Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZVsvD2oq3MF22vSFDH6PRfXkcwXMQXndYPxD7BQUVm2/0/4558F98135571FEE633FDB904DA7FA506AF85CEA.mft
File:                     4558F98135571FEE633FDB904DA7FA506AF85CEA.mft (raw, json)
Hash identifier:          NKG5pE5GAuCCUsqBXgVqIKTriKf1Z+TPfTtwEi8r4ZY=
Subject key identifier:   C7:DA:FB:91:E6:82:9E:C2:F2:24:C1:7B:BC:0E:0B:6D:32:64:8E:EB
Authority key identifier: 45:58:F9:81:35:57:1F:EE:63:3F:DB:90:4D:A7:FA:50:6A:F8:5C:EA
Certificate issuer:       /CN=4558F98135571FEE633FDB904DA7FA506AF85CEA
Certificate serial:       1F144C40AE14B0B62AEEB869E4DE44CB4C615072
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4558F98135571FEE633FDB904DA7FA506AF85CEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZVsvD2oq3MF22vSFDH6PRfXkcwXMQXndYPxD7BQUVm2/0/4558F98135571FEE633FDB904DA7FA506AF85CEA.mft
Manifest number:          3B
Signing time:             Thu 09 Apr 2026 12:19:39 +0000
Manifest this update:     Thu 09 Apr 2026 12:14:39 +0000
Manifest next update:     Fri 10 Apr 2026 16:13:39 +0000
Files and hashes:         1: 3136382e39302e3231372e302f32342d3234203d3e20323635323936.roa (hash: /Vib+0RDu4WzMG78ZjXncYleJY2QRdJGPeTKufgA79Y=)
                          2: 3136382e39302e3231392e302f32342d3234203d3e20323635323936.roa (hash: oFbsyPvtCAGAu84baLsCzdmYVxwMbzrn6oKoIE2M8RE=)
                          3: 3136382e39302e3231362e302f32332d3233203d3e20323635323936.roa (hash: SGbXudjZdSorTdYtGXBlSQ0sk0a8o0KR3sVcAN8Kz6s=)
                          4: 3136382e39302e3231362e302f32342d3234203d3e20323635323936.roa (hash: 8oXH0ocEz90IIk+HmaViJZ59DDimjH2q14ZPlxzMj/I=)
                          5: 4558F98135571FEE633FDB904DA7FA506AF85CEA.crl (hash: o5/KFfXnkhgnfGg2Z9azSWhw2QtiiMisy1uzwdaEw2M=)
                          6: 323830343a326461633a3a2f33372d3337203d3e20323635323936.roa (hash: blaylaD2kvYngjW8qvCWTUzHGkY1aJ26KZKr4cdX4sc=)
                          7: 3136382e39302e3231382e302f32342d3234203d3e20323635323936.roa (hash: 1ZJHVNR6wcuK1dLTf6VPEZtwbWoFN7WFd0GMCRGPDwI=)
                          8: 323830343a326461633a3a2f33352d3335203d3e20323635323936.roa (hash: 5K12mxTq6WD/PBsTiwxgP28d7O7YsMcnvIOd8tr/S9k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ZVsvD2oq3MF22vSFDH6PRfXkcwXMQXndYPxD7BQUVm2/0/4558F98135571FEE633FDB904DA7FA506AF85CEA.crl
                          rsync://rpki-repo.registro.br/repo/2ZVsvD2oq3MF22vSFDH6PRfXkcwXMQXndYPxD7BQUVm2/0/4558F98135571FEE633FDB904DA7FA506AF85CEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4558F98135571FEE633FDB904DA7FA506AF85CEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 16:07:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:14:4c:40:ae:14:b0:b6:2a:ee:b8:69:e4:de:44:cb:4c:61:50:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4558F98135571FEE633FDB904DA7FA506AF85CEA
        Validity
            Not Before: Apr  9 12:14:39 2026 GMT
