:5b:43:48:
                    50:2a:e0:d6:9e:0c:d5:fe:8e:20:27:8b:68:f7:65:
                    3c:23:d7:07:75:c5:d4:13:e3:ae:c5:50:f5:db:30:
                    54:aa:ac:c6:8d:43:9d:69:28:f5:72:2e:8a:5c:cb:
                    66:23:9b:ec:8e:83:cc:f0:37:51:b0:17:3c:df:93:
                    dc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B6:85:9C:60:4D:FE:0F:25:1F:E2:81:AE:04:50:74:6A:1E:1F:C4
            X509v3 Authority Key Identifier:
                keyid:D7:8B:D4:9F:16:98:DE:94:8F:47:13:6B:6B:8D:24:84:F5:3C:56:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D78BD49F1698DE948F47136B6B8D2484F53C56D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:2e:f7:6e:22:ee:2b:99:b1:8c:12:46:1c:04:e3:cf:53:32:
         6d:f0:3b:32:25:d9:c8:41:e9:6d:e0:6d:7d:43:99:a7:31:d6:
         44:e8:5b:32:ce:84:11:e2:98:a8:ab:7b:b1:3e:17:69:a3:95:
         6f:9a:34:20:f0:71:ae:9c:69:ef:a5:c9:92:c9:b1:26:b3:67:
         61:fd:1b:ad:cd:88:5a:f3:86:15:04:64:75:e2:29:e2:00:e6:
         20:e7:56:22:ac:4a:71:6f:9a:c6:4e:c1:b5:3a:a8:76:ff:7a:
         5f:1c:77:82:45:7f:44:bc:7a:ab:b0:32:c7:61:b9:f4:0a:e8:
         77:c9:32:74:b8:ea:e0:58:03:7b:c9:87:84:6c:a3:02:6f:1d:
         9d:5b:3b:a3:1f:cc:d2:60:4d:57:ed:e5:f8:35:75:1c:c2:c1:
         a4:c9:6d:0a:d5:9f:69:dc:0b:7f:7f:af:ea:ba:77:c1:d3:18:
         4d:41:b9:dc:56:aa:33:9d:ac:2c:ab:a7:13:69:b7:fa:c2:2d:
         05:69:cd:24:ff:1b:09:28:28:8c:c9:4b:05:e5:69:29:58:c8:
         74:96:ea:dc:9c:fa:28:a9:4e:f7:75:5e:ea:52:80:51:82:fb:
         61:1c:48:3e:9a:07:4e:1f:23:9c:b0:39:ec:26:39:45:32:09:
         e7:a9:45:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:02:12 2026 by rpki-client