Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft
File:                     2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft (raw, json)
Hash identifier:          xdFdn5mwkZi0bk1zlVV73+oxRfsH6ezSNepX5lHQMT0=
Subject key identifier:   F2:6D:88:76:FC:7C:D3:43:64:73:D0:3E:04:94:EB:50:64:98:EF:AA
Authority key identifier: 2C:22:7B:E6:DE:FB:4B:9E:B0:05:C0:AC:9F:C2:84:72:7A:42:4D:89
Certificate issuer:       /CN=2C227BE6DEFB4B9EB005C0AC9FC284727A424D89
Certificate serial:       253C66F00805B67C54F1A0F004FC808C7F8C99D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft
Manifest number:          036B
Signing time:             Tue 25 Aug 2026 17:07:52 +0000
Manifest this update:     Tue 25 Aug 2026 17:02:52 +0000
Manifest next update:     Wed 26 Aug 2026 19:05:52 +0000
Files and hashes:         1: 2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.crl (hash: vrMKOaQ7Ew96VLgObIkc/1EYnF5sIh8betxKXKB82MI=)
                          2: 323830343a393135343a3a2f33322d3438203d3e20323734363334.roa (hash: 5or+ffjF3ckLhryOsz3IIIYfCzvKN8SwjJrOnTxOTgw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.crl
                          rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 19:05:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:3c:66:f0:08:05:b6:7c:54:f1:a0:f0:04:fc:80:8c:7f:8c:99:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C227BE6DEFB4B9EB005C0AC9FC284727A424D89
        Validity
            Not Before: Aug 25 17:02:52 2026 GMT
            Not After : Aug 26 19:05:52 2026 GMT
        Subject: CN=F26D8876FC7CD3436473D03E0494EB506498EFAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9b:bd:52:54:c5:d1:db:76:ca:10:a0:2f:70:
                    16:c7:fa:da:a5:02:9e:91:e4:7c:ec:92:e2:8b:35:
                    58:9c:9a:aa:55:28:06:01:e5:d7:d7:71:f7:7c:8f:
                    63:7d:3f:cd:cc:7a:23:76:bb:36:7b:b4:ee:99:ba:
                    71:a1:fc:3b:99:db:a3:5d:a8:93:88:55:d2:59:fb:
                    e4:c6:af:0a:86:35:c7:9d:71:8d:a9:8f:90:8c:31:
                    05:80:72:9e:c0:c9:f0:45:86:95:43:6b:14:c3:a7:
                    41:e6:16:23:1e:d6:75:8d:38:11:27:60:5c:55:42:
                    48:aa:4d:b3:fc:f6:37:9b:06:36:e5:8f:ff:45:93:
                    52:45:39:89:07:88:19:72:5f:8f:25:7e:31:2e:50:
                    5c:7f:2b:a6:ff:73:6a:e6:34:c0:67:10:47:4a:18:
                    5f:47:a5:bf:f9:47:53:95:56:94:e0:e9:2b:1e:a1:
                    99:f6:31:2b:2c:31:00:cd:13:35:3c:8b:c6:a0:4b:
                    67:64:83:8e:93:71:96:e4:b9:60:b0:01:07:46:08:
                    1a:6d:47:93:52:48:c1:5b:39:2e:6b:f7:7a:5a:f5:
                    87:c9:8c:6f:1d:41:58:6b:32:ef:f7:01:ab:b6:be:
                    9a:5c:cd:b1:84:ed:16:d4:c7:08:07:e1:47:76:fa:
                    d5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6D:88:76:FC:7C:D3:43:64:73:D0:3E:04:94:EB:50:64:98:EF:AA
            X509v3 Authority Key Identifier:
                keyid:2C:22:7B:E6:DE:FB:4B:9E:B0:05:C0:AC:9F:C2:84:72:7A:42:4D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:bd:ce:fd:e6:11:c0:c7:b2:23:e0:5b:dd:0c:ae:79:3c:40:
         90:cb:8f:7d:4d:b7:44:5e:64:2f:64:42:b5:1e:e7:06:80:1e:
         d1:8a:f3:59:ae:34:e8:e8:8a:77:da:bd:41:e5:92:1d:88:b6:
         58:db:00:9d:72:83:69:67:cc:7c:bc:1c:ed:c0:c1:3d:59:bd:
         fa:9b:1f:54:94:1b:6c:c5:07:55:c6:3c:e3:93:8b:99:31:14:
         fa:68:4f:e0:f9:c6:c1:c1:bd:51:07:fc:04:0f:4c:92:34:48:
         48:94:6e:34:ad:2a:ca:8c:73:c2:53:bb:af:46:40:9c:48:c5:
         76:53:91:47:aa:c4:26:34:62:97:36:f6:57:5d:8e:30:aa:02:
         21:9f:79:31:0f:f3:45:28:cf:25:08:bc:88:c8:34:ed:8b:fb:
         5a:f6:56:0b:35:99:c8:2f:b1:76:4c:db:5a:86:3b:b8:7f:42:
         72:f7:4e:b1:25:87:53:38:7b:f4:f6:ac:51:eb:d6:a5:df:c8:
         69:cc:8c:c1:4e:39:7b:33:f5:96:b6:52:8f:a1:91:0f:d8:cf:
         5a:4b:9c:b6:2c:9b:b6:f0:59:b1:1c:a1:62:4d:1d:5a:a4:60:
         da:a4:f0:41:a4:4f:00:a1:87:08:3b:68:00:e3:3f:3e:7d:1e:
         8c:d9:2e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----