Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft
File:                     CE444325009DC85BE712BCD01156510F2B6F4AB9.mft (raw, json)
Hash identifier:          Iz/dAXj6yM19ZuvE3zmCNP1VYv/QqJ5ZyEnxEo3oh9Q=
Subject key identifier:   24:6B:FA:11:9E:DE:DA:34:90:95:ED:B6:C4:C3:65:DC:D3:70:25:64
Authority key identifier: CE:44:43:25:00:9D:C8:5B:E7:12:BC:D0:11:56:51:0F:2B:6F:4A:B9
Certificate issuer:       /CN=CE444325009DC85BE712BCD01156510F2B6F4AB9
Certificate serial:       48EE3F42008E884B39B67F42BD10453C04C3124B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft
Manifest number:          03D1
Signing time:             Wed 08 Apr 2026 01:37:05 +0000
Manifest this update:     Wed 08 Apr 2026 01:32:05 +0000
Manifest next update:     Thu 09 Apr 2026 03:43:05 +0000
Files and hashes:         1: 3133382e3235352e3230302e302f32322d3234203d3e20323634353132.roa (hash: paJ2NQ9DRq4kCrP3orNXj7GgnFYcC+nsR7wMP3Z9Wj8=)
                          2: CE444325009DC85BE712BCD01156510F2B6F4AB9.crl (hash: 99bHMfFp0K0Nkwkx8VPCxwgSrOCjJ03nEIGUyyfeEzQ=)
                          3: 3133322e3235352e3232382e302f32322d3234203d3e20323634353132.roa (hash: /nXIP4z7stQqUbA4CtzR/0RQ1Bfe0cFNMuYXsa2oqtA=)
                          4: 323830343a323063303a3a2f33322d3438203d3e20323634353132.roa (hash: JOM2RK2HIV3sZi+0HaFOEuSlTllD9yuwgdkYR/MQ8Kk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.crl
                          rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 03:43:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ee:3f:42:00:8e:88:4b:39:b6:7f:42:bd:10:45:3c:04:c3:12:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE444325009DC85BE712BCD01156510F2B6F4AB9
        Validity
            Not Before: Apr  8 01:32:05 2026 GMT
            Not After : Apr  9 03:43:05 2026 GMT
        Subject: CN=246BFA119EDEDA349095EDB6C4C365DCD3702564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4b:ce:6c:76:50:46:fe:1d:a2:14:16:b6:fe:
                    63:ac:83:b9:24:c8:4e:b0:dd:7f:df:36:ce:7d:68:
                    05:d5:a9:14:e1:c6:f8:95:d3:d9:11:a6:db:d1:d9:
                    ca:14:9e:00:7c:56:7d:c5:a1:ca:5b:d7:b0:46:43:
                    0e:df:c4:54:97:56:90:75:da:4a:f1:0c:ca:1b:1b:
                    89:04:51:06:83:79:bf:39:11:78:d3:9b:94:f8:c9:
                    7b:dd:90:b8:57:f8:eb:90:c2:21:9c:9c:44:e9:af:
                    8f:e5:21:41:0d:8c:70:41:29:a5:bf:a7:d2:9c:7a:
                    d9:92:dc:65:13:16:33:76:aa:9f:07:ed:cb:b2:0c:
                    d1:53:89:ca:ec:4f:3b:92:4a:0a:8a:c1:bf:2d:bb:
                    3d:f1:dc:fd:70:a6:ac:c1:62:f3:2c:31:c7:00:2d:
                    bf:77:d5:81:92:63:15:f8:44:4e:ac:96:c6:c3:d8:
                    7c:d3:bd:59:c0:9c:38:b9:26:69:cb:2b:b0:f2:e9:
                    14:39:b7:92:50:ff:3b:44:2c:65:d9:4f:1a:19:aa:
                    33:ff:31:71:fc:78:14:f7:fc:4b:1c:6f:91:37:1c:
                    1c:95:5c:a0:63:be:8c:2b:05:60:f4:9b:91:e7:ba:
                    4a:93:3a:a2:36:5a:77:8b:45:70:86:f5:fa:74:7f:
                    82:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:6B:FA:11:9E:DE:DA:34:90:95:ED:B6:C4:C3:65:DC:D3:70:25:64
            X509v3 Authority Key Identifier:
                keyid:CE:44:43:25:00:9D:C8:5B:E7:12:BC:D0:11:56:51:0F:2B:6F:4A:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ad:ff:9f:98:a4:ac:f6:8e:e9:dc:46:d3:0a:90:75:db:dd:
         1b:6b:e5:71:71:e3:3a:70:7d:d3:2e:9a:af:b8:f0:ee:e9:0f:
         bb:d6:03:5b:ca:67:09:30:58:9e:9f:81:bc:b8:3f:64:e8:82:
         f9:56:61:5a:c3:06:9d:48:c2:ee:a3:0b:cf:58:ed:07:6e:21:
         24:ef:01:b5:7f:7c:ed:ce:5c:ff:c9:41:32:af:aa:0e:ec:e6:
         e1:79:b8:b9:e9:26:09:1a:5c:ee:51:20:1b:5e:07:03:da:c6:
         46:2e:82:57:28:2a:11:1d:66:1d:8f:69:72:cc:0d:07:6d:02:
         e5:14:4f:92:70:12:84:49:ec:5b:f6:c7:1d:6f:db:57:88:52:
         15:b6:26:8c:2a:be:3a:34:a6:8a:ea:36:82:f2:3c:a4:03:f1:
         12:e6:b3:d9:bd:ad:c6:75:16:83:3e:4d:08:93:e3:06:4e:d2:
         e2:82:09:d2:4d:ec:61:b5:b2:70:9b:5f:79:31:43:d4:42:9a:
         06:a1:cf:97:da:5f:da:d1:d9:e8:37:8a:df:a6:39:ab:81:12:
         fe:34:77:2e:7a:76:19:8a:9c:47:27:11:0f:f9:00:76:16:c1:
         5a:e9:f9:c3:f4:70:e8:db:ca:af:44:5c:50:ec:a7:96:7e:d9:
         fe:0b:6c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 15:59:38 2026 by rpki-client