Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.mft
File:                     38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.mft (raw, json)
Hash identifier:          s5pYB6OuuGpzhkEU+FeKWXNUXFT2KZis5J+vbcYRp3k=
Subject key identifier:   7F:48:3B:75:B7:3F:B3:6E:DC:11:1D:32:79:F0:D3:85:7C:A7:EA:B7
Authority key identifier: 38:FF:AF:CF:7B:08:8F:B2:23:9E:A0:BD:99:CC:6B:D5:4C:FF:87:07
Certificate issuer:       /CN=38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707
Certificate serial:       3455547DAC64ADF86C621AB22932F30FAA05A3BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.mft
Manifest number:          6D
Signing time:             Thu 09 Apr 2026 01:03:12 +0000
Manifest this update:     Thu 09 Apr 2026 00:58:12 +0000
Manifest next update:     Fri 10 Apr 2026 01:26:12 +0000
Files and hashes:         1: 323830343a373466343a3a2f33322d3438203d3e20323731303134.roa (hash: 5ta1zOMgVoZPbCGHY6y3AGzRt6BUjiuQbVXNMQPJM9g=)
                          2: 3139312e372e3130342e302f32322d3234203d3e20323731303134.roa (hash: /hfh1NstAGKg1PWqlzIvXS4gPPZBA4gGIqKAAZ2U1gs=)
                          3: 38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.crl (hash: E3C15IKZDBRE6hQGvOn6d194r4tnd5nFukZGrxsPn0s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.crl
                          rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 01:26:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:55:54:7d:ac:64:ad:f8:6c:62:1a:b2:29:32:f3:0f:aa:05:a3:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707
        Validity
            Not Before: Apr  9 00:58:12 2026 GMT
            Not After : Apr 10 01:26:12 2026 GMT
        Subject: CN=7F483B75B73FB36EDC111D3279F0D3857CA7EAB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:33:de:7b:26:ae:17:77:63:20:33:4a:3f:bc:
                    d5:9c:4f:e1:24:60:78:17:4d:1d:ff:d1:8f:4a:44:
                    d6:36:ac:11:68:1b:03:83:ac:7a:6a:ee:f7:74:db:
                    a5:d2:74:18:21:63:ed:fd:87:9a:ac:83:a7:8f:dc:
                    2c:2b:37:de:5f:98:31:31:c9:4f:0e:e3:83:83:e1:
                    97:36:2a:81:2d:38:86:8f:d6:35:76:eb:07:3f:89:
                    ca:c9:0f:6d:ad:bc:89:54:96:68:d4:e3:23:a1:48:
                    f0:d5:c2:08:8d:d8:e2:90:1c:2f:cf:e9:d1:db:70:
                    fb:95:9f:f8:35:40:fc:9b:32:be:86:71:ea:96:1d:
                    8d:e2:15:bc:e9:10:10:4b:fe:5c:a7:e6:1a:97:f0:
                    e4:ca:d0:1a:95:2f:9d:9f:36:73:dc:a4:77:b5:91:
                    80:0e:01:86:49:86:aa:45:34:3c:ce:69:7b:08:fb:
                    71:d4:aa:7d:28:3e:66:28:fc:6f:b5:2f:99:fb:65:
                    a0:4c:27:f0:a2:56:87:db:02:bd:0f:bc:ab:3f:1a:
                    81:7c:32:fa:c7:0e:0e:c7:f9:25:83:fc:23:b5:2a:
                    f7:0a:a3:07:6d:b3:4a:c1:de:9d:7a:00:e5:31:0b:
                    c7:7c:e6:da:9c:70:b2:49:5a:4c:b3:bf:3e:cc:e8:
                    60:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:48:3B:75:B7:3F:B3:6E:DC:11:1D:32:79:F0:D3:85:7C:A7:EA:B7
            X509v3 Authority Key Identifier:
                keyid:38:FF:AF:CF:7B:08:8F:B2:23:9E:A0:BD:99:CC:6B:D5:4C:FF:87:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:5e:5d:18:c7:56:78:b1:d6:6a:15:6a:01:24:cf:2f:aa:ff:
         92:59:66:ad:8c:74:aa:6b:3b:54:d3:31:0b:48:88:4d:50:c8:
         7c:93:53:21:67:69:d1:d9:e5:4b:cb:72:0d:c5:a4:93:ad:ba:
         99:c6:66:92:99:ab:1f:36:3d:df:96:30:b6:b9:99:67:a8:af:
         4f:15:11:5a:1e:b5:45:dc:66:b6:c6:1f:02:c1:40:bc:1c:de:
         65:3d:05:98:fd:c3:3f:5b:ce:28:39:b8:b2:f6:4d:3f:73:5a:
         bd:6b:0e:90:13:f0:bc:f8:84:db:94:3b:99:89:ab:9b:02:c8:
         18:cf:f6:b2:21:4a:ec:23:ea:7d:24:3f:40:8a:d5:e4:b2:8a:
         64:66:01:9a:fc:63:0a:b5:6b:2d:b9:e2:f9:4d:df:bb:85:db:
         e1:a4:cc:19:2e:1b:60:b0:e4:92:9b:fc:26:61:72:e9:81:d9:
         93:5b:35:a9:bd:82:23:b9:f1:06:fd:fd:fe:23:f7:27:86:c6:
         cd:c3:1c:5a:fe:be:01:54:cb:be:ff:a3:3a:20:fe:81:70:ba:
         37:c6:fa:e4:13:4c:82:cd:96:7a:3e:5f:ee:dd:be:f6:8f:71:
         2a:af:06:45:12:50:58:89:b0:80:24:f4:3f:ba:89:59:ee:21:
         ae:88:4a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:49:55 2026 by rpki-client