Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft
File:                     421509EE0B333FF7D576BF479ED0155BADFB2A90.mft (raw, json)
Hash identifier:          olLoQ0y3YSKBWwCwQGhWYYjL/ERx/RNPH5eDMBu47sw=
Subject key identifier:   54:CC:2D:D5:62:D8:97:2F:77:AA:77:54:4F:9C:F3:D2:1C:83:EB:C8
Authority key identifier: 42:15:09:EE:0B:33:3F:F7:D5:76:BF:47:9E:D0:15:5B:AD:FB:2A:90
Certificate issuer:       /CN=421509EE0B333FF7D576BF479ED0155BADFB2A90
Certificate serial:       2D5DD7998595715D6F497122D399799A02DEDA2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421509EE0B333FF7D576BF479ED0155BADFB2A90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft
Manifest number:          01D3
Signing time:             Sun 01 Mar 2026 03:48:05 +0000
Manifest this update:     Sun 01 Mar 2026 03:43:05 +0000
Manifest next update:     Mon 02 Mar 2026 07:39:05 +0000
Files and hashes:         1: 421509EE0B333FF7D576BF479ED0155BADFB2A90.crl (hash: /cfshAMTd7LuqKn5Pnij9x1bdzj9MiDifCFCN/iQfJs=)
                          2: 34352e3136362e39362e302f32342d3234203d3e20323637393539.roa (hash: aKCaU9YEZ0GXk3ibA6Ux8CHXyt0tEGPf+PaG645hzmA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.crl
                          rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421509EE0B333FF7D576BF479ED0155BADFB2A90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 07:39:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:5d:d7:99:85:95:71:5d:6f:49:71:22:d3:99:79:9a:02:de:da:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=421509EE0B333FF7D576BF479ED0155BADFB2A90
        Validity
            Not Before: Mar  1 03:43:05 2026 GMT
            Not After : Mar  2 07:39:05 2026 GMT
        Subject: CN=54CC2DD562D8972F77AA77544F9CF3D21C83EBC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:79:ca:64:11:45:a3:19:b0:62:20:03:2a:13:
                    da:d4:f1:5b:1a:f1:6f:94:71:89:a2:b7:a3:26:1b:
                    9a:91:7e:04:41:47:5e:34:57:bb:5a:03:87:31:04:
                    ae:02:ef:b1:a1:89:5c:fe:77:fc:31:e0:fd:dc:d3:
                    6d:2a:9b:f0:c3:ca:13:3b:78:31:13:46:df:75:c0:
                    ca:99:b9:77:d0:5a:96:7b:46:03:e6:f0:48:2d:e7:
                    e6:23:b6:2a:3a:41:4e:3d:b5:d4:3a:6f:c3:70:7e:
                    b4:30:c9:ce:b5:89:0f:60:62:06:0b:f4:61:0a:c6:
                    ad:b8:36:1a:5a:a8:37:49:a0:5b:19:7c:2e:91:e1:
                    54:70:52:db:eb:7b:f4:d2:fb:2f:17:c4:88:41:e2:
                    4e:b1:46:d5:5a:29:b8:be:c2:b2:d5:16:0b:63:01:
                    2d:92:24:f6:a1:c7:10:7d:0b:d7:e5:e5:34:07:dc:
                    5c:c1:73:be:75:bc:ca:e5:8c:8c:c0:55:41:d1:be:
                    7e:e3:a6:b1:15:3e:fa:57:75:92:08:cf:54:95:ae:
                    28:1a:01:a4:86:c6:8b:29:30:3a:a6:0d:22:dd:da:
                    b1:a1:11:74:cd:14:3c:0c:a6:26:0b:88:15:f0:db:
                    9a:eb:bf:16:ec:39:dc:3e:26:cf:ad:74:c1:ac:52:
                    4e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CC:2D:D5:62:D8:97:2F:77:AA:77:54:4F:9C:F3:D2:1C:83:EB:C8
            X509v3 Authority Key Identifier:
                keyid:42:15:09:EE:0B:33:3F:F7:D5:76:BF:47:9E:D0:15:5B:AD:FB:2A:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421509EE0B333FF7D576BF479ED0155BADFB2A90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:d0:c4:4b:bd:74:0c:da:5b:cb:ee:20:c8:b3:97:94:d1:01:
         22:61:30:98:8e:b7:01:18:05:4f:f1:77:48:5e:dd:96:c7:67:
         6f:63:0d:ef:7e:16:85:2a:92:1f:69:c3:d6:d5:4a:6b:66:b5:
         ad:23:91:b0:3f:97:a9:e9:36:d2:74:10:fd:6c:0d:dd:3d:07:
         bd:af:8a:c7:05:ab:34:07:e3:87:cd:41:c8:4d:9d:d4:c6:70:
         37:3d:8b:6c:21:80:68:d1:77:30:cc:b1:b5:1a:93:18:d2:c0:
         9b:19:69:9c:fb:56:dd:c6:89:b0:f0:e2:76:5b:1e:21:31:f4:
         34:cb:19:8c:d0:bc:9f:0a:b2:bb:e0:05:33:c9:4b:52:97:5f:
         0e:ef:60:39:f2:77:f1:ce:58:09:c4:66:01:18:42:ae:80:48:
         96:87:d5:93:55:d5:6c:47:21:9a:d9:9b:80:83:ed:81:02:62:
         46:d8:5c:20:a8:47:03:2f:20:7e:e9:31:29:07:a5:29:8c:27:
         9f:23:48:4a:f3:e5:0b:55:b7:5a:e6:7b:09:ee:e5:c3:0b:09:
         5d:7e:95:b1:0a:ba:38:01:1d:45:1b:f6:85:69:e7:06:7b:f3:
         70:ac:10:2e:65:19:2c:b0:26:0b:1b:e4:7f:a9:fe:ef:a7:af:
         47:7e:14:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:14:48 2026 by rpki-client