Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft
File:                     CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft (raw, json)
Hash identifier:          HGs7s06/eswS7EB07NqqcifLYoMnaRlEFQ1XFF6i8mk=
Subject key identifier:   D9:38:47:B4:F2:73:0C:4F:9B:16:2B:E8:F9:5D:C7:6E:6A:6A:07:4F
Authority key identifier: CA:0A:B2:BC:B2:83:EF:EB:B7:72:29:E5:6E:86:E4:5C:98:64:D5:CF
Certificate issuer:       /CN=CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF
Certificate serial:       64B57BD2FD69E0D26B06A43210E2891412EDB2EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft
Manifest number:          D4
Signing time:             Sun 01 Mar 2026 15:55:35 +0000
Manifest this update:     Sun 01 Mar 2026 15:50:35 +0000
Manifest next update:     Mon 02 Mar 2026 16:53:35 +0000
Files and hashes:         1: 3139322e3134302e36382e302f32322d3332203d3e20323636323531.roa (hash: EsQelpaQeAfU/Gzg0i25pm2jNJGfy2Qz/7ELSEE9Oeo=)
                          2: CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.crl (hash: qRoC2fubkwbUwkH0ccCcVfYZ1n8OcSqg2qC9g98FO3I=)
                          3: 323830343a336431303a3a2f33322d313238203d3e20323636323531.roa (hash: 6OM5TUR8INqK6ybskaGnuewoKzCLeWsNPgoxidg6HF0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.crl
                          rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 16:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b5:7b:d2:fd:69:e0:d2:6b:06:a4:32:10:e2:89:14:12:ed:b2:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF
        Validity
            Not Before: Mar  1 15:50:35 2026 GMT
            Not After : Mar  2 16:53:35 2026 GMT
        Subject: CN=D93847B4F2730C4F9B162BE8F95DC76E6A6A074F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9f:15:1d:6e:6b:95:88:73:2b:34:25:c9:e6:
                    01:24:a2:57:67:ce:d0:72:db:e4:fe:d1:a5:82:a3:
                    8c:a5:ea:a0:2a:ad:bc:ad:eb:95:aa:12:38:b0:87:
                    4c:91:c6:6e:ef:99:ae:4d:a5:79:80:7f:56:2b:f5:
                    83:ca:1b:73:6c:ea:dc:7e:c3:32:b9:4a:05:21:67:
                    b1:56:ca:16:e3:f0:89:26:e1:99:22:f5:fd:16:8a:
                    be:f1:44:32:9b:ae:50:4f:f3:96:09:85:13:5b:f8:
                    2d:6b:d3:3e:84:76:ca:fa:be:aa:ae:db:cc:78:03:
                    e6:15:09:b6:2c:fd:eb:c0:b6:eb:4a:21:3c:ce:1d:
                    2a:8e:ec:31:70:58:35:4c:23:13:cb:f3:63:f9:e1:
                    26:e2:b3:1e:42:c0:92:3b:8e:1e:16:03:01:fc:b2:
                    7f:f7:a5:3f:d2:47:2d:31:a0:c1:fe:2c:1b:88:28:
                    46:92:c0:52:5e:4d:e3:76:d4:58:e1:9b:32:24:af:
                    76:6d:95:71:ae:43:13:4d:e8:68:dc:64:42:4a:b2:
                    5c:b1:3c:8d:e6:ec:2e:ca:12:8b:d1:6a:18:6a:26:
                    42:77:80:10:f3:5d:e3:f9:6a:16:61:46:f3:86:46:
                    8f:74:99:cc:7f:f0:41:0c:1a:e1:06:a8:ba:84:c4:
                    40:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:38:47:B4:F2:73:0C:4F:9B:16:2B:E8:F9:5D:C7:6E:6A:6A:07:4F
            X509v3 Authority Key Identifier:
                keyid:CA:0A:B2:BC:B2:83:EF:EB:B7:72:29:E5:6E:86:E4:5C:98:64:D5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:20:fe:79:66:b6:a2:81:4a:18:73:c1:8f:22:b6:52:9a:1f:
         78:83:55:05:c1:49:90:84:a0:a5:76:72:ae:97:67:d9:70:79:
         b7:bc:c6:1e:ba:5e:32:8a:5a:ac:74:1e:6a:e1:1a:64:77:b6:
         71:ba:e4:b3:70:26:74:9c:f2:1d:31:ea:42:a5:48:4d:7e:eb:
         1f:e8:a3:cc:53:9f:56:87:9d:01:6b:eb:41:25:00:88:f2:0b:
         a2:94:a8:7e:fb:f6:f0:9c:34:04:35:b0:2f:e9:27:ae:79:52:
         08:a0:64:2f:79:cf:ce:b3:16:23:2f:af:37:21:78:89:5a:50:
         7c:0b:78:e4:b2:60:11:f1:dd:94:99:9b:b2:32:d2:3e:28:80:
         9c:c9:c2:81:ef:68:c2:45:b1:32:f4:3e:ee:c1:58:1f:19:40:
         d5:5f:49:a3:62:9c:e8:77:18:86:8f:33:97:95:84:17:62:e4:
         bc:2e:38:31:36:fb:87:5d:7c:0d:b0:25:5b:cb:68:36:46:03:
         60:05:c1:cd:23:bb:99:0f:ab:f7:51:6b:e5:f2:04:66:30:28:
         92:80:5c:1b:b9:55:6b:37:83:76:aa:72:56:db:17:67:b2:19:
         81:18:f2:86:7f:51:e2:fa:58:44:0b:40:76:0c:5b:7f:41:98:
         f1:47:c3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:13:53 2026 by rpki-client