Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft
File:                     3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft (raw, json)
Hash identifier:          +M4Azf9Hdz0Zuxe5InuRpi0qAoFvXBaPGiVuvT7qy4Y=
Subject key identifier:   2D:32:31:C5:DE:EB:C9:4D:91:A7:C2:91:7D:D7:A8:5A:77:0E:4D:80
Authority key identifier: 36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21
Certificate issuer:       /CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21
Certificate serial:       06E2B5125F0558CF15701707D389FFABB78A0A8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft
Manifest number:          0489
Signing time:             Sun 23 Aug 2026 22:43:26 +0000
Manifest this update:     Sun 23 Aug 2026 22:38:26 +0000
Manifest next update:     Tue 25 Aug 2026 00:36:26 +0000
Files and hashes:         1: 3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl (hash: YY7dYpsrimyBaVNMTkBRN2Cv2BvrhV9c/wVBYz/pZAs=)
                          2: 323830343a386563383a3a2f33322d3438203d3e203631363136.roa (hash: p/gO23KP2b0O7OP3/L8MC9xUQzxxXrB/1E15wkUFWFU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl
                          rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 00:36:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e2:b5:12:5f:05:58:cf:15:70:17:07:d3:89:ff:ab:b7:8a:0a:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21
        Validity
            Not Before: Aug 23 22:38:26 2026 GMT
            Not After : Aug 25 00:36:26 2026 GMT
        Subject: CN=2D3231C5DEEBC94D91A7C2917DD7A85A770E4D80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:30:f2:55:fc:63:7f:83:26:41:d8:e3:ce:0a:
                    25:40:67:76:04:0f:db:d2:48:2f:b4:f7:c2:92:d0:
                    72:be:1e:9d:2f:c3:d7:f1:97:5b:6f:f2:f7:8b:64:
                    50:a5:a6:f3:54:99:1e:e7:d4:7a:7d:3d:8a:de:e9:
                    1f:7c:bd:0e:19:44:73:05:36:e6:7b:94:2a:13:34:
                    83:44:2e:18:4e:1c:73:e5:c6:15:75:a9:22:68:c1:
                    93:82:a1:e0:39:94:cb:76:aa:c8:8b:fd:d1:1e:ba:
                    74:25:44:0b:7a:33:e6:50:43:47:3d:cd:d3:a5:77:
                    80:2d:44:9e:3e:df:b3:d4:19:79:58:a0:06:a4:28:
                    37:f2:e5:48:61:c0:fc:98:0b:3e:9e:e6:f6:e8:08:
                    ca:66:d5:2c:ac:41:89:a4:99:6b:83:13:45:3c:97:
                    2d:41:6b:64:66:0a:af:c4:90:92:29:88:36:6b:e3:
                    11:1a:51:c9:d0:b6:ca:2a:23:cf:3f:8c:24:f2:ec:
                    8f:90:74:90:2f:5b:b8:b8:ab:3a:c1:2d:a4:12:72:
                    e8:f9:5f:96:b7:57:45:83:4c:6c:bd:44:af:23:d4:
                    4c:9b:41:f8:7b:75:e0:d6:74:ea:2f:0d:96:71:28:
                    b3:30:75:ed:d1:24:93:3c:7a:de:fc:44:a9:23:fe:
                    7d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:32:31:C5:DE:EB:C9:4D:91:A7:C2:91:7D:D7:A8:5A:77:0E:4D:80
            X509v3 Authority Key Identifier:
                keyid:36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:fc:7b:5a:31:36:5b:37:e3:61:f6:66:37:fe:91:b3:65:08:
         4f:d5:1b:4b:58:71:28:2a:07:65:21:17:19:70:5a:43:ae:34:
         c1:a6:2f:d3:4e:bf:27:85:9a:d3:25:7a:77:ac:83:44:fb:43:
         c3:da:3a:b0:b3:f6:02:88:b6:c1:2d:5d:7e:52:a4:69:36:c4:
         57:de:05:18:d6:9d:b9:78:28:8a:09:59:b7:42:51:47:c8:26:
         27:b5:07:11:b5:0a:a3:08:36:c9:4e:46:72:ad:17:cb:a3:c3:
         9f:29:0b:7e:f3:d3:48:12:f0:02:6c:3a:ea:1a:4d:df:00:87:
         07:ec:24:1c:e8:11:62:2a:55:2b:fd:56:e5:19:9e:97:69:f9:
         47:2d:2c:0f:0d:a4:2d:03:ea:47:8c:1e:46:78:56:3f:21:62:
         76:87:9d:18:f2:46:74:91:63:cf:c1:f7:d4:0c:ba:f8:54:7f:
         ac:3c:dc:44:40:0e:d1:80:5b:75:0c:01:1a:69:38:5a:02:17:
         28:82:08:b1:fb:0f:23:e6:c2:cc:ea:c4:44:cd:a2:96:0d:99:
         c0:29:a0:a9:de:f8:cd:49:2b:18:b4:09:37:c4:1b:05:e2:d2:
         35:21:75:c1:50:77:74:c2:11:af:5f:df:e8:b2:08:4e:64:87:
         26:4b:27:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 05:44:34 2026 by rpki-client