Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft
File:                     D1171AF24520C9934655F1D0B335CC88750F0C2F.mft (raw, json)
Hash identifier:          f4k6pE87bYD1/MPRZSZC8NIPsh+x5pQOiFfYMx9SQ4M=
Subject key identifier:   E9:9F:DA:89:62:F2:70:C2:35:CC:E2:7B:82:8D:BB:04:EE:1E:F6:0A
Authority key identifier: D1:17:1A:F2:45:20:C9:93:46:55:F1:D0:B3:35:CC:88:75:0F:0C:2F
Certificate issuer:       /CN=D1171AF24520C9934655F1D0B335CC88750F0C2F
Certificate serial:       3727E7F63C918708AFF091461F4BA82D9409AB6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft
Manifest number:          01DB
Signing time:             Thu 09 Apr 2026 10:13:42 +0000
Manifest this update:     Thu 09 Apr 2026 10:08:42 +0000
Manifest next update:     Fri 10 Apr 2026 11:28:42 +0000
Files and hashes:         1: D1171AF24520C9934655F1D0B335CC88750F0C2F.crl (hash: zHDMP6+wawl6nN3Iq3rhzykCXn6QtJvunevzhWXf4BM=)
                          2: 3137392e34382e31322e302f32322d3232203d3e20323731313630.roa (hash: u+/aMz96Tv5ij4acoKOUxVw09Re1m27/pQcsJEWlGLo=)
                          3: 3137392e34382e31342e302f32332d3233203d3e20323731313630.roa (hash: uY3OZdoNJ8SmQ2bu3hzlBbRfk0b/IOx7kIwwgzD1x7c=)
                          4: 3137392e34382e31322e302f32332d3233203d3e20323731313630.roa (hash: 4V6/8XRGdIFW6HKwVui+GXH0vasvGEREWkJLJvKm2bw=)
                          5: 323830343a373732633a3a2f33322d3332203d3e20323731313630.roa (hash: ByDp3qULJaxzSt/yDl9lTXPoMUd5pw96dw96K6x/a1s=)
                          6: 323830343a373732633a383030303a3a2f33332d3333203d3e20323731313630.roa (hash: ZKdfWmC05sSuMnqucSxY6A7mqxOhUwZSYyfZzQv1sds=)
                          7: 323830343a373732633a3a2f33332d3333203d3e20323731313630.roa (hash: fPA4tttYq1aMxqex1rc0XR52rLzSm2WCHxKnWh3eXls=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.crl
                          rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 11:28:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:27:e7:f6:3c:91:87:08:af:f0:91:46:1f:4b:a8:2d:94:09:ab:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1171AF24520C9934655F1D0B335CC88750F0C2F
        Validity
            Not Before: Apr  9 10:08:42 2026 GMT
            Not After : Apr 10 11:28:42 2026 GMT
        Subject: CN=E99FDA8962F270C235CCE27B828DBB04EE1EF60A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:13:13:94:95:2e:00:1b:bd:0e:a9:c3:9a:32:
                    1b:41:a4:cb:b2:05:23:65:14:a0:78:53:86:e9:53:
                    65:2a:b0:df:26:cf:2f:bf:2c:8e:ad:60:56:73:5e:
                    cf:ea:35:f9:fb:43:70:69:06:51:c4:69:49:25:5e:
                    fa:14:bd:9b:60:58:83:46:1f:76:7f:f8:ac:ab:bc:
                    f8:84:48:07:db:dd:c5:3b:b5:89:43:02:ff:b0:dd:
                    fb:89:bc:d0:6d:25:96:15:ad:dc:0d:20:97:0f:f1:
                    41:18:3b:44:ce:22:46:0c:30:d1:9f:aa:fa:05:02:
                    af:bb:d5:e8:da:97:3d:03:19:08:5c:cd:aa:d6:f3:
                    ba:05:9e:59:c5:bf:e4:6f:69:1f:49:a8:26:6a:4c:
                    e3:2d:90:c0:c1:fb:c9:f8:7c:ea:fa:34:b5:7d:f6:
                    9e:f3:28:85:27:41:66:aa:39:4f:f7:64:5a:fd:7a:
                    b7:68:12:bc:e6:86:c0:f9:d3:a5:06:4b:be:f0:1f:
                    76:83:0b:68:16:e4:a5:fc:ed:97:a4:e0:d8:5e:72:
                    f4:45:ee:90:47:03:3d:fd:a6:41:36:7b:2f:89:dd:
                    2f:e8:0e:a3:58:a1:b1:28:0a:eb:2c:c7:ec:d4:90:
                    d7:99:ed:39:26:38:6a:cb:1c:de:42:a6:73:8a:b1:
                    db:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9F:DA:89:62:F2:70:C2:35:CC:E2:7B:82:8D:BB:04:EE:1E:F6:0A
            X509v3 Authority Key Identifier:
                keyid:D1:17:1A:F2:45:20:C9:93:46:55:F1:D0:B3:35:CC:88:75:0F:0C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:af:bf:ac:af:d1:42:0a:16:cd:1e:17:9f:8f:9e:34:a0:9b:
         b6:43:25:d2:21:ad:ee:88:8e:f9:97:e0:1a:99:78:3e:fe:ea:
         70:d8:24:05:2a:b2:00:75:a7:e4:bd:8d:79:1a:6e:ee:83:86:
         c7:a2:33:92:94:3d:7e:7e:c0:93:c3:22:18:1a:14:80:99:8b:
         66:f2:37:1f:a9:a2:25:5a:18:65:8e:4b:c7:0a:e3:4e:49:52:
         62:15:be:f3:4b:6d:6b:c8:bb:52:ce:a3:5a:2c:99:f7:1c:d9:
         b4:65:cd:35:1a:24:d8:5a:d4:04:06:4c:32:91:dd:a2:67:4c:
         a1:75:14:fd:26:c0:c6:2b:3f:17:1c:5d:97:de:3b:28:09:c6:
         5b:f2:00:c3:0d:13:0a:e0:24:07:7e:14:b5:e8:f9:19:fd:9f:
         81:90:da:ed:1a:63:17:6a:11:10:09:b9:98:5c:71:24:c4:44:
         8a:27:08:e3:bb:92:dd:09:42:69:75:d1:1a:13:58:41:8d:a9:
         e6:46:ff:ff:84:7b:dc:c5:a8:d6:e7:74:8a:45:9a:87:9f:0d:
         62:69:5e:a7:7c:83:c0:00:e9:57:37:51:53:37:72:fa:c0:71:
         f6:ca:08:7a:1c:81:70:85:0c:19:29:b9:e5:d1:cf:f0:1a:8f:
         ab:69:a0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:28:40 2026 by rpki-client