Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft
File:                     DDA4FC5B8E458E28765A866099AD929BAF665339.mft (raw, json)
Hash identifier:          qRDgvkUdtiEQUfPFxbja2pK0jMU+L3E8jUQdeTKZt+Y=
Subject key identifier:   8C:88:90:08:46:AE:F8:70:35:2C:92:4F:80:57:1D:78:18:E6:C9:6B
Authority key identifier: DD:A4:FC:5B:8E:45:8E:28:76:5A:86:60:99:AD:92:9B:AF:66:53:39
Certificate issuer:       /CN=DDA4FC5B8E458E28765A866099AD929BAF665339
Certificate serial:       238FC59EDEADC94F29578C89D4EDBC05C3FB56D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA4FC5B8E458E28765A866099AD929BAF665339.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft
Manifest number:          0308
Signing time:             Thu 09 Apr 2026 05:40:34 +0000
Manifest this update:     Thu 09 Apr 2026 05:35:34 +0000
Manifest next update:     Fri 10 Apr 2026 07:21:34 +0000
Files and hashes:         1: 3138372e37332e3138342e302f32322d3234203d3e20323730353137.roa (hash: nMQXkBs+poUjtuyc4CkiehDpQxelS0VJ1cjAIr/UgbA=)
                          2: 323830343a366432633a3a2f33322d313238203d3e20323730353137.roa (hash: FgEv7DHx8gpoUEHmCHDzneQcmOGaXyHJxKnB2umwj5Q=)
                          3: DDA4FC5B8E458E28765A866099AD929BAF665339.crl (hash: fkdVkI0TxZPiNI98q3/deF7Gc5XFVlG25V2E9vNYgeM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.crl
                          rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA4FC5B8E458E28765A866099AD929BAF665339.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 07:21:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:8f:c5:9e:de:ad:c9:4f:29:57:8c:89:d4:ed:bc:05:c3:fb:56:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDA4FC5B8E458E28765A866099AD929BAF665339
        Validity
            Not Before: Apr  9 05:35:34 2026 GMT
            Not After : Apr 10 07:21:34 2026 GMT
        Subject: CN=8C88900846AEF870352C924F80571D7818E6C96B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:79:d3:b3:5a:b2:71:55:28:c2:6b:c4:73:a8:
                    01:d1:48:83:be:4c:86:e8:ac:37:9d:6e:44:86:6d:
                    70:33:95:9f:6e:16:27:42:e5:fd:ca:1d:e4:ad:56:
                    93:07:39:97:5f:03:db:2e:6d:70:b2:d7:00:a1:49:
                    f7:da:56:ee:5d:ef:43:a1:e1:52:60:0e:10:eb:fe:
                    68:08:38:35:aa:60:a5:bb:ec:9c:7c:fc:a9:af:57:
                    f9:7a:6e:d1:ec:d9:14:26:ad:9a:48:43:3f:d5:bd:
                    55:c9:db:b5:3a:2c:dc:a9:40:67:c3:da:3c:e5:b8:
                    d2:90:f9:b3:93:95:88:94:d8:26:72:d9:82:17:60:
                    98:59:3b:42:df:2a:ac:72:43:92:06:d2:43:f8:79:
                    c0:99:ee:1a:bf:aa:f8:c0:01:13:a2:f6:91:ac:7d:
                    b8:87:46:42:9e:9f:15:2d:1c:15:ad:c2:36:1e:1e:
                    ad:9b:92:ef:92:d5:2f:45:88:cf:2f:53:ef:94:bb:
                    a4:fc:c0:0c:10:1f:fa:bb:c6:c1:f6:bd:c0:81:f9:
                    59:a5:87:1f:32:c5:e2:e1:5a:89:78:5c:44:0a:e5:
                    17:cf:29:7c:bb:cd:7f:46:d1:85:16:14:81:04:93:
                    4b:23:36:8e:87:c6:60:22:11:ae:6f:c4:43:e3:52:
                    11:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:88:90:08:46:AE:F8:70:35:2C:92:4F:80:57:1D:78:18:E6:C9:6B
            X509v3 Authority Key Identifier:
                keyid:DD:A4:FC:5B:8E:45:8E:28:76:5A:86:60:99:AD:92:9B:AF:66:53:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA4FC5B8E458E28765A866099AD929BAF665339.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e6:bb:ea:e5:4a:41:59:94:3c:cc:82:0d:ca:a1:e5:57:b7:
         eb:e8:b8:9a:63:ec:a2:fc:d8:5f:26:ba:42:9e:c3:98:f1:ff:
         69:90:df:48:82:d2:7d:28:9a:b9:6e:1d:db:d7:27:41:7e:5e:
         fc:2d:7e:97:6a:b5:f0:d8:51:da:d3:21:80:70:10:4d:4c:c0:
         86:ae:74:6b:d8:b3:91:ea:20:62:d8:9b:ba:03:86:ca:9e:55:
         c7:04:30:b1:f3:d4:38:5c:09:34:79:ae:a8:1d:6f:ff:50:0f:
         cf:1f:6a:bd:8b:19:7e:85:33:a3:94:cf:bc:81:9c:de:64:91:
         25:6f:81:1a:ef:6e:7a:21:df:a2:3f:73:d0:c0:cf:7e:99:11:
         c4:4b:03:8e:94:3c:dd:ae:88:f0:6f:5e:f7:b2:92:3b:15:bc:
         19:09:02:ce:54:e5:a6:f4:01:ed:a9:10:39:cd:2b:90:ce:03:
         bc:8d:ee:55:1c:15:07:0a:18:6b:8a:26:e3:f9:73:55:26:e9:
         47:dc:39:d6:5b:2a:32:64:cc:20:c5:ea:a4:f2:3f:d4:ad:7e:
         62:2b:60:46:2c:ec:d3:ea:05:6d:f8:87:32:b2:c7:b5:4d:38:
         46:4f:d9:b6:21:1c:86:61:7a:56:93:29:57:9b:92:ec:b4:aa:
         37:40:a3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:43:13 2026 by rpki-client