            Not After : Apr 10 16:13:39 2026 GMT
        Subject: CN=C7DAFB91E6829EC2F224C17BBC0E0B6D32648EEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d6:ef:0c:cc:6c:ab:79:a0:41:9d:c9:af:41:
                    ca:78:7c:ef:a7:93:3e:82:fd:ce:ca:dd:c5:78:de:
                    12:2e:73:a4:6e:c8:f4:57:5a:f5:4f:69:c2:6b:b1:
                    7e:fb:79:f1:22:db:f3:74:02:07:0c:f4:25:10:5f:
                    23:39:2e:c1:14:93:04:71:88:d5:c4:51:82:15:42:
                    19:7b:e5:50:26:d6:3f:da:70:68:ba:28:73:b4:cb:
                    d2:a9:73:36:da:25:50:55:fe:1d:ca:52:95:dd:f0:
                    c5:5a:dc:ba:d7:03:03:b0:27:c7:a9:2e:45:b2:c4:
                    b0:b0:eb:b0:ce:a5:ca:f9:e1:9b:86:68:25:c1:1f:
                    fa:db:c1:63:f0:05:5c:46:c8:37:1d:b9:bc:d1:90:
                    74:e6:19:ec:55:ff:2a:a7:a9:39:22:3f:13:87:7d:
                    3d:a8:bf:d1:91:87:8a:81:d4:48:fb:9a:ec:11:dd:
                    9f:cf:70:4b:e7:c6:46:2b:65:3a:e2:b7:77:51:2c:
                    98:3c:62:06:2c:4a:8e:52:17:e5:c8:d2:f4:95:5b:
                    6d:28:c2:f6:49:44:d5:e1:99:7c:e2:8a:0b:74:64:
                    e2:c6:fe:7a:01:2a:62:db:da:d9:c9:6b:bc:b9:74:
                    a7:e3:a0:6a:23:bc:29:b9:8e:06:3d:aa:25:87:78:
                    ae:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:DA:FB:91:E6:82:9E:C2:F2:24:C1:7B:BC:0E:0B:6D:32:64:8E:EB
            X509v3 Authority Key Identifier:
                keyid:45:58:F9:81:35:57:1F:EE:63:3F:DB:90:4D:A7:FA:50:6A:F8:5C:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZVsvD2oq3MF22vSFDH6PRfXkcwXMQXndYPxD7BQUVm2/0/4558F98135571FEE633FDB904DA7FA506AF85CEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4558F98135571FEE633FDB904DA7FA506AF85CEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZVsvD2oq3MF22vSFDH6PRfXkcwXMQXndYPxD7BQUVm2/0/4558F98135571FEE633FDB904DA7FA506AF85CEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ea:ca:1c:ed:6f:e4:59:3f:70:04:8c:db:09:d3:18:8e:70:
         ac:df:cb:50:95:46:68:ab:0c:5a:91:17:03:90:13:d2:72:c3:
         aa:32:33:50:03:80:6a:2e:05:ba:91:b3:67:23:77:93:0a:2f:
         a2:af:a8:bb:3a:61:75:6e:e8:2b:c4:0c:f6:33:0b:58:f8:11:
         e2:10:ec:35:22:50:c3:47:4d:9d:17:2b:2e:4c:25:8a:63:5d:
         02:42:3e:c4:be:65:95:29:b4:43:fc:59:00:b7:22:4d:2b:e9:
         93:7a:84:87:f2:41:9c:91:45:bc:39:91:9d:b1:3e:9c:17:1f:
         e6:31:3d:4e:68:ec:6c:50:ee:3b:a5:9b:a6:21:d7:14:9a:38:
         14:b5:fd:56:55:29:08:fe:6b:3e:24:fc:72:91:a0:57:b0:8b:
         33:54:50:6d:25:63:bc:5b:5f:f9:47:7b:0a:f7:12:a1:87:ef:
         d1:10:f2:fb:2d:01:90:dc:33:22:99:c0:d0:57:65:4f:74:e9:
         f8:f0:05:e7:20:ab:b7:9c:85:ba:5e:e5:5b:f2:24:1a:a2:a7:
         63:bb:81:32:c4:6e:2a:bc:f9:7c:e6:36:47:b6:4a:45:6f:99:
         16:09:1e:61:d1:5f:a7:7a:09:80:3c:ae:c2:0a:39:65:5e:54:
         c0:bc:cd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 15:31:24 2026 by rpki-client