Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.mft
File:                     24C0BF59215339684BA80028158EEDE0FD534D91.mft (raw, json)
Hash identifier:          495NahSPzOWZWs+k6zav5l9aLno82BK/CiuFve7NJ4w=
Subject key identifier:   B3:5E:75:0B:F1:36:B5:D7:FE:F2:38:EC:98:AA:C7:FE:EA:81:B3:C6
Authority key identifier: 24:C0:BF:59:21:53:39:68:4B:A8:00:28:15:8E:ED:E0:FD:53:4D:91
Certificate issuer:       /CN=24C0BF59215339684BA80028158EEDE0FD534D91
Certificate serial:       4367E4F6105B606CBC701FD218C01BD0A1FE1053
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.mft
Manifest number:          0215
Signing time:             Sun 01 Mar 2026 23:01:46 +0000
Manifest this update:     Sun 01 Mar 2026 22:56:46 +0000
Manifest next update:     Tue 03 Mar 2026 00:18:46 +0000
Files and hashes:         1: 3138372e39342e31352e302f32342d3234203d3e20323730353737.roa (hash: t51EM43vjI9AH++j7Rs/ygfSZoRT5WJ3Iv34Kh+KzsI=)
                          2: 24C0BF59215339684BA80028158EEDE0FD534D91.crl (hash: PjKLCv3w6SXc/DVladT+m0MtxkpYgXnXutTF+02/Sso=)
                          3: 3138372e39342e31322e302f32342d3234203d3e20323730353737.roa (hash: 6us2oOVEzPiUpRDcGpf0U8IwO15npQEszTfX51xUV7c=)
                          4: 3138372e39342e31322e302f32332d3233203d3e20323730353737.roa (hash: GJDM9MFPyPVHxUz5zVPRfZ5wmC/1XF0+4gaNs6pFJJU=)
                          5: 3138372e39342e31322e302f32322d3232203d3e20323730353737.roa (hash: gQgFfcgmIDDGG/jhNAleQTzlvifPLO2Gf+f4CO89LTk=)
                          6: 3138372e39342e31332e302f32342d3234203d3e20323730353737.roa (hash: SAzzr9+ejHqkM4nyx7EXlfmVQnmvipgVooUb4stCQt4=)
                          7: 323830343a366532303a3a2f33322d3332203d3e20323730353737.roa (hash: sxDvWTX2pXC3dWfXyX6Enbx1cQl872IPWH+FtvNWjcw=)
                          8: 3138372e39342e31342e302f32342d3234203d3e20323730353737.roa (hash: Axy9O4qLsTaci5WGK0jtdFXtX+xW3YdhN0NSSMXAQfM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.crl
                          rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 00:18:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:67:e4:f6:10:5b:60:6c:bc:70:1f:d2:18:c0:1b:d0:a1:fe:10:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24C0BF59215339684BA80028158EEDE0FD534D91
        Validity
            Not Before: Mar  1 22:56:46 2026 GMT
            Not After : Mar  3 00:18:46 2026 GMT
        Subject: CN=B35E750BF136B5D7FEF238EC98AAC7FEEA81B3C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f1:d5:3d:62:15:f1:41:e2:5f:53:b2:a7:c7:
                    30:bd:64:64:0a:43:f4:00:26:26:53:1a:79:2f:a3:
                    ec:b6:63:56:e9:6e:1b:8f:ed:08:da:0e:1c:49:ba:
                    16:c0:99:f1:4b:f2:66:8a:40:6f:03:d5:21:1a:8a:
                    c4:86:8e:81:cb:cc:16:fc:4c:ae:d1:72:93:35:71:
                    7a:04:a3:f5:cc:c8:e7:8a:b4:67:a6:34:a6:5a:ae:
                    14:97:8b:34:05:5a:72:be:7d:2c:04:56:78:5f:2d:
                    e0:c5:e1:f9:0b:11:f8:2f:7e:7f:0d:a4:cc:fa:b2:
                    37:c9:98:ad:97:2d:e9:df:93:e6:b2:6b:76:42:75:
                    66:5b:fc:37:67:a9:54:1e:b7:06:bb:35:90:29:d4:
                    99:6e:3d:e7:6c:24:93:59:2c:65:a2:50:a6:1d:84:
                    a7:75:45:94:85:d5:c0:26:63:48:1b:72:dd:45:f9:
                    79:d3:f5:77:3e:e2:56:4b:a9:8c:66:44:42:47:62:
                    66:70:c4:6e:88:dc:44:31:a5:43:4a:32:cb:05:2a:
                    8a:48:a0:8c:f8:5d:7b:08:49:4f:dd:12:8f:f8:98:
                    c9:d6:9e:41:ca:69:2b:21:59:59:fe:d2:29:96:a6:
                    23:ac:4b:01:8c:66:47:af:18:7c:1a:77:46:04:4b:
                    6f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5E:75:0B:F1:36:B5:D7:FE:F2:38:EC:98:AA:C7:FE:EA:81:B3:C6
            X509v3 Authority Key Identifier:
                keyid:24:C0:BF:59:21:53:39:68:4B:A8:00:28:15:8E:ED:E0:FD:53:4D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:5b:44:70:44:d1:3b:47:76:53:f6:7d:b8:5b:5b:87:47:c8:
         e0:a5:22:3f:08:8f:51:a7:87:48:a9:a6:c6:cc:20:f9:5f:fc:
         6b:08:c0:61:24:3a:94:8f:c8:35:02:df:c8:f7:e5:fe:83:7f:
         04:6f:63:0f:f2:6f:43:b1:13:d7:f0:86:08:f7:34:e0:55:78:
         c0:39:e4:c3:e1:58:e0:5d:4c:17:a0:9e:61:cc:dc:65:42:cb:
         fa:cc:d0:41:6c:80:8f:ae:c5:e6:f3:3a:ff:bb:44:0a:8e:92:
         62:52:d0:b0:34:92:9f:80:31:d2:ef:12:a5:79:0c:ed:66:c6:
         8f:b7:eb:b8:b8:ac:dc:07:7b:3b:85:72:eb:3d:2c:45:1c:2d:
         65:b4:ca:2d:d4:68:00:01:d7:5d:7f:4d:65:ba:db:fe:b5:bb:
         09:5a:5d:24:77:54:f0:ef:18:3b:f5:fa:9b:9c:06:2f:0a:f6:
         b0:34:f8:a5:0a:49:45:86:72:69:f9:3d:5f:48:42:6e:8c:29:
         63:b1:69:65:3a:14:65:7e:60:8b:e0:ed:72:90:05:5c:a9:b3:
         35:30:78:f3:35:90:41:d2:b9:56:b5:09:0d:3a:44:e7:a8:64:
         85:bb:94:33:83:21:9c:fc:b3:8b:a3:e7:3c:50:4a:98:a1:77:
         50:4e:15:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:14:56 2026 by rpki-client