Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
File:                     67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft (raw, json)
Hash identifier:          bh0RzWfnZjb7G2Ljpe4IChUWbsIXF2t4DTtHOA2IAY8=
Subject key identifier:   C0:A7:DB:73:83:C3:EB:E7:44:7A:D4:CE:9A:FB:A2:51:D9:0A:DF:37
Authority key identifier: 67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82
Certificate issuer:       /CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
Certificate serial:       4215466E005B6548A1499A771C176053F0FF4869
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
Manifest number:          01DF
Signing time:             Thu 09 Apr 2026 07:32:12 +0000
Manifest this update:     Thu 09 Apr 2026 07:27:12 +0000
Manifest next update:     Fri 10 Apr 2026 09:50:12 +0000
Files and hashes:         1: 34352e3233342e3231322e302f32342d3234203d3e20323637333733.roa (hash: 66UTDHyS+o15o1DHofusYW90OVLhm4399N8Tex9s0yQ=)
                          2: 323830343a346337633a383030303a3a2f33332d3333203d3e20323637333733.roa (hash: h1dDA5ZyeQXs/UC/Gdy8hngAZLXhdJ17+oiJW1xH4HU=)
                          3: 34352e3233342e3231352e302f32342d3234203d3e20323637333733.roa (hash: zSZHIHecoK4/UDBuo62YoV9QJQyUsxcVR3oif31TqEQ=)
                          4: 34352e3233342e3231322e302f32332d3233203d3e20323637333733.roa (hash: lnXQHPKU/X7ASQFPj2LdVXj2+mFZ9dfeS5ybOkm2zfE=)
                          5: 67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl (hash: 2RhIs5Ot1wa6gDccmVV+hN/GTIcpD2k0+Ar1HfUXg7g=)
                          6: 34352e3233342e3231342e302f32342d3234203d3e20323637333733.roa (hash: by65odK3YD4vm40sPHb+FG8M5K4D3qP1iQC9NOQMUPY=)
                          7: 323830343a346337633a3a2f33322d3332203d3e20323637333733.roa (hash: wTvI9Jk+Tyb03IMmdqeF3YHfX3R4XnfBxDHBROTaZgA=)
                          8: 34352e3233342e3231332e302f32342d3234203d3e20323637333733.roa (hash: e1ofZhEjwwLqmwacLrvxcVJI9+LRP99uzz0yMnTvfTE=)
                          9: 323830343a346337633a3a2f33332d3333203d3e20323637333733.roa (hash: i+wympsFZ7DTbQCGlqvgvPRqwylAw4y3i5s6eLWj2lA=)
                          10: 34352e3233342e3231322e302f32322d3232203d3e20323637333733.roa (hash: e/3GWT/XTaK9QTuS4B3pURPMDqeoYXrg6QcodfjD9GA=)
                          11: 34352e3233342e3231342e302f32332d3233203d3e20323637333733.roa (hash: l5aTxd5DKyHH2uZYB2e40xfS7eWg+0EyoE/es6SzOuA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl
                          rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 09:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:15:46:6e:00:5b:65:48:a1:49:9a:77:1c:17:60:53:f0:ff:48:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
        Validity
            Not Before: Apr  9 07:27:12 2026 GMT
            Not After : Apr 10 09:50:12 2026 GMT
        Subject: CN=C0A7DB7383C3EBE7447AD4CE9AFBA251D90ADF37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c8:c8:d7:d7:22:fe:ba:f0:8e:f1:89:51:c4:
                    5c:54:df:1f:0a:c9:af:a8:0d:f4:6c:d9:70:25:8f:
                    dd:a8:f9:12:7d:6b:c2:f0:8c:b2:2b:cf:a9:0f:c5:
                    bd:63:48:62:16:0d:af:b3:7e:2d:1e:6d:1e:b4:ee:
                    1a:7f:00:cc:ba:e1:56:01:c7:bf:ee:3e:2a:d5:29:
                    d8:58:a7:f2:60:b4:b4:c6:0f:56:99:ae:c4:ef:95:
                    25:4d:5e:77:e3:f1:4a:b8:65:34:ff:b6:27:c7:27:
                    31:85:46:a8:ad:d5:98:c2:89:56:32:63:0d:f9:c5:
                    6e:49:19:ee:fe:6e:2b:0d:7d:6e:cd:58:3b:91:14:
                    70:b3:11:54:a4:fb:ef:62:fa:7b:8b:7a:b0:e6:20:
                    cd:2a:d8:66:47:b2:ef:98:53:42:fc:1b:2e:03:f5:
                    8a:c9:0f:27:9b:e1:63:2c:68:34:82:67:e8:b1:c8:
                    95:da:57:17:31:f0:27:b8:da:2a:f1:9d:61:65:10:
                    c1:1c:b0:26:c8:fe:46:86:95:06:94:73:0f:ad:e0:
                    dd:70:0a:c6:c2:f3:68:15:c1:4a:14:1a:74:95:6b:
                    36:19:d7:60:7c:21:3b:05:e1:eb:54:3c:e4:3e:d6:
                    c1:68:64:36:f9:5b:d6:dd:c6:04:c5:26:5e:68:d3:
                    88:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A7:DB:73:83:C3:EB:E7:44:7A:D4:CE:9A:FB:A2:51:D9:0A:DF:37
            X509v3 Authority Key Identifier:
                keyid:67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:18:af:fb:ad:c9:4b:29:c0:9f:cd:37:48:09:14:26:3d:e7:
         4e:9b:c6:35:ea:1a:51:8c:ba:0d:47:4d:39:f2:21:78:be:40:
         14:90:2b:a7:ec:d2:0c:2d:51:0a:5b:7c:71:2c:aa:27:ea:37:
         d3:5b:6d:8e:8c:8a:a4:6f:7d:e4:9b:c1:e0:79:f0:85:1c:e7:
         37:8c:d5:12:d0:d5:55:9f:46:3f:3b:0f:bc:b7:49:c6:fb:dc:
         ec:af:42:86:0f:74:0c:5d:9f:3a:18:58:49:83:a7:6e:bf:3b:
         96:f2:fb:4c:82:0b:6e:34:bd:d2:c8:22:ea:c8:45:7b:77:f4:
         8c:ed:fd:7b:1c:e5:2d:6d:5c:db:bd:06:ae:64:c9:c8:8b:fe:
         b7:23:d8:a6:6f:ef:a1:24:fc:7b:20:13:ef:4a:92:73:26:d9:
         3b:69:04:0f:e9:f5:0e:b7:c1:9a:0c:c8:79:48:18:40:86:93:
         6a:d9:36:59:b3:88:af:f3:06:46:86:9a:40:35:28:6f:9a:fb:
         9e:1e:ac:ee:ee:ed:cd:9f:f0:67:28:66:10:40:94:2a:59:24:
         09:be:b1:ea:7a:d0:bd:d6:bc:7a:6f:fc:58:08:58:59:58:52:
         21:17:54:ae:d7:1f:0f:27:46:30:c5:e5:1f:8e:f9:81:db:75:
         c2:7d:bb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:46:15 2026 by rpki-client