Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft
File:                     BA0000290CCA847B173A7D196F03889806E7091A.mft (raw, json)
Hash identifier:          7YegoX89HsiJY35KvgCR3aGwFDtTlF8gXQXIt0rpR28=
Subject key identifier:   A4:FD:87:02:66:1F:CA:C7:20:F5:31:8D:18:0E:06:00:42:4D:33:39
Authority key identifier: BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A
Certificate issuer:       /CN=BA0000290CCA847B173A7D196F03889806E7091A
Certificate serial:       68EF43C9A2BAEC9457A90B7E81047590E4F96BFE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft
Manifest number:          0314
Signing time:             Mon 02 Mar 2026 14:40:38 +0000
Manifest this update:     Mon 02 Mar 2026 14:35:38 +0000
Manifest next update:     Tue 03 Mar 2026 17:26:38 +0000
Files and hashes:         1: BA0000290CCA847B173A7D196F03889806E7091A.crl (hash: 4uZJ9Kfj1kQl2q/hVW/+V7YNzOAeFbwHtI7dQMW/mkU=)
                          2: 3138362e3232342e3234302e302f32302d3234203d3e20323632373538.roa (hash: GlYV7CMqkMEAod4viUcwiHDE80QdyRhHaF4PZVAn6P4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.crl
                          rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 17:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ef:43:c9:a2:ba:ec:94:57:a9:0b:7e:81:04:75:90:e4:f9:6b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA0000290CCA847B173A7D196F03889806E7091A
        Validity
            Not Before: Mar  2 14:35:38 2026 GMT
            Not After : Mar  3 17:26:38 2026 GMT
        Subject: CN=A4FD8702661FCAC720F5318D180E0600424D3339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:89:d4:d3:bd:18:c9:1e:37:83:5b:f9:11:73:
                    96:39:b3:3f:25:20:7f:4e:60:26:b6:e0:ec:2a:59:
                    7c:5d:a1:ee:0c:fc:2a:26:2c:67:26:1f:b9:2e:91:
                    15:6d:94:a4:e5:e2:7f:36:a5:80:70:26:ff:d3:16:
                    22:1d:5e:f2:ce:07:7b:37:50:a3:15:8c:7f:f3:64:
                    04:9f:f2:07:d9:0c:a3:5e:05:ce:e8:5e:57:70:cd:
                    da:38:e1:da:eb:f9:bb:fa:6e:0a:b7:c0:0d:6d:53:
                    bf:ee:be:0f:16:33:f5:2d:fe:2e:b2:3a:c2:b9:d6:
                    90:de:61:12:68:bd:99:37:cb:50:dc:da:60:73:1e:
                    db:97:b9:4d:77:d5:e2:43:19:70:a5:ab:4b:b7:e3:
                    fb:d0:3d:5e:47:27:e1:53:8f:d5:d1:62:ac:f1:79:
                    dd:b5:56:26:05:9a:a8:76:73:f5:30:ba:b5:cd:e6:
                    cf:23:09:63:09:3a:2f:b8:67:40:ad:9e:a6:64:8b:
                    a8:91:e9:a8:79:c3:1d:81:53:77:30:ae:21:b9:a4:
                    a1:21:13:7a:b7:61:36:42:8b:29:bb:f2:83:97:9f:
                    d9:10:2d:15:c1:cd:35:13:ed:65:22:b5:8e:62:6f:
                    2e:1f:7d:d2:26:ac:e3:cf:12:aa:75:08:fa:ae:8f:
                    75:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FD:87:02:66:1F:CA:C7:20:F5:31:8D:18:0E:06:00:42:4D:33:39
            X509v3 Authority Key Identifier:
                keyid:BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:5b:41:81:53:97:e1:89:04:ed:d9:fc:61:4c:4e:b6:45:8a:
         01:9e:8c:10:37:50:48:0c:4e:db:1f:ed:17:2b:fa:7a:27:19:
         9c:a6:68:51:e8:18:95:42:a8:75:2d:ac:7c:34:99:a6:3a:f3:
         94:86:f0:72:5c:7e:cf:44:86:4b:69:dc:3a:d4:24:35:99:be:
         40:cb:0a:6f:11:bf:9b:b7:80:0b:d2:e7:9c:ea:11:ea:a9:c4:
         bf:f4:d6:ec:b4:17:20:26:16:9a:57:b5:87:5a:1f:5c:de:8c:
         88:25:d5:a1:51:b6:8a:30:ce:ae:74:2e:8d:a6:01:c3:04:01:
         22:e5:7f:01:08:4e:5c:2c:7d:f4:f2:87:a1:1e:cb:3d:2c:d9:
         70:91:2d:36:5c:02:48:e4:a1:4e:0d:e4:09:6f:55:65:86:50:
         34:f1:80:c0:0a:65:2c:43:07:d7:10:ac:ee:a0:aa:c5:0f:0f:
         01:18:86:e6:09:b8:16:61:21:67:b7:0b:3e:73:81:87:4f:6a:
         4e:8a:71:f2:e1:66:0f:22:3a:56:58:70:8e:8f:57:24:20:cc:
         07:bf:78:fd:e3:18:1a:cd:29:19:66:ac:df:7c:69:9f:49:63:
         84:a8:41:a0:9d:4d:f2:3e:82:63:48:c5:3c:b9:7c:a3:56:8f:
         cf:30:75:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:26:52 2026 by rpki-client