Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5DujprS5kTWhzkGn8KtQzwnP6pfKdjXfvGNcnUnTWXCe/0/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.mft
File:                     3AA963244A6A5B3E821B89FAF5E483A306A3E96D.mft (raw, json)
Hash identifier:          EyiQ47wP1AmJcoiMxcPuzQzfiEzBNM8M0taoCEqIis4=
Subject key identifier:   D6:E0:B3:2B:1D:6A:F7:AC:8A:D8:6D:F8:67:5A:E9:CD:8B:DA:5A:2D
Authority key identifier: 3A:A9:63:24:4A:6A:5B:3E:82:1B:89:FA:F5:E4:83:A3:06:A3:E9:6D
Certificate issuer:       /CN=3AA963244A6A5B3E821B89FAF5E483A306A3E96D
Certificate serial:       7B0D06C05D1E45416E60B86BCD517754E855A6F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DujprS5kTWhzkGn8KtQzwnP6pfKdjXfvGNcnUnTWXCe/0/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.mft
Manifest number:          2A
Signing time:             Thu 09 Apr 2026 14:07:21 +0000
Manifest this update:     Thu 09 Apr 2026 14:02:21 +0000
Manifest next update:     Fri 10 Apr 2026 16:09:21 +0000
Files and hashes:         1: 3AA963244A6A5B3E821B89FAF5E483A306A3E96D.crl (hash: HPfW8shijuDZSQCxG2M7W1hwkmwEIODCy/l3xSh6AMQ=)
                          2: 34352e3233352e36302e302f32322d3332203d3e20323637333934.roa (hash: oCJUx1Px2xlS32pSsJcbxO3QQMpn/8vImxIQKUEhqMo=)
                          3: 323830343a346364303a3a2f33322d313238203d3e20323637333934.roa (hash: HCMSwftiV6KHbBsfvKCGzXC1XeYHSMqJkKiP1AfSuUE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5DujprS5kTWhzkGn8KtQzwnP6pfKdjXfvGNcnUnTWXCe/0/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.crl
                          rsync://rpki-repo.registro.br/repo/5DujprS5kTWhzkGn8KtQzwnP6pfKdjXfvGNcnUnTWXCe/0/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 16:09:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:0d:06:c0:5d:1e:45:41:6e:60:b8:6b:cd:51:77:54:e8:55:a6:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AA963244A6A5B3E821B89FAF5E483A306A3E96D
        Validity
            Not Before: Apr  9 14:02:21 2026 GMT
            Not After : Apr 10 16:09:21 2026 GMT
        Subject: CN=D6E0B32B1D6AF7AC8AD86DF8675AE9CD8BDA5A2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5f:8f:b7:d7:c7:c5:40:63:dc:92:8c:66:52:
                    25:87:8a:84:9e:45:d4:45:f9:79:d4:c3:e3:c8:fc:
                    bf:f3:99:9c:53:09:72:4d:34:10:e8:29:59:86:e3:
                    a4:71:c0:4c:63:f9:f6:2e:a2:89:2b:1b:cd:88:8c:
                    c5:28:1b:50:f8:9f:cc:a6:17:85:de:df:98:24:df:
                    01:53:31:6b:06:41:67:bd:ff:29:e9:56:ae:55:a7:
                    ec:d4:2d:8b:5f:9c:12:42:86:6b:20:cd:bd:c9:7f:
                    a5:e9:1f:cb:da:1d:a0:3a:10:4b:fe:41:7f:40:da:
                    aa:84:d6:28:64:54:9c:75:9a:c4:bb:7b:76:63:b0:
                    e9:19:86:94:34:f8:ba:9a:b6:e8:37:83:fc:c5:45:
                    12:c6:37:99:a6:83:2c:af:ca:f1:ec:40:2a:99:95:
                    31:74:18:a5:bb:4b:e0:9f:7a:37:7d:49:4e:e2:f0:
                    99:90:90:98:f6:21:ea:08:1d:bb:43:db:97:f5:b8:
                    da:fd:7e:89:47:c0:c5:19:b8:27:76:77:19:4b:4e:
                    33:0a:66:57:2c:52:a2:09:64:96:55:91:0d:78:e3:
                    11:f0:df:b1:06:30:0c:0d:06:74:f1:17:20:78:90:
                    eb:7e:7b:8c:84:81:2a:aa:ac:13:b7:07:31:51:82:
                    cf:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E0:B3:2B:1D:6A:F7:AC:8A:D8:6D:F8:67:5A:E9:CD:8B:DA:5A:2D
            X509v3 Authority Key Identifier:
                keyid:3A:A9:63:24:4A:6A:5B:3E:82:1B:89:FA:F5:E4:83:A3:06:A3:E9:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DujprS5kTWhzkGn8KtQzwnP6pfKdjXfvGNcnUnTWXCe/0/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DujprS5kTWhzkGn8KtQzwnP6pfKdjXfvGNcnUnTWXCe/0/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:37:13:d4:93:65:e9:82:21:35:c4:ec:09:ec:9d:2a:3f:ad:
         62:2e:3f:d7:a3:2b:55:10:61:38:bf:38:23:fe:d9:c4:b6:8f:
         1c:0d:93:09:fa:e9:5a:61:2c:0e:e0:76:57:00:58:a3:f3:b1:
         3a:ca:36:c0:9d:40:be:98:70:da:b7:50:c5:63:f6:39:bd:a9:
         88:a8:52:11:08:22:13:a8:26:ae:0f:d8:12:2e:14:34:3f:af:
         be:23:c3:2c:c0:d4:8c:19:ef:bf:28:80:f3:1b:b1:b1:31:a2:
         26:9b:e8:6e:93:c7:51:ad:63:e2:dd:b4:38:59:2b:d9:15:39:
         46:41:55:59:27:77:f9:c4:fd:6f:51:41:4a:21:73:a2:3f:33:
         30:58:2a:f9:85:ea:6f:c7:df:53:cf:b5:25:01:8a:44:ca:ae:
         40:87:43:78:f6:ee:2f:47:e5:d5:e8:e2:a2:df:84:82:eb:41:
         18:b1:bc:1f:84:16:39:ba:69:2c:87:5b:72:f1:1d:91:cb:5d:
         fa:cf:d4:e0:22:96:aa:8e:20:73:56:90:96:71:4c:49:6d:05:
         4d:46:b5:5c:ff:e8:df:f2:04:94:1d:b5:49:4d:56:4c:cb:85:
         8c:80:eb:df:fa:3a:e2:46:70:95:e9:e5:49:64:e3:3c:bf:80:
         d6:83:6a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:40:43 2026 by rpki-client