Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.mft
File:                     165D5CE1AD75707F0EBAD74246A8509CC4934DE0.mft (raw, json)
Hash identifier:          si1v9vXMuzyW7E9EO7qefMbHLWijO+7vZNBWFUC8Ld4=
Subject key identifier:   7D:C5:D4:27:D1:A9:D9:49:DE:A7:2E:9D:6F:97:0E:2D:B8:84:9B:D4
Authority key identifier: 16:5D:5C:E1:AD:75:70:7F:0E:BA:D7:42:46:A8:50:9C:C4:93:4D:E0
Certificate issuer:       /CN=165D5CE1AD75707F0EBAD74246A8509CC4934DE0
Certificate serial:       7072F3C97E246709A0A2F3A53E4296D20F2532B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.mft
Manifest number:          01AA
Signing time:             Thu 09 Apr 2026 01:00:13 +0000
Manifest this update:     Thu 09 Apr 2026 00:55:13 +0000
Manifest next update:     Fri 10 Apr 2026 02:32:13 +0000
Files and hashes:         1: 34352e3138372e3233322e302f32322d3332203d3e20323636323037.roa (hash: KhKbCSYg2zcuyc0vqW5OWHwIecy2sp5+qnMo9kGDBd8=)
                          2: 3137302e38302e33362e302f32322d3332203d3e20323636323037.roa (hash: KtrPDzDMt2J5gpUpvNGofwJSiHUxs7c5w1oORXGzWPE=)
                          3: 165D5CE1AD75707F0EBAD74246A8509CC4934DE0.crl (hash: UuBf/ohTTcNz/LmRcAYA4oJ5DH8eP7sKQbhGM4EDSCc=)
                          4: 323830343a336336303a3a2f33322d313238203d3e20323636323037.roa (hash: SoUKIEfhbFTW8l3BBJ4UrqfwJxte5BAOwfMb2s2SsNM=)
                          5: 3231362e39382e3230382e302f32322d3332203d3e20323636323037.roa (hash: +RsS1nEos1cR1/sb/KuovUMN89Yjnr49Lh1CVloHLgk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.crl
                          rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 02:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:72:f3:c9:7e:24:67:09:a0:a2:f3:a5:3e:42:96:d2:0f:25:32:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165D5CE1AD75707F0EBAD74246A8509CC4934DE0
        Validity
            Not Before: Apr  9 00:55:13 2026 GMT
            Not After : Apr 10 02:32:13 2026 GMT
        Subject: CN=7DC5D427D1A9D949DEA72E9D6F970E2DB8849BD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9f:52:b6:b1:14:d0:d4:bf:ea:68:ad:43:97:
                    98:51:12:39:8d:24:40:ef:90:4d:d4:35:10:2e:db:
                    e5:7a:fa:03:f5:42:20:d0:41:14:ee:e9:86:7b:38:
                    8c:4b:2a:fb:f3:8a:31:23:8f:9f:95:cf:91:c7:c0:
                    ea:40:58:f9:6e:78:3f:06:43:55:f1:ee:fd:d8:9c:
                    65:b7:41:ea:b5:50:22:17:08:29:c5:fe:03:0e:d7:
                    be:d3:20:41:54:55:20:39:7f:d2:3b:cf:97:30:f4:
                    31:c1:d7:a3:c7:4e:e5:8f:38:40:47:f6:cc:e6:4d:
                    4f:b4:c7:10:a9:15:11:e2:7b:56:dd:7a:8f:bf:83:
                    e8:8f:2f:6e:cb:1d:94:ac:52:59:97:8e:a7:b4:d4:
                    a1:2e:72:52:75:21:6e:19:3a:9c:72:b2:ad:ad:ef:
                    4a:85:b4:5e:5a:eb:9e:27:56:44:f5:0b:8e:bf:34:
                    cd:d1:3f:73:0f:df:3e:fb:f7:26:5a:3a:df:f8:da:
                    9b:1c:f8:03:84:41:79:0b:59:9d:45:bf:f5:16:09:
                    dc:a4:f9:b4:7e:d7:23:92:b3:28:87:96:61:f0:2a:
                    be:71:b6:39:58:79:6e:57:ad:c7:64:d1:0d:56:9e:
                    8e:bf:24:6d:51:a8:23:40:86:7f:f6:4c:96:88:43:
                    29:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C5:D4:27:D1:A9:D9:49:DE:A7:2E:9D:6F:97:0E:2D:B8:84:9B:D4
            X509v3 Authority Key Identifier:
                keyid:16:5D:5C:E1:AD:75:70:7F:0E:BA:D7:42:46:A8:50:9C:C4:93:4D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:f0:20:f4:da:29:11:0f:f9:7e:c6:b0:57:75:f7:bd:7d:6a:
         15:c4:1c:b5:2b:e8:63:75:7c:15:9b:ef:03:31:d6:48:fe:e4:
         43:80:e5:08:8c:81:e5:29:d5:39:ad:db:b6:df:ce:64:0a:bb:
         96:9a:36:64:cd:4b:1c:b7:2a:3f:17:9c:8e:7e:b5:cf:ab:e2:
         12:7f:c6:ea:b5:3d:72:1e:eb:e4:63:83:df:7a:f6:0c:07:91:
         f1:75:9f:b8:c4:07:70:61:65:8f:0f:6d:98:93:39:47:81:32:
         88:6a:9e:f6:f0:8c:1d:fa:29:0a:3d:23:70:f7:33:13:84:76:
         8f:66:60:ed:12:ee:56:92:d6:26:41:21:aa:4d:5b:64:ce:21:
         17:90:2b:64:d2:f0:8c:2e:1f:a7:7a:51:4f:ba:94:0c:9a:76:
         fb:52:46:66:7a:b1:90:02:88:dd:59:07:69:4c:21:3a:78:c0:
         46:83:91:c6:66:41:3f:19:86:1f:b2:38:25:6a:f3:d6:ce:ee:
         07:1e:8d:86:03:58:29:b9:1f:1d:b6:bc:ff:f3:46:6f:e1:18:
         fb:3a:74:f2:d9:14:d3:f9:8e:49:92:23:0c:b5:82:e6:fb:5c:
         c1:20:8d:94:03:65:0e:4f:19:54:a8:b3:7e:a8:3d:f9:07:4c:
         36:60:32:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 12:59:58 2026 by rpki-client