Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.mft
File:                     D6D9739B5280D82829AFAD531E39D5FA86E04AD0.mft (raw, json)
Hash identifier:          fl3ie2zrbVh+LjvszNw3iwZgkUkZplWxfWoW0JbTCb4=
Subject key identifier:   AF:4E:7A:51:FB:21:5A:70:B6:5F:07:D6:EB:3C:8C:94:49:09:D3:96
Authority key identifier: D6:D9:73:9B:52:80:D8:28:29:AF:AD:53:1E:39:D5:FA:86:E0:4A:D0
Certificate issuer:       /CN=D6D9739B5280D82829AFAD531E39D5FA86E04AD0
Certificate serial:       0A77D88DB82939B954DC0F52042A787A479A5464
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.mft
Manifest number:          03CD
Signing time:             Tue 07 Apr 2026 20:29:45 +0000
Manifest this update:     Tue 07 Apr 2026 20:24:45 +0000
Manifest next update:     Wed 08 Apr 2026 21:50:45 +0000
Files and hashes:         1: D6D9739B5280D82829AFAD531E39D5FA86E04AD0.crl (hash: Pnq/cIkaQ3ixsmqkH4fXOdo228uLTztthboC+ythsWY=)
                          2: 3139322e3233312e3131382e302f32332d3332203d3e20323731323436.roa (hash: B8WpVxFEnHt5uoIO7E42tS5s8cIDuz12nAL1MpfR9ec=)
                          3: 323830313a38303a336532303a3a2f34342d313238203d3e20323731323436.roa (hash: DuUMrzzPulClSVFsKhOIUDbxqjDddqpcyoQ/S2dtgTM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.crl
                          rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 21:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:77:d8:8d:b8:29:39:b9:54:dc:0f:52:04:2a:78:7a:47:9a:54:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6D9739B5280D82829AFAD531E39D5FA86E04AD0
        Validity
            Not Before: Apr  7 20:24:45 2026 GMT
            Not After : Apr  8 21:50:45 2026 GMT
        Subject: CN=AF4E7A51FB215A70B65F07D6EB3C8C944909D396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3e:5e:12:33:d6:04:8c:5b:a7:69:1c:ad:ff:
                    5d:1f:1c:9d:a4:56:e3:2f:47:4e:e6:55:b1:17:bb:
                    1d:f9:ca:45:3d:44:1f:95:96:e5:c3:c9:6e:e8:49:
                    cb:e6:c1:d4:fc:e5:b1:38:e5:c0:1d:bd:e5:aa:ee:
                    95:85:24:00:b2:b4:96:1f:15:c9:7d:76:f3:18:73:
                    ad:62:6b:1f:4a:2d:6e:d4:18:d1:c4:34:68:35:87:
                    aa:69:f6:6d:31:c1:5e:81:73:ee:01:83:ab:b7:d5:
                    02:32:dc:05:2e:41:2b:b6:26:5c:21:dd:9a:ce:1b:
                    18:ac:35:6c:36:71:3d:d7:9c:22:d5:eb:f9:87:db:
                    8e:68:3c:f8:d1:53:61:05:02:b7:3d:e7:a8:43:a4:
                    53:0b:9e:c3:1f:07:21:ce:62:60:b1:3c:01:6e:e2:
                    4d:84:34:47:9e:b0:36:ef:d5:5f:f6:6f:90:cd:a5:
                    d1:89:93:03:26:86:e0:98:4f:43:77:92:ea:77:02:
                    92:4e:82:8f:0e:93:d5:a6:8d:b6:34:a7:fe:02:ab:
                    14:7d:fb:d9:fe:2d:11:0e:2d:88:1a:e7:41:16:5b:
                    fe:c4:72:e6:12:dc:7a:f6:f9:dc:2d:ef:06:6f:3d:
                    bd:2c:f2:0e:4b:db:9d:46:ab:85:07:8d:6b:23:0e:
                    9b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4E:7A:51:FB:21:5A:70:B6:5F:07:D6:EB:3C:8C:94:49:09:D3:96
            X509v3 Authority Key Identifier:
                keyid:D6:D9:73:9B:52:80:D8:28:29:AF:AD:53:1E:39:D5:FA:86:E0:4A:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:88:fa:27:c9:58:dd:39:6c:e0:84:79:e8:5a:ca:eb:a7:30:
         a1:33:0e:83:3b:1d:03:49:9a:5b:b6:11:c8:c0:1e:3c:5f:83:
         f7:f0:63:0c:00:a3:5f:f5:72:15:0d:ff:1e:83:ff:78:7f:64:
         8e:58:b1:e7:18:01:7f:f3:44:15:41:cd:8a:01:59:14:8b:79:
         92:2c:12:6d:4e:92:99:b2:c2:ce:be:57:2f:8d:31:fb:91:06:
         dd:29:4a:07:08:f3:3f:bd:2f:b3:46:a9:ab:58:69:c3:aa:cb:
         6d:2b:6d:a9:90:9d:f9:82:fe:66:55:f2:67:12:26:f1:a5:4d:
         a9:1a:97:71:5e:1a:1e:90:d5:34:8b:78:87:e3:2a:95:0a:c4:
         ed:af:02:2d:e5:2e:03:46:fe:76:d8:70:6f:c4:1c:5e:0b:00:
         27:28:38:13:87:46:49:04:88:b7:ce:bd:6f:55:00:22:fa:94:
         68:b6:3a:27:29:d2:21:49:a5:47:ef:37:88:4a:ad:93:74:7d:
         a4:98:02:d6:28:b2:3f:ae:67:30:bd:83:70:19:5f:35:c4:16:
         4d:45:ba:21:9a:86:c2:e4:1b:ad:92:2e:d1:32:37:f7:a0:94:
         2b:a5:01:f0:50:b2:8f:42:25:58:87:98:4f:52:7d:b5:73:f3:
         95:88:77:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:49:28 2026 by rpki-client