Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft
File:                     3DFAB11D75C819D05773554EBACF15CD75341EF8.mft (raw, json)
Hash identifier:          wAlEPGRuj/spju+VbQeoV0m86vEfvDWbOsd+nTIpgWs=
Subject key identifier:   09:B5:90:EF:DB:AB:22:CC:1C:B7:3E:22:F9:EC:A1:31:66:4E:95:AA
Authority key identifier: 3D:FA:B1:1D:75:C8:19:D0:57:73:55:4E:BA:CF:15:CD:75:34:1E:F8
Certificate issuer:       /CN=3DFAB11D75C819D05773554EBACF15CD75341EF8
Certificate serial:       7D32BE27C799439BB040A32D73201651442CD74B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft
Manifest number:          0452
Signing time:             Wed 08 Apr 2026 11:00:00 +0000
Manifest this update:     Wed 08 Apr 2026 10:55:00 +0000
Manifest next update:     Thu 09 Apr 2026 11:00:00 +0000
Files and hashes:         1: 3230302e392e3131362e302f32322d3234203d3e20323731333238.roa (hash: 1+tu23htzbeHdf9eZWTCp755ljvCiaLehmRKfzaiEXM=)
                          2: 323830343a373963633a3a2f33322d3334203d3e20323731333238.roa (hash: uKDSVQIAmd/wFpMVLHPmFPmf1kT8GFm8akZsk43WZNw=)
                          3: 3DFAB11D75C819D05773554EBACF15CD75341EF8.crl (hash: 9cyq1sZwYa4WnUs7s7xbMv0wq2Jrzrc2OpG5H/jdeYw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.crl
                          rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:32:be:27:c7:99:43:9b:b0:40:a3:2d:73:20:16:51:44:2c:d7:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DFAB11D75C819D05773554EBACF15CD75341EF8
        Validity
            Not Before: Apr  8 10:55:00 2026 GMT
            Not After : Apr  9 11:00:00 2026 GMT
        Subject: CN=3082010A0282010100CF3D658310BDB84F7FE958A50E27D2D4B70D5D44875BB3F8EF8B939C9B26DCEEC50A36AE761F6C6A426C93071AD451672028ECC6ABF2129504D0640461E6ABD29B9572C40137D20AB0AB3A4C43254278A37FD57B994A9D732304406D1B7C95A41B9F6B643B3098529829648BB032E016DF3710F9156DEF84417D74DB299FD139330F2F65FB3654992FD75CCE9DE00CB7AB645B5911A90380FD1BF2C9C25D8B7763658EECDBCDC3206ACA5235CCC77F8A10357F3534C607F2B7A13DA2DCA1DBF7C958831924E202C745BDFC59933DCF4110FEFC7ED494E87047404D271398456AE982F9823208C28AEDECBEB4B5409009E4CDFE6C839727FE184DA5BFA21ED99B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3d:65:83:10:bd:b8:4f:7f:e9:58:a5:0e:27:
                    d2:d4:b7:0d:5d:44:87:5b:b3:f8:ef:8b:93:9c:9b:
                    26:dc:ee:c5:0a:36:ae:76:1f:6c:6a:42:6c:93:07:
                    1a:d4:51:67:20:28:ec:c6:ab:f2:12:95:04:d0:64:
                    04:61:e6:ab:d2:9b:95:72:c4:01:37:d2:0a:b0:ab:
                    3a:4c:43:25:42:78:a3:7f:d5:7b:99:4a:9d:73:23:
                    04:40:6d:1b:7c:95:a4:1b:9f:6b:64:3b:30:98:52:
                    98:29:64:8b:b0:32:e0:16:df:37:10:f9:15:6d:ef:
                    84:41:7d:74:db:29:9f:d1:39:33:0f:2f:65:fb:36:
                    54:99:2f:d7:5c:ce:9d:e0:0c:b7:ab:64:5b:59:11:
                    a9:03:80:fd:1b:f2:c9:c2:5d:8b:77:63:65:8e:ec:
                    db:cd:c3:20:6a:ca:52:35:cc:c7:7f:8a:10:35:7f:
                    35:34:c6:07:f2:b7:a1:3d:a2:dc:a1:db:f7:c9:58:
                    83:19:24:e2:02:c7:45:bd:fc:59:93:3d:cf:41:10:
                    fe:fc:7e:d4:94:e8:70:47:40:4d:27:13:98:45:6a:
                    e9:82:f9:82:32:08:c2:8a:ed:ec:be:b4:b5:40:90:
                    09:e4:cd:fe:6c:83:97:27:fe:18:4d:a5:bf:a2:1e:
                    d9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B5:90:EF:DB:AB:22:CC:1C:B7:3E:22:F9:EC:A1:31:66:4E:95:AA
            X509v3 Authority Key Identifier:
                keyid:3D:FA:B1:1D:75:C8:19:D0:57:73:55:4E:BA:CF:15:CD:75:34:1E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:3f:a0:bc:97:2d:ea:04:ed:92:81:89:c6:d0:e5:b5:31:ee:
         23:2b:90:7d:62:f4:c8:be:36:f3:af:72:cb:5f:8e:89:50:96:
         29:fd:fc:91:c3:be:a3:9c:bf:ce:49:81:92:f1:e6:9d:28:ae:
         e4:50:d7:bd:df:ea:97:34:73:3e:e7:1d:bf:7e:4f:6c:5e:d2:
         b5:2c:db:a2:91:0e:ba:9a:ee:c2:61:90:b8:d0:20:37:08:80:
         33:4a:53:07:4a:e8:df:5b:ce:09:cd:4b:39:aa:2f:ee:3a:2a:
         e5:80:f6:a7:17:19:90:7d:e1:3b:06:2a:99:f6:c7:19:47:8d:
         1b:7e:52:7b:5f:cc:ea:bd:e1:e5:a9:59:5a:ee:cc:53:8c:be:
         fc:97:4b:60:4a:1f:32:00:85:31:df:fd:e8:19:3c:19:61:41:
         ad:87:99:83:16:30:f0:f1:f5:f1:25:16:74:ff:94:69:59:f8:
         ed:df:79:77:9d:fc:29:c2:a1:6d:4a:8d:01:2f:ec:a2:c8:f6:
         1c:42:4b:5a:e0:0d:68:96:46:20:96:d8:c5:b7:63:9a:7b:07:
         2e:2d:7c:08:ac:e2:a9:53:67:27:02:78:65:0a:41:11:24:b7:
         4d:97:c2:29:57:25:20:96:16:85:2e:e8:7d:d8:32:1b:84:42:
         88:d7:23:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 15:44:58 2026 by rpki-client