Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
File:                     F221C31BD2AD9D051303E1E7DE991DC00987A722.mft (raw, json)
Hash identifier:          Fvz8TqBUxUozJByGhk7BoFPmrBjzA+mecbyeBidAOLc=
Subject key identifier:   32:89:07:64:9B:E9:71:A4:FB:5C:07:6E:39:CA:94:E2:16:63:A9:62
Authority key identifier: F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22
Certificate issuer:       /CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
Certificate serial:       3470C3F7661B2CD1A0402F9D7EF5621CCE5D4246
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
Manifest number:          03D3
Signing time:             Wed 08 Apr 2026 11:14:54 +0000
Manifest this update:     Wed 08 Apr 2026 11:09:54 +0000
Manifest next update:     Thu 09 Apr 2026 13:35:54 +0000
Files and hashes:         1: 34352e3139312e31302e302f32332d3233203d3e20323639363938.roa (hash: diFMCdAXbYPtAa9ysDKcQbCwvQajQlLg1fgD38qWc1A=)
                          2: 34352e3139312e31302e302f32342d3234203d3e20323639363938.roa (hash: pyCdUGZA/KCjV2vuJfmjdtjHYaDSd98SlnH0/zdU7AU=)
                          3: 323830343a363838343a383030303a3a2f33342d3334203d3e20323639363938.roa (hash: oQBAXPZji36RfnVMVJVINpqYcweI93PKAZNd2d5Fqk0=)
                          4: 34352e3139312e382e302f32342d3234203d3e20323639363938.roa (hash: CmPxrqFXNBYAuiTeOwbtYeVu27GG1fvYntO4o7Wna5g=)
                          5: 323830343a363838343a3a2f33332d3333203d3e20323639363938.roa (hash: 8iVmccCObAe8NicDmn1CKO+ITDAM6KsmBd6esHYUw5A=)
                          6: 323830343a363838343a633030303a3a2f33342d3334203d3e20323639363938.roa (hash: 67NOM4bbT34r60p8Pdul0dsIk/9gxLuYlexifRJExYc=)
                          7: 323830343a363838343a3a2f33322d3332203d3e20323639363938.roa (hash: A87ATHnOfq+iPA/HmwNUzY0wG/yof3krOeM5w1KT9tc=)
                          8: 34352e3139312e382e302f32322d3232203d3e20323639363938.roa (hash: 7dHPuOJKuplhTXbFAzr/aA6hdank/hEJRdp73pWB7SM=)
                          9: 34352e3139312e392e302f32342d3234203d3e20323639363938.roa (hash: SIqOp4C7cyQZnE8lRZeUR8CavFJ39Zvz6esDq7CWol8=)
                          10: 323830343a363838343a33303a3a2f34342d3434203d3e20323639363938.roa (hash: 1fgKO80FB4ABL5+b2C+NPG36fsWYtxanVGjxKe312KQ=)
                          11: 34352e3139312e31312e302f32342d3234203d3e20323639363938.roa (hash: Ny9Fvky013bp8WK5sYukQjlLTzc5ByEuXAzzHBLFDvM=)
                          12: F221C31BD2AD9D051303E1E7DE991DC00987A722.crl (hash: 02UZRI8nqIYB4sME7WOnk4yjeEnvXbm8CLVCDh8QtkA=)
                          13: 323830343a363838343a3a2f33342d3334203d3e20323639363938.roa (hash: TddILuuim6wsiPeHbiytUjZF+ec63qkswvVMnYreFdA=)
                          14: 34352e3139312e382e302f32332d3233203d3e20323639363938.roa (hash: tOyYqXtTx2ap/Bz/m2tLjpFnUbZ6+UZRAdXmlbI4HP8=)
                          15: 323830343a363838343a343030303a3a2f33342d3334203d3e20323639363938.roa (hash: +7fdmHrVXXTuZCTniFykVc2VsYq63R69rYZzhIGxaUY=)
