Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/8528771E1676E945AC313E0774A23D878A92C3DD.mft
File:                     8528771E1676E945AC313E0774A23D878A92C3DD.mft (raw, json)
Hash identifier:          RClnuWI7maeJ16bo/xLV3pnYEOFxMcfcqwJgSq/3spU=
Subject key identifier:   72:00:81:73:7E:B5:AA:83:3A:A3:49:17:FE:FF:92:A5:03:37:74:28
Authority key identifier: 85:28:77:1E:16:76:E9:45:AC:31:3E:07:74:A2:3D:87:8A:92:C3:DD
Certificate issuer:       /CN=8528771E1676E945AC313E0774A23D878A92C3DD
Certificate serial:       1D821FCFD9E0BAFF5A4CAD08DAAB24E7196BC943
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8528771E1676E945AC313E0774A23D878A92C3DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/8528771E1676E945AC313E0774A23D878A92C3DD.mft
Manifest number:          024A
Signing time:             Mon 02 Mar 2026 12:04:08 +0000
Manifest this update:     Mon 02 Mar 2026 11:59:08 +0000
Manifest next update:     Tue 03 Mar 2026 14:20:08 +0000
Files and hashes:         1: 8528771E1676E945AC313E0774A23D878A92C3DD.crl (hash: 2AE+iGYjtuHmf6pYf9g7q/Uj9sJO1q4bevznN3gi/lc=)
                          2: 3230312e372e3231322e302f32342d3234203d3e203631363937.roa (hash: n4x+KyXSzejtuXrnzRFSKvCRy/Is/Ipk32M8gprrrq4=)
                          3: 3230312e372e3231342e302f32342d3234203d3e203631363937.roa (hash: kkQCsXQVLM6QFGe5whbUJgOhbrexmwtlFkNzJi7TPGM=)
                          4: 3230312e372e3231332e302f32342d3234203d3e203631363937.roa (hash: JkhOaVry2ajobzAeBXe4X0gtzkbogSluCQ1k55Z76lM=)
                          5: 3230312e372e3231352e302f32342d3234203d3e203631363937.roa (hash: yoBiemtv75+UFIwxWsrn5+uJnrOypZWYa4nHenn2ZTA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/8528771E1676E945AC313E0774A23D878A92C3DD.crl
                          rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/8528771E1676E945AC313E0774A23D878A92C3DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8528771E1676E945AC313E0774A23D878A92C3DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 14:20:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:82:1f:cf:d9:e0:ba:ff:5a:4c:ad:08:da:ab:24:e7:19:6b:c9:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8528771E1676E945AC313E0774A23D878A92C3DD
        Validity
            Not Before: Mar  2 11:59:08 2026 GMT
            Not After : Mar  3 14:20:08 2026 GMT
        Subject: CN=720081737EB5AA833AA34917FEFF92A503377428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c0:58:91:ad:27:c5:38:68:28:ee:58:5d:02:
                    73:5f:3f:4e:f2:34:4e:16:1d:da:52:70:0d:7c:64:
                    18:46:71:3d:cc:ba:24:02:ad:c4:0b:61:24:11:49:
                    0e:76:d4:11:60:9d:1b:25:18:a1:25:2a:73:09:2a:
                    12:5a:64:b1:1d:27:26:dc:3f:b0:2d:82:c4:b0:b6:
                    78:c7:2d:66:21:72:fa:56:6a:bc:95:b8:88:65:e1:
                    38:ac:9b:79:12:8e:de:09:46:6e:c4:fd:b8:e9:ac:
                    15:1e:61:ec:e0:07:d3:d7:7f:a4:bd:a8:2c:65:24:
                    4a:5c:1e:bd:6d:80:1b:97:ff:dc:c9:89:7b:36:e2:
                    a6:9d:8b:86:8a:2d:e7:38:8d:43:54:ee:25:f0:2c:
                    f2:27:ee:d4:0e:2d:7e:e9:8e:d2:9f:32:c9:d6:ea:
                    2b:a9:8d:65:5a:7f:d9:04:34:58:80:77:41:09:b0:
                    8e:cd:d4:28:41:c2:c5:1f:f3:12:36:32:16:18:7c:
                    18:cb:0c:46:72:c7:b2:23:65:b9:9c:91:d0:9a:dd:
                    26:93:23:03:1c:c1:81:1e:47:33:e5:e6:a8:b1:91:
                    c8:d0:01:af:e0:7b:28:a7:24:55:d7:bf:d5:ce:3b:
                    e3:6f:23:56:96:95:9d:d7:cd:0f:2f:7d:6a:0a:2c:
                    b5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:00:81:73:7E:B5:AA:83:3A:A3:49:17:FE:FF:92:A5:03:37:74:28
            X509v3 Authority Key Identifier:
                keyid:85:28:77:1E:16:76:E9:45:AC:31:3E:07:74:A2:3D:87:8A:92:C3:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/8528771E1676E945AC313E0774A23D878A92C3DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8528771E1676E945AC313E0774A23D878A92C3DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/8528771E1676E945AC313E0774A23D878A92C3DD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:34:b5:e2:ce:b9:6f:12:cf:36:f6:bc:a9:ea:ce:ed:29:94:
         46:12:6c:6f:df:92:92:42:5c:24:5c:f7:e0:c6:e4:ae:4f:0b:
         c1:c8:86:b3:fc:2b:c8:71:09:59:a3:9c:bc:0c:1f:be:54:a8:
         d2:15:15:54:d2:71:7c:3a:44:f5:66:ac:d8:a7:a2:d1:72:8d:
         b8:71:3e:2c:d5:65:45:b0:4d:35:2f:de:bc:42:f5:ff:83:fb:
         0f:fe:b0:21:91:dd:2b:1c:b7:04:a4:a9:60:cd:69:08:31:66:
         f6:dc:06:96:74:70:d2:02:50:83:b0:f1:63:06:ad:79:28:ed:
         d6:8d:92:8e:05:a9:d9:c2:4e:bd:0c:a0:05:c4:0d:b7:06:37:
         a3:d3:a6:2f:ed:9b:cf:b9:a2:12:b1:c4:f2:47:bd:91:05:ac:
         9f:54:77:93:1f:3c:8c:d1:d9:9e:24:e3:ed:73:c4:48:d8:ed:
         19:b2:12:c2:40:ad:54:ca:82:51:bb:3c:97:17:ff:b1:d3:ca:
         6c:ed:5f:b8:07:6f:6d:f1:07:a9:07:cb:45:39:69:c4:69:8c:
         f4:2c:8d:b7:0e:61:b7:36:d5:88:29:f0:94:9f:fa:85:00:73:
         d2:5d:79:ec:d5:05:ac:6f:db:02:cc:00:9a:02:19:4e:a3:4c:
         04:34:7a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:37:21 2026 by rpki-client