Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft
File:                     BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft (raw, json)
Hash identifier:          G/Mmx6sxnek9J9TAyq30a2x4NM1EiikHRiuS+I3BKE8=
Subject key identifier:   53:84:0E:74:55:25:9C:03:4E:4F:4E:B4:62:F4:06:DF:4C:27:91:43
Authority key identifier: BE:25:C1:52:BA:CF:D2:DD:98:8E:23:E9:C9:7A:A1:AE:B4:BA:5B:3E
Certificate issuer:       /CN=BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E
Certificate serial:       67641107FC909EFD719073723521972FCD4D6B96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft
Manifest number:          AF
Signing time:             Mon 02 Mar 2026 12:04:01 +0000
Manifest this update:     Mon 02 Mar 2026 11:59:01 +0000
Manifest next update:     Tue 03 Mar 2026 14:54:01 +0000
Files and hashes:         1: BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.crl (hash: UxaBSfA0uC1T915en4FLQkFDknjiJVJ0Df5WlOqP+II=)
                          2: 323830343a343465303a3a2f33322d3438203d3e203631353836.roa (hash: EE+epePHX3kApXSOd4NEAz7bQWCJ2iABI0JjgleyzM0=)
                          3: 34352e37312e34382e302f32322d3234203d3e203631353836.roa (hash: 50nfXV1vfz6ixz96BZYaoDznaTp9SqqgyXgtQ8vAMVM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.crl
                          rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 14:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:64:11:07:fc:90:9e:fd:71:90:73:72:35:21:97:2f:cd:4d:6b:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E
        Validity
            Not Before: Mar  2 11:59:01 2026 GMT
            Not After : Mar  3 14:54:01 2026 GMT
        Subject: CN=53840E7455259C034E4F4EB462F406DF4C279143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7a:29:f4:49:2b:35:ca:93:13:b0:ac:4d:d0:
                    aa:c6:15:ad:cc:0b:d8:b8:86:bc:3b:8e:06:11:4f:
                    1d:73:4c:35:11:64:79:10:c3:f8:64:ee:40:a0:a1:
                    3e:bb:99:ae:72:f5:df:50:d5:32:81:93:ce:53:99:
                    f7:bb:a8:d7:1a:8a:b0:10:51:f8:5c:5d:30:7b:b4:
                    05:50:85:d4:ca:48:32:6f:f7:88:42:30:12:fe:df:
                    e4:2e:f0:9c:b7:f7:b4:bd:1e:40:cf:af:25:db:54:
                    c8:a3:45:0d:c6:31:9a:68:d3:66:80:95:c2:46:8d:
                    5d:1d:9b:53:23:8c:f7:5c:d4:fe:68:ff:1c:79:c7:
                    9f:30:bc:19:1d:a9:be:3f:84:ca:4c:3a:59:58:78:
                    72:bb:94:63:0a:49:0d:44:0f:ab:23:a2:b2:39:56:
                    c3:d4:71:62:06:23:66:70:01:c6:27:e8:df:5b:4f:
                    1d:cf:0a:c8:4b:e9:95:96:f4:db:f9:31:b5:bb:1a:
                    db:89:94:5f:06:12:1e:a3:58:7a:55:74:81:ea:0b:
                    bd:af:65:91:c5:31:38:b8:f9:b0:dd:9a:4c:40:11:
                    76:d3:8a:bd:e2:03:53:ad:76:0c:c0:38:c4:5c:5d:
                    6e:cd:02:2c:27:80:0e:65:3f:c0:38:a2:18:7e:a1:
                    cd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:84:0E:74:55:25:9C:03:4E:4F:4E:B4:62:F4:06:DF:4C:27:91:43
            X509v3 Authority Key Identifier:
                keyid:BE:25:C1:52:BA:CF:D2:DD:98:8E:23:E9:C9:7A:A1:AE:B4:BA:5B:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:a2:8f:db:9c:97:1d:97:f1:d0:f4:81:2d:c0:9e:2d:e5:2b:
         45:6a:28:98:b0:21:e7:ee:e4:48:4a:6d:bb:86:84:9b:21:5c:
         15:46:22:67:b7:8a:d8:88:01:89:29:f4:ce:b7:84:df:ef:74:
         e0:2e:5d:52:04:bf:e5:76:76:cb:c1:cf:32:2b:e2:2b:fa:26:
         42:c4:01:40:b8:23:0e:9b:bd:d0:12:46:f0:f9:31:6f:4b:30:
         c9:33:ef:5b:03:78:ce:09:47:9b:f3:80:a6:16:be:53:f9:27:
         ba:1a:3d:62:f8:9f:9a:dc:85:58:f9:f1:85:99:2b:f6:23:28:
         24:86:45:2e:7c:26:d6:c1:08:a0:10:3c:93:d0:62:c8:ed:0b:
         d1:2b:0a:8f:87:db:53:fe:b1:0b:18:99:69:19:99:15:88:00:
         9a:10:b9:c6:8b:e9:54:f9:93:20:44:f2:7a:f7:d8:29:0c:80:
         e2:91:82:84:02:ad:5c:78:60:07:86:68:10:58:8d:27:ee:af:
         1b:b9:05:2e:e2:26:00:4c:57:74:97:99:30:4e:15:9d:f0:40:
         f3:1b:e5:8d:c4:3d:ec:8a:9e:ea:c5:c7:ac:a0:61:b2:73:cf:
         7c:eb:6c:75:b0:6b:f3:a0:26:ff:31:4c:d2:69:7b:c7:9a:13:
         a1:f8:33:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:00:28 2026 by rpki-client