Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.mft
File:                     FDD143F62E397A87EC22FC239E7DA2435AD80D9E.mft (raw, json)
Hash identifier:          l5BjlMuvYVjBh3K4Zz4ST3uIVnfFQVqgYrBk91WveLg=
Subject key identifier:   17:1B:3D:68:93:12:42:10:B2:A0:29:FE:39:D9:E3:E5:23:A5:DB:06
Authority key identifier: FD:D1:43:F6:2E:39:7A:87:EC:22:FC:23:9E:7D:A2:43:5A:D8:0D:9E
Certificate issuer:       /CN=FDD143F62E397A87EC22FC239E7DA2435AD80D9E
Certificate serial:       38DDE4A9EFA8A2FD6A8C0D582B91CF53FF6D1ADD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.mft
Manifest number:          01D3
Signing time:             Wed 08 Apr 2026 23:29:39 +0000
Manifest this update:     Wed 08 Apr 2026 23:24:39 +0000
Manifest next update:     Fri 10 Apr 2026 02:56:39 +0000
Files and hashes:         1: 323830343a363139633a3a2f33322d313238203d3e20323639323435.roa (hash: mtrj5RBcEprRKB+SV/6DJMomPO1OHWVCC57NOeishTk=)
                          2: 34352e3138322e3234382e302f32322d3332203d3e20323639323435.roa (hash: uUfKYD3DmH4ZJkMCPgvfZ4TPG/ypI9A1J7Lx1IYgs5Y=)
                          3: FDD143F62E397A87EC22FC239E7DA2435AD80D9E.crl (hash: kZe/fj1fzUjlvI87eQuxPYBXGxaoQKsedJ3wC4rxKW4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.crl
                          rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 02:56:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:dd:e4:a9:ef:a8:a2:fd:6a:8c:0d:58:2b:91:cf:53:ff:6d:1a:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDD143F62E397A87EC22FC239E7DA2435AD80D9E
        Validity
            Not Before: Apr  8 23:24:39 2026 GMT
            Not After : Apr 10 02:56:39 2026 GMT
        Subject: CN=171B3D6893124210B2A029FE39D9E3E523A5DB06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ec:bc:39:2c:08:e7:21:ae:93:cf:60:35:88:
                    09:7d:90:9f:ab:ae:86:a3:00:10:8e:dc:12:c4:34:
                    45:bc:9b:51:1c:4a:3b:f8:7f:01:2d:60:d4:ef:0e:
                    f5:30:1e:d1:ce:57:bb:5e:77:6e:28:7e:ec:69:de:
                    de:50:48:9b:87:bd:1f:5e:ac:12:13:34:b3:4a:9b:
                    00:f4:8e:d8:8f:1b:f6:45:81:88:a5:fb:c5:ee:98:
                    8a:66:cc:c2:ea:cd:45:6f:29:60:dd:d8:b7:60:58:
                    89:b1:25:68:5b:f7:50:6c:ec:ff:61:fc:40:a4:d1:
                    61:74:38:ef:a3:20:5b:76:43:3a:39:ab:cc:d9:2a:
                    a6:73:2a:83:00:8b:03:7e:65:6e:b7:d1:4d:76:e3:
                    3a:50:19:2b:67:50:34:f9:61:d6:ab:83:ce:76:4d:
                    67:b2:08:46:c7:1a:b3:14:5b:14:29:ea:21:0e:0f:
                    92:15:e3:87:ac:05:9c:40:e6:05:dd:59:d2:de:38:
                    25:df:25:77:40:92:ae:c8:0d:2e:68:f2:c3:9b:2e:
                    c6:00:46:2b:78:d8:c4:6f:2d:be:b8:f0:5a:e6:d4:
                    54:b7:af:92:01:3c:ef:88:22:e5:f4:11:cb:3e:c3:
                    1e:5b:dc:12:dc:56:ec:fd:05:12:6a:b1:66:1d:e5:
                    b6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1B:3D:68:93:12:42:10:B2:A0:29:FE:39:D9:E3:E5:23:A5:DB:06
            X509v3 Authority Key Identifier:
                keyid:FD:D1:43:F6:2E:39:7A:87:EC:22:FC:23:9E:7D:A2:43:5A:D8:0D:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ca:2c:d6:41:2e:b3:61:fe:0d:d8:18:19:c6:da:13:c5:8d:
         f6:6b:de:a6:92:36:fa:b0:e2:f3:7a:ba:3b:70:f5:7b:6e:1f:
         5f:59:ce:76:91:fe:ac:7c:14:24:66:f8:9d:9b:8f:3f:53:74:
         b4:5d:80:04:12:6b:16:48:07:17:6a:e0:31:37:9c:13:a5:7f:
         0f:b4:14:6f:19:38:a8:59:a4:3c:21:25:49:5d:8c:65:88:03:
         ad:9a:44:88:1c:9b:8f:f2:5e:c6:ba:dd:21:ee:0d:c4:e7:a2:
         3a:b0:07:dc:4b:fc:3a:61:8e:54:30:4f:8b:cd:1e:54:59:c5:
         a0:ef:10:24:17:08:a2:b2:22:78:0d:e7:2a:31:4a:f9:55:80:
         d4:85:7b:87:9e:fe:8c:2b:12:5b:8d:6f:db:8f:f5:99:2e:09:
         57:2a:20:48:02:a3:e0:1e:9f:87:3f:8b:e1:64:f4:45:d1:74:
         90:47:d5:9e:d1:c6:0a:db:95:39:42:dc:0a:c3:6d:4c:10:a8:
         f0:5a:38:e2:4d:13:9a:69:92:03:43:0b:77:fe:9a:61:ca:3d:
         a8:c2:02:5b:13:45:e0:c4:e7:03:99:c9:c4:1a:0d:3b:55:18:
         38:b0:01:fa:a9:b5:0d:ab:4a:70:eb:ba:34:16:b1:d0:cd:f8:
         df:44:6b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:28:04 2026 by rpki-client