Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/1/D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1.mft
File:                     D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1.mft (raw, json)
Hash identifier:          CmaTy5HYYc+PdosrRnyQyZ27PKNAyT7aLH+juHRzmWc=
Subject key identifier:   1A:81:82:7A:6B:24:73:59:C5:A7:72:CC:18:7F:A0:9B:51:86:6A:66
Authority key identifier: D1:E9:7C:FA:15:0C:48:4A:25:44:6F:0C:7D:6D:28:CA:5B:EE:1B:F1
Certificate issuer:       /CN=D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1
Certificate serial:       44B0060EE016C4060128C6704A058F848FFD7C14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/1/D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1.mft
Manifest number:          39
Signing time:             Sat 23 May 2026 20:31:48 +0000
Manifest this update:     Sat 23 May 2026 20:26:48 +0000
Manifest next update:     Sun 24 May 2026 20:58:48 +0000
Files and hashes:         1: 3230312e3133392e3231362e302f32312d3332203d3e203631393431.roa (hash: 3ukrwP4zlYAIXirJfZYknYu+7zCaGNB6IdiRhpQHh8g=)
                          2: 323830343a313839343a3a2f33322d3634203d3e203631393431.roa (hash: zeOVTcGD6Dv/zVZ4K7t3QHEmyuzJp4RDJel6RhNshE4=)
                          3: D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1.crl (hash: W8wQRLeJvc50j3ZNoYetSXC/3868gnar1uuZC0cWZnQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/1/D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1.crl
                          rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/1/D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 May 2026 20:58:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b0:06:0e:e0:16:c4:06:01:28:c6:70:4a:05:8f:84:8f:fd:7c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1
        Validity
            Not Before: May 23 20:26:48 2026 GMT
            Not After : May 24 20:58:48 2026 GMT
        Subject: CN=1A81827A6B247359C5A772CC187FA09B51866A66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ab:91:75:d6:0b:dd:b5:ee:46:6b:ec:1a:07:
                    83:e4:84:92:6b:0e:48:e0:d3:88:76:ce:d3:1e:34:
                    09:39:1a:47:22:86:6c:68:74:07:b9:96:54:d8:28:
                    99:50:12:ff:91:cd:a4:6d:1d:e0:bf:34:ef:24:8c:
                    2c:ee:ae:2c:39:d0:91:88:f4:6e:24:25:88:8d:52:
                    d2:06:05:77:3f:4e:79:47:cf:2f:fb:1b:75:98:53:
                    60:78:06:f8:36:a0:07:65:d2:6d:8a:5b:98:c2:a9:
                    9f:da:56:25:2b:55:a6:07:48:10:55:26:99:82:e3:
                    42:fb:1e:d5:f1:be:c4:af:8d:37:66:a7:0f:29:23:
                    17:70:02:65:d9:28:a3:c7:c1:e6:62:2b:4a:86:fe:
                    f5:e2:66:0a:19:46:1c:3e:d6:11:28:62:6f:43:84:
                    33:26:5a:09:49:9b:6f:30:65:f7:70:44:75:6e:c8:
                    47:63:94:a7:f4:01:1e:7e:a1:f4:59:56:78:74:ba:
                    c3:a6:d9:07:b7:67:ed:bf:ce:15:d1:5f:ab:a8:b7:
                    25:f5:43:03:85:18:8a:44:d9:ab:46:17:2a:25:1c:
                    e9:35:db:77:c3:ae:bf:1f:53:b8:5a:aa:0f:44:1e:
                    52:67:3e:5c:ab:c9:84:65:f7:58:01:d2:56:48:25:
                    e6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:81:82:7A:6B:24:73:59:C5:A7:72:CC:18:7F:A0:9B:51:86:6A:66
            X509v3 Authority Key Identifier:
                keyid:D1:E9:7C:FA:15:0C:48:4A:25:44:6F:0C:7D:6D:28:CA:5B:EE:1B:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/1/D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/1/D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:3a:06:ff:55:9c:8a:2a:52:3a:2d:46:31:c4:a7:72:e8:6e:
         c6:df:89:17:47:8b:3b:41:e9:8b:28:fd:f7:e7:22:0a:be:36:
         ec:f9:ca:80:76:93:d3:a6:c8:dc:92:ac:53:a9:91:88:88:60:
         d6:62:1c:1a:59:11:af:5d:b3:0f:fb:57:d7:d6:db:cf:a0:a0:
         7b:c5:82:f5:50:e3:5a:15:82:25:f0:73:4b:9c:59:3c:4e:6d:
         2f:88:24:69:e4:a7:5d:85:d8:71:f6:cf:ae:ee:4f:4f:37:3e:
         66:94:02:45:46:7e:4a:78:04:48:5d:2f:7c:70:bd:84:32:2c:
         0a:a0:bd:dc:ca:01:fc:13:8a:3e:40:18:ce:75:26:7a:ac:ec:
         cb:90:a3:07:9d:e5:f8:1f:a1:38:f1:dd:17:d8:87:43:ec:47:
         12:e2:86:82:5c:5c:a0:aa:9e:88:22:16:96:ee:f3:46:1f:6e:
         c4:0f:1d:8c:98:41:99:48:ef:52:a4:ab:29:c1:f2:6d:25:74:
         6c:09:45:bf:fa:4e:7c:4f:b0:f0:7a:16:3e:95:42:c2:97:c5:
         e4:a9:1a:53:ed:32:1c:20:2c:ea:e3:13:af:ab:b9:58:b4:c5:
         b8:f3:f0:9e:12:54:89:d1:23:fd:3e:31:7b:f5:6a:e4:ce:1c:
         ed:aa:03:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:06:27 2026 by rpki-client