Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2TJnLMFz36csZxidBrhAnaR88pYzpGadyNYbrvMKr5WD/0/1D1328217C2BD2863C87D2938A271517414BABF6.mft
File:                     1D1328217C2BD2863C87D2938A271517414BABF6.mft (raw, json)
Hash identifier:          OPte+pYnUYCdPQmiRfCLZOUHdwKC4pqiq4Fmy00F3UQ=
Subject key identifier:   69:CD:BC:A7:80:E9:37:FE:F5:62:05:A3:9A:2D:FD:06:BE:EB:A4:5C
Authority key identifier: 1D:13:28:21:7C:2B:D2:86:3C:87:D2:93:8A:27:15:17:41:4B:AB:F6
Certificate issuer:       /CN=1D1328217C2BD2863C87D2938A271517414BABF6
Certificate serial:       32F971AC31258133B2D26C6F2596A33F22AAA945
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D1328217C2BD2863C87D2938A271517414BABF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2TJnLMFz36csZxidBrhAnaR88pYzpGadyNYbrvMKr5WD/0/1D1328217C2BD2863C87D2938A271517414BABF6.mft
Manifest number:          0252
Signing time:             Mon 24 Aug 2026 03:45:16 +0000
Manifest this update:     Mon 24 Aug 2026 03:40:16 +0000
Manifest next update:     Tue 25 Aug 2026 06:19:16 +0000
Files and hashes:         1: 1D1328217C2BD2863C87D2938A271517414BABF6.crl (hash: 5Nh61MgnRjbvNLdLIltp449ys42biQTgoIuBT1JmUiE=)
                          2: 323830343a393432633a3a2f33322d3438203d3e20323734383236.roa (hash: djQiMnaOpxGB8MGSBIEFdo9AK3rHTGbL2rmbRWb+kc4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2TJnLMFz36csZxidBrhAnaR88pYzpGadyNYbrvMKr5WD/0/1D1328217C2BD2863C87D2938A271517414BABF6.crl
                          rsync://rpki-repo.registro.br/repo/2TJnLMFz36csZxidBrhAnaR88pYzpGadyNYbrvMKr5WD/0/1D1328217C2BD2863C87D2938A271517414BABF6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D1328217C2BD2863C87D2938A271517414BABF6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 06:19:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:f9:71:ac:31:25:81:33:b2:d2:6c:6f:25:96:a3:3f:22:aa:a9:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D1328217C2BD2863C87D2938A271517414BABF6
        Validity
            Not Before: Aug 24 03:40:16 2026 GMT
            Not After : Aug 25 06:19:16 2026 GMT
        Subject: CN=69CDBCA780E937FEF56205A39A2DFD06BEEBA45C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:df:e8:ed:c8:7d:3c:b1:83:d1:08:b8:e5:2d:
                    19:b3:c2:55:ed:e9:d5:2b:eb:62:2d:9e:26:ee:48:
                    37:0c:d7:62:0d:93:dd:d5:4d:d0:a2:ac:a2:d9:08:
                    a4:10:98:70:0b:45:a2:f5:b5:1a:24:88:93:d1:41:
                    a8:eb:ba:6a:90:2b:54:f6:11:26:b9:4e:6f:70:70:
                    70:85:4b:6b:42:a6:09:89:6f:a1:26:e1:e5:b7:0d:
                    b4:fa:91:0e:9d:28:d8:22:de:34:d9:b1:cc:f1:03:
                    8e:1b:5c:4f:85:ab:58:3e:10:aa:12:ea:fa:31:64:
                    0f:b6:88:ea:b9:d6:c5:d8:18:a5:73:fa:db:8e:28:
                    b7:6d:d3:8c:79:d3:59:c1:98:d4:73:72:56:53:ba:
                    c1:47:b4:72:9c:d8:e5:fe:e8:4b:cc:17:13:86:70:
                    9b:53:e2:86:25:16:20:3c:46:75:58:21:cd:32:7d:
                    8f:fa:4f:99:56:54:ee:53:f6:5c:2e:ae:1a:3b:ad:
                    cc:df:f9:93:e8:f8:2e:73:74:34:e8:77:7d:f0:ad:
                    2d:8e:1f:8e:96:99:90:b9:ec:0f:3d:47:73:4d:5d:
                    45:3c:e6:f1:3f:2b:41:7c:40:36:01:a1:c6:67:4c:
                    23:09:c8:88:44:1f:90:af:3c:db:e7:bf:ff:cf:18:
                    bb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CD:BC:A7:80:E9:37:FE:F5:62:05:A3:9A:2D:FD:06:BE:EB:A4:5C
            X509v3 Authority Key Identifier:
                keyid:1D:13:28:21:7C:2B:D2:86:3C:87:D2:93:8A:27:15:17:41:4B:AB:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2TJnLMFz36csZxidBrhAnaR88pYzpGadyNYbrvMKr5WD/0/1D1328217C2BD2863C87D2938A271517414BABF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D1328217C2BD2863C87D2938A271517414BABF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2TJnLMFz36csZxidBrhAnaR88pYzpGadyNYbrvMKr5WD/0/1D1328217C2BD2863C87D2938A271517414BABF6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:90:38:42:20:33:f5:77:c0:d2:71:db:24:a5:dd:81:73:c2:
         ef:94:f0:92:ca:07:83:78:9f:56:ed:f7:c1:db:ff:b2:09:f7:
         3a:c8:d7:92:a4:d6:31:b1:45:a7:54:d7:df:1e:a1:cc:37:5b:
         60:a9:53:01:ee:85:77:de:ce:f6:0d:58:a8:6c:ac:cc:32:4d:
         c5:46:56:8a:02:1a:27:24:c3:05:5e:f5:d0:6d:c6:b8:6e:51:
         6b:e3:60:4b:a8:79:74:e7:43:cd:e4:d7:00:e1:f5:84:ca:95:
         de:34:96:a9:30:15:33:02:f5:e5:29:dc:69:0c:de:00:c5:b0:
         81:9a:f2:c3:b0:80:12:b8:ef:73:5f:04:7a:74:12:e5:db:29:
         60:4f:4b:da:34:64:b2:ba:d5:b7:09:5d:37:02:a4:30:ba:30:
         37:b9:d4:de:52:05:cd:56:ad:f7:c9:64:66:0f:a4:aa:32:23:
         da:d3:ec:88:e8:7a:02:4e:53:d1:96:1d:8a:4b:c7:a0:87:76:
         01:ba:0c:73:45:b2:ee:b8:0b:9b:dc:12:8e:4c:3a:de:0b:8d:
         3c:26:ef:55:00:c1:4d:6a:c7:bd:d6:e0:09:2d:86:26:fc:ad:
         1e:4b:39:9e:bd:6b:d3:a8:29:0b:42:91:4a:4c:f8:5e:9f:a4:
         e7:cd:80:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 16:17:35 2026 by rpki-client