Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft
File:                     DD880B71129737798123EE9EDC1423C3E8280892.mft (raw, json)
Hash identifier:          Yp6JjTj2CZcRb5KIAxhLN2DD2t6EoqU1dGfOKl1HJ08=
Subject key identifier:   A4:31:CE:19:CA:82:BD:14:FA:B8:B9:71:DD:C7:21:04:EF:DA:55:9B
Authority key identifier: DD:88:0B:71:12:97:37:79:81:23:EE:9E:DC:14:23:C3:E8:28:08:92
Certificate issuer:       /CN=DD880B71129737798123EE9EDC1423C3E8280892
Certificate serial:       2ED38847E5F2E3D83CB1CE4E6455B884B30B3770
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft
Manifest number:          03E8
Signing time:             Mon 02 Mar 2026 14:00:00 +0000
Manifest this update:     Mon 02 Mar 2026 13:55:00 +0000
Manifest next update:     Tue 03 Mar 2026 14:00:00 +0000
Files and hashes:         1: 34352e3137352e33322e302f32322d3234203d3e20323638383831.roa (hash: iCx3xg5krG4iM1lxR5uLVHmBRX1kEx0SfB2Sj+RKTHA=)
                          2: DD880B71129737798123EE9EDC1423C3E8280892.crl (hash: 8dz2mx2lF7yTjIh/XfvYZ0Ylu39nVj0qYiiVIEiDqu4=)
                          3: 323830343a356266633a3a2f33322d3438203d3e20323638383831.roa (hash: TQfgLG5X3QnUo/1VPcWF7P3VD4rUYriwZ7gKOhkv/z0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.crl
                          rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:d3:88:47:e5:f2:e3:d8:3c:b1:ce:4e:64:55:b8:84:b3:0b:37:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD880B71129737798123EE9EDC1423C3E8280892
        Validity
            Not Before: Mar  2 13:55:00 2026 GMT
            Not After : Mar  9 14:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5f:9b:06:e1:53:1c:c1:7b:68:f0:80:d7:68:
                    e4:1c:02:3f:1f:83:6f:76:cc:21:64:16:9b:fa:79:
                    dd:c3:d9:9a:f1:2f:fa:1a:bc:69:31:6c:94:11:8d:
                    3f:87:b4:5c:44:65:f4:b7:a4:88:81:d2:8f:2d:e6:
                    68:58:e0:ef:b5:73:74:83:d9:53:55:47:5b:64:43:
                    ea:fc:c1:78:f2:91:e6:3b:51:b8:cb:16:06:66:f1:
                    30:e0:55:c4:cd:61:f4:62:bb:d1:d9:42:de:2b:e9:
                    9d:0d:c0:2b:08:5d:c5:48:ba:ee:e8:ad:de:4c:e7:
                    4b:45:93:24:3a:e4:3c:8a:98:c8:b0:73:27:cd:ee:
                    e7:c6:0b:92:e9:cc:08:01:a0:a0:b4:98:30:4b:65:
                    ff:89:91:c6:11:6c:46:7e:4b:5c:8c:8b:1d:57:13:
                    ed:49:0d:a4:b4:32:cf:ea:19:25:45:2c:35:7a:f9:
                    05:96:c0:89:bf:4f:a8:dc:a4:42:ca:21:e7:ae:c5:
                    30:14:a5:e9:1a:89:c3:94:51:f9:62:73:52:5c:3c:
                    f7:11:5f:a6:83:ec:90:d1:23:0a:f5:c9:db:fa:4d:
                    28:bb:47:7e:73:29:d5:6e:6b:f5:5b:db:52:41:ae:
                    08:a8:8b:a9:97:a3:f9:ad:e0:38:8b:f6:66:50:ea:
                    22:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:31:CE:19:CA:82:BD:14:FA:B8:B9:71:DD:C7:21:04:EF:DA:55:9B
            X509v3 Authority Key Identifier:
                keyid:DD:88:0B:71:12:97:37:79:81:23:EE:9E:DC:14:23:C3:E8:28:08:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:37:b4:a6:9a:8c:cb:f7:bc:03:e1:74:46:c4:ca:87:fa:cd:
         91:9a:62:7f:f6:bb:fc:dd:8b:f2:5b:c5:59:ac:78:93:23:02:
         9c:b3:e8:7c:bd:5c:62:19:74:3e:f6:0a:a0:a7:8b:94:af:45:
         d2:51:f9:d3:fb:69:db:16:5d:aa:26:b7:fb:40:85:b5:08:0d:
         13:ce:b1:d1:2a:45:61:16:e1:67:53:12:14:f2:43:6d:56:84:
         b7:a5:74:de:e5:eb:4d:2c:c4:d8:72:f7:ee:06:ad:40:b4:0e:
         78:f2:5e:a5:72:5c:b0:ea:8a:cd:be:33:38:c5:91:49:79:98:
         f9:c0:f1:47:c6:ba:7f:1d:0e:6e:01:a8:cf:31:cf:75:e7:ff:
         63:3f:12:23:f6:88:6e:ba:fe:c8:5a:00:fc:ca:23:55:16:a6:
         47:75:d4:e4:38:5f:f1:0b:3d:b6:ac:53:4c:c1:d3:97:70:e7:
         30:f3:f9:f3:b8:09:a4:04:dc:e4:55:5f:43:1b:e5:69:4d:cf:
         01:69:7e:45:cf:d7:df:46:18:18:19:9e:85:c2:96:46:8d:63:
         a1:e4:cf:21:d6:37:94:7b:ac:55:05:4f:94:3d:57:35:ec:bd:
         c0:02:2f:06:e9:37:ae:85:42:4b:ec:de:a7:c7:d2:4f:32:cf:
         1c:89:ed:8f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:59:13 2026 by rpki-client