Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.mft
File:                     2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.mft (raw, json)
Hash identifier:          Dt93ycf5Qr9paJhZXRFeSsXUP1Q0TQECaeAYCeCSnhE=
Subject key identifier:   56:AA:B2:1B:AE:D3:1C:8E:7E:47:EB:64:FE:5A:EF:6B:97:37:28:8E
Authority key identifier: 2F:3F:BF:ED:E6:76:3E:24:DD:D2:C3:A4:B9:E6:E5:AA:9E:45:3B:D0
Certificate issuer:       /CN=2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0
Certificate serial:       1A56D6E7B29C754E97ADE94E1B36B18FFE5BAB27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.mft
Manifest number:          0E
Signing time:             Wed 08 Apr 2026 14:05:11 +0000
Manifest this update:     Wed 08 Apr 2026 14:00:11 +0000
Manifest next update:     Thu 09 Apr 2026 15:57:11 +0000
Files and hashes:         1: E3BB93A402B2B2BD1B9E973D86B1B49828AF2F3F.cer (hash: AsmJqTOXBdy0axSnVZY+BIxJt9nV7s4rmgKtaIBo6+k=)
                          2: 2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.crl (hash: D57W0ceMNaD8kg99y4ZKSI2MS2p65iyJp63ij32bUCk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.crl
                          rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 15:57:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:56:d6:e7:b2:9c:75:4e:97:ad:e9:4e:1b:36:b1:8f:fe:5b:ab:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0
        Validity
            Not Before: Apr  8 14:00:11 2026 GMT
            Not After : Apr  9 15:57:11 2026 GMT
        Subject: CN=56AAB21BAED31C8E7E47EB64FE5AEF6B9737288E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:25:67:40:e2:48:fb:be:bb:96:52:a9:9d:82:
                    e1:f7:02:83:5f:0c:3e:4a:4a:0a:a2:7f:19:d2:71:
                    5c:f7:82:5c:eb:56:1a:b0:6a:4a:e3:57:34:82:6e:
                    a4:43:b9:26:0b:d5:2a:39:25:49:7c:3e:2c:55:ae:
                    a7:1d:4c:df:b4:94:4f:89:56:67:8f:be:a7:0e:1b:
                    d0:f4:d6:68:c4:a0:38:52:ad:e6:e7:ca:2d:2f:a7:
                    a5:42:01:5e:00:91:d7:81:91:d2:b5:fe:90:99:3e:
                    d5:18:ff:40:69:c5:54:a4:db:d2:2e:9c:df:96:b6:
                    5d:e6:6e:99:2c:ef:29:2d:b1:6c:88:6d:88:61:45:
                    5c:6e:74:3f:38:78:77:2b:7c:0f:0e:cd:7c:54:75:
                    d5:a5:35:41:d5:11:0c:1a:e4:3e:62:1a:08:3d:6f:
                    fb:7d:bd:58:ea:83:91:58:26:10:ae:5d:b6:19:3a:
                    ef:ce:04:8a:f1:55:44:38:6d:d5:c9:57:a7:f5:78:
                    c6:7f:e6:a9:ab:30:c7:00:07:1b:8b:4f:91:41:a0:
                    75:36:36:37:3a:cf:74:cb:76:9b:d9:ac:fb:7a:8d:
                    78:d9:f6:fe:14:02:5f:2c:a9:15:0f:72:a3:8c:82:
                    71:27:fb:60:87:6f:fb:d3:a0:e4:3d:3f:1f:38:ea:
                    ee:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AA:B2:1B:AE:D3:1C:8E:7E:47:EB:64:FE:5A:EF:6B:97:37:28:8E
            X509v3 Authority Key Identifier:
                keyid:2F:3F:BF:ED:E6:76:3E:24:DD:D2:C3:A4:B9:E6:E5:AA:9E:45:3B:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:c5:1a:19:68:c7:dc:42:50:c7:01:3c:36:37:c1:f6:c2:15:
         a3:6a:e4:46:5f:20:98:b9:31:a1:ac:77:9b:ee:bb:66:d4:92:
         d0:c4:22:c8:7a:c9:ec:a5:ad:fc:42:a5:15:b2:c6:bb:2d:71:
         17:35:36:bf:49:9e:4f:52:0a:a6:e6:b7:88:74:14:68:5a:8a:
         89:d5:b9:a0:f7:c6:d3:b4:9b:03:c8:5e:ea:7a:a8:84:1a:b6:
         67:b4:a6:71:b2:c4:c1:53:94:91:92:3a:0f:d9:1f:5d:68:c4:
         79:c4:68:ce:71:fb:f6:a2:d7:75:da:e9:5c:80:82:c0:47:8a:
         ca:68:e0:d6:d9:27:f9:a5:d5:b7:33:e9:98:50:c5:81:eb:d9:
         cd:fd:30:1c:ce:9f:63:66:66:d8:38:d5:36:da:94:d6:a5:2b:
         a0:27:e7:0d:98:fc:6d:2d:07:74:67:bb:32:c5:9c:67:26:cb:
         43:f4:e5:42:cd:86:82:bb:a3:9b:5b:de:1c:1f:60:b9:3c:5b:
         d6:8a:1c:58:b7:5c:60:c5:f8:9f:fb:30:ca:a9:49:22:21:7f:
         97:84:f3:1c:69:d2:49:79:e8:3f:72:a9:c2:17:c4:c1:0a:70:
         1d:3f:b5:be:42:1c:c6:a2:7a:88:a2:1b:af:f7:43:b2:4d:d4:
         53:17:80:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 21:17:45 2026 by rpki-client