Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft
File:                     BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft (raw, json)
Hash identifier:          W3ZqkDiTCU1XqFOeok6KQiyoLYcRxDhFD/pyCT7PX4k=
Subject key identifier:   83:4E:FC:AB:34:0F:EF:2E:49:74:AC:AA:EE:57:31:9C:0D:EC:62:16
Authority key identifier: BA:57:D2:39:D2:DC:0A:C2:57:37:3A:7B:BA:D5:18:86:AA:5D:4C:46
Certificate issuer:       /CN=BA57D239D2DC0AC257373A7BBAD51886AA5D4C46
Certificate serial:       582E9CF42F45A397417E76EEBF115D499B84232B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft
Manifest number:          0127
Signing time:             Mon 02 Mar 2026 08:21:25 +0000
Manifest this update:     Mon 02 Mar 2026 08:16:25 +0000
Manifest next update:     Tue 03 Mar 2026 09:04:25 +0000
Files and hashes:         1: BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl (hash: Sc0TL3nXouas4NILi6j3eYgBNZyHAKDr4SPYmuYj08w=)
                          2: 323830343a393339303a3a2f33322d3438203d3e203631363233.roa (hash: LG7owg69fyxfKV8rigMC7sBkP5B19iTBtW4UQCyl/2Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl
                          rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 09:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:2e:9c:f4:2f:45:a3:97:41:7e:76:ee:bf:11:5d:49:9b:84:23:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA57D239D2DC0AC257373A7BBAD51886AA5D4C46
        Validity
            Not Before: Mar  2 08:16:25 2026 GMT
            Not After : Mar  3 09:04:25 2026 GMT
        Subject: CN=834EFCAB340FEF2E4974ACAAEE57319C0DEC6216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:51:73:65:98:dd:28:c9:6b:f4:ef:fb:77:75:
                    aa:a6:ce:7e:46:4a:e8:c6:92:18:43:b0:17:a2:7e:
                    ef:9b:6d:b7:22:0a:fc:dc:75:70:46:9e:17:98:92:
                    4a:37:3f:aa:c2:63:8c:9a:72:8e:b9:8e:f7:ad:6e:
                    a1:c6:1d:5b:95:83:1a:27:71:4d:71:66:73:ea:1b:
                    56:3b:98:0d:be:a2:5a:bd:16:e6:14:8c:73:ba:68:
                    23:30:f6:ae:c5:eb:89:8c:5f:02:ae:65:30:61:80:
                    99:46:e7:33:d8:c0:5c:e9:87:88:a9:db:66:09:98:
                    20:f1:ac:03:71:72:0a:6b:54:63:c7:1f:b9:5c:ca:
                    92:35:c6:96:9b:80:2c:c9:ac:d4:e1:f1:c1:c0:de:
                    67:4e:02:26:68:71:55:ac:75:ae:90:88:3c:a3:a2:
                    f6:c2:d0:04:82:7e:95:7e:78:b3:65:1c:21:96:99:
                    3e:16:bf:54:c2:bb:0b:b2:5a:7d:d7:dd:74:72:24:
                    56:ec:10:82:d6:fc:c2:09:c6:de:8d:a2:1d:b1:82:
                    9e:da:2d:55:9a:73:c4:6f:36:9b:42:46:bb:b1:80:
                    5f:f7:fc:b5:07:f7:bf:48:12:af:66:7a:88:74:3e:
                    ac:2d:3d:50:d5:11:b9:2a:69:b2:2e:67:9e:3a:11:
                    81:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4E:FC:AB:34:0F:EF:2E:49:74:AC:AA:EE:57:31:9C:0D:EC:62:16
            X509v3 Authority Key Identifier:
                keyid:BA:57:D2:39:D2:DC:0A:C2:57:37:3A:7B:BA:D5:18:86:AA:5D:4C:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:04:02:97:06:6d:37:4a:67:68:97:7d:a5:96:12:38:08:a3:
         9e:68:96:0f:6f:93:c9:85:c1:d8:19:95:d7:45:2f:1d:40:e8:
         f6:3f:9e:d9:ee:45:cd:7d:fb:3d:cd:33:ae:6b:b8:8a:00:51:
         af:b5:1a:d5:dc:d1:f1:37:3c:84:48:f9:e3:fc:7d:7d:e4:e0:
         93:c9:ff:ea:06:b6:6a:f7:69:d6:89:9a:12:ea:7b:b9:c2:79:
         dc:23:b7:1c:47:3e:8b:17:86:ce:01:1c:cb:a8:d9:8a:ad:a3:
         19:20:c2:b3:30:53:df:23:5a:c8:e3:4f:f4:99:da:ba:66:7e:
         9e:59:9c:4b:13:02:e4:5b:0f:63:91:4d:7a:44:62:80:9f:90:
         da:88:2d:bc:d7:3e:b2:5a:c7:07:e4:cd:15:b0:f9:74:ad:27:
         73:f6:0b:d1:fe:bc:ed:ec:16:e9:3c:09:a1:1f:91:12:76:3e:
         be:03:93:c4:b2:12:ff:57:1a:bb:28:ee:d8:b1:e3:aa:aa:81:
         02:1f:7d:12:02:f3:16:08:35:ec:dc:9f:2a:c9:90:80:69:0b:
         d8:df:2d:c8:04:b5:d6:e1:f6:1f:d2:25:5e:38:fa:f4:e1:14:
         31:d3:a4:0a:f5:a0:04:2c:db:76:10:e9:95:f6:28:99:41:7f:
         3c:d3:9e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:18:56 2026 by rpki-client