Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.mft
File:                     E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.mft (raw, json)
Hash identifier:          RKhK/HdukaNaLrWIWuYCRc1aAu4IJGdD88ee813QyDI=
Subject key identifier:   40:DD:EC:DD:E2:5C:52:9B:A3:51:E3:1E:90:71:A6:F0:7E:2A:23:09
Authority key identifier: E3:20:B3:45:4E:EB:8E:41:FD:31:C7:73:CF:83:B3:C7:CE:EA:33:52
Certificate issuer:       /CN=E320B3454EEB8E41FD31C773CF83B3C7CEEA3352
Certificate serial:       4C1232934CAC08A06428CBED2E80B31FFCF46264
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.mft
Manifest number:          03D2
Signing time:             Wed 08 Apr 2026 10:02:11 +0000
Manifest this update:     Wed 08 Apr 2026 09:57:11 +0000
Manifest next update:     Thu 09 Apr 2026 13:04:11 +0000
Files and hashes:         1: E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.crl (hash: h7qZV9i+MyZV3mdoSL2BRnoTa7xJIDRfYlSSk5KP78Q=)
                          2: 3138392e33362e3235322e302f32322d3234203d3e20323730373936.roa (hash: H6oW+Vcv51WGvH0NP1FCbXWPuLpIMcM0eHju8Hys6bg=)
                          3: 323830343a373138633a3a2f33322d3438203d3e20323730373936.roa (hash: QWiBn+J61+huDRQxZNeXPGAMiRV6na0TLDTMG2kx3NI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.crl
                          rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 13:04:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:12:32:93:4c:ac:08:a0:64:28:cb:ed:2e:80:b3:1f:fc:f4:62:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E320B3454EEB8E41FD31C773CF83B3C7CEEA3352
        Validity
            Not Before: Apr  8 09:57:11 2026 GMT
            Not After : Apr  9 13:04:11 2026 GMT
        Subject: CN=40DDECDDE25C529BA351E31E9071A6F07E2A2309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:93:a6:b1:86:1c:50:be:f4:65:51:19:f9:a4:
                    c4:91:45:10:c8:e4:55:6a:51:cc:33:b3:f3:49:50:
                    0a:3f:cd:eb:4f:1e:c3:03:68:19:a0:97:73:de:ae:
                    c3:20:ef:ee:60:ae:77:57:f8:97:e6:82:1c:46:27:
                    bc:78:94:f0:32:0f:9f:11:e0:08:cd:0e:4a:c8:54:
                    3d:27:19:6b:5c:ae:26:73:11:d6:cc:93:80:13:52:
                    8a:e9:47:31:ab:7d:7e:f5:36:e4:7d:1f:1a:49:34:
                    b7:ce:d1:7d:90:80:5a:5b:f1:62:1a:5b:ea:cd:8d:
                    17:ba:78:8e:39:81:d0:eb:d8:34:86:a8:ef:26:e8:
                    46:44:79:6d:0c:f0:62:74:be:1b:bb:45:6a:4f:90:
                    84:99:64:5b:1c:9a:f4:67:d9:8a:ed:75:6c:06:ec:
                    3c:cb:36:7a:a0:16:c9:ce:40:63:2b:0e:4b:ad:61:
                    72:a1:28:ca:ca:fd:d9:20:87:f0:95:79:ad:11:0b:
                    39:0e:25:c9:08:09:9c:52:d9:90:0e:8f:2b:ea:aa:
                    3e:6d:18:d9:0f:7d:d2:af:ef:ff:ed:be:cd:e8:ad:
                    83:f1:9a:fa:2b:47:4c:21:46:d2:61:23:30:27:af:
                    56:75:e6:01:77:2c:bd:ef:88:c9:f5:58:da:b5:87:
                    44:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:DD:EC:DD:E2:5C:52:9B:A3:51:E3:1E:90:71:A6:F0:7E:2A:23:09
            X509v3 Authority Key Identifier:
                keyid:E3:20:B3:45:4E:EB:8E:41:FD:31:C7:73:CF:83:B3:C7:CE:EA:33:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ac:f2:bf:72:66:ae:ba:ca:cb:ed:5e:7c:15:9f:5c:c0:d2:
         8c:52:49:10:5f:8d:e6:86:fa:0e:b2:a0:62:20:29:26:dc:46:
         28:81:d6:b2:64:81:13:61:18:06:cf:0c:46:32:5d:90:45:71:
         be:de:f8:87:d7:9f:d9:52:e5:8e:ac:c4:8c:c2:39:1e:73:39:
         c8:b2:09:5f:39:01:c3:73:49:2e:c3:e7:a4:9d:56:86:1f:e3:
         0a:73:c2:b2:74:90:29:fb:e3:db:65:72:e6:8c:ca:99:4b:5e:
         22:3a:b0:da:8e:fb:71:81:70:28:f9:f9:1c:bd:e2:3c:e1:3d:
         94:4b:b1:89:e5:bc:c8:64:04:af:4a:08:5a:88:d5:e6:df:af:
         07:04:ea:24:2b:46:3d:fa:63:88:b7:ac:dd:3f:48:87:c6:06:
         5f:09:35:11:82:be:2b:ba:d0:65:d5:0e:32:ee:3c:cc:ec:28:
         73:17:a7:5b:53:f9:1b:7c:2c:48:fe:d3:97:9d:d4:ab:07:f1:
         f2:6e:52:02:fb:f9:cb:87:93:61:1a:9b:e9:5b:af:b3:fc:20:
         bf:20:8a:e3:24:af:10:69:02:c3:3a:36:b7:2f:68:5e:02:fa:
         68:6b:de:35:cb:2b:a9:09:cc:bb:97:4f:1f:08:a9:f3:e9:6b:
         1c:44:56:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 16:41:25 2026 by rpki-client