Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.mft
File:                     2431B5DDF8166029A0033562C55895BEC665B28A.mft (raw, json)
Hash identifier:          Cfe+dbvCuQ06S1eLW3GmKV3SPJ+FyMESY4AAbP94Apc=
Subject key identifier:   F6:7A:4F:9E:EF:1B:E6:2B:51:A0:E3:3B:CE:AF:2D:E2:1D:D8:CA:D3
Authority key identifier: 24:31:B5:DD:F8:16:60:29:A0:03:35:62:C5:58:95:BE:C6:65:B2:8A
Certificate issuer:       /CN=2431B5DDF8166029A0033562C55895BEC665B28A
Certificate serial:       598AC023E08A3AD22600D13E5175CC16A0BB1B21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.mft
Manifest number:          025D
Signing time:             Mon 02 Mar 2026 01:55:27 +0000
Manifest this update:     Mon 02 Mar 2026 01:50:27 +0000
Manifest next update:     Tue 03 Mar 2026 02:22:27 +0000
Files and hashes:         1: 323830343a3964633a3a2f33322d3332203d3e20323632393938.roa (hash: bzzRVplRzXW60NTyOCB+K8geet/OkJXFRMgfhWt3u08=)
                          2: 3138362e3232342e38302e302f32312d3231203d3e20323632393938.roa (hash: n7Ec9a8+etAwsoUdCh1mDInOKOfHdQlk0BAOv7KH2rU=)
                          3: 3138362e3232342e38322e302f32342d3234203d3e20323632393938.roa (hash: 9YWnUfc891sxIBKKNMun8cRjgUc8C1ftJwqYm804I18=)
                          4: 3138362e3232342e38332e302f32342d3234203d3e20323632393938.roa (hash: USpldE9gIYG7YsXkqtSs6/SEmEo5Hx1LehjIAMfdhmg=)
                          5: 2431B5DDF8166029A0033562C55895BEC665B28A.crl (hash: 7oVIjQeIokXd838hkAsVyFHHSKigWmkaBy4RNDboIbY=)
                          6: 3138362e3232342e38302e302f32322d3232203d3e20323632393938.roa (hash: Zi6xctsmfPTTrjbSRn8HfoiqhlU6XeDa9bxIhpfeHSg=)
                          7: 3138362e3232342e38312e302f32342d3234203d3e20323632393938.roa (hash: AtJsU6kExK0YhMvioyJ67J1BP7ANY8ORRIXwiNjkVRQ=)
                          8: 3138362e3232342e38302e302f32342d3234203d3e20323632393938.roa (hash: A0MyqrWdAY5nyII9y1tl69bNz1SGLLthzTANjSVGuOU=)
                          9: 3138362e3232342e38342e302f32322d3234203d3e20323632393938.roa (hash: SvLLu85gr28adbYq509a3Xe4Z54Zq24wBIRSJsRFC8U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.crl
                          rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 02:22:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:8a:c0:23:e0:8a:3a:d2:26:00:d1:3e:51:75:cc:16:a0:bb:1b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2431B5DDF8166029A0033562C55895BEC665B28A
        Validity
            Not Before: Mar  2 01:50:27 2026 GMT
            Not After : Mar  3 02:22:27 2026 GMT
        Subject: CN=F67A4F9EEF1BE62B51A0E33BCEAF2DE21DD8CAD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fb:1e:e8:10:5d:c0:13:68:ca:28:03:0a:4c:
                    62:93:c3:be:4e:7b:cd:fa:69:e3:03:ee:dc:be:82:
                    ca:e8:db:e0:91:45:ac:6f:5b:c9:01:7c:e0:37:a9:
                    c4:80:d4:6f:42:18:ac:83:88:94:f7:cb:67:f9:bf:
                    db:0f:54:ce:1a:62:c8:31:a4:21:3c:12:57:e2:3d:
                    1c:3e:f2:90:4e:7e:ea:80:8d:ea:d4:b8:55:f4:a6:
                    4f:0f:0c:c8:8e:97:bb:37:77:5a:12:03:d8:e9:38:
                    a2:65:a3:17:32:15:84:59:02:7d:1a:72:8d:fa:df:
                    43:30:96:ba:de:0c:5d:e0:ce:82:c0:fd:3b:a4:ea:
                    43:e3:eb:e5:db:82:43:2a:c3:5b:2c:27:8e:ce:0e:
                    71:6a:9a:d8:c6:14:af:2e:c7:63:f9:1b:bc:2e:14:
                    24:9d:0d:74:2c:c2:ef:3d:67:93:7b:5d:a4:34:e2:
                    57:00:71:9b:a5:1b:70:e9:a9:da:26:b6:08:67:f5:
                    bc:2d:fd:36:cc:11:3b:ac:62:13:72:e7:00:4c:c1:
                    b3:1a:5d:c3:ec:53:fe:de:77:2e:c8:f0:05:af:64:
                    2d:d2:a1:4d:cf:30:e1:88:38:ac:58:bd:cc:d1:2e:
                    db:78:ce:77:d9:7e:b7:59:77:d1:d2:b2:eb:6b:bc:
                    d0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7A:4F:9E:EF:1B:E6:2B:51:A0:E3:3B:CE:AF:2D:E2:1D:D8:CA:D3
            X509v3 Authority Key Identifier:
                keyid:24:31:B5:DD:F8:16:60:29:A0:03:35:62:C5:58:95:BE:C6:65:B2:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:6c:21:69:07:e0:29:3f:8b:c2:8d:ea:da:89:f7:dd:fd:e9:
         01:94:db:e0:0d:f1:01:c7:e0:1a:6c:f5:31:11:be:32:8e:75:
         c1:66:e1:9b:a2:78:22:4e:55:87:52:f2:8f:38:1c:eb:72:55:
         e1:b9:d4:96:d7:26:07:13:a1:45:40:26:a3:b7:dc:36:ee:a7:
         1c:b2:bd:1a:7f:2a:57:c6:44:88:49:de:d2:cb:33:4a:d0:a5:
         8d:e6:ea:2e:f7:90:8d:44:cb:17:01:8c:03:3b:98:da:35:34:
         26:cb:8b:8e:6b:59:82:41:7b:61:27:75:d6:15:c7:c0:08:96:
         0b:0e:43:99:b5:63:1a:48:fa:e1:74:61:09:26:c8:a3:ac:f4:
         ce:3c:c2:da:80:f9:15:e5:78:2c:db:4a:b0:93:98:fc:6e:7d:
         de:d7:7c:99:0d:8c:85:99:a4:8f:01:0a:e7:b6:4a:72:e0:21:
         c1:d8:68:fa:37:d2:af:e2:0e:3b:63:ea:c5:d7:86:95:5e:84:
         ae:b0:51:68:79:3a:93:ac:5e:75:0b:19:bf:05:1e:b6:41:cd:
         81:66:d2:26:9b:10:1c:2c:a7:10:d7:4e:90:bb:40:41:f8:c8:
         fb:92:52:85:e0:34:ec:80:40:85:d9:e2:96:77:be:62:1d:9e:
         30:d7:b6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:32:13 2026 by rpki-client