Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.mft
File:                     60358884BF0F1C4D3024B709DD5734D538763EEC.mft (raw, json)
Hash identifier:          KdmhNStAygc+DXbyBOLJgOgsrBhds+Tm57n5HH6ODCs=
Subject key identifier:   7C:C5:D9:D8:2D:AD:43:CC:E4:94:28:88:90:22:38:D1:47:1B:09:65
Authority key identifier: 60:35:88:84:BF:0F:1C:4D:30:24:B7:09:DD:57:34:D5:38:76:3E:EC
Certificate issuer:       /CN=60358884BF0F1C4D3024B709DD5734D538763EEC
Certificate serial:       06BC78DFEE7D8C74849CF2754DFCCCDFFB7A0595
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60358884BF0F1C4D3024B709DD5734D538763EEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.mft
Manifest number:          0102
Signing time:             Wed 08 Apr 2026 23:02:05 +0000
Manifest this update:     Wed 08 Apr 2026 22:57:05 +0000
Manifest next update:     Fri 10 Apr 2026 00:18:05 +0000
Files and hashes:         1: 60358884BF0F1C4D3024B709DD5734D538763EEC.crl (hash: gvpBc01ssEPDObifFvIsqIjrd1f+QQUulxtvz9T9r1g=)
                          2: 323830343a383234383a3a2f33322d3438203d3e20323732353130.roa (hash: FuLRg2mQnQb4bhpiLaVmWlnozUB8vSOFoWM8uHkcM+A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.crl
                          rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60358884BF0F1C4D3024B709DD5734D538763EEC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 00:18:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:bc:78:df:ee:7d:8c:74:84:9c:f2:75:4d:fc:cc:df:fb:7a:05:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60358884BF0F1C4D3024B709DD5734D538763EEC
        Validity
            Not Before: Apr  8 22:57:05 2026 GMT
            Not After : Apr 10 00:18:05 2026 GMT
        Subject: CN=7CC5D9D82DAD43CCE4942888902238D1471B0965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d0:da:98:98:20:53:a2:5f:60:d8:92:49:da:
                    e6:5d:60:7f:9c:cf:ae:8c:37:67:8f:7f:86:03:c9:
                    68:2b:7d:14:21:a3:36:8e:b3:f1:1b:3b:7b:53:54:
                    3c:d8:fe:ff:12:c2:da:43:1a:d5:ab:9e:56:fc:94:
                    26:1f:49:3d:ea:bb:6e:f3:02:fe:85:cf:0b:2c:45:
                    b9:5c:0f:0e:98:65:8d:be:58:38:f7:de:02:f5:e1:
                    47:e7:e0:01:46:3b:5d:15:4f:e3:03:55:b9:33:09:
                    d9:55:0a:d5:90:6b:24:07:d1:87:80:48:38:26:f3:
                    df:34:03:61:01:e9:77:fe:6e:46:8f:13:29:e4:54:
                    90:14:b0:7b:cd:cd:0b:f4:21:4d:ec:52:79:b5:f7:
                    77:c8:15:c2:f9:4d:3f:5f:ce:06:c4:65:98:b2:b2:
                    15:e1:3c:a6:4d:a9:b1:e5:04:57:6c:99:ed:07:b5:
                    75:27:a0:69:32:88:3c:e5:cb:c6:65:20:4a:7a:ac:
                    90:9e:2c:04:6f:56:00:b6:ad:6a:18:06:a2:84:da:
                    15:66:88:d9:41:dc:1d:ae:dc:43:41:b2:c2:fb:65:
                    73:08:32:af:5d:1f:01:44:d2:53:d4:b9:10:52:fa:
                    83:3e:54:e1:9f:e5:74:1a:ff:3b:32:81:0c:a8:bf:
                    94:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C5:D9:D8:2D:AD:43:CC:E4:94:28:88:90:22:38:D1:47:1B:09:65
            X509v3 Authority Key Identifier:
                keyid:60:35:88:84:BF:0F:1C:4D:30:24:B7:09:DD:57:34:D5:38:76:3E:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60358884BF0F1C4D3024B709DD5734D538763EEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:2f:87:02:8f:d3:9b:e2:ee:23:c5:01:07:20:d1:07:c1:4f:
         82:87:1f:ab:51:29:da:1b:8c:08:5b:ff:1d:5d:81:ab:b4:3b:
         34:21:59:bc:37:ff:5d:db:25:b1:0b:d7:5c:2f:03:b2:81:1b:
         ab:8c:37:5c:0e:f8:a7:53:6b:f0:38:94:f3:0c:40:96:66:34:
         ba:ab:24:0d:23:58:ca:66:74:a0:a0:34:93:91:01:83:ea:d5:
         7a:26:22:ae:cf:12:89:1a:0f:80:6f:0f:47:90:88:3d:dd:bf:
         7d:63:ca:4e:25:87:32:71:0d:f9:2e:d2:d5:8f:2a:b0:b7:08:
         66:62:69:d4:dc:a7:16:a2:fd:9f:fc:eb:cc:9b:9b:27:26:fc:
         ff:b5:79:51:26:d3:bb:c8:aa:06:31:d8:29:ef:13:d5:1b:0b:
         d0:60:88:21:94:f2:7a:ac:a3:5c:56:ec:3b:a3:a4:1b:ae:d0:
         97:09:af:08:25:b1:c5:c2:a9:98:68:c2:02:fd:09:e9:0c:1d:
         35:e3:f9:6a:1d:7d:e0:a4:28:0b:80:af:c9:b5:a7:37:04:7b:
         c4:e9:41:de:d3:ff:ae:29:30:f9:04:f4:f6:83:4b:a7:a5:6e:
         f0:51:ca:23:d5:32:34:80:59:a7:4e:98:f1:04:ad:cf:47:fe:
         f2:bc:19:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 11:11:39 2026 by rpki-client