Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AB4d7GHHVpLwanbpMwFRxpTsrbBJvNou2a8ZebqXDpZW/0/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.mft
File:                     24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.mft (raw, json)
Hash identifier:          G/Us5sarWjY83F04veNMOZN2xpydtAh5o8LSpBqFc+c=
Subject key identifier:   06:4D:25:A0:BE:CA:7C:52:CE:FA:12:8B:1A:D7:DB:DA:B8:CD:EC:AF
Authority key identifier: 24:DF:93:83:2F:F7:1F:76:C5:3D:63:DC:FD:F3:B5:BB:68:79:ED:76
Certificate issuer:       /CN=24DF93832FF71F76C53D63DCFDF3B5BB6879ED76
Certificate serial:       2AD64E202EFAB59DE34DE570D317841A0DA77AE2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AB4d7GHHVpLwanbpMwFRxpTsrbBJvNou2a8ZebqXDpZW/0/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.mft
Manifest number:          016D
Signing time:             Thu 09 Apr 2026 07:47:46 +0000
Manifest this update:     Thu 09 Apr 2026 07:42:46 +0000
Manifest next update:     Fri 10 Apr 2026 09:18:46 +0000
Files and hashes:         1: 34352e3138332e3230382e302f32322d3234203d3e20323639323931.roa (hash: UnGbdsoU9eY8lDsUGDJ+NceLPEN91iBYZFlapSh04As=)
                          2: 323830343a363235383a3a2f33322d3334203d3e20323639323931.roa (hash: 4i35/DDK212Z4khUOosAUbxmpZ/wFg45Y7cXSY+E8/w=)
                          3: 24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.crl (hash: TrqAL90PCw7JzApTNTjqtrBP5JmMg1r7KjyODvPBVWM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AB4d7GHHVpLwanbpMwFRxpTsrbBJvNou2a8ZebqXDpZW/0/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.crl
                          rsync://rpki-repo.registro.br/repo/AB4d7GHHVpLwanbpMwFRxpTsrbBJvNou2a8ZebqXDpZW/0/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 09:18:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d6:4e:20:2e:fa:b5:9d:e3:4d:e5:70:d3:17:84:1a:0d:a7:7a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24DF93832FF71F76C53D63DCFDF3B5BB6879ED76
        Validity
            Not Before: Apr  9 07:42:46 2026 GMT
            Not After : Apr 10 09:18:46 2026 GMT
        Subject: CN=064D25A0BECA7C52CEFA128B1AD7DBDAB8CDECAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:64:dc:90:96:86:5b:43:d0:78:d2:d8:b9:96:
                    62:97:58:cd:7b:e9:65:ed:6c:7a:a0:9f:34:71:ec:
                    bc:b6:03:49:c9:ce:03:6f:ae:46:86:e2:af:00:e1:
                    7d:6a:05:a7:c0:80:d2:fa:cd:50:6d:09:1c:e3:57:
                    b4:ae:81:e7:52:62:29:aa:e6:d0:ab:57:eb:5b:d6:
                    bd:10:e7:7f:fa:a4:f9:a1:1f:18:c4:60:d3:77:24:
                    8a:34:65:3c:4e:18:a1:03:15:00:9b:6b:29:49:e8:
                    74:c0:73:0a:c3:bb:25:5a:4b:11:4f:e6:07:f9:00:
                    b0:4c:d1:38:cc:9c:6f:a0:b6:70:d4:cd:0b:e1:75:
                    ba:62:9a:9c:8f:63:90:30:97:94:16:0e:64:56:03:
                    ba:6a:3f:ea:40:d7:10:39:c8:48:22:aa:df:c9:a6:
                    3f:c5:2f:94:90:9d:87:28:d1:6d:fa:01:0d:59:4a:
                    14:a1:b4:62:06:73:5d:97:08:b7:88:2e:9b:54:7c:
                    d0:11:cd:d0:25:94:fc:30:ee:b9:48:35:31:53:da:
                    8d:3e:df:20:06:3c:0d:b0:41:a0:5a:ee:b0:43:28:
                    03:16:5f:51:ca:46:c8:4b:af:d9:31:b0:c8:b0:4e:
                    4e:0b:02:c3:ca:c5:af:9e:33:69:db:fe:04:9a:6b:
                    37:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4D:25:A0:BE:CA:7C:52:CE:FA:12:8B:1A:D7:DB:DA:B8:CD:EC:AF
            X509v3 Authority Key Identifier:
                keyid:24:DF:93:83:2F:F7:1F:76:C5:3D:63:DC:FD:F3:B5:BB:68:79:ED:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AB4d7GHHVpLwanbpMwFRxpTsrbBJvNou2a8ZebqXDpZW/0/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AB4d7GHHVpLwanbpMwFRxpTsrbBJvNou2a8ZebqXDpZW/0/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:51:d5:d7:b1:2d:50:0e:02:dc:d4:ed:b5:c8:cd:2e:81:2b:
         c4:41:40:12:e3:95:a4:ce:06:bd:ea:81:fb:00:f4:2f:f8:b2:
         ae:be:57:0c:a0:56:64:96:17:f6:8f:45:91:12:54:36:e0:de:
         de:27:32:0b:17:f8:4e:02:40:09:b8:28:81:16:77:1b:79:3e:
         a4:9b:a3:8f:a4:e2:40:6c:d4:4a:10:fe:32:28:4a:fb:0a:bb:
         c0:34:af:2c:5c:54:7e:b0:34:d6:06:02:f2:8c:48:75:90:cf:
         66:0b:32:2b:7e:64:f3:f5:bf:bf:82:88:67:b9:7d:5f:ff:6e:
         cd:15:d3:fc:fa:41:63:57:0e:bd:61:53:df:82:e3:15:5f:bd:
         aa:db:32:05:7e:78:08:c6:c0:eb:85:b8:6d:05:e0:bc:38:8f:
         9c:20:78:0a:82:17:56:8f:6b:11:0f:8e:be:bc:8b:98:73:b9:
         d4:c8:1e:59:c3:48:2d:00:5c:66:1b:0d:42:4a:48:ff:61:8c:
         17:ff:ff:22:f6:ec:59:54:53:01:10:99:6d:e1:9c:3f:3a:05:
         e5:6a:5d:8d:84:3b:1b:23:c3:8f:7a:14:59:73:ca:7f:e3:f5:
         f8:2a:f9:24:a2:37:6e:5b:ad:21:b4:e7:36:b7:81:b4:2e:de:
         a0:e5:37:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 12:48:45 2026 by rpki-client