Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft
File:                     0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft (raw, json)
Hash identifier:          s+R/fLcnvGHt7WDVCOaTfUOAe9Z+T5MupxsuRuksLr8=
Subject key identifier:   CD:D1:80:3E:A3:D8:90:76:91:CB:1D:38:7B:52:A5:00:37:A4:DB:38
Authority key identifier: 0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96
Certificate issuer:       /CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
Certificate serial:       65E2576E879AEC1E2D4AA037262A2BAFFCE6EE86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft
Manifest number:          0406
Signing time:             Wed 08 Apr 2026 20:48:36 +0000
Manifest this update:     Wed 08 Apr 2026 20:43:36 +0000
Manifest next update:     Thu 09 Apr 2026 22:28:36 +0000
Files and hashes:         1: 3137302e37382e33312e302f32342d3234203d3e203532353837.roa (hash: GVb5ACoACo41NNBiKijTXhHtLaywGpWaqrMw6x6JqAQ=)
                          2: 3137302e37382e32382e302f32342d3234203d3e203532353837.roa (hash: fmyiRBx3ikOjVKsXkQ8cpvxr8wjsvyIXdzNlU8vv5+g=)
                          3: 3137372e38372e3230302e302f32322d3232203d3e203532353837.roa (hash: v/kBm1v+isP2XXTLmXnKuTp9Rqywg/NC0RFRzgAr/9E=)
                          4: 3137372e38372e3230322e302f32342d3234203d3e203532353837.roa (hash: qe9Jff+tGp27uj0Fv/r4SWJj8LOqDymfhQOPFTvPvVA=)
                          5: 3137372e38372e3230302e302f32342d3234203d3e203532353837.roa (hash: tlWD0HzHIhfkJclR0v8ssrdgm/1+o7U+hMuXSlvl9Pc=)
                          6: 323830343a386563303a3a2f33322d3332203d3e203532353837.roa (hash: wpL10v59H954g33BuOd7BGNKMuPnDKrZ2Zn/nnChX1U=)
                          7: 0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl (hash: D84tppj7gci7Kytms5GJMuqukRTU+UTxGDrTl/Fka34=)
                          8: 3137302e37382e32392e302f32342d3234203d3e203532353837.roa (hash: ZVRpjy5LyDeaPoHH9Yq0IsvVayvZvPCcq+8GiojQ0YU=)
                          9: 3137302e37382e32382e302f32322d3232203d3e203532353837.roa (hash: QkCov4dW4mV16qROCveAsn2j0+OUgF2BegrvBH0L1FA=)
                          10: 3137302e37382e33302e302f32342d3234203d3e203532353837.roa (hash: OQrPAaufm/IIA/ux/gBP/eRTC7wVuWaor0CIJhQqO0M=)
                          11: 3137372e38372e3230312e302f32342d3234203d3e203532353837.roa (hash: iEOJ+g7sC95DXUReWOJ5kvXlAdgnFQ55nizfxDdLPSg=)
                          12: 3137372e38372e3230332e302f32342d3234203d3e203532353837.roa (hash: IDaJJjIwRkalTiqK0J3wyePr87APf8T4eQ7uvcqZAhI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl
                          rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 22:28:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e2:57:6e:87:9a:ec:1e:2d:4a:a0:37:26:2a:2b:af:fc:e6:ee:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
        Validity
            Not Before: Apr  8 20:43:36 2026 GMT
            Not After : Apr  9 22:28:36 2026 GMT
        Subject: CN=CDD1803EA3D8907691CB1D387B52A50037A4DB38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f9:22:ba:55:9d:66:f5:d8:29:78:63:69:4d:
                    ee:0f:10:1a:2b:e6:3b:72:31:b2:c6:9d:6a:ae:d3:
                    9b:7d:3e:ab:45:6b:b6:17:f9:d4:61:97:98:8e:3f:
                    79:31:40:89:17:2d:ea:c3:01:63:66:14:90:fe:eb:
                    b0:59:5d:7e:61:7e:68:bf:0d:6b:98:ae:89:38:a3:
                    d7:8e:c0:b0:ba:d2:4c:88:3b:5f:df:7c:ec:43:c9:
                    e6:07:29:e8:c4:a2:ea:76:ee:aa:8d:72:36:c9:b6:
                    4a:81:f6:72:b7:24:59:1a:23:21:c6:26:a0:7c:b4:
                    c6:01:93:b2:98:05:05:76:eb:ce:e9:b3:55:87:ee:
                    90:e5:3d:80:c3:eb:59:87:5a:dc:09:80:94:7c:71:
                    f8:5c:c1:20:b6:8c:99:fc:dd:9c:cf:5b:53:c5:09:
                    56:b3:24:74:a5:1e:d5:f7:90:7b:a3:eb:c9:ef:94:
                    d3:91:f6:5b:bc:c5:f8:fe:b5:43:24:c2:5e:df:d4:
                    05:fc:a9:37:c2:d8:15:15:0f:8d:5c:2a:a7:c9:f7:
                    86:69:69:10:69:80:32:e4:c5:9d:a8:e2:dd:b1:6b:
                    f4:06:b4:c1:27:68:b5:1e:56:05:20:3b:90:6e:ab:
                    d2:b5:f3:2b:bb:7e:04:99:fc:7d:f2:f0:4e:14:3e:
                    24:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D1:80:3E:A3:D8:90:76:91:CB:1D:38:7B:52:A5:00:37:A4:DB:38
            X509v3 Authority Key Identifier:
                keyid:0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:0c:01:97:81:ae:8d:69:9a:b4:c0:de:68:5b:66:a8:59:2d:
         1d:36:8b:64:ee:70:53:d9:14:8c:28:d7:27:64:47:4d:71:c0:
         26:21:b0:7f:e6:89:14:34:f7:9d:4e:bb:9d:b5:39:c9:d9:ec:
         8a:d0:c7:5e:c7:9a:50:bc:9f:83:33:ba:87:76:a9:bd:c3:86:
         af:29:f2:3d:fd:d2:9a:61:55:6e:9f:b5:5f:3e:eb:4b:bf:9d:
         1a:fd:40:99:8b:11:f6:28:c4:ed:55:f3:0f:11:62:70:6e:5a:
         c2:29:87:20:49:ba:0e:97:d1:b7:b2:cb:d8:47:db:65:23:b5:
         36:24:e4:15:b6:d5:a1:1d:44:0a:60:bf:ee:9a:cb:46:3e:4e:
         76:9c:9b:ef:c3:f6:e9:c0:ea:59:2e:f5:88:ed:d1:42:b7:7a:
         ec:74:62:f1:de:1b:00:57:cb:d8:c6:0d:b6:44:53:4d:47:68:
         05:d4:06:e6:f8:81:0e:f1:83:f1:8e:7f:1c:57:47:5a:1b:57:
         9e:5e:98:1d:e6:3e:46:69:85:16:93:a7:fa:34:dc:19:19:40:
         a9:9d:d7:23:55:09:86:c6:3e:7d:3c:c6:24:93:94:04:91:4a:
         fb:9a:ea:7d:61:54:f9:49:be:3b:3d:e0:c0:c1:df:06:df:02:
         d0:19:68:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 00:20:39 2026 by rpki-client