Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft
File:                     CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft (raw, json)
Hash identifier:          5d80TgQU2rVPE8PgE1I+ADFIG18QBEPKdFWpKODuKBA=
Subject key identifier:   0C:84:6F:BC:10:A2:C6:8D:9F:73:1A:49:8B:7C:1E:C6:F5:56:3F:4A
Authority key identifier: CD:68:18:25:A7:5F:3D:F3:B0:33:D3:54:4F:88:26:48:8F:3F:A8:A4
Certificate issuer:       /CN=CD681825A75F3DF3B033D3544F8826488F3FA8A4
Certificate serial:       3CA0F1EADC1B1C9634DC5AEEE90D39760FE12378
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft
Manifest number:          03CE
Signing time:             Wed 08 Apr 2026 00:04:42 +0000
Manifest this update:     Tue 07 Apr 2026 23:59:42 +0000
Manifest next update:     Thu 09 Apr 2026 00:20:42 +0000
Files and hashes:         1: 34352e3233332e3133322e302f32322d3234203d3e20323637333234.roa (hash: 3n2Tk0TLHKbeyvSR9gueX0c6nwA0R++H9heS7l364Ks=)
                          2: CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl (hash: YE2zRd0iMC18hAeN80/U0M529xsm87PFrR88UV+CEV8=)
                          3: 323830343a346262303a3a2f33322d3438203d3e20323637333234.roa (hash: lP2dF6eLkAR5W4EKDMYSPnrha/aIhYWGq5RKYXV3V3w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl
                          rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 00:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a0:f1:ea:dc:1b:1c:96:34:dc:5a:ee:e9:0d:39:76:0f:e1:23:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD681825A75F3DF3B033D3544F8826488F3FA8A4
        Validity
            Not Before: Apr  7 23:59:42 2026 GMT
            Not After : Apr  9 00:20:42 2026 GMT
        Subject: CN=0C846FBC10A2C68D9F731A498B7C1EC6F5563F4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3d:e9:f0:01:87:62:b3:dc:ec:c6:65:d6:b8:
                    4d:c3:31:55:04:f5:fc:88:ab:45:e6:01:6c:97:08:
                    bd:46:b3:d0:d8:5c:64:99:ff:46:27:22:b7:c6:ad:
                    90:97:23:96:a1:d8:1e:3f:1c:b8:d6:a3:02:5f:74:
                    c7:51:25:e0:e1:5b:c7:47:8d:f2:eb:99:a3:a2:95:
                    bc:43:80:23:52:e7:60:79:5e:d7:dd:a3:0f:63:16:
                    53:62:09:e7:31:5f:2f:50:d4:92:b0:8d:01:fb:34:
                    d4:36:b6:39:90:a2:48:be:d5:f9:c6:15:5c:e4:de:
                    b1:a1:28:c9:18:c3:3b:99:30:55:c4:a0:f0:4c:3d:
                    1e:4d:8b:dd:c2:a4:2b:b0:15:9f:38:e2:93:b1:a1:
                    91:a6:50:5d:25:cb:b2:d1:d9:d9:48:62:58:a7:9c:
                    0e:0f:7b:d4:72:ba:80:d3:dc:1a:a4:7d:39:33:1e:
                    81:ae:88:53:52:c1:fb:10:b3:4f:94:b4:08:1a:89:
                    b2:53:29:7a:e6:02:43:a8:25:3c:5f:73:56:bf:bc:
                    fb:3f:86:c5:4d:83:2a:61:40:d6:e0:87:03:49:b6:
                    d2:65:b2:4d:0b:04:7f:eb:cf:5f:6e:4a:3f:5f:0f:
                    5a:47:33:f4:e9:73:06:30:07:20:81:8e:ab:02:75:
                    39:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:84:6F:BC:10:A2:C6:8D:9F:73:1A:49:8B:7C:1E:C6:F5:56:3F:4A
            X509v3 Authority Key Identifier:
                keyid:CD:68:18:25:A7:5F:3D:F3:B0:33:D3:54:4F:88:26:48:8F:3F:A8:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:89:79:3b:bd:e1:78:2a:b6:99:e1:be:78:20:6e:15:9f:65:
         ce:eb:7e:9a:7c:5b:35:9f:10:54:10:9b:59:00:5a:16:12:77:
         b5:92:51:a2:d8:36:8e:ef:77:57:1a:77:56:7b:60:85:f0:26:
         b3:34:82:02:48:5d:ea:9b:ca:d4:4c:fe:e3:a4:a8:bd:34:58:
         b5:d7:dd:c6:b9:82:2c:2f:58:d5:28:41:0e:d7:7e:d4:80:8d:
         6b:79:8e:a6:d5:b9:7b:b8:a0:e7:df:94:8a:6c:4f:56:b5:21:
         0d:7a:fc:b2:9c:21:d1:40:ae:51:f6:ba:e5:b8:c9:da:98:44:
         47:4b:09:09:81:76:42:17:f2:6c:bb:f9:48:56:74:22:dd:dd:
         ce:c2:88:f7:61:f9:61:25:95:63:b8:99:96:2e:9b:0c:74:0f:
         fb:57:a8:ae:4b:bf:75:19:a7:34:e9:ba:9f:bb:10:2a:c7:48:
         c5:3f:e8:40:b0:de:cf:f8:34:03:88:dd:a2:41:f5:c2:57:1d:
         6e:bf:56:5e:b6:e7:1b:12:4e:37:07:09:50:85:bc:0b:3b:7c:
         31:09:72:6c:19:15:37:89:e5:b0:28:ce:9e:b3:dc:0d:ef:b9:
         89:df:61:9b:c9:0b:76:18:2f:a2:ea:22:4d:56:9c:0f:8c:b6:
         1f:9f:4f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 11:24:02 2026 by rpki-client