Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/87C1515490FE85BF094B1C0E37BBEFC5F1D1CA3E.mft
File:                     87C1515490FE85BF094B1C0E37BBEFC5F1D1CA3E.mft (raw, json)
Hash identifier:          KL8nkRWFZwqbqWg2ORmWNS4Qj+e9qX+3vrE8rF1dRuk=
Subject key identifier:   EF:64:D5:BA:32:C7:2B:4A:BF:51:A1:BA:1F:96:4B:62:0F:F7:E0:9F
Authority key identifier: 87:C1:51:54:90:FE:85:BF:09:4B:1C:0E:37:BB:EF:C5:F1:D1:CA:3E
Certificate issuer:       /CN=87C1515490FE85BF094B1C0E37BBEFC5F1D1CA3E
Certificate serial:       59155C48E43D026869B82FF3211FB0EB80FE5316
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87C1515490FE85BF094B1C0E37BBEFC5F1D1CA3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/87C1515490FE85BF094B1C0E37BBEFC5F1D1CA3E.mft
Manifest number:          1D
Signing time:             Wed 08 Apr 2026 06:48:36 +0000
Manifest this update:     Wed 08 Apr 2026 06:43:36 +0000
Manifest next update:     Thu 09 Apr 2026 06:59:36 +0000
Files and hashes:         1: 323830343a363932633a3a2f33322d313238203d3e20323730323533.roa (hash: LboIQz0zi/k4IskB/yP2xlFTukJ6CKhUQLct7famIfY=)
                          2: 87C1515490FE85BF094B1C0E37BBEFC5F1D1CA3E.crl (hash: M1ExzT5Y6FRaWJK4Dt2n8kxffp4EGuoT6aF0zwCQOjM=)
                          3: 3230302e3131302e3230342e302f32322d3332203d3e20323730323533.roa (hash: gUDI3nSBdU4gc5uMAM5FcaonB1BYPZEs1KCxwYAH0X8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/87C1515490FE85BF094B1C0E37BBEFC5F1D1CA3E.crl
                          rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/87C1515490FE85BF094B1C0E37BBEFC5F1D1CA3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87C1515490FE85BF094B1C0E37BBEFC5F1D1CA3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 06:59:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:15:5c:48:e4:3d:02:68:69:b8:2f:f3:21:1f:b0:eb:80:fe:53:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87C1515490FE85BF094B1C0E37BBEFC5F1D1CA3E
        Validity
            Not Before: Apr  8 06:43:36 2026 GMT
            Not After : Apr  9 06:59:36 2026 GMT
        Subject: CN=EF64D5BA32C72B4ABF51A1BA1F964B620FF7E09F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0f:74:07:6c:cb:2b:9d:6b:f4:75:34:36:b2:
                    67:1b:81:04:c3:36:ff:d2:02:97:8b:50:54:f7:ef:
                    8a:17:69:3d:4f:39:c3:a3:c3:7d:d4:76:58:41:f8:
                    f8:a5:ed:4a:b1:0c:3e:97:e9:20:46:51:f5:77:c8:
                    ee:0c:e5:6f:45:f1:a0:bf:15:84:ed:55:84:be:ab:
                    a2:d8:72:b6:40:5f:c1:9e:8c:24:89:08:93:07:1b:
                    53:9c:16:c6:08:dc:8f:88:a5:3a:68:db:e1:89:ca:
                    c9:67:9c:b8:7e:db:00:ab:6f:ac:3c:41:db:d7:a4:
                    43:f8:75:56:63:24:84:f1:a4:71:85:bb:08:56:9c:
                    a7:6b:fb:2c:2f:ad:12:9a:7c:e4:bf:63:c5:bb:ea:
                    3e:08:b1:00:4f:48:28:41:b5:c6:9c:13:25:09:98:
                    60:de:a4:32:80:d7:95:45:6a:bd:c6:c3:af:a0:50:
                    b1:1b:3c:f4:13:24:ae:1d:23:43:0a:df:cb:0f:5b:
                    3a:96:52:e4:99:6d:46:4e:35:6b:4e:3b:57:6a:73:
                    e7:0f:dd:a4:5b:9f:90:d8:e8:a4:dd:23:95:55:3f:
                    77:aa:f8:01:34:7a:c6:f8:42:34:b8:92:31:12:07:
                    f2:07:e7:d0:ac:4a:5e:ff:6b:4d:bf:cc:21:ed:96:
                    ae:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:64:D5:BA:32:C7:2B:4A:BF:51:A1:BA:1F:96:4B:62:0F:F7:E0:9F
            X509v3 Authority Key Identifier:
                keyid:87:C1:51:54:90:FE:85:BF:09:4B:1C:0E:37:BB:EF:C5:F1:D1:CA:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/87C1515490FE85BF094B1C0E37BBEFC5F1D1CA3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87C1515490FE85BF094B1C0E37BBEFC5F1D1CA3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/87C1515490FE85BF094B1C0E37BBEFC5F1D1CA3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:1b:09:1b:94:17:69:a3:32:a6:d5:4f:d9:ef:58:7b:07:49:
         83:1c:45:fb:4d:8d:4c:3d:3a:70:1a:49:26:89:d0:63:e2:63:
         d3:47:0e:67:53:cb:b8:a6:d7:76:60:aa:f3:e5:77:34:7d:6f:
         21:52:2a:d4:b9:d6:69:16:ec:4f:18:4e:f3:90:0f:21:0d:4c:
         6c:3e:1a:75:df:ae:2d:2c:6c:96:9d:ab:c9:e0:77:49:2d:38:
         43:4e:e8:78:d7:8e:16:08:36:bf:ac:bf:64:db:62:33:25:97:
         5a:24:10:86:0b:c6:d5:ae:b0:de:65:fe:7b:82:1e:b5:77:08:
         d0:ae:e3:8e:5f:a3:6b:f7:c6:08:13:8d:36:c1:dc:79:7d:01:
         18:48:8a:4f:ff:33:58:b7:13:86:f9:b6:e0:3c:58:6b:79:1d:
         9b:04:29:0e:38:ec:06:4e:2e:64:bb:b2:b4:b8:a8:a8:bd:37:
         b5:90:93:fa:5b:8a:7d:e8:18:79:2a:0f:8e:b1:f0:23:37:89:
         95:86:c1:1d:60:72:9e:d0:d1:37:b9:b6:2d:5e:a2:72:9f:32:
         b0:87:5c:5b:6b:30:8f:41:73:be:1e:32:d7:b6:4d:18:fb:80:
         d8:4b:da:ca:58:c3:c7:a7:d1:82:8f:92:8d:72:36:dc:90:c2:
         36:06:61:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 17:45:23 2026 by rpki-client