Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.mft
File:                     BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.mft (raw, json)
Hash identifier:          g6SCo8LSrb5exJjQbeEi3qJTLOns/TOrxJwsM7DM5iE=
Subject key identifier:   96:C8:32:38:07:07:59:24:A8:64:75:A4:9F:C5:23:C4:94:BF:FA:44
Authority key identifier: BD:A4:8C:2C:C1:06:4B:F3:E6:05:3C:15:DD:28:16:FE:57:74:B3:CA
Certificate issuer:       /CN=BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA
Certificate serial:       136546EE42552BDAB48A13A9281F8A6A7F580955
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.mft
Manifest number:          A2
Signing time:             Mon 02 Mar 2026 03:28:11 +0000
Manifest this update:     Mon 02 Mar 2026 03:23:11 +0000
Manifest next update:     Tue 03 Mar 2026 04:53:11 +0000
Files and hashes:         1: BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.crl (hash: nDsL0vbyH2n8FBjJMIkwdDbmPglFsuBWqmKIIh1hwZ0=)
                          2: 323830343a383736633a3a2f33322d313238203d3e20323732373038.roa (hash: YWHryjSdFBEBKqKmB1KLsmWcfwbalA7VAy9fcp5yQ3o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.crl
                          rsync://rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 04:53:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:65:46:ee:42:55:2b:da:b4:8a:13:a9:28:1f:8a:6a:7f:58:09:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA
        Validity
            Not Before: Mar  2 03:23:11 2026 GMT
            Not After : Mar  3 04:53:11 2026 GMT
        Subject: CN=96C8323807075924A86475A49FC523C494BFFA44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:52:fb:dc:56:3b:0f:df:8e:b7:d1:23:5e:ba:
                    80:8e:8c:5e:cf:8f:6d:bf:b4:da:d3:78:33:51:9d:
                    a9:7e:fc:eb:fa:35:d3:be:0c:85:f7:42:d3:b8:f4:
                    ec:4f:50:5b:58:ee:19:a4:fc:e7:27:cf:32:1f:2a:
                    61:ed:97:ca:fd:86:e1:c6:99:4b:68:d7:fe:ba:d9:
                    65:d7:c7:3f:32:11:4a:b4:31:25:52:23:1d:0d:77:
                    50:f9:33:d9:e2:43:7f:13:1c:48:87:ef:90:7e:99:
                    eb:64:67:a4:1e:25:66:9a:ea:d2:78:d8:a8:f8:87:
                    5c:21:e7:cb:9f:28:6c:69:c5:d5:87:c5:95:bf:89:
                    09:0e:32:08:3e:f5:5f:58:5d:63:30:8c:ca:d3:58:
                    19:2f:23:5e:8e:af:90:83:19:ef:e9:5b:80:45:5b:
                    41:ea:4c:35:18:03:2e:48:ac:69:13:8d:69:17:5f:
                    d3:b6:f7:b8:0f:f0:ba:f4:2a:ca:8b:9d:e7:db:01:
                    86:b8:df:73:7d:c0:d8:4b:35:56:a7:65:1a:ce:b9:
                    2f:b5:cb:81:ee:5a:13:15:34:33:fc:a7:78:0b:8f:
                    63:54:4b:82:e0:26:e4:89:22:5f:0d:07:88:c3:86:
                    44:4d:04:ff:5c:e1:a9:7a:28:cd:75:b2:36:5f:86:
                    fd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C8:32:38:07:07:59:24:A8:64:75:A4:9F:C5:23:C4:94:BF:FA:44
            X509v3 Authority Key Identifier:
                keyid:BD:A4:8C:2C:C1:06:4B:F3:E6:05:3C:15:DD:28:16:FE:57:74:B3:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:20:ac:e7:83:df:11:ee:72:e0:fb:89:2a:12:d5:d7:b3:41:
         cb:b6:7a:bc:1f:ac:c3:ba:94:5d:6c:0f:e4:b0:a1:b3:43:a7:
         11:a1:32:60:69:cb:07:d7:9b:41:77:9e:e6:9e:0a:47:b5:d9:
         df:aa:f1:ea:86:06:3e:7c:1c:2c:32:44:0b:42:e4:b6:1f:7b:
         12:a9:86:2d:03:65:e7:ff:76:44:64:92:ff:b0:7c:88:4d:3a:
         be:ac:36:dc:21:55:58:c5:95:91:54:e0:43:08:7f:65:0c:78:
         dd:0f:78:af:83:1a:41:1e:3a:4b:4a:71:e4:cf:6c:ba:31:df:
         27:66:d0:e0:8a:3d:5d:f6:11:da:76:d7:38:7e:98:35:0f:69:
         f4:f1:c7:33:4b:6e:52:7f:6a:30:51:17:b4:28:0e:21:bc:fb:
         bd:6d:ff:f4:f7:7c:5e:6f:13:6a:0a:3d:b6:1e:32:4b:0a:4f:
         9e:4d:8a:3c:bd:dd:8d:ef:96:ed:7d:e1:33:6a:f3:0b:83:fa:
         e9:f9:19:ae:1e:5e:9b:96:c7:b4:ce:8d:09:e7:71:2d:ba:26:
         cf:3e:9f:4e:60:d5:72:13:73:df:58:b9:63:ca:4b:ae:9b:9a:
         87:62:6a:45:44:69:6b:4c:df:f4:64:64:c8:b2:77:3d:9c:47:
         26:e8:09:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:32:07 2026 by rpki-client