Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.mft
File:                     71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.mft (raw, json)
Hash identifier:          M5C7gu/+7L34X//k7Utqi3o9Y/aSi1EH8NwJZS5esmE=
Subject key identifier:   F8:A5:A5:A5:54:0C:A4:B1:02:3B:3C:E6:F1:E4:88:08:67:5C:21:B7
Authority key identifier: 71:D6:E8:15:8F:9E:FE:91:E9:AC:06:7F:99:AA:E5:B3:4F:B7:C7:A8
Certificate issuer:       /CN=71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8
Certificate serial:       203797768E86C2BFA6A6E3E76B75590623C1921D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.mft
Manifest number:          8D
Signing time:             Mon 02 Mar 2026 15:21:41 +0000
Manifest this update:     Mon 02 Mar 2026 15:16:41 +0000
Manifest next update:     Tue 03 Mar 2026 18:19:41 +0000
Files and hashes:         1: 323830343a373730633a3a2f33322d313238203d3e20323731313531.roa (hash: 48UGaUhw5lOAFlcmdxaBBOibUkrTKasIL2u+nKYFpVk=)
                          2: 3137392e34322e3131362e302f32322d3332203d3e20323731313531.roa (hash: c2uoTP3FqrUjeXOcSI2m+CDup+9yO7bW1GYM5OpldqI=)
                          3: 71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.crl (hash: zIo1ErV4Jyi8GPZRzuA1WwyfpzE6ZZbRGCJohy6OqZc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.crl
                          rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 17:23:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:37:97:76:8e:86:c2:bf:a6:a6:e3:e7:6b:75:59:06:23:c1:92:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8
        Validity
            Not Before: Mar  2 15:16:41 2026 GMT
            Not After : Mar  3 18:19:41 2026 GMT
        Subject: CN=F8A5A5A5540CA4B1023B3CE6F1E48808675C21B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:75:b6:1c:1e:d3:8b:6c:e6:ca:e8:2e:5b:35:
                    83:7b:51:e4:37:6a:25:23:2b:3a:7a:a8:f8:1e:de:
                    0b:e9:5c:e0:05:a6:17:a1:9a:fe:57:b5:a8:ee:bd:
                    01:dd:5a:b7:7d:d2:81:01:08:c7:e1:4b:e9:0c:b1:
                    87:ad:ee:19:04:c1:2b:f4:48:5f:c7:05:9c:1b:45:
                    16:c7:32:2c:33:12:50:51:48:76:63:9a:8d:6a:90:
                    7c:b5:60:4c:1e:3e:7c:f9:3c:c6:0b:d8:44:a7:77:
                    ca:a0:ab:81:e2:55:3d:ea:42:92:80:40:82:f6:21:
                    a0:e5:bb:a7:ed:0f:59:a2:82:4a:ed:f0:10:47:8e:
                    1a:0c:8e:59:6f:82:9b:87:03:74:bd:23:b6:6b:9b:
                    f8:77:2a:5a:96:a7:e7:44:9e:4a:0e:d3:5e:4b:96:
                    d4:67:de:fa:51:98:d4:d5:e0:38:df:83:cb:fa:e7:
                    2a:df:98:72:a9:01:55:92:ab:58:c4:1b:0d:97:ca:
                    1d:a7:75:19:f2:9b:90:90:7a:a6:e9:0a:be:ef:d1:
                    f2:5e:28:0e:4c:98:67:a9:ee:bb:fa:e9:b7:bd:05:
                    b3:59:e0:38:05:58:ab:25:ee:76:38:be:00:07:f1:
                    52:08:b9:88:1d:71:ff:02:ea:08:dd:b4:10:c1:c0:
                    77:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A5:A5:A5:54:0C:A4:B1:02:3B:3C:E6:F1:E4:88:08:67:5C:21:B7
            X509v3 Authority Key Identifier:
                keyid:71:D6:E8:15:8F:9E:FE:91:E9:AC:06:7F:99:AA:E5:B3:4F:B7:C7:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:90:67:1d:6b:2f:d9:0d:eb:52:db:96:4f:09:52:e6:e8:0f:
         a2:2d:76:ab:4f:e7:ef:d1:4c:0d:60:3b:ea:24:81:74:6e:cc:
         fd:d1:95:53:0b:c9:14:15:52:cb:62:a5:43:ed:51:bd:7b:62:
         bf:03:ee:f8:f6:62:26:39:89:b6:70:41:c9:58:9a:e6:18:3b:
         04:c7:48:45:ef:63:02:e4:6c:a0:3a:ab:7d:32:d1:3d:2e:3a:
         c7:34:66:f6:5d:68:45:11:6e:23:63:0a:59:cb:dd:25:cb:bb:
         1e:18:1a:fb:d0:36:1f:1a:e6:3d:5b:8c:e0:2e:6c:20:ce:bf:
         6b:b9:65:ff:04:3e:2f:00:1b:ce:37:ae:da:ae:5e:2b:72:88:
         a2:bc:c0:26:d1:fe:c9:77:53:db:32:c2:3a:62:25:0e:ce:bb:
         ad:c8:e0:d9:24:86:6c:07:75:4d:e4:bc:0e:e4:72:e3:e8:e6:
         26:26:1b:9c:27:2e:5c:5d:b9:35:f3:a7:29:2d:51:23:cc:9b:
         d9:bd:70:af:64:49:5b:aa:dc:d5:be:cb:05:fc:49:f8:c8:ba:
         4a:ce:18:b0:98:71:2a:7a:8f:27:bb:bd:35:2e:bc:1f:d7:0b:
         4f:bc:94:00:58:3c:ae:d1:77:7a:c6:65:55:3d:3c:d9:11:c3:
         39:3f:24:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:14:19 2026 by rpki-client