Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/17EB30B76453A59284D8D6EA4F7B41F417B731D6.mft
File:                     17EB30B76453A59284D8D6EA4F7B41F417B731D6.mft (raw, json)
Hash identifier:          /BReFzEy+Nk46GMqjuPQ+d69IQCSvQV+hhdK77AariI=
Subject key identifier:   F5:22:68:F5:C3:CF:C3:50:7C:33:B3:11:5F:91:D2:E2:F3:AB:97:38
Authority key identifier: 17:EB:30:B7:64:53:A5:92:84:D8:D6:EA:4F:7B:41:F4:17:B7:31:D6
Certificate issuer:       /CN=17EB30B76453A59284D8D6EA4F7B41F417B731D6
Certificate serial:       252986ED802D63267F2C72011BBEB6441FB4FBFC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17EB30B76453A59284D8D6EA4F7B41F417B731D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/17EB30B76453A59284D8D6EA4F7B41F417B731D6.mft
Manifest number:          5D
Signing time:             Tue 07 Apr 2026 15:22:46 +0000
Manifest this update:     Tue 07 Apr 2026 15:17:46 +0000
Manifest next update:     Wed 08 Apr 2026 19:00:46 +0000
Files and hashes:         1: 323830343a366264343a3a2f33322d3438203d3e20323730343238.roa (hash: KXL+NXMSX2UV060pn430hidyhrgMddKQonZMe8oNs3w=)
                          2: 3139302e3131312e3138342e302f32322d3234203d3e20323730343238.roa (hash: pEEAFEVDKuFJPSLtt7Te/PPx3JWLDC+bv+e4KxDNfWg=)
                          3: 17EB30B76453A59284D8D6EA4F7B41F417B731D6.crl (hash: s6Uya7y38Vsszo4RhFQTma+q79OlzlKpO6sHOM3XJ08=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/17EB30B76453A59284D8D6EA4F7B41F417B731D6.crl
                          rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/17EB30B76453A59284D8D6EA4F7B41F417B731D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17EB30B76453A59284D8D6EA4F7B41F417B731D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 19:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:29:86:ed:80:2d:63:26:7f:2c:72:01:1b:be:b6:44:1f:b4:fb:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17EB30B76453A59284D8D6EA4F7B41F417B731D6
        Validity
            Not Before: Apr  7 15:17:46 2026 GMT
            Not After : Apr  8 19:00:46 2026 GMT
        Subject: CN=F52268F5C3CFC3507C33B3115F91D2E2F3AB9738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cf:43:8f:be:03:7d:4b:38:c9:1d:a5:f3:f2:
                    58:c0:81:d7:c6:a1:1a:cc:89:90:b7:2f:80:f5:be:
                    f4:d6:0d:bc:8c:b2:62:52:8f:d8:19:52:b1:cb:01:
                    a1:b2:c8:5b:f3:8f:08:08:c0:57:34:d4:47:84:af:
                    09:6c:4c:57:cb:95:ca:90:2e:b8:fc:90:9f:dc:f0:
                    39:be:ce:06:b1:f7:cf:1d:60:3c:49:ba:b5:ff:c0:
                    18:c1:dd:bf:27:cc:31:17:82:a1:67:6c:a2:25:78:
                    e8:02:66:49:5a:a1:4a:34:ff:9c:d2:11:de:79:e6:
                    ab:26:c4:42:75:af:e9:3c:c1:74:dc:0d:2e:6e:29:
                    11:6c:41:42:b8:61:4f:9b:e9:3b:49:19:ae:bc:6a:
                    1c:8f:71:a0:de:d5:5b:44:22:30:1a:50:17:c0:7a:
                    1f:c5:09:e2:22:b8:03:e4:54:93:e4:90:fe:6c:f7:
                    04:4d:de:b9:77:63:78:97:35:ae:bf:30:57:1e:e8:
                    28:60:e8:4b:3f:5b:45:ec:15:95:d9:ff:03:77:75:
                    6c:7b:ef:13:a0:df:71:cf:99:ab:cb:2f:d4:d5:b2:
                    26:db:af:dc:98:a0:f7:a0:6e:62:c4:8a:eb:a9:a8:
                    2f:d6:16:73:79:f2:13:81:c8:14:ba:1c:4c:1e:97:
                    0a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:22:68:F5:C3:CF:C3:50:7C:33:B3:11:5F:91:D2:E2:F3:AB:97:38
            X509v3 Authority Key Identifier:
                keyid:17:EB:30:B7:64:53:A5:92:84:D8:D6:EA:4F:7B:41:F4:17:B7:31:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/17EB30B76453A59284D8D6EA4F7B41F417B731D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17EB30B76453A59284D8D6EA4F7B41F417B731D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/17EB30B76453A59284D8D6EA4F7B41F417B731D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:14:27:83:17:00:e3:a5:0d:43:22:e8:18:6a:f8:3c:6e:5f:
         91:7a:55:d5:16:0d:b3:18:68:4d:9f:4b:b3:57:cf:f7:e8:83:
         6a:20:a6:db:d2:66:39:aa:60:bf:ae:22:c3:83:02:f9:97:40:
         7b:5d:c5:53:1c:ee:89:cb:27:6d:f7:80:01:dd:ba:f9:3a:e9:
         07:94:1d:77:a6:9d:78:55:28:01:a5:03:6d:15:f9:24:d3:2b:
         53:c8:fd:31:00:2f:04:09:95:1f:af:c2:6f:92:06:ff:cb:58:
         0b:8e:3d:aa:f8:3a:a5:7c:bf:37:d8:e1:9d:5f:46:01:1a:de:
         88:d0:e3:14:45:ad:7a:42:1e:db:ea:89:10:9c:4e:4f:0e:fe:
         40:34:89:86:7a:7b:60:6e:85:3c:31:39:2a:48:da:a8:9c:bf:
         6c:bf:d7:4a:36:1b:24:d9:4e:3a:b8:3a:1d:d0:dc:e4:b5:87:
         cc:66:51:89:44:e8:3c:0b:d0:d0:5b:e1:4c:6e:f4:40:7a:ac:
         5d:22:b0:bb:41:b5:9a:b7:34:62:30:70:e2:6c:ee:98:a7:48:
         b5:a6:f1:29:d6:a9:ff:0e:27:57:fd:ec:e2:2d:ef:1b:bf:b0:
         90:02:0a:a0:82:43:6a:01:b0:c7:cf:13:66:56:62:af:ec:19:
         aa:77:22:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 08:08:43 2026 by rpki-client