Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4gbLmi6tRwS1koS6sa825BABAfeniStfrJ68prrgTh9d/0/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.mft
File:                     D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.mft (raw, json)
Hash identifier:          WES5OqbO2A8Pe54Jf4nw/JBUttSBUveTsJpjVLgohUI=
Subject key identifier:   E4:1B:F6:55:40:B4:E6:D9:41:1E:15:81:38:F7:2C:C7:AC:75:9A:61
Authority key identifier: D4:A1:B9:1A:99:31:97:A3:CE:71:A9:BE:B7:08:52:A5:C2:F3:03:7A
Certificate issuer:       /CN=D4A1B91A993197A3CE71A9BEB70852A5C2F3037A
Certificate serial:       75C1F13AC3668919B2F107D93274D1E31CD69912
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4gbLmi6tRwS1koS6sa825BABAfeniStfrJ68prrgTh9d/0/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.mft
Manifest number:          DC
Signing time:             Thu 09 Apr 2026 00:06:18 +0000
Manifest this update:     Thu 09 Apr 2026 00:01:18 +0000
Manifest next update:     Fri 10 Apr 2026 02:24:18 +0000
Files and hashes:         1: 323830343a393236383a3a2f33322d313238203d3e20323734373039.roa (hash: rEuc4lsgPPD3i+4ht/oVW+K1az6MnIpffkS/CwB3gJg=)
                          2: D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.crl (hash: L9kT9YTDKDakLpBhvy6DmeyibVB6WVnwka7HEHqKib4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4gbLmi6tRwS1koS6sa825BABAfeniStfrJ68prrgTh9d/0/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.crl
                          rsync://rpki-repo.registro.br/repo/4gbLmi6tRwS1koS6sa825BABAfeniStfrJ68prrgTh9d/0/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 02:24:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c1:f1:3a:c3:66:89:19:b2:f1:07:d9:32:74:d1:e3:1c:d6:99:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4A1B91A993197A3CE71A9BEB70852A5C2F3037A
        Validity
            Not Before: Apr  9 00:01:18 2026 GMT
            Not After : Apr 10 02:24:18 2026 GMT
        Subject: CN=E41BF65540B4E6D9411E158138F72CC7AC759A61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:20:c2:6d:67:d6:95:9d:a1:d5:99:8c:09:7e:
                    fc:18:2b:99:da:6f:9d:f4:cb:b8:b3:07:9d:b4:e0:
                    8b:54:7e:60:a6:94:2b:f8:a5:75:fa:ab:35:d5:1f:
                    65:5e:f3:20:6c:b4:f5:c5:c5:47:bc:f2:46:bb:97:
                    d3:91:63:67:62:20:68:ef:5e:2c:c1:1f:49:f6:8b:
                    bf:80:68:ca:95:ce:20:00:d1:aa:ba:7e:6d:f4:11:
                    aa:79:95:7b:10:8e:dd:9d:21:a9:4b:c1:92:28:15:
                    c4:0d:60:c7:27:58:e1:cf:6b:7c:ac:d2:74:7e:cb:
                    04:35:83:60:3d:b5:f4:ca:4f:d0:4c:b5:b4:ae:01:
                    0d:b2:ca:af:16:21:b0:a2:b7:6c:81:be:2c:8e:85:
                    3f:22:fb:f8:41:a2:77:2b:a3:77:7b:48:85:5c:2c:
                    ba:e9:8f:ef:cd:ed:33:9b:85:e1:f6:bc:84:f0:68:
                    a9:3e:8d:34:13:38:d6:d8:a5:22:e4:09:50:e5:4f:
                    50:6e:24:0d:64:31:22:b5:7a:1c:35:17:c0:aa:27:
                    0a:5e:b8:7d:95:67:e1:80:aa:d5:c4:25:4d:32:25:
                    0f:e1:2e:92:48:a0:e5:52:51:f7:4c:e1:e9:5c:f4:
                    24:c0:3b:a1:e8:23:a2:13:b5:3d:9a:43:e5:38:62:
                    cb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1B:F6:55:40:B4:E6:D9:41:1E:15:81:38:F7:2C:C7:AC:75:9A:61
            X509v3 Authority Key Identifier:
                keyid:D4:A1:B9:1A:99:31:97:A3:CE:71:A9:BE:B7:08:52:A5:C2:F3:03:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4gbLmi6tRwS1koS6sa825BABAfeniStfrJ68prrgTh9d/0/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4gbLmi6tRwS1koS6sa825BABAfeniStfrJ68prrgTh9d/0/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:7e:68:94:14:ce:7e:e3:54:eb:86:f8:d0:cc:90:5d:83:5b:
         2a:74:72:9c:b2:ef:51:9e:9d:68:a2:aa:93:f7:d1:b2:c0:3a:
         5f:e1:27:e6:55:0c:b2:82:6f:27:04:bc:26:e7:e7:90:c4:b1:
         2d:61:9b:f4:91:9b:fb:44:f1:a0:80:45:ef:55:64:c1:94:14:
         40:44:c2:6b:3a:3d:e8:0b:5a:65:be:85:70:3f:99:0a:8f:5e:
         da:e3:cb:c6:10:89:5b:e6:c1:8e:22:0c:5c:89:5d:67:bb:cf:
         c2:a1:a4:59:e0:b2:52:80:58:df:8e:19:ff:d3:d7:c9:67:e1:
         42:21:56:7e:0b:c6:da:a8:a4:45:d1:9c:ae:cf:d4:d9:f2:90:
         1b:7e:24:30:8f:03:03:bf:9a:ef:f3:a8:95:67:e8:8e:aa:9c:
         1a:25:a0:0e:05:92:d6:ad:f6:a3:ed:b1:d8:ff:d0:61:44:86:
         fd:c0:bc:b5:43:30:f4:11:af:e9:4b:38:0e:ac:f8:2e:dc:28:
         5a:7f:b5:40:f2:8c:bc:c3:60:18:bd:85:8a:19:8d:09:ba:f2:
         64:72:c0:04:35:13:8d:93:cf:aa:64:f8:32:80:0c:8b:7f:8c:
         6e:00:c0:5e:cc:ef:de:24:07:60:19:0d:26:da:02:61:7d:4d:
         d4:f7:02:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 11:13:25 2026 by rpki-client