Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/E18FFB962D9BCFFF4E2873ADBCC5FB3F4AF106CE.mft
File:                     E18FFB962D9BCFFF4E2873ADBCC5FB3F4AF106CE.mft (raw, json)
Hash identifier:          kUeJGPVAiw5SSKN5jyrENRl6bGzQvNwQb5aP1MG19ck=
Subject key identifier:   01:35:A5:60:F0:0C:74:6E:3E:1F:8F:D7:41:2E:48:EF:BA:91:A9:8F
Authority key identifier: E1:8F:FB:96:2D:9B:CF:FF:4E:28:73:AD:BC:C5:FB:3F:4A:F1:06:CE
Certificate issuer:       /CN=E18FFB962D9BCFFF4E2873ADBCC5FB3F4AF106CE
Certificate serial:       221DBE413CB9CE129091294B79D374AF2D1DC390
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E18FFB962D9BCFFF4E2873ADBCC5FB3F4AF106CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/E18FFB962D9BCFFF4E2873ADBCC5FB3F4AF106CE.mft
Manifest number:          3C
Signing time:             Mon 02 Mar 2026 09:37:36 +0000
Manifest this update:     Mon 02 Mar 2026 09:32:36 +0000
Manifest next update:     Tue 03 Mar 2026 11:27:36 +0000
Files and hashes:         1: E18FFB962D9BCFFF4E2873ADBCC5FB3F4AF106CE.crl (hash: Lte0CkSEr9CO9fl12ffQTFtzESnjbfyfy1zrC7ByF7Y=)
                          2: 323830343a386539383a3a2f33322d313238203d3e20323733343336.roa (hash: 3hL6S2ln6vG5GPJOifWi05lt5MbhSTG29ZC8T5GbK90=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/E18FFB962D9BCFFF4E2873ADBCC5FB3F4AF106CE.crl
                          rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/E18FFB962D9BCFFF4E2873ADBCC5FB3F4AF106CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E18FFB962D9BCFFF4E2873ADBCC5FB3F4AF106CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 11:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:1d:be:41:3c:b9:ce:12:90:91:29:4b:79:d3:74:af:2d:1d:c3:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E18FFB962D9BCFFF4E2873ADBCC5FB3F4AF106CE
        Validity
            Not Before: Mar  2 09:32:36 2026 GMT
            Not After : Mar  3 11:27:36 2026 GMT
        Subject: CN=0135A560F00C746E3E1F8FD7412E48EFBA91A98F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:38:69:87:9b:4c:23:e4:84:fe:02:25:86:9e:
                    75:ba:42:c7:a7:5f:d9:df:5a:4e:3b:1e:c4:c7:e5:
                    44:58:5f:d7:69:b9:ae:43:06:d7:64:ef:2a:77:4e:
                    15:39:6b:a1:24:38:98:58:07:bf:55:29:9a:c3:77:
                    8a:01:42:19:a8:d3:5e:e7:54:29:48:84:a7:b4:79:
                    31:7b:24:77:08:7e:5e:62:cf:13:a2:d8:55:0d:89:
                    41:46:f4:25:bb:42:40:6d:ad:82:4d:c7:38:fc:07:
                    a7:4d:b9:cd:8b:b4:16:69:21:0a:86:78:ae:2f:a7:
                    71:07:28:07:d6:2f:f6:79:3e:93:f0:a3:36:5b:90:
                    0f:84:c3:68:eb:ed:42:51:64:d4:eb:ff:3e:f7:09:
                    47:1a:66:aa:91:c3:e6:4a:f2:f9:ce:b9:d3:58:6a:
                    fb:85:ff:84:c3:5a:6a:be:c6:11:ec:f2:37:29:72:
                    5c:ef:20:ad:51:1c:aa:e2:ef:64:27:fa:4d:25:08:
                    e6:b0:36:2b:bd:ba:83:9c:64:3a:b4:73:87:d6:8f:
                    83:6e:02:12:3f:1e:df:ab:0c:ac:15:01:5a:2b:01:
                    13:b9:dc:c2:74:d2:d7:08:4b:cf:63:71:9f:31:24:
                    59:b7:df:89:f9:dd:19:ee:af:4a:6c:2d:33:03:7c:
                    c5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:35:A5:60:F0:0C:74:6E:3E:1F:8F:D7:41:2E:48:EF:BA:91:A9:8F
            X509v3 Authority Key Identifier:
                keyid:E1:8F:FB:96:2D:9B:CF:FF:4E:28:73:AD:BC:C5:FB:3F:4A:F1:06:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/E18FFB962D9BCFFF4E2873ADBCC5FB3F4AF106CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E18FFB962D9BCFFF4E2873ADBCC5FB3F4AF106CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/E18FFB962D9BCFFF4E2873ADBCC5FB3F4AF106CE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ae:77:3c:e0:2c:59:fd:84:db:da:24:5c:f6:ac:9d:cf:2b:
         c2:34:6d:cc:86:6d:a1:f5:3e:43:c3:8c:2e:0b:84:d6:c8:7c:
         91:f8:e8:95:96:5f:77:8c:8a:ab:5c:88:cd:1a:b5:76:73:9a:
         ea:40:29:c1:4a:7b:13:07:ce:24:a4:d0:0d:28:9f:5b:a8:59:
         5a:22:e4:53:b4:bc:57:f3:73:85:7c:97:57:4c:0e:84:72:1d:
         8d:5d:24:fc:d1:b1:63:1a:80:50:13:d5:62:60:aa:c4:78:10:
         9a:a9:f5:d3:c1:ee:bf:6f:79:d7:fc:e4:74:4f:71:61:be:c4:
         94:fc:a1:6f:e9:b9:f2:c4:d2:2f:b6:c7:56:73:9f:48:b6:d6:
         9f:df:25:45:f3:cd:08:d5:62:38:5e:4d:5c:0f:c6:03:88:4f:
         3a:72:fd:76:75:80:3f:fb:4a:3a:81:e9:ec:d5:4b:75:b4:0b:
         d7:1b:e2:11:c2:d1:5b:4c:01:fc:65:5f:c8:ef:a4:de:dd:47:
         82:66:53:4a:bb:0c:7f:73:12:c8:74:f4:a9:dd:c1:cc:df:bc:
         62:40:85:2a:56:b5:0f:98:25:78:ab:ef:12:4d:02:a8:66:40:
         b0:34:49:f5:bf:3f:a2:f0:72:63:d7:d5:7c:a1:cc:ab:81:77:
         43:d4:cd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:45:19 2026 by rpki-client