Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.mft
File:                     4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.mft (raw, json)
Hash identifier:          ou1pV6oW1wkZQ5ZYZuhNtJVw4fMvc8KUHyIB10BGt88=
Subject key identifier:   A1:73:14:A4:94:2C:D4:9C:1D:B6:6E:8D:01:B5:1D:68:56:01:4F:36
Authority key identifier: 4E:4C:2C:4C:FA:13:78:55:EA:25:A4:FE:C4:39:1B:70:C2:1A:5B:BD
Certificate issuer:       /CN=4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD
Certificate serial:       2A348575CEE387B838F5510AC918F804C8E832EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.mft
Manifest number:          03D2
Signing time:             Wed 08 Apr 2026 08:43:56 +0000
Manifest this update:     Wed 08 Apr 2026 08:38:56 +0000
Manifest next update:     Thu 09 Apr 2026 12:13:56 +0000
Files and hashes:         1: 3139312e3234302e3136382e302f32312d3234203d3e20323632343936.roa (hash: gyiZlsWdDqNy4Dr04Y65DxszCTgsB/U5fULw1M302cM=)
                          2: 3137372e36362e3132382e302f32312d3234203d3e20323632343936.roa (hash: DpH9Tx3KSKs2Pv3Xu8LN3BscDXf0FMihxQcYkBUpuoo=)
                          3: 323830343a3532303a313a3a2f34382d3438203d3e20323632343936.roa (hash: dGRevKxdfo1wJIJcrovmrfliigR3U9fSFFeTfL19mTQ=)
                          4: 323830343a3532303a3a2f33322d3332203d3e20323632343936.roa (hash: weT5RoIG4960k4pRdcVkTZt1h1LjkI7+tLSqpMpWVlU=)
                          5: 3137372e36362e3133362e302f32312d3234203d3e20323632343936.roa (hash: S2kd9/Xw3EiB7jHakIqtJSmSLLfTM5vNxI75Jeurei4=)
                          6: 4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.crl (hash: rqLQs2ui3HUMKmZ1s+7EncKCe9pAQhpr6VQwk5+igac=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.crl
                          rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 12:13:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:34:85:75:ce:e3:87:b8:38:f5:51:0a:c9:18:f8:04:c8:e8:32:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD
        Validity
            Not Before: Apr  8 08:38:56 2026 GMT
            Not After : Apr  9 12:13:56 2026 GMT
        Subject: CN=A17314A4942CD49C1DB66E8D01B51D6856014F36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:97:a6:39:ca:ee:0e:d0:30:55:c7:29:ec:3c:
                    7d:b4:b9:dd:26:b4:5a:c3:7b:bc:56:9d:72:bb:45:
                    5c:63:f6:48:0b:1d:f3:f8:2a:d8:17:8b:08:f6:0b:
                    8f:e0:17:84:bc:5e:5a:d5:e0:95:d4:64:35:73:52:
                    62:c2:c0:51:82:18:04:99:19:ab:73:ce:ad:0d:4d:
                    d7:29:a1:2a:a0:6b:cb:69:ce:75:16:39:5d:d8:e6:
                    e8:20:ec:c8:35:db:e9:97:10:86:fe:db:1f:09:c1:
                    02:e0:38:ec:c7:06:ba:af:f1:0a:63:75:69:2a:a8:
                    8a:f4:1f:d2:15:15:85:33:98:bf:e6:2b:c7:62:3b:
                    a3:2a:d0:51:e8:b7:27:c0:17:c1:31:d5:d0:dd:19:
                    31:6b:d6:06:8b:ed:af:5e:61:20:f5:7f:47:d6:7b:
                    a3:6d:8d:e8:e4:a2:49:19:99:c6:53:6e:fd:c6:85:
                    f5:25:21:a5:a3:b9:1a:3b:9b:a1:db:c4:d5:b7:ff:
                    82:1c:93:c5:01:34:36:2c:6e:26:be:f4:3a:22:7a:
                    3e:05:be:7c:d6:20:85:3e:57:66:cf:25:ea:59:a9:
                    14:f6:4d:4f:53:1e:e4:f0:67:6b:35:05:00:3a:00:
                    a0:8f:22:9b:60:64:b0:2e:4e:74:90:ae:fa:eb:28:
                    a7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:73:14:A4:94:2C:D4:9C:1D:B6:6E:8D:01:B5:1D:68:56:01:4F:36
            X509v3 Authority Key Identifier:
                keyid:4E:4C:2C:4C:FA:13:78:55:EA:25:A4:FE:C4:39:1B:70:C2:1A:5B:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:90:e8:7b:b5:5f:0f:53:a2:42:bd:6c:41:2d:64:2f:a1:a0:
         9d:13:00:21:f0:22:5c:2e:be:96:fa:45:73:95:a3:8c:5c:8a:
         25:43:0e:99:bd:77:3f:cf:c0:cc:d8:89:05:50:14:c6:24:64:
         fe:72:70:3c:79:f1:35:c5:ea:80:9c:d1:12:d3:07:51:44:1b:
         07:48:f4:91:cc:71:00:a0:b9:29:02:d4:9e:b9:53:0b:42:1d:
         f8:4b:27:57:6a:8b:42:32:93:e8:65:e2:90:9a:7a:06:da:99:
         d0:2c:86:dd:cd:31:5e:cd:7c:03:7a:14:16:50:b1:32:91:e2:
         af:98:38:f1:10:47:42:4d:6d:f3:5a:1a:16:c1:64:f0:fd:89:
         99:b6:87:ec:94:d5:9f:e4:3f:b6:f5:de:3a:d9:7e:5e:f0:aa:
         04:36:83:5f:37:53:b6:a7:37:d1:42:f3:db:3a:4e:aa:97:a8:
         1c:2c:a8:78:4b:1f:6c:5d:5e:47:37:fb:f2:fc:74:98:8d:cd:
         ac:06:a6:8a:bb:5b:b1:c9:e7:ec:e6:a4:e9:25:d3:bd:a3:9a:
         78:0d:db:41:a3:57:3f:17:1a:4a:93:63:41:9d:2e:bf:b5:42:
         8d:c3:f1:b8:27:46:2d:5c:a8:35:85:dc:87:00:06:ff:5f:1c:
         e6:6e:56:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 20:44:38 2026 by rpki-client