Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft
File:                     D2991FF0EF094685597EA5146C4730F0270A9201.mft (raw, json)
Hash identifier:          aTj2rQldEjKA5ZNjrO+/fX8awKmnfHJMKiqfXlwT7jY=
Subject key identifier:   75:77:1D:C3:FA:CF:75:17:65:3D:25:84:9B:FC:0A:04:B5:F4:58:AC
Authority key identifier: D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01
Certificate issuer:       /CN=D2991FF0EF094685597EA5146C4730F0270A9201
Certificate serial:       671F968C7AAEC48EE14E5A734806EBEBEBBCF776
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft
Manifest number:          0278
Signing time:             Mon 02 Mar 2026 06:44:54 +0000
Manifest this update:     Mon 02 Mar 2026 06:39:54 +0000
Manifest next update:     Tue 03 Mar 2026 10:06:54 +0000
Files and hashes:         1: D2991FF0EF094685597EA5146C4730F0270A9201.crl (hash: Erv9q929PMAnppCyyj2XkMZeRejuAsyX2IjYofR60I4=)
                          2: 3137372e38342e32342e302f32322d3332203d3e20323632353737.roa (hash: C0u1aT3LDMhL5SLNpfi4dKOK4v/xmo0BwWf2GUw/OvQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl
                          rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 10:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:1f:96:8c:7a:ae:c4:8e:e1:4e:5a:73:48:06:eb:eb:eb:bc:f7:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2991FF0EF094685597EA5146C4730F0270A9201
        Validity
            Not Before: Mar  2 06:39:54 2026 GMT
            Not After : Mar  3 10:06:54 2026 GMT
        Subject: CN=75771DC3FACF7517653D25849BFC0A04B5F458AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3d:3c:35:91:73:75:0b:65:14:b5:36:42:4c:
                    00:96:c7:b4:f3:f7:34:5d:81:35:d3:01:9f:74:ea:
                    41:09:51:6b:24:4a:1b:a6:b7:b5:3d:69:99:47:e7:
                    4e:63:e7:8c:54:f6:d6:af:9b:e2:e8:fe:4d:89:16:
                    2e:a1:4e:1b:fb:dd:84:58:61:5a:16:a1:da:5d:30:
                    d8:c8:cd:1a:07:53:a8:40:55:9d:17:35:dd:54:e8:
                    3a:dc:72:ea:88:43:2c:ce:3c:9f:25:de:8e:6e:2f:
                    16:78:82:24:ad:04:67:a3:c2:d9:2f:95:f5:b9:f2:
                    43:47:f1:df:74:d5:4b:80:2c:7b:f0:7e:63:11:eb:
                    df:eb:29:d6:27:27:0e:f7:fe:da:7e:01:e5:ad:76:
                    c5:68:86:5d:cd:9f:6e:50:01:c9:3e:81:66:89:09:
                    54:7a:13:90:b8:6c:e0:a6:be:35:43:e9:bc:46:94:
                    66:66:60:3b:6b:f2:ab:64:c3:fb:37:0c:1d:e0:18:
                    4e:fc:7c:f5:e9:d6:be:89:58:30:b0:e4:c6:74:9e:
                    b2:a7:96:65:a8:01:60:45:0b:66:82:86:39:f3:3c:
                    ac:84:84:4f:71:de:c4:62:39:b7:7a:c8:28:6a:cb:
                    7d:b6:04:b5:c9:b2:64:66:e2:5e:28:5c:98:1b:39:
                    53:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:77:1D:C3:FA:CF:75:17:65:3D:25:84:9B:FC:0A:04:B5:F4:58:AC
            X509v3 Authority Key Identifier:
                keyid:D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:13:96:f5:bb:3e:d8:70:32:bb:8a:91:3f:f9:42:ac:12:86:
         b9:05:66:8d:b3:91:9d:54:db:9d:e0:d8:25:77:9d:6b:8d:5c:
         2d:0b:32:c0:da:63:ed:93:5a:1c:1d:cb:2a:ed:0d:d9:35:84:
         b5:35:fc:34:b7:43:9e:c6:32:e6:a2:8d:d2:fa:66:cd:de:6a:
         d8:f9:f8:f8:90:42:99:bd:a2:3b:79:01:ba:30:f7:ec:35:b4:
         e3:4a:b0:4f:41:04:f9:bd:3b:af:c4:63:4f:f9:0b:cb:ea:93:
         90:01:29:5f:a9:49:dc:dc:cd:65:8e:25:32:27:a9:ce:bb:ad:
         4e:41:a0:4a:24:a2:cc:68:c5:e5:e0:22:fe:23:fb:9f:9a:03:
         e3:d7:b5:c4:6a:e1:9b:20:4b:dc:a5:88:ad:45:a1:5d:0d:07:
         8b:e3:12:98:f9:c3:cb:cd:b5:8a:15:c8:2d:cd:75:bf:fd:90:
         8f:04:51:9d:3e:c3:d0:0f:4a:c9:02:98:ef:8f:b5:a1:3e:36:
         aa:73:a7:16:81:5e:36:85:d0:d2:67:2e:0c:61:ef:56:3c:c2:
         4b:1c:c4:53:af:b9:a7:ba:dd:16:2c:cd:9f:84:aa:69:1d:38:
         02:20:41:29:fa:67:db:27:9b:86:04:69:91:87:ac:f7:50:b9:
         e2:02:67:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:22:04 2026 by rpki-client