Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft
File:                     52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft (raw, json)
Hash identifier:          rnOyQdhSJJR5Q3cuJo2MKRmyDJAb08FHJijVpceW9sc=
Subject key identifier:   35:B7:1E:07:9B:D9:A3:B6:AC:22:14:B7:9A:D0:E5:38:65:EB:EC:DF
Authority key identifier: 52:FD:38:C5:D0:DF:36:5C:D8:DE:3B:D1:DD:0E:92:C1:A6:B6:9F:7E
Certificate issuer:       /CN=52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E
Certificate serial:       4B9A9707A79B23E0F9EB2375F03ADCF068E29C5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft
Manifest number:          016B
Signing time:             Sun 01 Mar 2026 19:36:09 +0000
Manifest this update:     Sun 01 Mar 2026 19:31:09 +0000
Manifest next update:     Mon 02 Mar 2026 22:37:09 +0000
Files and hashes:         1: 323830343a386538633a3a2f33322d3332203d3e20323733343333.roa (hash: GKQiZSRTggPaFx/yFhowb4IhNVU02HJ7y8OaPzs+f/0=)
                          2: 52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl (hash: Y7CYsFL1oSRTh8gHg9dnYhC654z4Mhezy+kM14VXsD0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl
                          rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 22:37:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:9a:97:07:a7:9b:23:e0:f9:eb:23:75:f0:3a:dc:f0:68:e2:9c:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E
        Validity
            Not Before: Mar  1 19:31:09 2026 GMT
            Not After : Mar  2 22:37:09 2026 GMT
        Subject: CN=35B71E079BD9A3B6AC2214B79AD0E53865EBECDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:23:da:f3:1d:06:81:04:80:31:4a:87:a5:fa:
                    4d:9e:41:52:74:b9:23:bd:fe:19:a3:05:45:60:a4:
                    b9:11:40:d2:e1:a6:39:91:24:e8:65:37:b7:42:64:
                    64:4e:a4:83:04:2d:c5:f1:c5:f2:6f:38:53:27:ef:
                    4c:b9:c7:de:3b:c6:9a:6d:7c:d3:17:1a:51:a6:87:
                    6f:98:4e:c4:13:cf:b4:15:73:83:d0:78:d6:7b:f5:
                    36:0a:10:d1:ce:b3:34:14:4a:b7:c6:18:7d:8d:42:
                    0d:fe:d1:7a:86:22:ef:95:55:84:5f:dd:54:9b:27:
                    33:24:04:39:58:b4:4e:0e:e9:4e:65:19:fc:6c:08:
                    36:c0:a0:11:f1:a5:b7:17:37:06:52:7a:c8:eb:55:
                    16:4e:16:7f:4c:86:5d:85:ae:a5:4e:92:c2:0b:3b:
                    ba:6a:e8:cc:96:2c:14:3e:6d:e4:c3:4b:f2:cd:f1:
                    7a:31:ca:1c:10:4e:29:8a:95:3b:7b:4e:55:29:3c:
                    81:e2:fa:ee:72:86:1f:b3:fb:de:bc:77:81:21:5e:
                    6a:41:8a:fb:9c:26:f3:7f:3a:d2:22:41:bc:25:c3:
                    48:7b:41:5e:bf:23:f5:d8:d6:ac:74:ac:f4:bd:74:
                    e1:6c:39:e0:a7:26:da:59:0f:81:20:20:0a:0c:54:
                    85:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B7:1E:07:9B:D9:A3:B6:AC:22:14:B7:9A:D0:E5:38:65:EB:EC:DF
            X509v3 Authority Key Identifier:
                keyid:52:FD:38:C5:D0:DF:36:5C:D8:DE:3B:D1:DD:0E:92:C1:A6:B6:9F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:39:74:65:f0:15:8c:4f:cc:42:d5:bd:a8:3e:6e:45:94:ee:
         58:e9:46:62:4f:13:e3:2c:77:2f:30:24:18:ee:19:6b:04:26:
         69:c3:07:e1:ea:77:d7:04:6b:8b:32:2c:24:cd:5d:53:fb:d3:
         26:92:37:c5:3e:e3:bb:9e:7c:0c:dc:23:71:2b:66:69:eb:a4:
         9d:f5:a6:f1:f2:7b:a8:01:b8:02:da:10:9e:69:45:4b:10:ad:
         4f:d0:87:4a:a9:99:ad:f8:5a:f6:a8:1a:11:a2:98:c5:b9:a9:
         51:4d:9e:e4:67:ac:2f:8c:af:8a:dd:89:d2:11:09:0a:f0:e7:
         69:34:37:9f:96:4d:0c:b3:3c:45:f9:e8:3e:da:ab:8a:d1:5e:
         d0:a9:e0:3f:a2:7b:ed:3e:eb:98:80:98:ae:0c:18:38:7f:fc:
         97:92:66:fc:19:f1:eb:48:a7:6e:a1:1c:00:6c:fd:8a:6c:64:
         d0:9b:d1:69:9c:64:e7:ed:ae:59:0d:88:68:f3:1c:52:61:28:
         ba:4a:74:7c:40:dc:ef:86:8f:a0:09:62:e0:dd:24:4e:27:3e:
         89:8a:59:29:25:cb:6b:52:06:71:b1:e7:d4:8e:de:b4:91:1c:
         54:6d:9e:86:fb:ef:75:b5:be:e5:aa:c3:fc:aa:46:6e:37:f7:
         34:46:9a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:02:56 2026 by rpki-client