Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft
File:                     328938F6B87D58141D853FA04B61F2EC68371E43.mft (raw, json)
Hash identifier:          MvbOkaqz5TyLBzmCSPOM8qXJsHYQqvPS7LEoSrxGzyU=
Subject key identifier:   67:78:34:B8:4D:48:27:23:9C:93:DF:2B:77:9B:7E:40:49:CC:03:A0
Authority key identifier: 32:89:38:F6:B8:7D:58:14:1D:85:3F:A0:4B:61:F2:EC:68:37:1E:43
Certificate issuer:       /CN=328938F6B87D58141D853FA04B61F2EC68371E43
Certificate serial:       0AB69A7BB14236BF104BE1F48724488627C33EB8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft
Manifest number:          0455
Signing time:             Wed 08 Apr 2026 15:10:58 +0000
Manifest this update:     Wed 08 Apr 2026 15:05:58 +0000
Manifest next update:     Thu 09 Apr 2026 18:42:58 +0000
Files and hashes:         1: 323830343a383333633a3a2f33322d3332203d3e20323732313835.roa (hash: ayKHkoUaXDc+dlhSGRGyDF6TYdoTV7sf4lmoMEMC7N4=)
                          2: 328938F6B87D58141D853FA04B61F2EC68371E43.crl (hash: Z3NM2Wld2cqPOCkHJTmlw4REKz9ar99BgpLUQOkjgwY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.crl
                          rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 18:42:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b6:9a:7b:b1:42:36:bf:10:4b:e1:f4:87:24:48:86:27:c3:3e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328938F6B87D58141D853FA04B61F2EC68371E43
        Validity
            Not Before: Apr  8 15:05:58 2026 GMT
            Not After : Apr  9 18:42:58 2026 GMT
        Subject: CN=677834B84D4827239C93DF2B779B7E4049CC03A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1f:a8:c3:f7:8a:97:ee:b7:78:18:7d:4c:49:
                    89:34:99:b1:c1:b7:c6:48:50:ea:2d:e1:06:3f:a3:
                    f5:bb:2e:92:41:45:82:ab:20:cc:85:00:47:2e:ea:
                    b7:8b:0a:2e:7c:6a:a6:39:ba:27:75:76:db:94:31:
                    61:11:7a:bb:17:75:42:1f:57:12:25:f4:d1:d3:25:
                    4b:7c:4a:02:4a:c9:63:4e:91:99:bf:59:d0:bc:2c:
                    26:e3:7a:b7:e9:80:47:a1:ea:1a:d5:06:6e:39:95:
                    f7:15:c9:2e:f1:43:a7:ea:f5:9c:fb:97:44:7e:5a:
                    61:5f:cf:9c:02:36:9a:0c:37:ce:8d:19:25:79:eb:
                    75:25:55:8a:61:7d:0c:8a:c5:34:09:7b:88:d2:71:
                    d5:4d:84:cf:47:4e:93:a4:49:96:7c:ba:53:28:f8:
                    c2:20:37:98:7d:7f:8a:d8:ee:cb:f4:17:f4:6d:a8:
                    b6:6e:81:83:4e:ca:18:d3:08:ac:b3:43:04:14:7f:
                    be:52:14:1c:65:b3:a9:1f:11:8c:3a:06:92:e0:ef:
                    66:cf:bb:9e:bf:41:3b:e5:7e:ab:ea:4e:d0:a7:a0:
                    49:f5:6f:d7:90:e8:38:02:e0:72:35:2b:c8:07:3c:
                    03:68:7c:a1:2b:43:f8:ba:e9:35:54:11:71:fd:e2:
                    c9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:78:34:B8:4D:48:27:23:9C:93:DF:2B:77:9B:7E:40:49:CC:03:A0
            X509v3 Authority Key Identifier:
                keyid:32:89:38:F6:B8:7D:58:14:1D:85:3F:A0:4B:61:F2:EC:68:37:1E:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:fc:9b:2b:5b:b4:32:d5:d4:45:51:3a:ae:47:80:dd:9e:75:
         23:dd:d0:fc:6e:1f:6a:90:d7:b7:9a:b5:7b:4e:e3:03:01:f9:
         35:17:b3:4f:33:2b:45:02:45:c0:a1:18:82:c9:6b:4a:d4:2a:
         6a:66:dc:e4:2f:4b:78:de:06:e0:40:66:c7:45:b7:3e:c6:ef:
         f9:73:b2:5c:e4:c1:06:78:1a:d1:71:0e:b2:8c:49:4f:f6:81:
         64:40:b2:7d:57:fa:15:ce:39:b1:3d:45:fe:1b:1e:63:50:01:
         00:fe:03:92:fe:c1:18:8b:f6:35:10:64:94:2b:19:3a:a9:89:
         15:12:50:22:b1:23:b3:fc:e8:92:df:f6:46:03:18:18:0d:b7:
         fb:2f:18:c1:44:f9:73:c2:68:6b:8f:b6:8c:ba:f7:77:11:85:
         a4:c6:8d:44:91:0a:9e:76:2d:19:94:da:59:b7:74:67:73:ee:
         55:e0:e3:d5:f5:be:b9:9d:e9:3d:36:0a:6b:92:93:73:98:ee:
         dc:8b:a6:16:95:17:83:83:1c:b7:40:ce:db:53:4a:5d:ef:5c:
         10:5e:07:b6:9e:50:f2:7d:1d:a9:92:7a:db:38:d0:1a:3e:08:
         31:1c:e3:41:25:26:2c:49:08:09:ae:27:6c:17:59:11:54:85:
         a1:54:a8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 20:22:34 2026 by rpki-client