Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft
File:                     4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft (raw, json)
Hash identifier:          QyZxJNagiG+qh6mb6+hJezTEIlC4rWQVWElRxxqcDVY=
Subject key identifier:   20:A1:61:8E:87:B6:B6:BB:0B:99:D4:41:3D:D1:68:91:A2:DB:9F:EE
Authority key identifier: 4D:CB:5A:BC:62:FB:BC:89:0F:DA:F0:5E:0D:86:D7:99:9A:6E:AD:B2
Certificate issuer:       /CN=4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2
Certificate serial:       0D4318A134552A7BE02E5058E42FB0C971179A0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft
Manifest number:          02E5
Signing time:             Mon 02 Mar 2026 08:00:01 +0000
Manifest this update:     Mon 02 Mar 2026 07:55:01 +0000
Manifest next update:     Tue 03 Mar 2026 21:20:01 +0000
Files and hashes:         1: 323830343a386635383a3a2f33322d3334203d3e20323733343835.roa (hash: 8zTnDBU/ctRiwzvyYleMQiuI7BwUVubfXCCycOPdhGg=)
                          2: 4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.crl (hash: Jpx9RjGnl5NjM3h8k23aJGOhcFAtxNYNYSDgYEMax4g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.crl
                          rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 17:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:43:18:a1:34:55:2a:7b:e0:2e:50:58:e4:2f:b0:c9:71:17:9a:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2
        Validity
            Not Before: Mar  2 07:55:01 2026 GMT
            Not After : Mar  3 21:20:01 2026 GMT
        Subject: CN=20A1618E87B6B6BB0B99D4413DD16891A2DB9FEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f8:9d:46:21:65:92:9b:07:0f:9e:c1:f9:a9:
                    8b:97:37:4f:d2:ca:0a:35:ab:62:2e:5a:c9:eb:71:
                    46:03:60:1c:e4:70:da:11:9b:67:de:f7:b7:e5:24:
                    f5:43:be:ae:d1:13:c3:52:f9:2c:0c:5d:63:a2:3c:
                    72:0d:dd:cf:ce:cd:48:04:86:6e:c8:3d:2c:4e:13:
                    79:90:d5:8a:7c:40:82:44:03:8f:85:a4:4a:c6:51:
                    c1:85:b9:21:32:d5:33:c4:f4:11:45:1e:e5:48:03:
                    dc:73:91:a9:71:b4:c5:dd:94:7d:eb:6d:85:65:2e:
                    3e:3e:78:e4:cc:0e:a6:67:2e:c2:75:8a:d2:37:35:
                    af:71:da:3f:1a:52:51:81:9e:6f:7c:f4:50:08:93:
                    2c:25:74:58:0d:27:94:41:62:5c:f8:1e:b9:d1:8a:
                    8b:2f:78:6c:62:56:6f:ce:05:e6:f4:da:7e:dd:57:
                    70:82:c4:91:d1:72:55:84:4d:71:8c:05:5f:e3:2a:
                    90:b7:0e:47:2c:a1:e2:f2:d8:1f:12:4e:3b:f3:46:
                    fa:2b:b5:a6:7a:67:4b:a0:99:af:c5:6a:f6:ae:9d:
                    7b:60:1a:ee:83:49:80:2f:39:a8:ef:1e:22:60:f4:
                    06:c5:d0:9d:0d:12:6a:06:05:f1:02:29:66:e2:93:
                    49:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A1:61:8E:87:B6:B6:BB:0B:99:D4:41:3D:D1:68:91:A2:DB:9F:EE
            X509v3 Authority Key Identifier:
                keyid:4D:CB:5A:BC:62:FB:BC:89:0F:DA:F0:5E:0D:86:D7:99:9A:6E:AD:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:4c:d6:40:88:20:db:1e:0d:3e:4e:fa:8d:a8:8c:a4:7a:f2:
         cc:ce:68:28:61:c6:ea:b0:fd:fc:ad:31:e1:6a:2a:5f:34:ca:
         77:c9:a5:fc:5e:07:7a:6d:9d:67:d1:3e:dc:77:ae:86:81:2a:
         71:68:82:10:64:ef:cb:95:e0:f4:26:d4:2c:a3:45:7d:bf:2f:
         87:cb:b4:c3:59:d5:c7:8b:93:90:0a:de:aa:22:90:33:18:98:
         46:6c:6d:08:36:10:0f:8d:2e:7d:88:ff:9c:ef:6d:32:7d:fe:
         04:7f:f3:c4:ec:04:4b:3c:79:57:67:2b:62:a7:46:59:4a:33:
         ce:6c:de:4a:1d:01:71:ea:22:e6:e2:0a:fa:ef:a4:51:68:7d:
         c8:98:69:57:55:17:85:f1:e6:61:5f:c1:c7:93:1a:a9:6f:36:
         89:ce:1b:9c:2f:a3:64:d0:82:f7:10:56:4a:2e:6c:bd:6a:c2:
         90:df:56:d7:79:cd:31:f2:f3:3e:e7:00:23:34:00:54:0a:79:
         0d:2f:e4:12:6a:83:cd:50:89:a8:d2:3d:8e:5d:75:9d:4c:d3:
         1c:8d:c7:c7:10:2c:f9:af:16:02:7b:1c:b3:79:cb:31:c4:00:
         e4:4a:5e:48:13:35:0a:93:27:66:03:52:7e:7f:bd:4c:4b:eb:
         6f:b3:49:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:50:09 2026 by rpki-client