Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft
File:                     CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft (raw, json)
Hash identifier:          X5wyLZ/IkKE3m6zGeFhJn+I9Ln/MSuRPh2wqzTDWNik=
Subject key identifier:   BB:9D:FC:28:4F:7E:8D:A5:94:4D:90:D6:A2:DF:8D:44:61:61:91:5E
Authority key identifier: CA:20:EF:C0:B9:9A:8A:86:B4:B4:CF:A1:07:B0:01:D5:08:B7:29:0D
Certificate issuer:       /CN=CA20EFC0B99A8A86B4B4CFA107B001D508B7290D
Certificate serial:       4CC5364ECFE27C44AFC983556D00FEF6287A158D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft
Manifest number:          0387
Signing time:             Mon 02 Mar 2026 02:02:39 +0000
Manifest this update:     Mon 02 Mar 2026 01:57:39 +0000
Manifest next update:     Tue 03 Mar 2026 05:11:39 +0000
Files and hashes:         1: 3137392e39372e31362e302f32312d3234203d3e203238313831.roa (hash: HhuJluM4nYK24Tc4tYGLjGkrvHzMKI7PN1TuD9//pC4=)
                          2: CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl (hash: POgViPfinI570x9SP5bV1JJsDiei7TuYlQ2lNGkM4h8=)
                          3: 323830343a6461633a3a2f33322d3438203d3e203238313831.roa (hash: n1WfTF/69k+pEm38xUTBsvz2MS47ihd3zEekd1/O7ZY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl
                          rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 05:11:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c5:36:4e:cf:e2:7c:44:af:c9:83:55:6d:00:fe:f6:28:7a:15:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA20EFC0B99A8A86B4B4CFA107B001D508B7290D
        Validity
            Not Before: Mar  2 01:57:39 2026 GMT
            Not After : Mar  3 05:11:39 2026 GMT
        Subject: CN=BB9DFC284F7E8DA5944D90D6A2DF8D446161915E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:de:b8:10:58:49:19:10:81:53:5d:c3:ad:a9:
                    f2:29:6a:35:c1:c9:a4:a8:08:03:0d:fb:44:0a:25:
                    dd:9b:5d:5b:65:49:41:b1:2d:00:0e:68:09:12:b5:
                    a8:f7:e0:34:51:62:87:b5:cf:1a:79:a2:a8:58:4a:
                    1b:44:05:7d:aa:7c:94:c0:11:97:50:6a:80:3c:50:
                    51:f4:a6:e2:63:2f:19:f3:d5:e3:c7:9f:b6:bd:8c:
                    ff:77:1f:4c:46:d9:cd:69:f5:cd:7a:11:fe:2d:ac:
                    c5:b2:9f:c9:be:2a:2f:16:2d:6c:6d:c5:17:db:bd:
                    9e:89:ce:cf:bd:cf:a0:d8:13:13:51:ee:08:e3:c5:
                    1c:e4:a0:7d:df:fd:f1:42:7d:33:a2:4e:10:68:2a:
                    5d:49:0b:1e:11:ea:32:a0:8d:47:19:a9:64:af:18:
                    24:13:eb:2e:6e:58:ec:e0:fd:fe:14:4e:7b:80:ad:
                    38:c2:15:d7:84:8c:e6:db:75:0f:70:e0:60:8f:e4:
                    2a:30:65:cc:7f:55:d0:a4:ac:34:af:84:3c:26:c9:
                    b6:5a:62:26:90:84:19:fc:41:5d:e9:e3:b8:99:b9:
                    a4:62:2e:85:3f:2c:6b:e9:7c:d3:13:56:8d:54:3c:
                    55:15:c8:09:cd:f1:3a:4a:5e:65:bb:d1:ee:96:e5:
                    d0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:9D:FC:28:4F:7E:8D:A5:94:4D:90:D6:A2:DF:8D:44:61:61:91:5E
            X509v3 Authority Key Identifier:
                keyid:CA:20:EF:C0:B9:9A:8A:86:B4:B4:CF:A1:07:B0:01:D5:08:B7:29:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:df:b1:46:88:d0:cd:a7:60:53:d2:6e:33:6b:08:2f:ca:ae:
         df:43:8b:0a:26:a9:68:c1:57:90:21:43:89:b3:c9:32:8a:0d:
         97:18:9a:25:dd:02:a8:40:c8:eb:db:8c:fc:c5:d2:1c:30:9c:
         85:9a:4b:cf:8f:0c:86:2c:d9:5d:27:6e:72:0e:59:9a:63:62:
         38:3f:cb:35:06:e0:97:fa:92:5e:47:40:01:be:de:7a:d2:74:
         c2:a9:38:a6:fc:c6:6a:13:05:da:c8:1b:1b:2c:d6:a0:40:a0:
         a1:f9:68:df:59:6e:4e:d1:e8:66:2d:ef:58:e6:89:ee:79:1f:
         ea:dd:34:08:a2:0c:66:00:29:39:b4:94:33:9c:fb:2d:85:75:
         ac:df:2f:ec:19:f0:05:ef:a3:0f:6e:12:19:2c:d6:a9:18:85:
         f8:20:8b:ed:2d:10:54:85:e4:ec:49:1c:05:3d:f3:65:6e:d8:
         e4:8b:aa:0c:25:f3:d4:52:24:5a:3d:7f:c6:fd:61:00:be:20:
         14:02:43:10:34:ba:d6:eb:24:4f:19:43:3a:7e:96:93:55:01:
         a7:d4:30:03:dc:92:8d:f4:1a:5a:fa:e3:f5:6c:e1:36:11:a4:
         b2:41:f3:68:fd:e7:b9:58:17:3f:b9:45:ae:6c:85:fa:79:9f:
         33:d7:55:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:14:24 2026 by rpki-client