Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft
File:                     328938F6B87D58141D853FA04B61F2EC68371E43.mft (raw, json)
Hash identifier:          HxDRWkEk410y9X1gZyTM6ku7On6DUOL1o7WyRKrFxXM=
Subject key identifier:   4E:07:07:38:D4:67:73:09:8C:0E:10:C3:EB:C4:42:6E:34:94:3B:44
Authority key identifier: 32:89:38:F6:B8:7D:58:14:1D:85:3F:A0:4B:61:F2:EC:68:37:1E:43
Certificate issuer:       /CN=328938F6B87D58141D853FA04B61F2EC68371E43
Certificate serial:       1C4EB61BE43F6016AF41A4D1B47DA9A33AB6A31E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft
Manifest number:          0422
Signing time:             Sun 01 Mar 2026 10:04:05 +0000
Manifest this update:     Sun 01 Mar 2026 09:59:05 +0000
Manifest next update:     Mon 02 Mar 2026 11:21:05 +0000
Files and hashes:         1: 328938F6B87D58141D853FA04B61F2EC68371E43.crl (hash: S5aUrWoa3IBXLhE1uC1AivUFOGIzQQFG0BGeJz31hIk=)
                          2: 323830343a383333633a3a2f33322d3332203d3e20323732313835.roa (hash: ayKHkoUaXDc+dlhSGRGyDF6TYdoTV7sf4lmoMEMC7N4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.crl
                          rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 11:21:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:4e:b6:1b:e4:3f:60:16:af:41:a4:d1:b4:7d:a9:a3:3a:b6:a3:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328938F6B87D58141D853FA04B61F2EC68371E43
        Validity
            Not Before: Mar  1 09:59:05 2026 GMT
            Not After : Mar  2 11:21:05 2026 GMT
        Subject: CN=4E070738D46773098C0E10C3EBC4426E34943B44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ea:c4:fb:ef:db:ac:42:dc:c6:ad:ce:8a:8f:
                    92:fe:5e:fb:d9:4c:a9:81:c5:17:53:ad:3d:10:de:
                    7c:be:c3:26:c4:11:d6:84:05:68:5c:a6:db:0e:64:
                    e8:94:54:0f:92:88:73:95:01:34:05:dc:ed:c9:4e:
                    fb:e2:66:8d:bf:8f:95:7a:1c:38:38:59:3f:86:a9:
                    ae:f7:59:6c:c7:ca:e7:f0:24:d3:54:49:26:12:2b:
                    65:6f:b4:b2:ab:41:e4:28:39:be:8d:d0:d2:04:8f:
                    e6:bf:12:ec:3a:c5:d5:4c:26:3c:98:2c:11:3a:2d:
                    40:f8:be:90:26:40:03:d9:23:f6:ec:23:db:17:a0:
                    51:f3:c6:68:94:1d:b6:b0:98:1a:e8:15:36:ce:b5:
                    bb:fb:bf:df:22:4a:57:5b:7e:88:c7:9d:16:35:65:
                    60:47:83:b7:82:ce:71:2c:ee:ff:4f:31:df:a9:c9:
                    66:49:9a:c0:5b:d2:45:69:23:82:08:e5:93:56:f4:
                    da:22:e0:45:43:35:42:88:35:55:cf:cc:d0:70:a5:
                    ea:1a:a1:9a:c8:d1:22:fd:05:a8:05:f6:b1:1b:de:
                    1a:b5:4c:13:04:f0:a3:30:f7:c0:4d:0f:55:41:e8:
                    33:43:49:ef:b9:dd:1b:b7:5d:2e:4d:55:16:e8:ed:
                    51:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:07:07:38:D4:67:73:09:8C:0E:10:C3:EB:C4:42:6E:34:94:3B:44
            X509v3 Authority Key Identifier:
                keyid:32:89:38:F6:B8:7D:58:14:1D:85:3F:A0:4B:61:F2:EC:68:37:1E:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:48:39:ec:2b:c8:48:24:b5:41:f6:19:42:0a:37:72:65:1f:
         29:ee:f3:b0:1e:2f:6a:6b:9c:2a:19:31:8b:2c:45:28:bc:e9:
         05:e5:12:cf:0e:88:62:1f:2e:b9:e7:5d:cb:df:56:40:ec:b3:
         7a:79:41:05:94:7c:92:12:ae:b5:f5:b9:24:3f:5c:43:5a:d6:
         63:eb:4f:32:9f:d3:a6:76:ca:0e:da:9f:8a:cc:42:47:38:b9:
         77:12:22:02:bc:6f:a1:b9:39:d8:b1:11:04:4a:86:ab:b9:c1:
         66:d6:68:61:e6:67:8f:1a:7b:03:b8:24:32:61:74:f9:1a:53:
         e2:48:f2:7f:74:7d:59:97:65:1f:69:ac:db:df:4b:2d:9c:a1:
         9a:ec:68:a3:5c:ba:aa:b0:f9:ee:26:e7:b0:e1:a0:83:ce:42:
         4f:9e:f8:62:dd:18:1f:73:4a:75:7f:5b:ba:1f:c5:b5:09:b5:
         31:a6:59:b3:f4:f1:f8:02:08:5a:f6:a0:17:07:f9:38:63:b1:
         e3:56:b2:aa:83:31:e1:b6:de:1f:81:da:75:6c:39:a7:29:b0:
         f5:b5:da:8a:4f:28:ef:9b:66:21:1c:18:a1:62:37:0b:de:3f:
         62:e3:fd:1b:e9:05:f7:d8:5a:52:11:d8:54:9a:e3:3d:1a:7f:
         1c:9d:56:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:16:26 2026 by rpki-client