Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft
File:                     89B059C223BA0AD41E99D2508292698CA59D4D51.mft (raw, json)
Hash identifier:          XeMUIJPpM8SWXwvdxmkXX8UIwwMEGu5HMN90ZvmDFaM=
Subject key identifier:   26:95:46:D4:B0:22:05:10:D9:FB:A7:64:A7:A8:F9:9E:03:E7:CA:8F
Authority key identifier: 89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51
Certificate issuer:       /CN=89B059C223BA0AD41E99D2508292698CA59D4D51
Certificate serial:       3583A238EA1070D5B8BC22364088E0C65A185D68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft
Manifest number:          03A2
Signing time:             Mon 02 Mar 2026 11:58:05 +0000
Manifest this update:     Mon 02 Mar 2026 11:53:05 +0000
Manifest next update:     Tue 03 Mar 2026 12:44:05 +0000
Files and hashes:         1: 3138362e3139332e302e302f32302d3234203d3e203533313334.roa (hash: 8Lltl4dvhjLL3J4ydUxxo0lYfAs+cBWcFNNxGaJea0I=)
                          2: 89B059C223BA0AD41E99D2508292698CA59D4D51.crl (hash: n57Ag8V108lgSwDCr/ngXk84AMB+C+S9cEO7kq0UTGk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl
                          rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 12:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:83:a2:38:ea:10:70:d5:b8:bc:22:36:40:88:e0:c6:5a:18:5d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89B059C223BA0AD41E99D2508292698CA59D4D51
        Validity
            Not Before: Mar  2 11:53:05 2026 GMT
            Not After : Mar  3 12:44:05 2026 GMT
        Subject: CN=269546D4B0220510D9FBA764A7A8F99E03E7CA8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:25:ea:38:db:b2:3a:de:14:98:ca:11:bb:c6:
                    a3:36:59:ec:57:1d:f9:32:fd:e7:46:99:f5:c0:c4:
                    3d:aa:0c:f0:d4:6c:0c:61:24:22:60:f3:88:13:6e:
                    07:48:50:23:12:53:f4:0d:8c:05:6c:79:dc:fa:9d:
                    22:48:25:e0:71:a8:53:e9:72:18:4c:54:9d:df:53:
                    db:27:01:25:73:a6:0e:7b:cd:70:4f:a7:5e:15:a9:
                    21:8f:00:37:3f:aa:9c:0c:2f:20:28:4b:f6:49:0e:
                    48:2a:f9:0b:00:7a:1b:36:b5:8f:30:bf:92:b2:5b:
                    c5:e8:86:2d:50:b3:21:0b:42:60:32:3a:94:d3:19:
                    cb:cc:cc:7d:df:a9:7a:94:4f:5b:55:1e:a2:97:ef:
                    f6:e4:4d:e3:b0:77:cd:79:43:5d:57:0d:ed:e5:34:
                    14:9b:9a:6c:7b:d9:12:b7:95:1c:0a:09:d8:fe:05:
                    c7:0b:bf:fd:1a:96:11:e3:7f:4d:78:60:6a:33:9d:
                    b0:2e:92:ed:b6:47:b0:59:71:27:ae:f9:5e:89:65:
                    2b:fe:29:8c:f1:99:b6:c3:1f:95:98:d5:1f:d2:dc:
                    72:b2:28:85:dc:65:20:0f:cb:4a:9b:5a:41:da:e3:
                    7d:a0:9e:44:e2:9d:d2:e7:60:54:7d:d7:c4:40:ba:
                    16:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:95:46:D4:B0:22:05:10:D9:FB:A7:64:A7:A8:F9:9E:03:E7:CA:8F
            X509v3 Authority Key Identifier:
                keyid:89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:23:e8:54:eb:fd:b3:b4:09:b0:35:99:58:51:7f:67:72:12:
         4e:13:e9:87:0b:2f:f5:83:40:8b:87:ba:3c:79:28:b1:7c:7e:
         0b:1f:c1:4f:cc:f5:33:cc:49:91:a7:fc:f0:dd:ac:1b:62:72:
         e5:2c:58:74:af:3a:2c:66:29:21:ef:1e:27:26:90:dd:1c:93:
         7f:b7:18:8e:b4:fd:70:51:36:58:5d:ff:e7:80:dd:73:93:b8:
         fd:2b:7d:2b:8a:20:36:ff:bb:88:cc:c6:5c:b2:5f:bd:41:5f:
         02:94:d8:97:f0:61:12:ec:7a:35:41:e5:8d:00:37:86:c1:c3:
         c9:37:cf:de:a0:69:69:55:6e:3e:ab:10:36:3a:4b:d4:ef:f3:
         f7:aa:a5:d3:c5:18:68:d6:0d:a9:a4:e7:77:d5:6f:fa:3b:6e:
         fa:b5:31:08:83:ba:6e:5a:5f:f5:15:3b:fc:f1:c9:17:29:2c:
         15:c1:c6:92:03:e7:e6:ab:d3:5a:70:0b:a1:e3:fa:1e:38:eb:
         36:e4:3b:69:9c:b5:16:ad:8b:d6:c2:df:56:41:dd:c3:75:d2:
         e2:b0:ec:b5:55:54:6f:23:36:e7:29:f2:a0:64:32:98:1a:72:
         9f:40:f7:5a:6f:59:b6:b3:35:c5:9b:41:c9:4c:12:3a:2f:d5:
         41:24:1f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:27:32 2026 by rpki-client