Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft
File:                     942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft (raw, json)
Hash identifier:          uV6N7IomFjjmYO7o/9g6AKrJqPlwp/yBNYSwiCsPK4Q=
Subject key identifier:   F7:DB:7D:50:26:20:DA:D3:98:CC:10:0C:B7:68:22:4A:E6:F5:BC:9D
Authority key identifier: 94:2F:2D:5A:E5:5B:72:15:DF:CC:A7:9C:55:2D:22:3D:29:B7:1D:FF
Certificate issuer:       /CN=942F2D5AE55B7215DFCCA79C552D223D29B71DFF
Certificate serial:       2DE0530A3C3849E3078DC57E24A1A379ABBCE362
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft
Manifest number:          03A2
Signing time:             Mon 02 Mar 2026 08:52:11 +0000
Manifest this update:     Mon 02 Mar 2026 08:47:11 +0000
Manifest next update:     Tue 03 Mar 2026 09:45:11 +0000
Files and hashes:         1: 942F2D5AE55B7215DFCCA79C552D223D29B71DFF.crl (hash: hV7FyfOgt/JVdNe4t6TFPAYqleczWTSxmiikyoiF5S4=)
                          2: 323830343a343331633a3a2f33322d313238203d3e20323637353439.roa (hash: QyXOQDEs96gWpD7KTDqJA1FGdGMTzFA2NR1MSDpVqME=)
                          3: 3230312e3138322e3233362e302f32322d3332203d3e20323637353439.roa (hash: GZlkc04TEiHS/yGu7rHFVGgZRHXaY2e7fADLFday7lc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.crl
                          rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 09:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e0:53:0a:3c:38:49:e3:07:8d:c5:7e:24:a1:a3:79:ab:bc:e3:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=942F2D5AE55B7215DFCCA79C552D223D29B71DFF
        Validity
            Not Before: Mar  2 08:47:11 2026 GMT
            Not After : Mar  3 09:45:11 2026 GMT
        Subject: CN=F7DB7D502620DAD398CC100CB768224AE6F5BC9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a5:b4:e1:98:5e:2c:cb:6a:5d:44:ee:3a:c7:
                    df:19:a4:01:e8:b5:50:b8:06:c2:52:35:f7:8c:f6:
                    a6:9a:be:c2:ea:b1:7b:5b:d8:bd:6c:0c:55:e1:f0:
                    d5:fd:7c:2c:ed:43:92:4b:e9:b4:55:6e:5c:64:21:
                    d0:59:a2:7d:68:e0:b5:3a:3e:15:95:9e:d1:ad:f1:
                    63:6d:2b:7c:52:35:c8:3d:d1:f1:27:10:60:77:31:
                    b3:15:bb:5c:f3:93:9c:d1:c7:2c:44:1b:50:a1:85:
                    3d:35:78:3d:c6:22:a9:95:2c:3a:f1:c9:5c:6f:c2:
                    8d:74:3d:8c:82:05:94:2a:7d:f7:91:1d:50:65:ab:
                    24:fe:e5:1f:f8:d4:67:8d:40:e0:1a:b8:35:50:b5:
                    6c:17:3f:70:a8:11:2a:22:04:0d:97:9f:62:4e:c2:
                    45:3d:9c:ae:14:c1:56:41:ff:34:37:21:ac:ac:68:
                    8e:2d:66:6c:c6:25:35:0f:a6:cf:3b:d8:63:ae:48:
                    73:7d:3a:ad:82:3f:e9:61:6a:cd:6b:57:4f:48:ef:
                    87:bd:ac:42:dd:d5:8d:3d:32:1b:cf:67:f5:1b:94:
                    d7:be:3b:36:e1:f6:8c:43:6b:96:e1:4c:1f:3b:e7:
                    af:be:d5:b4:94:38:18:1b:b5:76:c2:86:3e:89:e3:
                    63:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:DB:7D:50:26:20:DA:D3:98:CC:10:0C:B7:68:22:4A:E6:F5:BC:9D
            X509v3 Authority Key Identifier:
                keyid:94:2F:2D:5A:E5:5B:72:15:DF:CC:A7:9C:55:2D:22:3D:29:B7:1D:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:cf:d2:a0:26:56:86:aa:1c:11:4d:77:62:6e:d1:0b:14:e8:
         cd:e5:45:96:c3:78:66:b1:96:ca:8a:1b:60:0a:19:77:f0:98:
         ca:c1:04:45:0e:67:42:fd:2b:02:89:4e:81:f1:f0:75:82:82:
         09:90:30:a3:78:95:b7:ba:5a:bb:f6:5b:ad:0b:6b:4d:6d:b3:
         26:8b:fb:68:f7:93:76:f6:68:6b:0d:aa:52:b6:6c:49:84:5c:
         ae:e7:89:45:fc:45:9e:6a:c1:85:d7:d7:3b:6c:f9:01:52:fa:
         75:f4:d5:b9:02:df:b4:bb:b1:ba:1e:4d:90:17:52:60:86:7e:
         cf:56:1a:81:26:42:fe:58:7d:db:41:f7:b7:0b:42:93:99:24:
         ba:6a:ea:ca:46:3f:84:9c:e5:a7:5f:b5:db:ec:a8:4d:a0:66:
         d4:82:ee:3c:f7:43:90:72:0e:60:37:d6:b4:89:21:bd:20:98:
         2c:61:3d:60:a0:d8:69:95:ab:b0:2c:87:ec:a2:b2:4b:49:48:
         75:d3:1d:9b:94:8d:3f:07:94:2b:4a:a6:65:ea:9d:b9:fc:6e:
         3e:4d:20:5f:6d:71:fd:fe:66:d0:77:48:66:a2:25:3f:eb:3f:
         a0:74:22:b2:62:ee:d2:44:4a:13:b0:ea:31:05:b3:3a:55:9e:
         bd:06:e7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:32:54 2026 by rpki-client