Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/87DB2D42F6AA2757F3821F45CED8747B0B68A929.mft
File:                     87DB2D42F6AA2757F3821F45CED8747B0B68A929.mft (raw, json)
Hash identifier:          75ftH9wDX9SE9z5Br98QW9zR5dH9Dnd/BP2yODKeoOA=
Subject key identifier:   BE:76:96:6E:4D:F5:05:CF:45:E9:B3:47:FA:09:0C:ED:2E:D4:DB:AF
Authority key identifier: 87:DB:2D:42:F6:AA:27:57:F3:82:1F:45:CE:D8:74:7B:0B:68:A9:29
Certificate issuer:       /CN=87DB2D42F6AA2757F3821F45CED8747B0B68A929
Certificate serial:       71D4EB9456F612D55954AFE10763DB0892AA4AFE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87DB2D42F6AA2757F3821F45CED8747B0B68A929.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/87DB2D42F6AA2757F3821F45CED8747B0B68A929.mft
Manifest number:          0395
Signing time:             Sun 01 Mar 2026 21:19:38 +0000
Manifest this update:     Sun 01 Mar 2026 21:14:38 +0000
Manifest next update:     Mon 02 Mar 2026 21:28:38 +0000
Files and hashes:         1: 87DB2D42F6AA2757F3821F45CED8747B0B68A929.crl (hash: A4gDxY8KsiH4LCnPMyU7di7zooWvW0JR74ScKarVYGE=)
                          2: 323830343a386639343a3a2f33322d3430203d3e20323733343939.roa (hash: XzjuVGW6kGqq+Ktwed2We2ebKS5bDpZQEX/Oq1oTk8k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/87DB2D42F6AA2757F3821F45CED8747B0B68A929.crl
                          rsync://rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/87DB2D42F6AA2757F3821F45CED8747B0B68A929.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87DB2D42F6AA2757F3821F45CED8747B0B68A929.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 21:28:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d4:eb:94:56:f6:12:d5:59:54:af:e1:07:63:db:08:92:aa:4a:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87DB2D42F6AA2757F3821F45CED8747B0B68A929
        Validity
            Not Before: Mar  1 21:14:38 2026 GMT
            Not After : Mar  2 21:28:38 2026 GMT
        Subject: CN=BE76966E4DF505CF45E9B347FA090CED2ED4DBAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:45:53:3e:4a:a2:da:52:19:db:37:8d:4d:2c:
                    18:0c:5f:03:13:1b:e4:8f:b7:bd:59:2b:cf:f9:e8:
                    99:82:c7:2f:2f:8f:45:76:b9:2c:05:df:3c:d5:2d:
                    0e:96:1d:7d:e5:58:b1:a3:b1:bc:b6:20:90:63:93:
                    c9:7b:17:e4:40:3f:ea:06:ff:e6:40:5e:68:4e:19:
                    01:64:70:5b:60:cb:66:f1:49:2b:d5:93:46:0c:15:
                    68:f6:98:1d:2b:0d:fc:ba:69:f7:ac:4b:64:10:d1:
                    42:61:87:f8:4f:11:d7:a2:b5:31:f8:34:80:a4:4f:
                    23:dd:4a:12:a6:b0:06:10:f4:6d:dd:fe:e3:20:bc:
                    bc:1b:77:71:54:6e:be:2d:4c:cc:46:eb:6b:29:b3:
                    42:a7:5c:21:26:d3:12:b5:12:2c:15:18:97:bd:d9:
                    62:f5:a6:b1:c8:85:9f:79:a7:d4:91:53:9a:2e:d2:
                    0c:ab:00:bb:1f:5d:83:ae:ab:b0:5c:22:89:87:be:
                    b5:2e:4d:2f:b3:6f:57:61:86:11:10:ca:5c:35:e2:
                    7a:f0:25:69:4a:53:ed:f8:58:26:63:0e:38:4c:4d:
                    12:9b:04:31:52:d1:e1:68:5d:de:1e:6d:09:e6:b5:
                    dc:14:29:a3:d6:ae:3b:7d:76:24:7a:8f:88:21:b1:
