Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
File:                     DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft (raw, json)
Hash identifier:          5akJsFZ5bdmJRdrqMARykhU6mgbzKyj6OMRzh2dawms=
Subject key identifier:   A2:40:E9:33:8E:A3:CD:EB:6E:6E:24:90:CD:0E:5E:3B:6B:C5:54:E0
Authority key identifier: DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF
Certificate issuer:       /CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
Certificate serial:       1A2B8CE08DE679F320891060DB2D7516A48A1D52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
Manifest number:          03CF
Signing time:             Wed 08 Apr 2026 10:10:04 +0000
Manifest this update:     Wed 08 Apr 2026 10:05:04 +0000
Manifest next update:     Thu 09 Apr 2026 11:38:04 +0000
Files and hashes:         1: 34352e3233322e37322e302f32322d3232203d3e20323637323531.roa (hash: BsLLZ9KkH4Zj74RdZ0/HI2fM5L9/mlUsxVqy4uRFoIM=)
                          2: 34352e3233322e37322e302f32342d3234203d3e20323637323531.roa (hash: gwYn/is6VhcQvnMynOevGThyvSq+sHyeol7Ooarj7r8=)
                          3: DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl (hash: wlOsAk2tDVMgzxIT4c5NlNuxFMqcZZolR7A8veHfq8M=)
                          4: 34352e3233322e37342e302f32332d3233203d3e20323637323531.roa (hash: Up5c3Zrkl/h4NMxezx9vicK8H0zNaqvBqFAGULiwrgY=)
                          5: 34352e3233322e37322e302f32332d3233203d3e20323637323531.roa (hash: i4vOZ5jbbLD0oYiy/k3J6OX7KRNwSiY7Tfa27r5KvNs=)
                          6: 34352e3233322e37332e302f32342d3234203d3e20323637323531.roa (hash: QIVxHVauEvqV4mYKX09XWLG6LMGXBqT6ako7wX7wXNg=)
                          7: 34352e3233322e37352e302f32342d3234203d3e20323637323531.roa (hash: r1XY4nAAMQiPedQTv2UyPVyhHWeEghFuH/Sa8IGwww8=)
                          8: 34352e3233322e37342e302f32342d3234203d3e20323637323531.roa (hash: SenK1jmwRDLUh8fN2HBnAiAqBo7jN1L29eDWq7Mi8UU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl
                          rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 11:38:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:2b:8c:e0:8d:e6:79:f3:20:89:10:60:db:2d:75:16:a4:8a:1d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
        Validity
            Not Before: Apr  8 10:05:04 2026 GMT
            Not After : Apr  9 11:38:04 2026 GMT
        Subject: CN=A240E9338EA3CDEB6E6E2490CD0E5E3B6BC554E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5e:78:7f:f2:a3:24:c4:74:89:4b:51:21:3d:
                    43:3f:68:01:2e:ff:c5:8d:46:11:65:4b:db:14:37:
                    d2:65:14:ef:9a:53:cc:9c:50:bf:96:3d:ef:53:10:
                    f4:f9:6b:8c:fc:00:c5:3e:97:01:1d:a4:ee:15:eb:
                    17:a7:1d:b0:4a:d1:63:63:a6:78:aa:4b:9e:a2:71:
                    ab:19:fa:ce:4f:cf:3e:ef:02:6b:2c:45:d2:1d:85:
                    6a:cf:88:07:24:d3:de:1c:47:ea:22:f5:26:f9:ac:
                    b2:25:22:79:f7:b8:58:36:15:77:c2:96:e6:0c:b7:
                    f7:9a:c8:2b:49:5b:13:a5:9a:e0:00:9f:d8:47:5b:
                    2e:bf:3b:52:f3:16:bd:96:0b:9f:e2:15:14:ea:51:
                    1a:6e:0d:3a:ff:c3:21:18:fd:7d:d8:b0:a7:08:eb:
                    63:71:d5:0d:6d:dc:7e:a2:ae:4c:05:6d:8c:b9:67:
                    4e:64:d1:26:28:67:9e:4e:af:73:09:f6:78:a6:49:
                    e2:34:50:5c:3c:c4:87:d4:5e:91:33:6e:d3:e4:b5:
                    8a:e9:da:61:52:1e:25:be:47:0b:59:6f:83:8b:07:
                    53:87:2c:40:d8:02:15:18:e8:a2:f0:a9:3c:db:04:
                    a2:67:a9:9a:96:1d:1e:8f:0a:11:4b:41:c8:ea:81:
                    29:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:40:E9:33:8E:A3:CD:EB:6E:6E:24:90:CD:0E:5E:3B:6B:C5:54:E0
            X509v3 Authority Key Identifier:
                keyid:DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:89:3d:56:9c:3e:74:1d:c1:63:2e:0f:7b:49:99:62:c1:73:
         a1:fa:f0:3a:19:51:15:d1:dd:2e:84:dc:f0:a5:a7:15:9f:31:
         c4:04:9d:0c:16:47:3b:1e:ac:cc:32:df:ec:a1:da:7e:3c:4c:
         55:4d:1f:e0:f7:bf:ca:88:10:63:42:8c:3a:4f:38:5f:2b:fd:
         f5:7b:5b:85:e0:e7:24:f8:7d:ad:8d:3b:42:17:1c:d6:59:3a:
         29:19:ae:a4:93:af:cc:d4:bc:a4:68:9b:b8:25:89:64:4e:76:
         57:40:91:39:b2:65:f5:3a:e9:dc:7d:8d:7e:6d:ee:a3:4a:c0:
         bf:bd:03:80:8c:ba:2c:b4:d3:6c:c9:76:5c:fe:11:17:78:25:
         36:2d:d8:73:48:30:3e:35:8b:ea:fa:c9:21:26:b9:60:fb:ba:
         87:9d:6f:e0:16:b1:f6:9b:c3:c1:19:6d:9e:4d:ff:06:b6:c4:
         cb:53:75:cc:87:7e:d8:3b:83:05:36:d5:86:ee:97:ec:8d:95:
         af:8b:4e:b5:e9:ac:8d:f4:9a:a5:f4:7f:8e:a3:f3:91:6e:04:
         39:e4:2e:05:87:2c:f8:b8:68:f5:cc:59:7a:78:00:45:d5:6c:
         61:2e:ca:92:96:da:de:aa:0b:2f:5a:d7:47:af:b7:54:8b:6a:
         c2:c9:96:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:36:35 2026 by rpki-client