Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.mft
File:                     03D8B16C2417C68C7325B3DF2EAD45A1208FA243.mft (raw, json)
Hash identifier:          B6dtmLJ3l0J2B1kuLBsf/EChne8IdwFxQ028Rkre0oY=
Subject key identifier:   D9:E3:59:2B:57:89:A5:D8:91:6B:09:61:45:1B:CF:36:EB:E1:E4:84
Authority key identifier: 03:D8:B1:6C:24:17:C6:8C:73:25:B3:DF:2E:AD:45:A1:20:8F:A2:43
Certificate issuer:       /CN=03D8B16C2417C68C7325B3DF2EAD45A1208FA243
Certificate serial:       271B2B8A927C00538AA52137FF22B520FFB75870
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.mft
Manifest number:          1E
Signing time:             Wed 08 Apr 2026 04:03:36 +0000
Manifest this update:     Wed 08 Apr 2026 03:58:36 +0000
Manifest next update:     Thu 09 Apr 2026 07:46:36 +0000
Files and hashes:         1: 03D8B16C2417C68C7325B3DF2EAD45A1208FA243.crl (hash: qzqsu001vsheU2rNwGl228Z4yUcO5dpu8wyXz1Y/gBg=)
                          2: 3137392e3130392e3136302e302f32302d3332203d3e20323633303837.roa (hash: 9009pfqHHSDfQmA16n3BSiSnUou3SNM0grpR12t1Qj4=)
                          3: 3137372e3133372e3230382e302f32302d3332203d3e20323633303837.roa (hash: T0Uz/Sk34aQgcSOQm+RkjvRwBySKQ/8Q27JSs8zyBXQ=)
                          4: 323830343a3937383a3a2f33322d313238203d3e20323633303837.roa (hash: DAOPSVl3VjIiB/gugA2mB5ffypy61TmAdTW/kGDMNKg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.crl
                          rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 07:46:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:1b:2b:8a:92:7c:00:53:8a:a5:21:37:ff:22:b5:20:ff:b7:58:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03D8B16C2417C68C7325B3DF2EAD45A1208FA243
        Validity
            Not Before: Apr  8 03:58:36 2026 GMT
            Not After : Apr  9 07:46:36 2026 GMT
        Subject: CN=D9E3592B5789A5D8916B0961451BCF36EBE1E484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:49:fe:59:71:c0:b8:68:4f:3e:8e:e8:df:3b:
                    d2:f1:06:e0:c9:af:91:72:65:12:ae:f0:66:80:7f:
                    6d:a8:f0:62:a0:93:0d:dc:2a:da:16:99:92:52:dc:
                    6a:e5:27:4b:2d:e1:94:30:38:33:09:a4:19:47:1e:
                    54:0f:35:1f:17:4b:ba:75:f1:0c:72:79:e6:1d:a5:
                    78:35:dd:6b:1b:ef:d9:8b:1e:0d:26:aa:79:0c:cb:
                    fb:e5:4d:c2:71:a6:e0:3d:9c:89:b6:5a:2b:fe:7d:
                    b1:d3:8c:1a:24:45:57:05:95:ff:c6:19:cf:5f:b7:
                    c9:db:a8:25:06:65:dc:e0:62:4e:5e:68:3f:73:cb:
                    78:43:1c:99:d1:0f:15:70:69:9c:f9:fe:17:9d:de:
                    1e:39:db:a1:85:47:ff:a2:7d:ee:5f:e6:5f:87:11:
                    64:70:8a:5d:28:7a:56:e8:73:78:77:5e:40:b5:df:
                    79:7a:44:1f:fd:56:67:5b:98:27:3a:75:2d:f7:01:
                    78:3a:0e:3f:46:ef:12:c8:42:46:6c:78:e9:ed:f1:
                    13:9f:23:ff:3a:e7:60:8e:fa:f4:32:e1:ab:02:0a:
                    24:b3:41:24:10:47:a9:f4:b3:a7:43:b8:fd:74:d4:
                    e9:af:c2:bf:4f:d3:f0:d6:67:ff:16:21:05:a6:62:
                    2c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E3:59:2B:57:89:A5:D8:91:6B:09:61:45:1B:CF:36:EB:E1:E4:84
            X509v3 Authority Key Identifier:
                keyid:03:D8:B1:6C:24:17:C6:8C:73:25:B3:DF:2E:AD:45:A1:20:8F:A2:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:b9:43:5d:b8:0c:a6:64:36:1e:ff:59:85:37:a2:9f:e2:66:
         2d:02:c4:b9:da:4c:e1:ab:82:e7:26:27:74:39:8d:71:67:0c:
         a8:85:9d:cb:59:20:dd:a5:06:ce:1a:96:8b:45:9f:27:10:0a:
         a2:8e:96:5a:74:2f:ed:90:8b:b4:54:02:7c:a4:a7:32:17:7d:
         f6:e2:23:6a:1b:09:16:f6:6e:88:06:71:6d:c3:e7:d1:dd:a4:
         e9:71:a7:ad:6d:d7:59:db:18:eb:10:d7:9b:21:7d:29:12:c9:
         30:02:0b:c2:1c:2a:28:00:77:96:f5:68:c8:99:b1:af:c0:db:
         e3:74:28:fb:75:7b:0d:7b:4e:7c:74:4c:81:ee:d5:7f:97:1b:
         c2:76:15:8d:5d:c8:3e:e8:07:b4:15:16:5c:d7:a1:61:ac:ca:
         25:ed:f9:4d:4b:2d:6a:db:ce:40:91:b1:1b:84:1e:24:f3:6d:
         06:62:05:16:e1:e5:79:68:c9:f9:da:28:1a:16:48:d0:af:81:
         05:a7:20:80:02:bf:6c:f9:8e:40:cf:78:e5:c5:53:a8:35:19:
         69:2a:5a:84:8d:c7:a1:58:72:cf:1f:1f:16:92:30:f7:67:6e:
         d1:91:c2:7f:8e:f3:bb:4f:f4:c1:d0:de:2c:3c:3e:d3:ad:33:
         63:91:09:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:50:32 2026 by rpki-client