Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8KsayBfyizchxPtUX4uHaTqmip7ygL91Jaxv9Pw9KKZE/0/2ABA0459E992F662FCFC3A1DA24387258CF36F21.mft
File:                     2ABA0459E992F662FCFC3A1DA24387258CF36F21.mft (raw, json)
Hash identifier:          ckvMubIg56JcCHfbFWruf4dchtWl5A2YFWx1DLfLSww=
Subject key identifier:   8F:45:48:35:C9:C0:B8:50:2C:0B:D4:27:AD:B2:7D:A4:88:4D:BB:0F
Authority key identifier: 2A:BA:04:59:E9:92:F6:62:FC:FC:3A:1D:A2:43:87:25:8C:F3:6F:21
Certificate issuer:       /CN=2ABA0459E992F662FCFC3A1DA24387258CF36F21
Certificate serial:       7B1589B760484839971388C88CF8C6972687B0A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ABA0459E992F662FCFC3A1DA24387258CF36F21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8KsayBfyizchxPtUX4uHaTqmip7ygL91Jaxv9Pw9KKZE/0/2ABA0459E992F662FCFC3A1DA24387258CF36F21.mft
Manifest number:          02D8
Signing time:             Mon 02 Mar 2026 13:40:27 +0000
Manifest this update:     Mon 02 Mar 2026 13:35:27 +0000
Manifest next update:     Tue 03 Mar 2026 17:20:27 +0000
Files and hashes:         1: 2ABA0459E992F662FCFC3A1DA24387258CF36F21.crl (hash: i9Sc+ZizpKY610/r5RcPfHtx8kAHcTL8faltsaFDbaA=)
                          2: 3230312e372e3138382e302f32342d3234203d3e20333936393832.roa (hash: yc50ndo7LBmOUVtTl0A1BZ7y5EAyqbC6hHBT93YV6cA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8KsayBfyizchxPtUX4uHaTqmip7ygL91Jaxv9Pw9KKZE/0/2ABA0459E992F662FCFC3A1DA24387258CF36F21.crl
                          rsync://rpki-repo.registro.br/repo/8KsayBfyizchxPtUX4uHaTqmip7ygL91Jaxv9Pw9KKZE/0/2ABA0459E992F662FCFC3A1DA24387258CF36F21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ABA0459E992F662FCFC3A1DA24387258CF36F21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 17:20:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:15:89:b7:60:48:48:39:97:13:88:c8:8c:f8:c6:97:26:87:b0:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ABA0459E992F662FCFC3A1DA24387258CF36F21
        Validity
            Not Before: Mar  2 13:35:27 2026 GMT
            Not After : Mar  3 17:20:27 2026 GMT
        Subject: CN=8F454835C9C0B8502C0BD427ADB27DA4884DBB0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e9:1c:5b:b9:70:65:cd:3d:74:9d:2f:aa:42:
                    bf:8d:a3:bb:6e:7d:ae:ed:17:27:74:aa:85:3f:a7:
                    04:87:6f:73:7e:7f:7c:a0:ba:ec:46:82:ca:52:68:
                    ac:1f:44:a7:06:b9:0f:b4:c5:58:19:54:eb:a6:6b:
                    00:b3:3f:b7:07:88:7c:f8:8e:4a:d1:e7:32:d6:ab:
                    b9:2b:85:37:e1:12:cd:78:d1:00:fe:aa:0d:05:d8:
                    d1:e2:27:31:70:b9:28:76:2b:98:f9:c5:64:82:50:
                    af:0a:b2:14:b7:3f:8a:46:69:b9:1c:70:45:fa:4d:
                    f6:2a:7f:3d:3d:36:2f:0c:2a:8a:48:3c:14:84:4e:
                    59:1e:4a:ad:3d:3b:c6:35:80:84:85:64:f8:41:96:
                    35:5a:cc:b2:dc:40:b5:d2:f9:f4:57:61:df:69:24:
                    a5:56:1d:8c:9c:68:52:1e:80:4a:1e:bf:39:db:c3:
                    b2:6a:50:42:60:9e:98:ed:53:cc:de:bd:da:7b:de:
                    7f:fa:ea:0e:ba:eb:e0:c7:64:90:ba:0a:3f:7c:43:
                    c7:e7:7e:57:8e:26:c2:79:4b:5c:d4:bc:1f:31:22:
                    cf:40:14:11:d6:e3:08:60:41:20:59:2a:83:8b:55:
                    92:c7:6e:f8:93:15:48:60:f0:3f:2f:50:bd:c0:5c:
                    69:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:45:48:35:C9:C0:B8:50:2C:0B:D4:27:AD:B2:7D:A4:88:4D:BB:0F
            X509v3 Authority Key Identifier:
                keyid:2A:BA:04:59:E9:92:F6:62:FC:FC:3A:1D:A2:43:87:25:8C:F3:6F:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8KsayBfyizchxPtUX4uHaTqmip7ygL91Jaxv9Pw9KKZE/0/2ABA0459E992F662FCFC3A1DA24387258CF36F21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ABA0459E992F662FCFC3A1DA24387258CF36F21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8KsayBfyizchxPtUX4uHaTqmip7ygL91Jaxv9Pw9KKZE/0/2ABA0459E992F662FCFC3A1DA24387258CF36F21.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:08:d2:a3:8d:6c:1c:a4:35:91:ae:40:9f:07:bf:fd:d2:d4:
         8a:d3:4f:03:f6:ee:10:7a:30:34:57:46:d6:97:3d:3e:ea:51:
         3b:25:17:c6:7a:48:15:e8:1f:48:52:e4:e1:ec:82:62:a5:be:
         2a:92:da:4c:e5:c2:19:d3:ef:ae:89:3f:7f:6d:62:8d:7a:1c:
         e7:ce:92:6e:75:bc:69:f6:c6:9e:c3:c3:ea:a5:87:57:c6:f1:
         21:33:f1:c1:17:53:78:32:af:a9:88:3f:36:db:9f:22:fa:f9:
         e4:02:1a:01:fa:24:e7:79:06:a3:bf:b9:d7:32:32:d2:5a:8a:
         5e:a2:e0:72:86:75:70:5e:69:1c:5c:7b:c1:36:d5:07:78:ae:
         80:16:2b:f9:4f:89:f6:e8:30:19:cf:64:82:83:e5:4a:eb:43:
         cf:2e:43:fb:78:12:ac:69:a8:90:25:10:fc:8f:f4:ad:a2:c8:
         27:d1:e7:01:db:70:1d:d7:e0:c5:17:bd:ca:4b:60:98:32:ac:
         d2:3f:7a:5e:e0:b5:20:b9:82:82:e8:70:78:03:85:25:da:09:
         c8:dc:78:b6:0e:b4:e9:90:26:47:4e:ed:39:de:e9:02:49:06:
         4c:8e:37:98:7a:ab:2f:8b:1c:8d:bd:cd:6a:1f:8a:51:fc:69:
         ca:46:98:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:00:41 2026 by rpki-client