Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.mft
File:                     4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.mft (raw, json)
Hash identifier:          UpQRDqHDaw6W0Y5oEP9lRMeIMH8xO/Rbsh6MHGmFaiw=
Subject key identifier:   EE:99:7B:FA:69:8F:C1:DC:77:34:04:57:F6:B4:F6:71:62:22:17:44
Authority key identifier: 4D:9A:BE:49:0C:47:DC:C6:63:99:2B:BA:24:BD:5A:0F:B7:C1:00:9A
Certificate issuer:       /CN=4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A
Certificate serial:       2B9DBB36D13F0CA2F2E1096B75C41B76285F3841
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.mft
Manifest number:          0102
Signing time:             Tue 07 Apr 2026 22:39:56 +0000
Manifest this update:     Tue 07 Apr 2026 22:34:56 +0000
Manifest next update:     Wed 08 Apr 2026 23:32:56 +0000
Files and hashes:         1: 4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.crl (hash: RS7mcdZ8fDqKFTc/hJc3S5Y2y3uYoz9ccPpSMB+34xY=)
                          2: 3230312e3135392e3136322e302f32332d3233203d3e20323730373933.roa (hash: SHJlGwh0aS8eq6SPGivCat3XMCYZDeEyzDUDKRyhdGo=)
                          3: 323830343a373138303a3a2f33322d3332203d3e20323730373933.roa (hash: /Si3WIWWzJD6vNhz8lmN3DQ0Era253mkaP+0P1mG510=)
                          4: 3230312e3135392e3136322e302f32342d3234203d3e20323730373933.roa (hash: KTmZ1lBoJw6zx1UFcwMpoNCD3GmgB2DENnWUqm4ZmQE=)
                          5: 3230312e3135392e3136302e302f32322d3232203d3e20323730373933.roa (hash: oEJyG8sugH7dKUAgRoHCVhg0rLV5m2ccXsKzSSaObFU=)
                          6: 323830343a373138303a3a2f33342d3334203d3e20323730373933.roa (hash: aU4U86iGV84DuEw4neEIYH1JT+mCBQZq3vEvnQq8R3A=)
                          7: 3230312e3135392e3136312e302f32342d3234203d3e20323730373933.roa (hash: QfbwE60yK9ryZkWagwba1W7K9bOkT2rutzBhfujb8C8=)
                          8: 3230312e3135392e3136302e302f32332d3233203d3e20323730373933.roa (hash: JeA8tNnq52g+siWz2Xjv02XBG+9YjyQg5PiUYmPSfPw=)
                          9: 3230312e3135392e3136332e302f32342d3234203d3e20323730373933.roa (hash: q+GsFf43C3RjMx041Ip8T2ZCEk5vUsQJET3gmFBsCWs=)
                          10: 323830343a373138303a3a2f33332d3333203d3e20323730373933.roa (hash: l8CvQgNarwCo3pOTLpCJefQIDt7rpWTgI4spaOKDENU=)
                          11: 323830343a373138303a633030303a3a2f33342d3334203d3e20323730373933.roa (hash: lFrjvrMxzblDYDfWmfc9dFhSCZaIlMkFSc8IfPLXuBU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.crl
                          rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 23:32:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:9d:bb:36:d1:3f:0c:a2:f2:e1:09:6b:75:c4:1b:76:28:5f:38:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A
        Validity
            Not Before: Apr  7 22:34:56 2026 GMT
            Not After : Apr  8 23:32:56 2026 GMT
        Subject: CN=EE997BFA698FC1DC77340457F6B4F67162221744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b9:9b:d4:71:01:a5:74:87:8f:75:99:4d:88:
                    f1:8f:40:b5:7b:41:eb:ac:13:d0:b0:4c:dd:a8:6d:
                    64:72:55:d0:39:07:c0:07:43:16:78:4f:d2:0e:3b:
                    e8:97:cc:c9:02:58:61:68:46:df:91:f9:39:ef:16:
                    72:0e:12:51:a8:e1:89:60:a7:d8:58:4a:63:6c:bb:
                    a8:d5:73:d7:2b:b9:5f:29:97:de:2f:35:a0:d9:72:
                    25:eb:2a:3d:d7:40:5a:15:06:bd:73:2e:e1:f8:51:
                    79:b7:5e:7b:38:e9:ab:d4:b1:fa:33:7d:5f:72:54:
                    9d:92:dd:c9:9d:6b:02:e0:ed:a2:38:1c:39:9c:4b:
                    12:0a:bc:04:24:d3:ab:44:ce:77:07:bf:9c:92:fe:
                    af:27:28:3c:5b:33:8d:a6:6e:4a:ff:fc:8c:03:a5:
                    8b:dd:ba:8b:96:a4:2b:69:b0:06:1f:ec:43:66:d3:
                    45:94:c0:37:f5:9c:ae:a0:97:7a:e7:c9:50:c8:1c:
                    69:cd:57:da:cd:69:ff:bd:80:34:18:a8:6b:9f:8c:
                    ac:4c:0c:46:f1:d7:fb:52:5d:32:0a:b2:4a:82:c9:
                    f3:06:9a:06:8b:fb:92:d4:ea:f7:2c:8f:c9:a7:20:
                    88:55:0d:7a:3c:4e:9b:a7:da:4a:33:67:dc:78:f0:
                    ab:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:99:7B:FA:69:8F:C1:DC:77:34:04:57:F6:B4:F6:71:62:22:17:44
            X509v3 Authority Key Identifier:
                keyid:4D:9A:BE:49:0C:47:DC:C6:63:99:2B:BA:24:BD:5A:0F:B7:C1:00:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:83:4c:74:ac:88:9d:fa:db:61:da:98:c8:a5:9d:2f:32:8e:
         a6:b4:6e:f9:34:53:70:54:4e:fd:26:d9:6c:0c:32:19:bf:99:
         63:2a:d0:26:94:07:d8:b6:0d:0a:76:46:41:9f:11:42:bf:6c:
         74:81:1b:5f:24:cc:cd:1e:24:6e:61:63:b0:66:d5:5f:f0:ee:
         7d:df:b0:a4:e0:9b:64:4e:9d:e6:94:54:8a:ca:c6:eb:77:97:
         1d:6d:a8:90:16:96:07:91:ba:02:1b:d3:58:12:9e:52:e8:fb:
         3e:c1:e4:3d:8c:47:c3:ca:18:1f:d8:ef:b7:de:89:11:9e:d2:
         b0:eb:38:7e:46:dc:c8:ab:ce:e3:66:ed:7d:01:a3:6d:92:82:
         e6:72:96:a0:a8:33:05:98:e4:84:c4:04:25:cb:be:4d:94:18:
         8c:4a:98:3c:c7:86:8a:9b:51:20:44:b5:90:b8:76:28:a6:b5:
         a1:82:89:a5:a1:e5:73:e3:43:0d:63:d4:b2:d8:d4:37:de:2b:
         15:4f:3c:91:57:f3:8d:c3:4e:f2:f3:8a:20:af:cc:c1:84:34:
         9f:28:ca:12:c0:e5:4f:94:66:08:6f:cd:12:ac:f7:2e:c9:4f:
         f1:7a:6f:8a:b2:51:16:4b:bd:77:c7:a7:fd:f3:1c:6e:1e:4b:
         1c:8e:20:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 09:53:48 2026 by rpki-client