Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft
File:                     23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft (raw, json)
Hash identifier:          v0hsmDG8g1ZiFRymrizdTawDVLYmjd8QbMiHptq3kCw=
Subject key identifier:   5B:58:58:5D:BB:47:C1:2F:4C:67:E5:C6:67:8B:68:93:3F:13:08:85
Authority key identifier: 23:AC:A8:39:EC:B4:6C:C3:B5:BD:6C:86:BF:69:97:C1:8E:82:77:DA
Certificate issuer:       /CN=23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA
Certificate serial:       43AB5CE187ED5A24FEB31067321A7EDBA011FF88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft
Manifest number:          033C
Signing time:             Sun 01 Mar 2026 09:59:03 +0000
Manifest this update:     Sun 01 Mar 2026 09:54:03 +0000
Manifest next update:     Mon 02 Mar 2026 12:08:03 +0000
Files and hashes:         1: 23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.crl (hash: LWiSpWvT9amtbESok+MlPqn6dEFk4EosWLasgjHehzs=)
                          2: 3132382e3230312e3231362e302f32322d3332203d3e20323636363530.roa (hash: FxlWVMnEAk1FgS1ovjov0z5sBUPXKG9Ay1g80zpcdbI=)
                          3: 323830343a336634383a3a2f33322d313238203d3e20323636363530.roa (hash: ZJt7R5RQ3S+69oulqrX88V0+D552Dy8CGU/EA/kjGd0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.crl
                          rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 12:08:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ab:5c:e1:87:ed:5a:24:fe:b3:10:67:32:1a:7e:db:a0:11:ff:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA
        Validity
            Not Before: Mar  1 09:54:03 2026 GMT
            Not After : Mar  2 12:08:03 2026 GMT
        Subject: CN=5B58585DBB47C12F4C67E5C6678B68933F130885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6b:24:30:9d:53:46:6e:86:37:30:b2:88:1b:
                    b0:bb:a6:43:fc:06:94:d9:2a:d5:f0:8f:4f:f6:fa:
                    e0:15:b8:71:a5:1b:2c:80:5c:41:72:70:d5:ba:b3:
                    2f:91:9d:59:ed:36:6e:52:85:6d:8a:d2:68:fb:11:
                    87:cc:98:ac:1c:9f:1a:cb:42:4c:67:e8:a0:ad:94:
                    01:db:0c:be:39:40:3b:44:1e:26:3c:8d:3f:cd:5d:
                    74:8a:f9:21:b3:a5:66:61:e5:f0:5e:2d:a9:9e:ba:
                    07:b2:1e:09:29:fc:06:d6:2c:b9:1d:6e:43:c3:cc:
                    34:b1:57:b2:50:95:57:33:c9:a0:dd:e3:19:44:23:
                    20:34:07:7e:eb:6c:fd:51:b7:17:f2:ef:c6:a7:ef:
                    fa:c8:d5:4b:bb:92:46:35:6f:2e:12:7f:f8:dc:a2:
                    50:62:e4:20:d7:7f:52:89:e7:47:fb:fe:aa:3a:6c:
                    2c:0a:86:d6:16:e2:0d:dd:e3:2c:ff:11:02:95:9a:
                    62:99:c5:e8:ed:43:67:43:37:58:8e:1c:16:3d:f8:
                    2c:eb:1c:90:e3:12:dc:9d:65:b0:2a:70:9c:9f:15:
                    64:2c:9b:f1:e4:71:0f:b9:bc:30:b2:e6:eb:91:20:
                    7e:fb:00:98:3a:41:b0:b5:06:63:02:f9:6f:4c:60:
                    d1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:58:58:5D:BB:47:C1:2F:4C:67:E5:C6:67:8B:68:93:3F:13:08:85
            X509v3 Authority Key Identifier:
                keyid:23:AC:A8:39:EC:B4:6C:C3:B5:BD:6C:86:BF:69:97:C1:8E:82:77:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:d5:c6:7a:d4:bd:9b:c7:2f:1c:5e:21:b7:bc:ae:0b:a8:9f:
         c7:d4:63:c6:02:82:96:d4:c8:99:ad:5a:d9:c3:d3:aa:8a:27:
         f2:3b:cc:75:7b:67:8e:66:84:db:f1:c6:9d:b5:9b:f5:4a:ff:
         c9:0a:f0:f1:cf:9c:49:66:81:5e:11:41:83:4a:03:08:26:80:
         36:f5:c0:b1:c7:fa:1d:06:a8:06:e4:1f:29:d0:30:12:9b:15:
         16:7c:f5:9d:5d:44:76:7f:4d:21:cf:5c:50:ea:42:32:08:cf:
         3a:b0:c7:2b:bb:08:f3:7a:f7:4a:31:31:e0:fc:17:24:f4:15:
         89:ee:c4:db:5d:e2:b4:d3:83:77:e3:42:c3:41:91:c7:72:3b:
         60:9e:77:01:14:4e:83:50:f0:4f:f4:b1:81:3e:91:9e:ca:cb:
         cb:c6:03:26:38:35:fb:3b:e9:9e:de:4c:f9:ca:90:49:4c:f5:
         4a:df:38:6b:44:9a:98:e8:c1:4f:47:62:11:b1:ca:c9:9c:52:
         ff:96:af:fd:b4:7f:36:27:60:7e:9b:f2:30:4a:dc:d7:89:2b:
         dc:4f:45:9f:14:c6:34:94:6e:88:2d:f8:cd:47:30:80:c7:fb:
         cb:8a:38:26:f1:df:a6:6f:7b:b3:f2:d7:d1:45:27:79:8a:86:
         e4:35:e3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:16:14 2026 by rpki-client