Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.mft
File:                     28D273356F90D13FC143833120BC59A454646F71.mft (raw, json)
Hash identifier:          fT+Ks7J4fuRJH/4yvZI0JVh28tsDGCdclXPGV+wV6bA=
Subject key identifier:   7C:A2:1C:7D:84:82:36:C3:C4:CF:60:6D:79:06:88:31:39:F0:3A:D5
Authority key identifier: 28:D2:73:35:6F:90:D1:3F:C1:43:83:31:20:BC:59:A4:54:64:6F:71
Certificate issuer:       /CN=28D273356F90D13FC143833120BC59A454646F71
Certificate serial:       62ACCE336DE30C9996E143F175EE682E42E10D64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D273356F90D13FC143833120BC59A454646F71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.mft
Manifest number:          1F
Signing time:             Thu 09 Apr 2026 05:57:00 +0000
Manifest this update:     Thu 09 Apr 2026 05:52:00 +0000
Manifest next update:     Fri 10 Apr 2026 08:37:00 +0000
Files and hashes:         1: 28D273356F90D13FC143833120BC59A454646F71.crl (hash: 3zftasVhuYBWhHLOoouT/t5r8qrX5+OoBHMkPEVNt28=)
                          2: 323830343a393434383a3a2f33322d3332203d3e20323734383333.roa (hash: 3+OUWvJ2paVgdIryDuKrx561qJe0osctthIg1n2by6E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.crl
                          rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D273356F90D13FC143833120BC59A454646F71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 08:37:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ac:ce:33:6d:e3:0c:99:96:e1:43:f1:75:ee:68:2e:42:e1:0d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D273356F90D13FC143833120BC59A454646F71
        Validity
            Not Before: Apr  9 05:52:00 2026 GMT
            Not After : Apr 10 08:37:00 2026 GMT
        Subject: CN=7CA21C7D848236C3C4CF606D7906883139F03AD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b6:85:21:fb:4d:d3:52:c6:41:b4:52:17:e5:
                    98:0d:68:2c:fa:b7:e4:61:75:43:ea:78:89:aa:3f:
                    84:3d:6e:8e:2c:bb:90:42:0c:0f:bd:a4:52:ee:6a:
                    5d:ad:6d:ac:ca:b7:32:98:58:3f:82:e4:c1:60:0b:
                    ac:9f:34:81:16:6f:3a:6f:ee:64:01:9b:57:a1:d8:
                    9c:9e:80:01:91:12:ad:4e:44:de:2c:05:15:24:d5:
                    fb:b5:eb:8c:4b:ed:03:dc:17:e4:84:50:84:af:28:
                    c3:82:4b:40:b0:2d:6a:56:b4:dd:18:fc:a6:dd:f9:
                    8d:b1:a1:e9:8b:0f:35:75:4e:bb:f5:cd:12:86:be:
                    fa:f1:f2:40:5e:fe:d7:12:bb:cd:b0:b1:63:2a:d9:
                    0a:31:93:f8:f7:65:5f:ab:82:32:58:1d:5a:ed:c1:
                    13:7f:83:44:a0:fc:35:7c:b0:9c:97:03:94:be:3e:
                    fd:d0:92:35:f7:6e:30:42:3f:80:8c:30:48:4b:15:
                    10:af:66:6d:97:8f:fa:1c:9a:45:36:23:e2:a0:3a:
                    20:0c:82:f8:66:37:c2:f9:6e:42:ee:79:62:2f:e7:
                    33:cf:90:85:54:d0:09:cf:c1:19:3f:d8:70:bd:d7:
                    11:fa:56:70:f8:db:bf:a2:8d:3a:96:d0:c6:a7:21:
                    a5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A2:1C:7D:84:82:36:C3:C4:CF:60:6D:79:06:88:31:39:F0:3A:D5
            X509v3 Authority Key Identifier:
                keyid:28:D2:73:35:6F:90:D1:3F:C1:43:83:31:20:BC:59:A4:54:64:6F:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D273356F90D13FC143833120BC59A454646F71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:0d:78:f6:e4:95:15:16:4f:59:5c:24:ff:4a:02:ef:9b:85:
         73:c0:56:8c:b1:cd:93:47:dc:7c:5f:32:13:e3:96:80:a1:fa:
         41:0c:1f:d2:74:0a:50:8d:a0:7a:07:79:a5:66:b7:a8:e6:0d:
         4e:16:c0:57:6b:44:92:74:bd:99:7d:fb:2e:07:8e:a3:ca:bd:
         f2:30:28:cc:d9:7e:67:2f:14:17:2e:b8:12:15:e3:e3:06:25:
         b0:13:a6:be:ee:66:b5:f9:eb:c2:86:dd:fa:90:75:ba:6f:c2:
         f7:3f:bb:9b:20:c0:51:e1:67:12:25:c5:5a:8a:64:37:96:b9:
         33:e5:05:3f:1e:19:c0:e3:1f:ce:bd:25:20:f5:ab:98:45:76:
         8b:6e:85:2b:49:7e:02:1f:6b:69:fb:7d:4b:d9:91:f2:f9:00:
         cd:3d:50:ad:e5:fb:6b:aa:98:0a:79:89:4d:72:b0:6a:2c:b5:
         b7:0d:11:c9:a1:1a:31:f6:c1:c0:16:03:66:3e:fa:ad:10:ca:
         a2:c6:e2:21:e9:69:06:ba:48:b4:96:87:7a:c0:c3:b5:f9:0f:
         d3:8f:c0:f3:1a:95:b5:32:d8:47:0f:9e:47:0d:d8:ad:6b:bb:
         90:47:83:13:12:c7:b8:b5:c5:65:52:83:70:b6:38:5f:60:9e:
         7e:54:9c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 19:03:26 2026 by rpki-client