Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft
File:                     8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft (raw, json)
Hash identifier:          I8IKY6F+aAGj+MPFPvFolSQ+GThd4zIXgYUnW26mqzo=
Subject key identifier:   E3:05:55:12:28:07:67:D4:BB:FC:2D:7B:CF:A5:91:AC:5F:34:A3:32
Authority key identifier: 8C:B5:A2:51:6F:71:3C:FF:E9:D1:50:4E:79:A4:BD:3B:9A:FB:0A:0F
Certificate issuer:       /CN=8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F
Certificate serial:       397A13F4A3ADE613D888EA25E8C89769C92E6C93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft
Manifest number:          017C
Signing time:             Sun 01 Mar 2026 21:21:27 +0000
Manifest this update:     Sun 01 Mar 2026 21:16:27 +0000
Manifest next update:     Mon 02 Mar 2026 22:20:27 +0000
Files and hashes:         1: 323830343a323836303a3a2f33322d313238203d3e20323633393539.roa (hash: oVXD5VaDUqeD9Go0IkrJ158heEh4rOl0USTusw94FRI=)
                          2: 3133382e3235352e37322e302f32322d3332203d3e20323633393539.roa (hash: waEFhBe+SjRSqQswDzUJGqZm7m+XO9yIfZZm4YTlyYw=)
                          3: 3137302e3233382e3234382e302f32322d3332203d3e20323633393539.roa (hash: 9vkM44Why6sGQcMypDT8T8Q9VtBz4wbE97cshJxXhpQ=)
                          4: 8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl (hash: DEx0/2h1j/6Z4cFy98HaPruCrPL/RsTHrdRhW/jXY6M=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl
                          rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 22:20:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:7a:13:f4:a3:ad:e6:13:d8:88:ea:25:e8:c8:97:69:c9:2e:6c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F
        Validity
            Not Before: Mar  1 21:16:27 2026 GMT
            Not After : Mar  2 22:20:27 2026 GMT
        Subject: CN=E3055512280767D4BBFC2D7BCFA591AC5F34A332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6c:f8:bd:34:b0:b2:0d:ba:fa:65:16:03:cb:
                    66:65:9f:33:68:6a:eb:48:6b:82:37:37:c4:d4:b4:
                    14:fe:1c:eb:e5:37:bd:86:89:f8:e2:e4:90:9a:71:
                    00:18:41:d1:7a:32:93:75:ac:3b:04:23:23:7b:84:
                    77:9c:06:f4:24:94:d0:61:b0:7c:fe:a7:2a:c2:25:
                    88:56:ee:55:f9:b6:11:2f:0a:89:66:46:ad:8a:1a:
                    f2:ee:4f:5a:a2:92:72:c4:8e:8f:e3:2d:76:9f:64:
                    2a:9c:3c:42:1c:eb:f9:ff:45:2e:21:76:cb:54:76:
                    c5:d1:aa:7b:d2:dd:36:0f:dc:d8:3d:af:03:d4:17:
                    63:8e:75:02:68:8a:57:b9:7d:51:82:68:e8:77:f0:
                    40:44:3d:0d:08:87:2a:c4:72:36:43:61:3c:e7:4c:
                    a2:3a:da:f8:59:26:0a:43:1f:c9:3c:73:40:1f:de:
                    0f:99:c6:02:d3:df:97:68:fd:23:3e:3d:a9:1c:e0:
                    ca:14:29:c6:82:50:2b:54:5d:d8:cb:bc:dd:05:7b:
                    70:4e:b7:43:f7:10:14:4b:9d:fd:0f:01:d8:86:32:
                    d9:d9:59:28:99:4a:66:52:87:1b:be:20:b3:8c:70:
                    fd:9b:3b:2b:5c:1f:4e:f9:40:8c:d9:60:03:71:b2:
                    49:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:05:55:12:28:07:67:D4:BB:FC:2D:7B:CF:A5:91:AC:5F:34:A3:32
            X509v3 Authority Key Identifier:
                keyid:8C:B5:A2:51:6F:71:3C:FF:E9:D1:50:4E:79:A4:BD:3B:9A:FB:0A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:70:00:07:ca:a8:cc:e9:91:62:04:4a:49:dd:1c:12:44:97:
         25:76:76:1f:8a:83:70:53:3e:e9:83:82:86:08:1e:c1:ba:48:
         2f:05:88:1d:bd:d2:c1:20:f8:d5:80:80:c8:e7:41:eb:c3:f7:
         99:97:51:53:a7:02:69:ec:d1:5b:e4:28:5d:2a:25:07:f4:45:
         6f:b8:84:f7:b3:86:a0:fd:76:25:e5:e5:78:73:15:bb:cd:c2:
         bb:01:6f:f3:43:21:9c:db:15:1b:97:d6:d5:a2:2e:bd:0c:31:
         3a:99:63:88:3b:54:42:3c:c0:06:b2:36:e1:23:89:ac:6e:31:
         23:3b:c6:3c:c7:39:d7:10:35:86:cb:0f:dd:15:a6:81:13:96:
         44:2d:75:73:2a:73:a5:93:a5:1c:39:3e:ec:3c:a3:ea:7e:e4:
         a5:e2:b4:aa:10:bf:3a:ee:ca:5f:55:d1:01:68:a3:b8:9f:89:
         7e:dc:1b:46:7a:0d:e4:5b:b2:02:89:91:c4:3e:bc:9c:6e:53:
         8e:6f:f8:cd:a6:24:ec:d3:61:5b:f8:0c:82:07:fc:6f:18:44:
         03:89:dc:71:c2:7a:81:8a:af:48:35:ba:85:15:95:d1:2f:7b:
         bb:e0:a9:2c:90:7b:98:69:9c:cc:cb:37:4a:cc:e7:a5:08:0d:
         97:ee:4b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:23:04 2026 by rpki-client