Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.mft
File:                     68048497B89FF318156BA3D021C73EDE420ED5C8.mft (raw, json)
Hash identifier:          auPM84CG6BBIJynCBOaW0tfjgjfWStJCpRgzlJtMK+4=
Subject key identifier:   DD:D9:9A:5A:3F:04:E4:17:9C:1E:98:1D:B3:76:40:F5:2D:69:68:0D
Authority key identifier: 68:04:84:97:B8:9F:F3:18:15:6B:A3:D0:21:C7:3E:DE:42:0E:D5:C8
Certificate issuer:       /CN=68048497B89FF318156BA3D021C73EDE420ED5C8
Certificate serial:       6E0D9CA3BBE5A29C7450E41CC31A444D50749576
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.mft
Manifest number:          03D5
Signing time:             Tue 07 Apr 2026 21:58:17 +0000
Manifest this update:     Tue 07 Apr 2026 21:53:17 +0000
Manifest next update:     Thu 09 Apr 2026 00:39:17 +0000
Files and hashes:         1: 34352e3136302e3136342e302f32322d3232203d3e20323638343132.roa (hash: macc/bQdxqIFgzDSh/Q9eu2I8lmX4K0sFlyBw4h9f/E=)
                          2: 34352e3136302e3136372e302f32342d3234203d3e20323638343132.roa (hash: zaUE+dBbqEytXlX/u1CRrW05GLYt5Jnsij/wqHI/1XU=)
                          3: 34352e3136302e3136342e302f32342d3234203d3e20323638343132.roa (hash: k4q98Cmei/gss2jmuW25s8F0B+kYllJSjoZOSwCD17E=)
                          4: 68048497B89FF318156BA3D021C73EDE420ED5C8.crl (hash: O0xveeS8g+Bt7KAvualeQk6sCU/wUX+J+GKWy3lwN94=)
                          5: 34352e3136302e3136362e302f32342d3234203d3e20323638343132.roa (hash: /WQAiQw9WX90TnbU02CuVqRrzCxS8Mrfzi4DRmfyTqI=)
                          6: 323830343a353064303a3a2f33322d313238203d3e20323638343132.roa (hash: qwoTGO1n+2SF7mAWQOD8wBGW9idZI5GNjVtlXY67QVk=)
                          7: 34352e3136302e3136352e302f32342d3234203d3e20323638343132.roa (hash: ksnTh12B/em1ls8I475st8G9xevAgKV8u567pG+26/M=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.crl
                          rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 00:39:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:0d:9c:a3:bb:e5:a2:9c:74:50:e4:1c:c3:1a:44:4d:50:74:95:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68048497B89FF318156BA3D021C73EDE420ED5C8
        Validity
            Not Before: Apr  7 21:53:17 2026 GMT
            Not After : Apr  9 00:39:17 2026 GMT
        Subject: CN=DDD99A5A3F04E4179C1E981DB37640F52D69680D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a7:a6:3c:2a:2c:86:5f:ae:35:f6:0b:c8:1b:
                    95:0d:56:54:2b:0a:0f:14:48:d9:0d:96:e2:ea:52:
                    9f:3b:e3:46:ef:2f:9d:5d:67:85:86:69:07:68:ba:
                    c9:9f:7f:b0:14:3e:9b:0f:c9:ed:10:aa:af:36:0c:
                    a6:2a:e9:59:02:29:d6:58:2f:16:7b:3e:41:cc:da:
                    b8:5d:fb:67:3d:a1:ef:cf:e1:ce:57:f2:b3:b9:be:
                    5e:3c:2e:73:48:3a:d3:fc:98:a0:1d:5f:0b:1c:0a:
                    03:a2:e0:a4:9c:bd:8e:76:d4:27:97:54:b2:f1:80:
                    33:14:69:bf:4c:e4:5c:cb:42:28:98:d0:69:0c:05:
                    ee:35:e2:e9:d1:7c:52:62:4a:ac:52:2c:50:53:7c:
                    c4:ab:31:6b:43:85:e5:20:84:73:51:e5:6d:ff:ae:
                    d5:f0:60:5f:74:6d:25:58:7a:57:4e:dd:5c:33:48:
                    c7:e6:e5:2f:ba:e7:c5:dc:c1:7a:85:38:2c:f0:32:
                    98:6d:04:57:29:e4:72:ab:88:5a:b9:77:86:49:b3:
                    7e:a5:40:fc:15:18:f9:b3:1d:24:b2:e3:0d:36:5b:
                    3d:ef:03:8f:3b:92:6d:a2:83:ef:c6:6a:12:96:4b:
                    6a:ed:ab:0f:9d:c3:dd:33:a2:79:48:89:28:aa:77:
                    c6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D9:9A:5A:3F:04:E4:17:9C:1E:98:1D:B3:76:40:F5:2D:69:68:0D
            X509v3 Authority Key Identifier:
                keyid:68:04:84:97:B8:9F:F3:18:15:6B:A3:D0:21:C7:3E:DE:42:0E:D5:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:a5:6f:54:a4:71:da:9b:40:2a:7c:46:c9:11:cb:d2:77:8c:
         b6:61:b3:1f:43:c3:ad:f9:e5:e0:90:84:c3:29:58:15:10:08:
         bc:16:0a:ea:d4:fd:25:c3:b1:5b:d0:68:eb:45:ff:1e:56:83:
         14:91:21:29:c4:ee:39:c9:9e:1b:4a:50:7a:33:d0:69:3c:51:
         02:86:d3:9a:49:d4:30:41:bf:f1:b3:61:b7:34:26:6f:a2:05:
         f4:a0:78:af:91:69:4a:13:bc:46:06:5f:e9:8b:42:ef:d3:d1:
         55:d1:b8:c3:c9:34:a1:fc:00:2b:82:51:d6:7a:f8:d2:62:f5:
         0b:62:63:eb:60:78:59:cb:77:b6:81:c2:fc:4b:f1:b0:96:79:
         d4:1b:7e:3c:ab:cc:47:99:da:12:9d:32:14:8d:37:11:f0:9b:
         69:16:c1:5e:dc:d2:45:83:63:fc:40:3d:1a:77:8f:0b:82:f0:
         33:f9:95:f6:7d:3d:b7:7b:e4:7c:22:79:dd:21:2a:02:8a:b3:
         d5:4e:a1:75:74:97:41:bd:f7:c4:0a:10:03:f9:90:8c:40:ee:
         e9:89:2f:22:57:d8:92:6b:4d:70:a7:4d:26:8e:af:54:ad:f8:
         d0:3c:ec:41:16:35:42:f0:61:54:45:4a:a0:3e:fd:5c:ef:e3:
         13:f0:05:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 16:02:29 2026 by rpki-client