Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2TJnLMFz36csZxidBrhAnaR88pYzpGadyNYbrvMKr5WD/0/1D1328217C2BD2863C87D2938A271517414BABF6.mft
File:                     1D1328217C2BD2863C87D2938A271517414BABF6.mft (raw, json)
Hash identifier:          NL8wpqFSnXad02ZRhAicSQYm3satPJ5/rwO+7s4PJdE=
Subject key identifier:   D6:D8:AE:9F:F6:70:B7:6A:76:86:41:90:F8:BA:91:1F:80:7D:3B:2E
Authority key identifier: 1D:13:28:21:7C:2B:D2:86:3C:87:D2:93:8A:27:15:17:41:4B:AB:F6
Certificate issuer:       /CN=1D1328217C2BD2863C87D2938A271517414BABF6
Certificate serial:       11CA8983647AF23CA610EAA53E32072D087A81A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D1328217C2BD2863C87D2938A271517414BABF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2TJnLMFz36csZxidBrhAnaR88pYzpGadyNYbrvMKr5WD/0/1D1328217C2BD2863C87D2938A271517414BABF6.mft
Manifest number:          019B
Signing time:             Thu 09 Apr 2026 07:08:45 +0000
Manifest this update:     Thu 09 Apr 2026 07:03:45 +0000
Manifest next update:     Fri 10 Apr 2026 10:38:45 +0000
Files and hashes:         1: 323830343a393432633a3a2f33322d3438203d3e20323734383236.roa (hash: Z311etJiWQKLn+JmnE48W3qZSkPhLk9m6+lP+52N5B0=)
                          2: 1D1328217C2BD2863C87D2938A271517414BABF6.crl (hash: w9uHB94zzG4GLnYZQcToFvVk51B3dzoYlDYK8llmQ3Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2TJnLMFz36csZxidBrhAnaR88pYzpGadyNYbrvMKr5WD/0/1D1328217C2BD2863C87D2938A271517414BABF6.crl
                          rsync://rpki-repo.registro.br/repo/2TJnLMFz36csZxidBrhAnaR88pYzpGadyNYbrvMKr5WD/0/1D1328217C2BD2863C87D2938A271517414BABF6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D1328217C2BD2863C87D2938A271517414BABF6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 10:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ca:89:83:64:7a:f2:3c:a6:10:ea:a5:3e:32:07:2d:08:7a:81:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D1328217C2BD2863C87D2938A271517414BABF6
        Validity
            Not Before: Apr  9 07:03:45 2026 GMT
            Not After : Apr 10 10:38:45 2026 GMT
        Subject: CN=D6D8AE9FF670B76A76864190F8BA911F807D3B2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4f:b3:38:88:84:16:a5:05:f0:34:62:f3:cc:
                    62:97:d7:1f:09:02:05:44:d8:e4:64:ef:cd:a9:9d:
                    4c:e5:62:7e:4e:58:62:a5:d0:47:34:eb:12:96:b2:
                    23:52:6d:49:6d:e3:2d:0b:53:aa:b3:ac:89:84:ac:
                    16:ac:6c:73:9b:bd:44:d6:96:e1:25:3c:ad:c3:66:
                    6f:2c:a6:2b:18:f4:46:42:17:bd:e3:9d:9c:30:8e:
                    9c:eb:ea:e1:8b:d2:9b:7c:16:63:bf:29:36:1d:96:
                    27:b3:6d:97:b2:bf:a4:cd:17:7c:0e:41:12:79:5d:
                    ca:df:6a:65:c0:83:1f:d0:d3:73:5f:32:8d:79:d6:
                    ae:e9:b2:6a:5b:00:e0:8c:9e:2a:b6:f8:6e:55:8a:
                    bf:1d:71:db:13:0e:3f:66:31:3b:21:a2:29:3a:f6:
                    a6:c9:87:2d:8a:04:3a:61:1a:ba:bf:21:2b:c6:08:
                    d5:e3:ca:66:2c:14:47:93:6c:14:79:73:ee:1e:e0:
                    40:1e:74:39:0e:6e:f2:5c:b8:3e:23:20:d3:34:f0:
                    b8:87:4d:eb:6b:4f:3b:c0:2b:0c:de:17:7d:8d:50:
                    72:bd:6d:2c:68:a5:aa:02:8a:60:aa:9e:df:9e:ed:
                    d5:84:e4:b5:85:3f:dc:83:ba:d5:79:c0:b0:7c:63:
                    02:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D8:AE:9F:F6:70:B7:6A:76:86:41:90:F8:BA:91:1F:80:7D:3B:2E
            X509v3 Authority Key Identifier:
                keyid:1D:13:28:21:7C:2B:D2:86:3C:87:D2:93:8A:27:15:17:41:4B:AB:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2TJnLMFz36csZxidBrhAnaR88pYzpGadyNYbrvMKr5WD/0/1D1328217C2BD2863C87D2938A271517414BABF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D1328217C2BD2863C87D2938A271517414BABF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2TJnLMFz36csZxidBrhAnaR88pYzpGadyNYbrvMKr5WD/0/1D1328217C2BD2863C87D2938A271517414BABF6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:48:c8:a1:b6:61:5e:dd:f1:3f:4e:08:17:d8:de:5c:b4:73:
         f8:5c:34:45:23:b3:fb:d3:d5:db:29:1e:4a:53:f3:0e:bd:cb:
         f7:60:ff:14:6f:30:4e:68:d7:78:23:53:bb:75:29:4f:3d:d3:
         cf:32:c7:b1:9f:d6:cb:08:69:78:96:bd:c5:83:a7:c4:a4:dd:
         42:3f:dc:c9:05:44:02:c3:ab:b2:d7:10:48:a3:76:0b:fd:8c:
         51:d0:af:95:a0:fd:7f:df:bf:96:8b:f9:bc:d6:e2:41:82:4e:
         0d:4d:0c:36:6d:ce:d7:d3:12:48:ac:2b:fd:e8:03:94:4c:b2:
         93:fc:96:27:e6:f1:aa:d6:16:a2:12:81:11:78:70:d8:88:64:
         c3:bf:02:e0:59:a9:e6:47:4e:9f:e8:f4:b7:b1:4c:48:6b:46:
         86:86:f4:c4:2c:4b:fb:f0:40:d4:92:f9:49:31:9f:b1:5c:87:
         e1:da:1b:03:77:f1:69:4d:44:85:d4:c7:bf:4d:74:ac:5e:e6:
         d2:0c:8a:58:59:11:85:6e:f5:cc:08:56:f0:3e:08:e6:eb:6b:
         1a:74:ba:4f:06:bb:75:e9:af:30:42:8f:bf:b3:e3:22:76:f1:
         ce:d2:e4:3e:c8:46:d8:c0:31:74:ec:34:c1:a8:74:0d:46:b7:
         d9:e2:36:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 13:02:47 2026 by rpki-client