                    0a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:76:96:6E:4D:F5:05:CF:45:E9:B3:47:FA:09:0C:ED:2E:D4:DB:AF
            X509v3 Authority Key Identifier:
                keyid:87:DB:2D:42:F6:AA:27:57:F3:82:1F:45:CE:D8:74:7B:0B:68:A9:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/87DB2D42F6AA2757F3821F45CED8747B0B68A929.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87DB2D42F6AA2757F3821F45CED8747B0B68A929.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/87DB2D42F6AA2757F3821F45CED8747B0B68A929.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ba:e4:d0:b0:43:a9:05:db:30:78:8d:c2:12:ed:c9:b0:2b:
         8b:e1:7f:ed:a0:56:06:bc:65:d9:d3:12:05:77:06:40:57:06:
         7c:78:fa:fe:68:dd:27:8b:9e:91:ea:5c:0d:0c:c5:8b:4c:12:
         81:da:34:fa:0c:1f:cf:54:18:9c:16:60:c2:2e:f9:c7:45:8b:
         cd:8e:cf:28:33:67:51:b7:36:bf:0b:4a:b0:09:12:78:7a:f1:
         56:a4:d1:8c:a1:9a:5a:d7:bd:b8:b6:42:f1:7f:5a:c0:29:28:
         45:2d:47:17:66:38:31:c1:64:32:93:4e:42:79:10:2c:f5:28:
         45:0e:7f:6d:da:5d:c3:56:49:5f:da:52:b1:d5:1f:b8:89:d9:
         f1:0e:c8:da:c5:6c:d2:34:8c:51:67:cf:d9:33:73:00:c9:3c:
         93:ad:4d:ff:73:27:05:6c:d5:23:f1:6c:11:30:8c:eb:42:a5:
         9f:bb:30:13:bb:85:54:fd:b6:38:14:1b:68:a2:35:ff:f4:5a:
         3e:3d:e0:50:49:39:6d:11:d3:10:fb:cd:3d:ef:cd:c9:2c:70:
         72:b2:94:0e:db:60:bf:20:9c:00:74:2b:fc:be:6a:d1:6a:fc:
         93:bb:96:4f:9d:7a:75:43:ca:99:cb:aa:06:97:06:33:48:56:
         ef:cc:8d:70
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcdTrlFb2EtVZVK/hB2PbCJKqSv4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdEQjJENDJGNkFBMjc1N0YzODIxRjQ1Q0VEODc0N0Iw
QjY4QTkyOTAeFw0yNjAzMDEyMTE0MzhaFw0yNjAzMDIyMTI4MzhaMDMxMTAvBgNV
BAMTKEJFNzY5NjZFNERGNTA1Q0Y0NUU5QjM0N0ZBMDkwQ0VEMkVENERCQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDERVM+SqLaUhnbN41NLBgMXwMT
G+SPt71ZK8/56JmCxy8vj0V2uSwF3zzVLQ6WHX3lWLGjsby2IJBjk8l7F+RAP+oG
/+ZAXmhOGQFkcFtgy2bxSSvVk0YMFWj2mB0rDfy6afesS2QQ0UJhh/hPEdeitTH4
NICkTyPdShKmsAYQ9G3d/uMgvLwbd3FUbr4tTMxG62sps0KnXCEm0xK1EiwVGJe9
2WL1prHIhZ95p9SRU5ou0gyrALsfXYOuq7BcIomHvrUuTS+zb1dhhhEQylw14nrw
JWlKU+34WCZjDjhMTRKbBDFS0eFoXd4ebQnmtdwUKaPWrjt9diR6j4ghsQrXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUvnaWbk31Bc9F6bNH+gkM7S7U268wHwYDVR0j
BBgwFoAUh9stQvaqJ1fzgh9Fzth0ewtoqSkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0JSSzlwSHVCUEpyQlVVb280VTJoczFRWXRKdU1TN0daVE5ZaW1TTFhZ
aUwvMC84N0RCMkQ0MkY2QUEyNzU3RjM4MjFGNDVDRUQ4NzQ3QjBCNjhBOTI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3REIyRDQyRjZBQTI3NTdG
MzgyMUY0NUNFRDg3NDdCMEI2OEE5MjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R0JSSzlwSHVCUEpyQlVVb280VTJoczFRWXRKdU1TN0daVE5ZaW1TTFhZaUwvMC84
N0RCMkQ0MkY2QUEyNzU3RjM4MjFGNDVDRUQ4NzQ3QjBCNjhBOTI5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAarrk0LBDqQXbMHiNwhLtybAri+F/7aBWBrxl2dMSBXcGQFcGfHj6/mjdJ4ue
kepcDQzFi0wSgdo0+gwfz1QYnBZgwi75x0WLzY7PKDNnUbc2vwtKsAkSeHrxVqTR
jKGaWte9uLZC8X9awCkoRS1HF2Y4McFkMpNOQnkQLPUoRQ5/bdpdw1ZJX9pSsdUf
uInZ8Q7I2sVs0jSMUWfP2TNzAMk8k61N/3MnBWzVI/FsETCM60Kln7swE7uFVP22
OBQbaKI1//RaPj3gUEk5bRHTEPvNPe/NySxwcrKUDttgvyCcAHQr/L5q0Wr8k7uW
T516dUPKmcuqBpcGM0hW78yNcA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:43:41 2026 by rpki-client