Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft
File:                     D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft (raw, json)
Hash identifier:          zkyyax9uHpfhvkBTUeA1TmKAouIFDw2vr/QLPwUq+Hg=
Subject key identifier:   68:1B:77:08:FF:49:2C:24:04:C6:B6:CD:24:E4:FB:3A:8A:B7:30:F2
Authority key identifier: D5:C4:31:D1:7B:83:07:35:FE:B2:64:09:C6:9E:3E:F4:FE:61:DB:C2
Certificate issuer:       /CN=D5C431D17B830735FEB26409C69E3EF4FE61DBC2
Certificate serial:       0DC3BC99793A931F3FF0702227A02509800BC463
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft
Manifest number:          0141
Signing time:             Sun 01 Mar 2026 12:18:27 +0000
Manifest this update:     Sun 01 Mar 2026 12:13:27 +0000
Manifest next update:     Mon 02 Mar 2026 12:29:27 +0000
Files and hashes:         1: D5C431D17B830735FEB26409C69E3EF4FE61DBC2.crl (hash: MNk3MwsZEqVdxgD/x87r2wGyWxqkeewA1vJug1O+Yds=)
                          2: 323830343a386663343a3a2f33322d3438203d3e20323733353130.roa (hash: DETwoG/6qi/ZI8aHY1Z5rVUEPEzo75t1n/OyDZwKtCg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.crl
                          rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 12:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c3:bc:99:79:3a:93:1f:3f:f0:70:22:27:a0:25:09:80:0b:c4:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5C431D17B830735FEB26409C69E3EF4FE61DBC2
        Validity
            Not Before: Mar  1 12:13:27 2026 GMT
            Not After : Mar  2 12:29:27 2026 GMT
        Subject: CN=681B7708FF492C2404C6B6CD24E4FB3A8AB730F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:20:50:17:13:3d:f2:55:42:4b:b1:51:de:03:
                    7a:89:9b:89:32:d9:3d:14:44:b4:f4:1e:61:75:5d:
                    e8:59:d0:71:da:bb:64:19:e7:b1:48:e9:d4:a2:52:
                    29:08:8e:a6:c4:45:30:b7:0f:7a:33:77:a3:ed:90:
                    87:db:28:36:40:16:70:3e:ec:d5:d2:e3:d1:5f:56:
                    57:a1:97:45:e4:5e:ea:a2:4a:f1:8c:14:41:66:bf:
                    4e:38:53:87:0f:41:5d:19:55:ce:30:ba:e8:48:31:
                    95:97:45:77:a8:7b:80:29:a0:ed:08:b5:65:12:2b:
                    42:e9:09:cb:e1:e1:2e:69:c1:a3:4b:3c:a3:b0:aa:
                    29:e3:67:87:f0:a7:a4:51:7f:70:6d:52:55:4a:54:
                    00:33:85:a2:80:97:df:db:f4:1c:51:da:d5:da:6f:
                    67:6a:b8:d8:87:23:b6:d8:61:c1:bd:fb:66:ef:76:
                    95:6b:e1:ed:de:0d:05:5d:4d:bb:f9:cb:b0:7f:6d:
                    48:86:2d:9e:a7:71:48:7d:df:ce:a5:1f:61:31:84:
                    7a:cf:6c:3f:38:bc:fe:e9:d7:f8:13:ad:10:5b:49:
                    8f:7c:43:25:46:0c:06:c4:c9:ec:f5:f6:89:b1:93:
                    a2:f2:b5:15:5f:d5:2e:32:9a:24:71:51:ad:f4:20:
                    01:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:1B:77:08:FF:49:2C:24:04:C6:B6:CD:24:E4:FB:3A:8A:B7:30:F2
            X509v3 Authority Key Identifier:
                keyid:D5:C4:31:D1:7B:83:07:35:FE:B2:64:09:C6:9E:3E:F4:FE:61:DB:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:32:05:70:4b:bb:a2:d9:3a:40:da:94:92:83:5d:49:69:0d:
         30:f3:b7:38:2e:b5:16:e6:ae:73:aa:14:13:a2:49:5b:db:03:
         1f:c1:0d:49:ec:95:e2:62:9e:cf:ea:06:3e:6b:ab:14:8a:df:
         28:fb:76:c7:f6:d8:9b:b1:d4:37:84:05:33:ea:c4:20:6f:d2:
         17:09:f1:30:37:f9:5f:bf:89:4e:24:4d:2f:2c:a9:d4:4e:91:
         a6:a1:50:dd:73:81:74:f4:36:87:51:d5:04:5e:68:e1:77:bc:
         26:98:b6:26:2e:03:73:34:f5:57:32:8a:56:59:56:e0:0e:fc:
         4c:1f:86:f0:cb:a9:dc:f3:ab:71:2f:92:ff:b7:e4:6a:30:c7:
         22:be:f0:96:10:1a:e3:89:8c:de:56:cc:00:40:30:be:da:35:
         43:2b:81:03:b4:bb:f1:69:86:aa:70:c4:a7:8a:20:61:c0:c1:
         1b:1e:af:a6:8d:17:a7:dd:25:c1:af:f1:e8:0b:25:84:ee:58:
         70:e7:ec:a4:72:a6:40:93:fe:c1:6b:fc:cd:c8:0e:b6:d4:0c:
         52:b7:80:e6:70:2e:88:28:51:23:af:6e:de:98:0b:83:ad:90:
         81:46:3b:7a:69:60:d7:a3:f0:8d:e7:70:a7:12:4b:a6:19:cc:
         bd:1c:de:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:16:14 2026 by rpki-client