Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.mft
File:                     4329045FF5A88F6B7949093B6FE2C5D28A774010.mft (raw, json)
Hash identifier:          LeMYoPOadQvCPI3uMHDFMZm6pXF6QvLezYFw9Ic+gt0=
Subject key identifier:   32:89:05:DB:AD:66:D7:C9:BD:C6:67:B8:F4:48:19:3B:02:00:4E:56
Authority key identifier: 43:29:04:5F:F5:A8:8F:6B:79:49:09:3B:6F:E2:C5:D2:8A:77:40:10
Certificate issuer:       /CN=4329045FF5A88F6B7949093B6FE2C5D28A774010
Certificate serial:       3C65E1CC5D08CC7B1B53CA42EDCF59B4B94F246F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.mft
Manifest number:          03DB
Signing time:             Tue 07 Apr 2026 16:44:03 +0000
Manifest this update:     Tue 07 Apr 2026 16:39:03 +0000
Manifest next update:     Wed 08 Apr 2026 20:22:03 +0000
Files and hashes:         1: 4329045FF5A88F6B7949093B6FE2C5D28A774010.crl (hash: LAUOs7iK7NbHRTb7j3KqZpLghxLrunF4KSWMpeC64W4=)
                          2: 323830343a313736633a3a2f33322d313238203d3e20323633303938.roa (hash: /2QVUTFJhF4e3Hdun+EYcXuCYT4PksMtG4zkcpnogYM=)
                          3: 3138362e3233332e39322e302f32322d3234203d3e20323633303938.roa (hash: AYfK0J0uGnPHoqWm5OZG/+cKXZWtdiE+J9waUYXsq9I=)
                          4: 3138362e3230382e3235322e302f32322d3234203d3e20323633303938.roa (hash: 1RKSqDo1JgPyiCbyvaujL8tuPC2KTJ/BzPuZq6KksVI=)
                          5: 3136372e3234392e3138302e302f32322d3234203d3e20323633303938.roa (hash: tvRwHUxjhA267CUJXNuW127IH/hF3eYIe06RspqjnhU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.crl
                          rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 20:22:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:65:e1:cc:5d:08:cc:7b:1b:53:ca:42:ed:cf:59:b4:b9:4f:24:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4329045FF5A88F6B7949093B6FE2C5D28A774010
        Validity
            Not Before: Apr  7 16:39:03 2026 GMT
            Not After : Apr  8 20:22:03 2026 GMT
        Subject: CN=328905DBAD66D7C9BDC667B8F448193B02004E56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:52:81:9b:22:65:49:64:95:23:50:45:d5:da:
                    d9:f8:30:42:19:f7:f1:75:6b:d1:e7:f7:38:66:b5:
                    2b:58:ff:a0:77:9a:58:22:7e:7f:00:1a:c3:fc:ca:
                    51:25:af:22:7b:06:09:8a:c4:70:01:73:0c:47:a1:
                    9a:6a:aa:60:45:6e:7d:2e:25:d2:7d:5b:84:95:71:
                    8d:3c:40:f2:80:fa:bb:3b:c9:db:cf:2e:ed:62:18:
                    02:89:b7:c4:f5:de:a9:13:0b:55:30:a8:80:73:6c:
                    d5:75:b9:88:41:84:39:cd:f8:9e:4a:a2:57:59:f8:
                    4c:8d:20:42:7a:e4:cc:46:c6:e8:f1:3d:f6:43:3a:
                    06:16:2b:8d:1b:92:4b:c0:f9:95:64:79:62:f6:13:
                    d3:b3:e5:81:cc:e4:ec:3e:e9:db:2d:47:a8:2b:ea:
                    a5:ce:d9:b0:b5:34:10:10:dd:e9:f4:f0:09:05:80:
                    f0:69:49:97:cf:07:34:3b:8d:0b:5a:74:17:92:61:
                    9a:7e:f8:fa:23:06:e0:43:87:f8:77:55:2b:ba:c3:
                    a7:94:3c:3e:95:25:53:38:fa:e2:22:0f:15:87:6f:
                    76:bf:42:4d:d4:cc:8c:6c:3d:c8:6b:f9:b6:0c:f9:
                    71:34:86:a3:c3:8a:99:fe:bd:aa:2e:cf:4e:f3:79:
                    6f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:89:05:DB:AD:66:D7:C9:BD:C6:67:B8:F4:48:19:3B:02:00:4E:56
            X509v3 Authority Key Identifier:
                keyid:43:29:04:5F:F5:A8:8F:6B:79:49:09:3B:6F:E2:C5:D2:8A:77:40:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e6:93:d9:3b:bd:39:2d:35:aa:8b:f6:bf:f8:8d:2b:04:15:
         97:3f:1a:84:19:1a:bc:69:d3:2c:f4:05:62:90:a6:0e:61:61:
         3b:60:02:e2:a2:7a:a3:1f:6f:e1:69:46:91:dd:0f:73:d1:44:
         3c:04:08:8b:0d:1a:d3:4e:a1:18:fb:1c:4c:f6:e5:5e:e9:f8:
         3b:35:b5:23:84:be:24:6f:87:e0:7d:83:8e:f6:cd:c7:2c:78:
         15:f9:a1:3d:b0:99:05:6e:ab:d0:63:be:a9:32:c8:55:aa:e1:
         97:3d:1e:96:01:5a:37:3b:3a:8a:33:c5:11:31:bf:02:17:1c:
         6b:f6:01:d2:ba:9c:ce:62:b7:19:8e:88:47:65:68:35:3f:f2:
         92:c8:c5:62:6f:c5:bd:23:c4:45:a9:10:53:04:49:12:bd:c4:
         ad:0e:c5:3b:6f:f9:da:ad:2a:d7:41:20:de:0d:27:7b:a5:d6:
         7d:28:11:df:10:fa:3c:20:7f:29:06:16:05:1c:59:03:fc:6c:
         e4:9b:5f:53:46:53:03:f1:40:61:47:d7:26:16:05:9e:92:6a:
         d9:c4:c6:0d:d7:9c:75:38:df:53:3c:44:2f:f8:9c:90:2f:d9:
         fb:1a:f9:4f:0d:af:e4:80:bb:4b:ef:57:ec:6e:6e:80:17:09:
         d2:e3:b6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:59:41 2026 by rpki-client