Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ew75CjQS4U9Dr7bAHTmNxYvDQZWK2htiBm5swRz46WsQ/0/41572075398FE174182DAFC548613D62A0D77684.mft
File:                     41572075398FE174182DAFC548613D62A0D77684.mft (raw, json)
Hash identifier:          1BMV4L5L4HmE47u6H5PHcTXg2ZKcgULzXzeSOodVE0g=
Subject key identifier:   AE:AC:3E:DE:98:08:8F:F7:65:D4:14:43:2F:BD:A5:46:62:67:83:A4
Authority key identifier: 41:57:20:75:39:8F:E1:74:18:2D:AF:C5:48:61:3D:62:A0:D7:76:84
Certificate issuer:       /CN=41572075398FE174182DAFC548613D62A0D77684
Certificate serial:       7D65E146A13FF1BDC6FA94061330B0D2D356D04F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41572075398FE174182DAFC548613D62A0D77684.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ew75CjQS4U9Dr7bAHTmNxYvDQZWK2htiBm5swRz46WsQ/0/41572075398FE174182DAFC548613D62A0D77684.mft
Manifest number:          D2
Signing time:             Thu 09 Apr 2026 02:47:46 +0000
Manifest this update:     Thu 09 Apr 2026 02:42:46 +0000
Manifest next update:     Fri 10 Apr 2026 04:19:46 +0000
Files and hashes:         1: 41572075398FE174182DAFC548613D62A0D77684.crl (hash: JRN7QytHeXN+JqDfSEJfXfea+8xW1zZQovqkNeMnysc=)
                          2: 323830343a386564303a3a2f33322d3332203d3e20323733343438.roa (hash: s0ZvSvrnVrmC96gLm0IBSkqbohSbSvmXTyU7jKi6IRs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ew75CjQS4U9Dr7bAHTmNxYvDQZWK2htiBm5swRz46WsQ/0/41572075398FE174182DAFC548613D62A0D77684.crl
                          rsync://rpki-repo.registro.br/repo/Ew75CjQS4U9Dr7bAHTmNxYvDQZWK2htiBm5swRz46WsQ/0/41572075398FE174182DAFC548613D62A0D77684.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41572075398FE174182DAFC548613D62A0D77684.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 04:19:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:65:e1:46:a1:3f:f1:bd:c6:fa:94:06:13:30:b0:d2:d3:56:d0:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41572075398FE174182DAFC548613D62A0D77684
        Validity
            Not Before: Apr  9 02:42:46 2026 GMT
            Not After : Apr 10 04:19:46 2026 GMT
        Subject: CN=AEAC3EDE98088FF765D414432FBDA546626783A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c1:88:93:fe:d0:02:d5:9d:fa:5d:da:11:ad:
                    2b:e3:7e:83:af:f5:cb:b2:9c:33:4b:92:5b:dc:56:
                    6d:72:13:69:c3:bb:e0:f0:d0:e8:88:ae:71:f7:86:
                    95:8f:40:05:67:17:67:12:80:bc:16:03:b0:b7:00:
                    d9:cf:22:fa:f7:1a:79:4e:6b:fe:5a:5b:38:03:b0:
                    f1:99:90:3e:df:99:ee:a7:43:1b:a4:ca:54:be:e9:
                    6f:2a:b3:97:93:ba:c8:3b:c0:cb:65:f5:dd:14:88:
                    7d:f3:c9:04:fa:e2:8c:d8:fc:f8:e5:2d:d3:37:81:
                    86:97:f0:cf:04:a4:7d:76:87:99:4b:4d:e9:75:ea:
                    56:7e:57:16:ce:b9:7b:2e:fd:ce:17:76:ef:92:3e:
                    4f:bf:eb:3b:b7:65:7f:eb:04:8f:10:23:c8:db:a4:
                    10:84:ab:e4:89:f4:89:b2:2b:97:46:47:e2:cb:8d:
                    9c:f1:a3:fe:60:6c:4a:f3:47:ff:ab:7e:55:84:a2:
                    25:9a:36:d7:ee:c9:5b:26:a7:c8:a4:f2:81:5a:f4:
                    f1:26:6b:b8:80:34:6c:0b:7a:d8:2a:5e:66:2e:81:
                    ce:4c:40:02:1f:4d:41:75:17:20:1a:a5:e0:5f:6f:
                    8d:f2:6b:18:e7:08:5a:c3:23:8b:35:ff:05:b1:8d:
                    cc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:AC:3E:DE:98:08:8F:F7:65:D4:14:43:2F:BD:A5:46:62:67:83:A4
            X509v3 Authority Key Identifier:
                keyid:41:57:20:75:39:8F:E1:74:18:2D:AF:C5:48:61:3D:62:A0:D7:76:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ew75CjQS4U9Dr7bAHTmNxYvDQZWK2htiBm5swRz46WsQ/0/41572075398FE174182DAFC548613D62A0D77684.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41572075398FE174182DAFC548613D62A0D77684.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew75CjQS4U9Dr7bAHTmNxYvDQZWK2htiBm5swRz46WsQ/0/41572075398FE174182DAFC548613D62A0D77684.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:78:68:ad:24:5d:ed:b0:53:02:78:eb:19:a9:78:5b:1c:e7:
         bf:a7:70:32:83:92:18:0a:3d:b3:61:07:fd:53:ac:54:b2:51:
         52:90:f8:f5:88:07:85:cc:f8:46:ad:97:97:34:76:68:14:07:
         69:60:14:28:6e:42:34:09:1a:c1:e0:5b:1b:5d:9a:08:25:30:
         82:d7:d2:89:15:2b:f7:94:dd:d8:2d:e2:5b:71:b7:36:d6:f9:
         01:a4:88:98:68:86:32:c5:57:88:9d:00:aa:71:bc:6f:eb:bc:
         a8:d8:db:0b:30:82:89:c0:5f:93:cd:9a:95:ca:a3:e1:40:52:
         a2:6c:57:1e:bd:d0:8d:a1:fc:e1:24:bd:fd:74:d8:14:35:0c:
         24:9a:86:13:92:5a:55:13:cc:fd:20:86:d9:c6:0b:59:ab:56:
         d4:e4:d9:a7:1c:a7:9e:1c:77:37:6d:c6:cc:56:53:e4:8c:7a:
         26:4b:79:79:ca:41:7d:8b:a0:c0:fd:82:63:cc:5d:9e:e0:a9:
         cf:3b:20:e2:ec:01:3b:ba:27:d7:0a:8e:90:28:e4:82:1e:db:
         4f:85:4d:84:1c:27:99:14:c2:ba:d6:1e:95:89:1d:31:9f:5a:
         6d:15:9f:78:44:7c:c4:b4:2c:e9:6c:1d:33:8c:ab:ec:3c:42:
         62:f6:ad:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 11:13:45 2026 by rpki-client