Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft
File:                     633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft (raw, json)
Hash identifier:          MicHuxzYNS2bX9tn+mbyfc+5xvnYce1+wrTPC9/Pdzw=
Subject key identifier:   B8:D8:48:FC:98:08:86:49:4B:BE:F2:02:4E:5C:02:C5:AD:9A:AD:B6
Authority key identifier: 63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0
Certificate issuer:       /CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0
Certificate serial:       2AB6C053CB79238A14596F57D4A0D5724C3EE31D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft
Manifest number:          034C
Signing time:             Tue 07 Apr 2026 18:55:43 +0000
Manifest this update:     Tue 07 Apr 2026 18:50:43 +0000
Manifest next update:     Wed 08 Apr 2026 22:19:43 +0000
Files and hashes:         1: 34352e3137392e35322e302f32342d3234203d3e20323639303533.roa (hash: Akh9nscz8Ru7h4WuNxjio0jBeFurBOjjKKbR62pQnJ8=)
                          2: 34352e3137392e35332e302f32342d3234203d3e20323639303533.roa (hash: K9WqDVoOC9+J/ZxCcup5mVeeWECoZyoed0UuxFFCPmc=)
                          3: 323830343a356562633a383030303a3a2f33332d3333203d3e20323639303533.roa (hash: liUwlmRsLROgEFIRorcVo4wkRIukQ80gom0ndXpXupg=)
                          4: 34352e3137392e35322e302f32332d3233203d3e20323639303533.roa (hash: 9l/70hTQnj9cn5gJDSkLTYu0XIiUnFExA0SmD6ik6eI=)
                          5: 323830343a356562633a3a2f33322d3332203d3e20323639303533.roa (hash: GzYX1I8QbJi7Hwby4wbyOYtpvdHoyuDJfPbvJ9HohlI=)
                          6: 323830343a356562633a3a2f33332d3333203d3e20323639303533.roa (hash: 1bUpQCBjJc58z+IfdaGqbDO6BVXJbwt9z0HYCIingm0=)
                          7: 633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl (hash: CXvTH9/9d3PtHoPFSoOD+9J3HIB2BVADS9y5OzcG0hM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl
                          rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 22:19:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b6:c0:53:cb:79:23:8a:14:59:6f:57:d4:a0:d5:72:4c:3e:e3:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0
        Validity
            Not Before: Apr  7 18:50:43 2026 GMT
            Not After : Apr  8 22:19:43 2026 GMT
        Subject: CN=B8D848FC980886494BBEF2024E5C02C5AD9AADB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:59:1a:8c:a8:9b:ac:e6:5b:65:01:f1:66:f2:
                    79:d5:21:6f:0d:c2:c7:cc:d0:7b:8d:1f:b7:0e:02:
                    2c:ad:40:10:3c:39:fc:96:1b:ee:6e:c2:fa:42:0e:
                    b0:1b:23:ad:2b:80:35:63:da:dc:0b:dd:0c:d5:89:
                    e0:6e:7e:23:70:ac:80:68:d9:52:43:bb:b5:90:16:
                    bf:ea:a2:fe:c5:a7:0f:03:32:e7:00:bc:54:90:48:
                    d3:96:8a:f9:95:7f:95:8e:a6:5b:98:b6:5a:6e:4d:
                    15:9f:33:77:3b:56:d7:58:08:0c:ae:2f:4f:4e:4e:
                    0d:82:ad:dd:a6:ee:63:ce:a1:db:5f:38:ce:ab:9c:
                    aa:04:d4:dc:7b:59:0f:d1:40:88:82:a9:a7:7a:4d:
                    ec:d8:46:a2:23:89:71:cf:fd:89:fd:b9:d0:a6:ae:
                    79:a0:db:66:1e:cb:59:ff:28:0f:49:f1:30:48:5f:
                    1a:5d:e3:84:5c:6b:0c:d5:cd:0b:07:11:7c:fe:a2:
                    be:93:58:17:38:c9:73:e0:99:b6:e2:79:28:9c:21:
                    61:ba:c4:e6:6d:1f:fd:ed:38:3a:73:ec:f7:f5:cf:
                    4e:4b:b7:a4:8b:b8:4d:80:0a:4b:4a:60:62:2f:fc:
                    84:64:81:60:4c:62:e2:fa:7b:bb:44:fa:04:cd:60:
                    e2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D8:48:FC:98:08:86:49:4B:BE:F2:02:4E:5C:02:C5:AD:9A:AD:B6
            X509v3 Authority Key Identifier:
                keyid:63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e1:9b:cc:2e:34:da:51:ec:b7:15:dd:6a:26:2f:de:bc:b1:
         74:6d:b3:5d:2a:1a:02:cf:e1:fb:48:20:b9:c1:69:e3:7f:e5:
         b1:0c:31:33:ea:04:ee:e0:e1:aa:15:65:3f:3c:24:7f:67:24:
         2a:21:cf:f2:0f:11:95:1c:13:f0:d3:7a:5a:f5:5d:5b:24:f3:
         ee:16:60:90:8a:94:66:b7:65:e9:74:52:49:57:cb:52:41:d3:
         f0:fd:25:73:b8:e5:ec:93:c5:20:dd:06:21:21:75:0d:45:d9:
         00:d9:a3:7e:0b:d5:60:69:8d:5c:fd:76:92:0f:93:88:c7:61:
         4f:9f:17:cd:eb:9f:2d:7d:73:4d:8e:29:66:98:ff:e7:79:ec:
         9d:04:2e:cb:76:fa:fd:41:bc:96:e0:5f:8f:b0:f1:a2:32:77:
         0a:2b:06:3e:19:e9:b4:15:7c:df:f8:4a:a2:8b:76:57:02:82:
         59:f1:b9:47:01:57:a1:9c:e1:39:34:60:53:32:2a:55:ad:1a:
         9e:f8:4d:ba:22:29:55:51:7c:dd:fb:f6:b5:b0:6d:c4:a3:e8:
         d1:01:ac:0b:b6:39:b9:50:1a:5a:34:b3:d9:1f:e5:06:86:c9:
         5d:16:52:4b:64:9e:90:c2:73:5f:a0:d8:42:4c:2d:a7:b4:f3:
         ee:c9:07:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 12:32:43 2026 by rpki-client