Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.mft
File:                     DD271F242DF0D8617E8D7597283EB60BDB86C2FD.mft (raw, json)
Hash identifier:          e0PuTij27sFsqC9cG0a1mUJEtp1MYkMBTonHL7r6Rno=
Subject key identifier:   67:5F:DC:AF:98:8F:4B:DC:0B:AB:D0:69:1C:19:97:65:13:93:0C:D9
Authority key identifier: DD:27:1F:24:2D:F0:D8:61:7E:8D:75:97:28:3E:B6:0B:DB:86:C2:FD
Certificate issuer:       /CN=DD271F242DF0D8617E8D7597283EB60BDB86C2FD
Certificate serial:       64D966878169B87677FBC802B0A96F79116998F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.mft
Manifest number:          023D
Signing time:             Wed 08 Apr 2026 16:16:49 +0000
Manifest this update:     Wed 08 Apr 2026 16:11:49 +0000
Manifest next update:     Thu 09 Apr 2026 19:36:49 +0000
Files and hashes:         1: DD271F242DF0D8617E8D7597283EB60BDB86C2FD.crl (hash: hFHn0fSgOXp9rhl7H6W8Argvd57ouifRAhxMjNT+mfw=)
                          2: 3137392e34392e38302e302f32332d3234203d3e20323731333934.roa (hash: GYSfMdIJgrs3ZbkaqRtcXgLBW5PEhr0QLq9H3n1FhC0=)
                          3: 3137392e34392e38322e302f32342d3234203d3e20323731333934.roa (hash: x2lBYwuxL540JFZNWC4J7R/8TcMLkXDOo0+/vKfJpJo=)
                          4: 323830343a376164343a6530303a3a2f34302d3430203d3e20323731333934.roa (hash: 4l2kEkGEoDRBPlC0TzGX9k5PVTQQDl4swbUGEXUxjFs=)
                          5: 323830343a376164343a3a2f33322d3332203d3e20323731333934.roa (hash: HswzXa67Csu/2cIuLcAnDDvUgDbzaptU23HWWQ2xEXI=)
                          6: 3137392e34392e38332e302f32342d3234203d3e20323731333934.roa (hash: OwKfkTOTMrsq1hpNUfSMUPO1iW0ZvOOUw/UK5GzYaaw=)
                          7: 3137392e34392e38302e302f32332d3233203d3e20323731333934.roa (hash: tiN3JLDpyh8ux0ztxshAtwrJCwnMAQEqgedA1qkpF/I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.crl
                          rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 19:36:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d9:66:87:81:69:b8:76:77:fb:c8:02:b0:a9:6f:79:11:69:98:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD271F242DF0D8617E8D7597283EB60BDB86C2FD
        Validity
            Not Before: Apr  8 16:11:49 2026 GMT
            Not After : Apr  9 19:36:49 2026 GMT
        Subject: CN=675FDCAF988F4BDC0BABD0691C19976513930CD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:40:27:20:ee:4c:f6:ce:a2:52:37:26:49:37:
                    ff:fc:68:f8:91:53:b9:68:bc:93:83:e0:58:92:e5:
                    38:93:49:f3:f3:81:f9:01:df:2f:5e:33:fc:a5:15:
                    8a:79:dc:cb:8d:29:b9:32:25:cd:6e:ef:d1:4d:d1:
                    e0:ae:32:90:d9:5f:9e:86:ed:8b:06:59:3f:55:3d:
                    81:12:e5:1c:7e:4c:15:ae:b2:3d:12:79:18:31:5e:
                    c1:40:e5:87:5d:82:99:e0:86:d7:74:3a:e0:1d:fc:
                    64:63:9d:93:e5:09:7c:57:f7:79:22:6d:7c:92:1c:
                    ac:f9:11:7f:42:d5:ce:a6:c3:69:31:df:3e:f1:3c:
                    46:d1:69:07:83:49:84:78:37:29:4c:c8:5a:8f:8b:
                    71:b9:93:fd:79:9d:04:a1:a4:33:91:06:bd:87:a5:
                    08:b2:8d:4c:65:f4:ad:98:c7:ca:8f:ef:e1:21:1c:
                    33:57:fa:d8:7c:15:2b:06:30:d7:c0:f0:cc:7f:10:
                    89:bd:0d:b2:56:c0:30:ea:01:bc:9f:a7:cc:fa:41:
                    f7:29:5e:2f:3b:7b:b7:df:4a:40:2d:98:a8:6c:8e:
                    97:5f:b5:b1:9b:ce:27:c8:7e:73:a0:6a:ea:70:c2:
                    b6:5b:df:be:cf:e5:f9:ad:d9:1c:2d:fa:d7:e6:3d:
                    d3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5F:DC:AF:98:8F:4B:DC:0B:AB:D0:69:1C:19:97:65:13:93:0C:D9
            X509v3 Authority Key Identifier:
                keyid:DD:27:1F:24:2D:F0:D8:61:7E:8D:75:97:28:3E:B6:0B:DB:86:C2:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:c9:d6:ff:a2:b3:76:6b:19:18:ca:06:61:a3:96:8e:b5:41:
         38:06:f0:57:a1:43:aa:de:ea:86:7f:56:e3:9f:55:42:49:d9:
         ce:97:1f:f8:90:87:06:8e:a1:ba:a9:9a:4e:bf:bc:bd:73:c0:
         02:96:16:f6:75:13:1f:ec:d3:ac:3c:36:b9:44:62:95:23:31:
         a2:0c:28:8b:e7:18:30:3b:cb:4b:e2:73:19:85:8e:16:13:e8:
         45:a3:57:00:97:06:ba:8d:d9:db:32:34:29:9a:c2:b9:16:4b:
         f1:89:87:fe:f1:2f:0c:5d:2c:e3:34:ee:d6:f0:6b:2c:69:49:
         bb:4c:2e:79:ff:7c:52:05:3f:2e:f6:5b:a9:dd:d7:d8:ba:9c:
         b4:81:1b:bc:04:7c:bc:d1:92:1c:c4:90:09:0e:97:6f:1d:1c:
         b0:b9:af:0d:0c:99:07:51:94:d9:d6:4d:be:41:75:70:10:21:
         56:40:66:b7:09:95:c2:23:e7:dc:86:0f:3f:48:bf:c2:30:1b:
         cc:57:5b:6c:da:cb:f8:cd:45:ab:97:c4:81:21:b5:3c:a1:54:
         2b:35:f7:0d:61:a2:92:e3:c2:f9:5c:de:9c:da:64:2a:7e:1f:
         de:df:0f:ad:f8:b6:dc:b7:fc:f0:c6:aa:c7:7c:b0:4c:99:58:
         af:e0:54:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 12:52:11 2026 by rpki-client