Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft
File:                     C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft (raw, json)
Hash identifier:          X7TIk7CUOS89gRKgixfza41l6rXplTXDot6hlGzmv5E=
Subject key identifier:   D5:37:F3:3A:52:62:38:63:FB:C3:8A:1D:CC:9A:E5:8A:F1:22:85:79
Authority key identifier: C2:F8:4B:29:34:A2:4F:6C:FD:BE:C3:12:44:B3:FA:0C:7A:85:2B:FB
Certificate issuer:       /CN=C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB
Certificate serial:       4A8873D9AF59770AAA02EF4007555ABD2861C139
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft
Manifest number:          039F
Signing time:             Sun 01 Mar 2026 03:37:22 +0000
Manifest this update:     Sun 01 Mar 2026 03:32:22 +0000
Manifest next update:     Mon 02 Mar 2026 05:28:22 +0000
Files and hashes:         1: C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.crl (hash: k7+EVE1DitZswl4xhWzsNBRIkWtQbyN9v7jmzEgTVXA=)
                          2: 323830343a386439343a3a2f33322d313238203d3e20323733333636.roa (hash: FMXM6tkwCOpPm//GFr0xpZdKXbvnih6mt1OxHLNbiTc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.crl
                          rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 05:28:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:88:73:d9:af:59:77:0a:aa:02:ef:40:07:55:5a:bd:28:61:c1:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB
        Validity
            Not Before: Mar  1 03:32:22 2026 GMT
            Not After : Mar  2 05:28:22 2026 GMT
        Subject: CN=D537F33A52623863FBC38A1DCC9AE58AF1228579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2f:06:4c:9b:95:e4:8d:f7:20:be:e0:43:2c:
                    77:8b:f2:11:59:09:e5:9d:ab:74:81:28:dd:db:84:
                    8d:4d:e8:9e:f9:a7:28:aa:86:b8:72:31:97:ae:dc:
                    1d:c4:0e:59:ae:66:cc:64:fa:30:51:9e:fb:8a:a1:
                    b9:9f:f7:b6:ae:34:e6:47:48:0a:9e:9f:d5:2c:7c:
                    d7:8f:06:c8:75:f6:33:c3:28:29:39:90:f8:c9:99:
                    c2:4d:10:04:17:9c:c0:1f:87:b4:32:0d:3e:43:8c:
                    99:cd:7e:32:8e:cc:c0:b2:6a:ff:7a:c4:c8:39:21:
                    b1:79:53:3f:25:e4:ae:a6:e9:7c:8e:38:14:39:26:
                    33:d4:57:ff:9c:5b:3f:70:9c:12:68:ce:03:6b:c8:
                    a2:c1:11:f6:0b:38:35:04:96:fd:6f:48:28:51:f7:
                    80:b0:ab:e2:c0:5f:a4:23:82:6f:6e:b6:1b:54:4d:
                    87:a5:33:fa:97:19:af:c9:00:90:8a:03:f7:88:9d:
                    5b:06:92:9c:6c:4a:c5:94:cc:49:da:23:de:de:58:
                    a7:33:fc:5f:2b:23:bf:d8:ef:6f:71:61:88:9c:bb:
                    a4:16:ca:2f:2e:29:da:70:76:84:6c:48:63:d5:09:
                    7e:58:64:02:d5:f2:73:70:81:c1:f2:0f:db:c6:9b:
                    f4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:37:F3:3A:52:62:38:63:FB:C3:8A:1D:CC:9A:E5:8A:F1:22:85:79
            X509v3 Authority Key Identifier:
                keyid:C2:F8:4B:29:34:A2:4F:6C:FD:BE:C3:12:44:B3:FA:0C:7A:85:2B:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:d8:cf:74:bb:42:d2:bd:93:a7:7f:b8:11:55:41:39:ca:7a:
         d8:37:5b:20:f7:be:32:44:70:01:d3:98:d2:ea:ad:11:09:cd:
         6b:6a:41:5c:2a:75:56:99:ac:93:18:bf:96:cc:4a:a4:d2:57:
         c1:05:c1:17:5f:c2:be:10:ba:b7:74:36:4d:5b:15:d2:ee:58:
         24:92:c7:1f:74:68:35:e3:5a:5e:6f:29:fc:7d:a4:4b:0b:dc:
         f5:4f:1c:a2:58:81:52:35:71:16:58:53:f1:c2:c9:1e:67:c4:
         39:11:45:c8:4b:d5:01:ff:01:a9:36:75:52:4f:70:7c:5a:ad:
         ec:46:bb:b0:9b:4a:07:9b:84:77:b7:12:47:7b:23:96:84:41:
         a1:18:1d:89:c4:39:2c:93:54:f6:0e:a8:8f:79:21:8d:02:88:
         bc:65:e6:e8:9f:fe:48:21:f5:3e:7a:d2:ad:c6:c2:98:49:d4:
         eb:ce:19:a7:86:49:d5:f3:ec:96:36:8f:08:7a:6d:55:5f:78:
         3f:d0:a0:1f:ce:84:82:c3:02:55:4d:1f:5f:a5:57:28:d7:b2:
         9f:87:cc:d7:e5:83:25:cc:1a:d9:31:c0:8a:d5:15:fc:96:fd:
         b6:b5:ba:35:5c:94:c6:fc:47:91:24:0d:db:b1:2b:8b:9c:66:
         00:9e:55:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:58:19 2026 by rpki-client