Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft
File:                     2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft (raw, json)
Hash identifier:          qhncpm0V5AQyRoxcBQ/QOTk1FeVFfeDh8OE4G5zdz44=
Subject key identifier:   98:D6:96:1A:59:78:41:70:F9:22:42:F1:7D:94:49:33:39:72:FB:F4
Authority key identifier: 2F:F4:EE:9C:1F:AF:19:CB:D4:4C:CB:6C:4F:80:3B:54:DA:93:3E:88
Certificate issuer:       /CN=2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88
Certificate serial:       32C81039DDBBCFEA9EA78676E5FA3F10E5E408C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft
Manifest number:          B0
Signing time:             Mon 02 Mar 2026 04:28:48 +0000
Manifest this update:     Mon 02 Mar 2026 04:23:48 +0000
Manifest next update:     Tue 03 Mar 2026 07:19:48 +0000
Files and hashes:         1: 2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.crl (hash: mTtEMSYfZBXdnCtZft/QmeDXWgALIgFXGrT8th7MTis=)
                          2: 3230302e32332e3131382e302f32342d3234203d3e20323635343439.roa (hash: u0emmR/IrSgxU4xnl7NMDDuW67Pa/pzAKWRg8XfABIw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.crl
                          rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 07:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:c8:10:39:dd:bb:cf:ea:9e:a7:86:76:e5:fa:3f:10:e5:e4:08:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88
        Validity
            Not Before: Mar  2 04:23:48 2026 GMT
            Not After : Mar  3 07:19:48 2026 GMT
        Subject: CN=98D6961A59784170F92242F17D9449333972FBF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9d:9e:4b:28:95:a3:a6:c3:40:d3:e0:9f:d8:
                    29:56:57:a6:14:ab:45:f5:16:59:fd:df:d4:f1:98:
                    5a:74:f9:d5:5e:06:b6:4c:a6:2b:57:c3:cd:17:9a:
                    dd:21:6f:3d:14:87:68:43:11:ca:03:d3:7b:08:51:
                    cc:4f:34:f1:25:18:28:ee:b6:70:97:07:b6:b9:c9:
                    c1:56:34:75:31:c9:ad:ed:c0:c7:e4:3f:74:29:cb:
                    6a:e6:f4:bf:d6:77:c0:ac:11:2b:8e:48:3a:73:30:
                    7b:ed:02:6f:27:64:6e:9e:8f:c6:59:ed:1d:de:5b:
                    00:5b:2f:15:ba:16:38:92:ca:11:9e:12:73:2a:55:
                    16:d4:e7:22:75:06:13:01:bd:06:c6:90:b2:2d:86:
                    1d:d6:44:da:fe:74:af:6b:c0:51:cb:74:9c:a7:0c:
                    4a:34:18:83:32:6c:24:3e:3b:84:38:9a:16:f0:7c:
                    ce:23:b3:22:21:72:d2:e7:67:b6:99:76:7c:a4:f2:
                    0d:d8:22:d2:dd:2a:87:83:56:45:d2:9d:43:d6:ec:
                    cc:1f:88:32:2b:ee:e8:ea:62:d3:50:f3:e8:00:bc:
                    f8:d1:45:dc:37:65:46:39:d3:60:75:3c:46:f2:c5:
                    16:7a:66:9b:5d:7d:4a:c7:ed:bd:39:b9:06:fe:03:
                    1a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D6:96:1A:59:78:41:70:F9:22:42:F1:7D:94:49:33:39:72:FB:F4
            X509v3 Authority Key Identifier:
                keyid:2F:F4:EE:9C:1F:AF:19:CB:D4:4C:CB:6C:4F:80:3B:54:DA:93:3E:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:0d:3c:03:c6:03:ab:25:58:75:af:72:49:1e:79:a6:19:59:
         b6:80:91:9e:ca:9a:d5:50:d8:92:f6:7c:c2:20:ec:07:33:7d:
         b4:09:5a:0d:99:be:8a:72:09:d4:0d:95:17:bc:7d:b8:0e:2b:
         37:c8:b6:8e:2a:11:1e:f4:3a:3a:44:c4:09:33:a4:78:92:6d:
         fc:41:c7:98:d9:c7:90:df:4c:33:fd:12:6e:fe:01:c7:a8:07:
         a9:4b:73:84:bc:b8:bf:40:db:63:7d:8c:0d:ad:be:14:65:94:
         4c:34:32:ea:a8:45:25:11:75:c4:56:7a:7e:4d:89:74:32:b9:
         d4:0e:5c:03:0b:68:0e:6b:9d:e0:6f:1c:71:53:60:48:c7:c8:
         5d:3e:df:f8:64:18:95:59:12:3e:97:fb:a4:c2:d0:9b:32:ef:
         7d:8a:84:f0:28:92:8b:44:a3:b1:78:0c:6c:42:4e:54:d7:b9:
         c7:1e:6e:dc:12:ee:ea:11:8f:69:a0:cd:92:4a:e4:2d:90:40:
         3f:7f:59:ac:5f:f2:9a:a9:7c:a0:b0:ff:9d:77:1a:12:46:53:
         7b:66:5d:1c:f6:27:54:4f:2b:5d:aa:49:c8:9a:2f:f5:13:60:
         d0:49:b1:30:0d:c9:f2:fa:60:df:69:cf:08:bb:d6:d1:9f:b0:
         7f:11:dc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:29:11 2026 by rpki-client