                          16: 323830343a363838343a383030303a3a2f33332d3333203d3e20323639363938.roa (hash: IUn9Ibzt5h8hvPxl4OpQ9/sJG+I32FM0kwk3S6Jyd+I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl
                          rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 13:35:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:70:c3:f7:66:1b:2c:d1:a0:40:2f:9d:7e:f5:62:1c:ce:5d:42:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
        Validity
            Not Before: Apr  8 11:09:54 2026 GMT
            Not After : Apr  9 13:35:54 2026 GMT
        Subject: CN=328907649BE971A4FB5C076E39CA94E21663A962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5a:d4:ce:fb:66:61:8e:7c:e8:2e:0e:c8:dd:
                    0b:37:e1:3b:2e:6d:e7:f2:47:dc:e4:ff:87:c4:d0:
                    43:15:f9:e2:41:03:ef:ea:4e:cc:68:f3:2a:20:66:
                    09:56:86:3f:f8:83:82:b2:4e:73:74:f4:bc:62:b1:
                    37:d0:9c:57:28:f0:59:f2:61:d9:28:86:52:12:c7:
                    26:06:c5:6a:94:1a:6e:c9:6a:e6:9f:ec:23:f1:89:
                    09:f4:8b:7b:21:4a:5b:ff:1e:4b:d9:7d:68:07:78:
                    e4:8c:5e:bf:44:4a:a2:a2:d6:9d:9a:0e:34:45:8a:
                    8c:4d:1a:cd:c5:49:d2:31:d4:41:14:98:14:73:f6:
                    d0:10:7f:54:58:b1:b4:57:da:7a:be:24:0a:9b:66:
                    d3:31:e9:9f:f1:ae:5e:ff:b1:88:6e:37:43:18:b0:
                    47:fa:85:2c:9b:fe:cd:75:dd:2c:62:6f:ed:50:42:
                    a6:c5:ff:2d:c1:f4:ed:14:a2:e3:71:7f:ba:9d:99:
                    16:e4:fb:97:13:14:4d:a5:d1:ef:e7:e4:6d:01:b2:
                    9c:6a:e0:a1:6d:c9:7b:bf:ae:85:03:d9:63:1e:f7:
                    14:6f:a4:30:25:86:28:9c:e4:fb:d8:0a:60:98:6f:
                    d6:95:47:ec:23:a3:97:2b:d6:63:61:98:70:d6:9e:
                    d8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:89:07:64:9B:E9:71:A4:FB:5C:07:6E:39:CA:94:E2:16:63:A9:62
            X509v3 Authority Key Identifier:
                keyid:F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:41:f8:27:59:42:07:35:7d:98:f1:2e:73:32:cb:5f:aa:14:
         8e:ea:b1:63:31:f3:0a:69:81:5d:9e:fd:d6:5d:14:ca:d8:e6:
         23:98:f5:a0:0e:00:19:ec:50:8b:af:75:38:19:6f:44:27:f8:
         29:d4:ef:63:6c:c2:ca:eb:94:0d:13:84:09:1c:b7:57:ed:b8:
         ff:a7:a0:de:20:69:24:53:13:dd:8f:14:65:c0:c6:d0:00:1c:
         84:3d:ee:95:10:43:42:4f:70:48:cd:ec:e3:65:b9:d6:4e:06:
         a5:88:99:a3:d8:2b:4b:eb:47:5a:6c:f9:5e:24:69:a6:22:98:
         25:3b:32:c5:af:07:71:0e:ba:60:db:b2:d4:f8:91:44:81:e8:
         f6:03:87:5e:ae:fb:3b:fc:cc:9a:64:55:d2:6f:c8:8e:4b:f3:
         3a:d1:60:dd:1e:64:72:e3:11:05:8a:b6:fe:09:a7:6a:0e:95:
         9b:54:23:05:4a:2e:bd:9c:26:3b:cc:3e:21:55:c9:f3:a6:21:
         eb:2a:88:fc:25:39:0d:d4:cf:40:04:a1:ca:54:89:10:8e:cc:
         2b:a9:a2:e8:54:a5:f7:60:ca:32:55:04:de:48:66:ee:f4:12:
         c0:46:3a:f8:9c:55:d0:6e:68:d0:8b:de:dd:79:26:11:42:2f:
         e8:a4:af:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 19:26:28 2026 by rpki-client