Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6gWe8mgk5x55ATqLxjaTS6sZZkk4vcxWr4SSDGjzExNU/0/AECBF3CDCE0A34862EB94E68C559C421CD162F6D.mft
File:                     AECBF3CDCE0A34862EB94E68C559C421CD162F6D.mft (raw, json)
Hash identifier:          x9jz88xcvdS9hQ8XINZpGe4zG1YsEzVpwV9mjpoARzA=
Subject key identifier:   35:5B:84:58:8F:87:0D:F4:29:F9:71:81:75:50:D2:58:31:90:DA:46
Authority key identifier: AE:CB:F3:CD:CE:0A:34:86:2E:B9:4E:68:C5:59:C4:21:CD:16:2F:6D
Certificate issuer:       /CN=AECBF3CDCE0A34862EB94E68C559C421CD162F6D
Certificate serial:       7EA7942F028F16A2B70C1914067BFC781F7B916A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AECBF3CDCE0A34862EB94E68C559C421CD162F6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6gWe8mgk5x55ATqLxjaTS6sZZkk4vcxWr4SSDGjzExNU/0/AECBF3CDCE0A34862EB94E68C559C421CD162F6D.mft
Manifest number:          1D
Signing time:             Sun 01 Mar 2026 20:15:59 +0000
Manifest this update:     Sun 01 Mar 2026 20:10:59 +0000
Manifest next update:     Mon 02 Mar 2026 23:30:59 +0000
Files and hashes:         1: AECBF3CDCE0A34862EB94E68C559C421CD162F6D.crl (hash: E2Tpx2A4o/Ip0gHBVMxm8GHp8Mb8ofUgPRT0j8lWy1k=)
                          2: 323830343a393763343a3a2f33322d3438203d3e20323735363434.roa (hash: s3SviicRkDCJTfJHgyl+V7K3RjEWjEF+YSaf7nzrfks=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6gWe8mgk5x55ATqLxjaTS6sZZkk4vcxWr4SSDGjzExNU/0/AECBF3CDCE0A34862EB94E68C559C421CD162F6D.crl
                          rsync://rpki-repo.registro.br/repo/6gWe8mgk5x55ATqLxjaTS6sZZkk4vcxWr4SSDGjzExNU/0/AECBF3CDCE0A34862EB94E68C559C421CD162F6D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AECBF3CDCE0A34862EB94E68C559C421CD162F6D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 23:30:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:a7:94:2f:02:8f:16:a2:b7:0c:19:14:06:7b:fc:78:1f:7b:91:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AECBF3CDCE0A34862EB94E68C559C421CD162F6D
        Validity
            Not Before: Mar  1 20:10:59 2026 GMT
            Not After : Mar  2 23:30:59 2026 GMT
        Subject: CN=355B84588F870DF429F971817550D2583190DA46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:42:40:b1:eb:7d:c9:48:54:eb:88:7f:f3:cc:
                    c9:e7:9b:bf:51:81:e5:86:d9:d4:27:77:a8:46:31:
                    99:c9:ca:4f:02:32:45:b4:73:a4:b5:17:15:b4:5e:
                    50:c6:5d:b9:3d:ee:0d:c3:39:3d:9f:5c:64:6c:14:
                    06:2c:7a:a4:18:a4:46:0b:6c:d5:b3:4d:93:da:a9:
                    a5:8a:58:2b:0a:bb:80:7f:cf:ff:ca:f1:48:7d:e5:
                    9e:95:02:40:f5:02:5b:2e:ec:b3:0c:c7:ae:70:5b:
                    8d:55:96:01:93:29:45:69:7e:bb:28:28:c3:e0:67:
                    b4:e4:4d:e6:52:b5:aa:3c:27:43:14:20:93:c3:54:
                    70:52:76:58:33:c5:d1:74:07:c2:84:a5:96:41:37:
                    b5:ec:65:fa:d7:25:cb:92:cf:fc:2d:4e:48:ed:11:
                    9b:bb:b3:91:8e:d1:df:b9:7e:04:21:f0:29:f0:46:
                    a4:50:56:77:90:57:26:df:6f:52:3d:f9:eb:db:35:
                    66:b9:4c:c7:f9:3c:f8:4b:10:89:3c:88:a6:f5:a6:
                    86:92:d9:6e:e3:19:1a:10:84:d3:cd:68:9f:e0:ac:
                    d3:c6:b1:5d:db:35:38:6e:77:47:f5:16:06:8e:d2:
                    a3:9a:74:39:a5:d9:4d:0e:95:aa:63:a8:34:cf:36:
                    42:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5B:84:58:8F:87:0D:F4:29:F9:71:81:75:50:D2:58:31:90:DA:46
            X509v3 Authority Key Identifier:
                keyid:AE:CB:F3:CD:CE:0A:34:86:2E:B9:4E:68:C5:59:C4:21:CD:16:2F:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6gWe8mgk5x55ATqLxjaTS6sZZkk4vcxWr4SSDGjzExNU/0/AECBF3CDCE0A34862EB94E68C559C421CD162F6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AECBF3CDCE0A34862EB94E68C559C421CD162F6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6gWe8mgk5x55ATqLxjaTS6sZZkk4vcxWr4SSDGjzExNU/0/AECBF3CDCE0A34862EB94E68C559C421CD162F6D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:48:a8:f6:a8:aa:2a:1d:57:a0:2f:56:cd:3a:ae:20:43:c8:
         a4:2c:96:4d:b6:1d:87:8a:f9:1d:7e:72:84:63:24:b5:aa:e5:
         7d:1a:c9:89:1d:82:b1:91:19:98:7c:cb:bc:3c:05:31:ff:ad:
         28:9f:b6:2b:ed:98:21:54:82:0f:c6:bc:cb:25:a5:d0:c1:f4:
         16:98:b2:ed:5f:b2:38:a3:49:00:24:1f:76:34:52:28:11:d1:
         67:45:f3:96:12:2c:b4:bc:6f:a6:58:07:08:f3:c6:de:57:c5:
         38:e7:c8:0f:dc:6d:d8:2c:0b:12:c2:c9:f3:ef:11:e9:13:d4:
         d3:dd:14:f5:2d:9a:a9:4e:aa:3a:87:35:2c:4a:18:4e:fe:bb:
         a4:dc:0b:cd:c9:38:ea:eb:b1:7c:40:62:b3:94:f0:e0:95:85:
         90:39:48:2d:c3:fe:c9:c5:c6:a6:2d:a1:98:bd:5b:80:38:8d:
         08:7f:c8:c5:ca:1e:c7:43:52:e4:c4:3e:59:91:fc:2a:1d:68:
         83:c4:bd:5e:98:ae:80:32:fa:e9:5c:da:fc:c4:ae:3b:95:77:
         d5:8c:22:f4:81:6b:2d:d4:2b:75:39:18:7b:1b:99:0c:ba:1a:
         a6:c5:c9:ca:fb:40:7a:ce:09:9e:56:4e:b5:88:c9:d3:1d:81:
         bb:60:8e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:45:21 2026 by rpki-client