Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
File:                     CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft (raw, json)
Hash identifier:          c5nuYqlm3Q8Z80dC1rbrM+OcJF2dbHNi2ntbrAdpaJg=
Subject key identifier:   C9:D7:CC:57:52:55:A9:BF:65:A3:90:E6:69:76:EE:F1:67:B4:93:92
Authority key identifier: CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB
Certificate issuer:       /CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB
Certificate serial:       4752C349FE0A64964167D50FC907DA82B5E0C0CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
Manifest number:          0192
Signing time:             Thu 09 Apr 2026 10:41:31 +0000
Manifest this update:     Thu 09 Apr 2026 10:36:31 +0000
Manifest next update:     Fri 10 Apr 2026 12:17:31 +0000
Files and hashes:         1: CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl (hash: nAk+e+cJl+iij1jPYG+K6A8shE4uSL30TSvDn8IXj6Q=)
                          2: 3230302e37332e3231362e302f32322d3332203d3e20323730343833.roa (hash: qPbY/Y5KTREkyqW2QiIL32k9wQU5JL6mlwrA4y4yItU=)
                          3: 323830343a366361383a3a2f33322d313238203d3e20323730343833.roa (hash: 6OBQoF3ZC6oqC9TdhCOjF/406cX3oVdeis5NNiOogbc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl
                          rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 12:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:52:c3:49:fe:0a:64:96:41:67:d5:0f:c9:07:da:82:b5:e0:c0:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB
        Validity
            Not Before: Apr  9 10:36:31 2026 GMT
            Not After : Apr 10 12:17:31 2026 GMT
        Subject: CN=C9D7CC575255A9BF65A390E66976EEF167B49392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bc:0e:c2:f0:38:6b:1b:8f:31:a5:84:26:5e:
                    a4:11:b6:9b:01:06:19:63:c0:a5:7a:a0:46:8c:37:
                    49:f4:b7:e5:9c:7f:58:13:2c:64:9e:96:c9:77:b1:
                    17:13:ab:76:9b:c1:a8:bf:5d:25:d2:36:9c:df:bd:
                    21:b7:eb:31:3c:4b:ac:18:fc:2b:c7:f9:42:c9:ab:
                    92:f8:d7:dc:93:be:c6:52:9a:d3:fa:08:92:bb:dd:
                    f6:73:50:fb:b8:36:f6:1a:93:56:00:d1:d5:a2:40:
                    15:06:f8:04:f4:6a:40:09:46:dd:5f:39:e3:38:c8:
                    f7:e5:3f:3a:2f:cf:e6:8a:9d:b6:7d:95:d0:69:52:
                    ad:a1:a2:f2:74:2c:38:d8:9c:a3:f5:10:29:23:8a:
                    0b:86:7d:48:b0:c9:b4:aa:3e:0f:2c:d5:4c:cf:c3:
                    93:35:4b:d3:98:4e:db:81:2e:0f:a8:9e:e3:7a:c1:
                    e4:1e:8c:db:65:ee:b8:e6:9e:bd:7f:4a:f9:78:36:
                    96:de:3b:53:9b:ad:f6:59:b0:c0:ed:db:1f:44:1d:
                    c9:43:d8:b7:22:21:1e:8e:7e:af:d4:98:04:3e:07:
                    88:c6:1f:1c:8f:1f:10:ac:0a:eb:eb:3f:66:c3:ef:
                    83:7e:44:07:bf:27:27:4e:35:ab:58:af:ac:fd:90:
                    14:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D7:CC:57:52:55:A9:BF:65:A3:90:E6:69:76:EE:F1:67:B4:93:92
            X509v3 Authority Key Identifier:
                keyid:CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:36:96:dd:30:d5:ea:c8:ac:0f:b7:8a:9b:01:76:35:03:8d:
         9f:75:67:6b:d1:74:59:0a:7c:4b:71:f0:0d:f7:81:6c:ec:52:
         97:01:0f:5b:ad:1d:52:dc:07:85:54:91:69:ac:2f:18:85:ed:
         ff:15:a5:c2:b8:a0:cc:f7:69:e0:cd:9f:4e:d2:f7:49:ac:89:
         f5:c5:e9:24:41:8f:b5:72:bb:0e:1e:c7:0f:5a:e4:1a:ca:8e:
         96:67:2f:62:79:04:7a:69:7c:1a:22:36:7f:00:8c:f6:10:7f:
         46:51:27:c7:34:36:fb:2f:1b:39:74:23:6e:b8:c6:99:4d:ba:
         1f:a8:ad:bb:17:30:af:18:d6:c5:28:56:7c:d1:4c:6e:58:f3:
         cf:10:2a:a8:59:f6:bd:f9:af:ec:5d:30:b1:7c:62:91:c9:52:
         d9:ba:bf:33:09:43:9f:42:9e:a4:09:f5:ed:7e:cf:bf:8d:30:
         9a:71:4e:e2:b2:92:b7:b8:15:8f:25:31:4a:b3:8b:ef:77:a2:
         2c:8a:29:d9:27:67:cc:a0:55:d9:56:0e:bb:f6:ce:85:da:5f:
         68:ec:55:76:df:fe:a7:70:be:f3:28:8b:15:3e:f9:69:ab:01:
         fe:d2:a8:30:05:55:e6:d7:db:a8:17:a6:c5:2b:3f:45:52:88:
         53:5f:33:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:46:20 2026 by rpki-client