Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GRr1jC7UaawCktMXXuGQTAD8rvRakKhtNmjEHVvr2Dcg/0/431AB4194AA9ED551263DE427F4F121C7979E894.mft
File:                     431AB4194AA9ED551263DE427F4F121C7979E894.mft (raw, json)
Hash identifier:          tclhbsZj3wlGdCpPe0uRw3f7cWjcJuBWojtAWbBJ/ws=
Subject key identifier:   6A:77:AB:67:F0:E8:5C:F3:09:19:BB:8A:AA:AB:FB:21:BB:E5:46:A3
Authority key identifier: 43:1A:B4:19:4A:A9:ED:55:12:63:DE:42:7F:4F:12:1C:79:79:E8:94
Certificate issuer:       /CN=431AB4194AA9ED551263DE427F4F121C7979E894
Certificate serial:       7165802B08C286F71DCDACCC0E34920B98182C5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/431AB4194AA9ED551263DE427F4F121C7979E894.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GRr1jC7UaawCktMXXuGQTAD8rvRakKhtNmjEHVvr2Dcg/0/431AB4194AA9ED551263DE427F4F121C7979E894.mft
Manifest number:          0140
Signing time:             Thu 09 Apr 2026 07:53:50 +0000
Manifest this update:     Thu 09 Apr 2026 07:48:50 +0000
Manifest next update:     Fri 10 Apr 2026 11:43:50 +0000
Files and hashes:         1: 431AB4194AA9ED551263DE427F4F121C7979E894.crl (hash: CzXG1xIgNc3NXPiUYOH9Lhg7oOxfkIvZnzPuFecSqEc=)
                          2: 323830343a393235383a3a2f33322d313238203d3e20323734373036.roa (hash: 5qfys5S0TBbigQIsdFA//QFeQpuuAuKFccvmGfy28xo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GRr1jC7UaawCktMXXuGQTAD8rvRakKhtNmjEHVvr2Dcg/0/431AB4194AA9ED551263DE427F4F121C7979E894.crl
                          rsync://rpki-repo.registro.br/repo/GRr1jC7UaawCktMXXuGQTAD8rvRakKhtNmjEHVvr2Dcg/0/431AB4194AA9ED551263DE427F4F121C7979E894.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/431AB4194AA9ED551263DE427F4F121C7979E894.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 11:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:65:80:2b:08:c2:86:f7:1d:cd:ac:cc:0e:34:92:0b:98:18:2c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=431AB4194AA9ED551263DE427F4F121C7979E894
        Validity
            Not Before: Apr  9 07:48:50 2026 GMT
            Not After : Apr 10 11:43:50 2026 GMT
        Subject: CN=6A77AB67F0E85CF30919BB8AAAABFB21BBE546A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:20:fa:60:45:78:46:8d:b3:de:ff:6c:ca:e2:
                    2e:6c:cf:20:67:1e:2f:8e:1e:b3:04:e3:bf:ad:8d:
                    f9:ea:05:e1:6e:71:06:1c:72:6a:c3:f0:5f:52:b9:
                    1a:4d:7d:de:c6:40:70:76:90:0c:9c:7a:2c:cd:a5:
                    25:e0:1d:7e:c6:c9:b1:2e:29:75:be:72:3e:6f:11:
                    1b:c3:30:ae:e9:7f:26:ef:db:a4:cf:97:18:1d:56:
                    bb:88:2b:0e:6e:65:6f:79:6b:02:54:6b:6c:83:b7:
                    72:d2:5a:f5:20:14:77:8f:51:81:6d:89:7d:bf:bd:
                    7d:2b:f9:93:22:49:87:7e:f6:2d:db:8b:66:f7:6f:
                    a5:92:b8:89:b2:16:f6:22:68:01:7f:08:c8:a1:5a:
                    4f:25:7d:8f:a4:b8:39:b1:61:bf:02:01:ac:75:aa:
                    e4:bd:e0:ea:9e:9a:da:25:4c:85:c2:24:dc:47:66:
                    52:a5:7e:df:5e:f9:b9:84:d8:1b:10:bf:ab:8d:bb:
                    be:c9:8d:6d:9f:3d:1e:84:55:ca:d3:16:9d:64:21:
                    84:d4:a5:66:d9:3b:c9:ba:77:42:fb:3a:13:e3:89:
                    f4:c9:4f:94:05:4c:40:d7:c8:b1:e0:0d:52:15:7e:
                    f6:ff:6f:cf:f6:a8:79:80:a0:19:47:07:4e:6a:2e:
                    d3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:77:AB:67:F0:E8:5C:F3:09:19:BB:8A:AA:AB:FB:21:BB:E5:46:A3
            X509v3 Authority Key Identifier:
                keyid:43:1A:B4:19:4A:A9:ED:55:12:63:DE:42:7F:4F:12:1C:79:79:E8:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GRr1jC7UaawCktMXXuGQTAD8rvRakKhtNmjEHVvr2Dcg/0/431AB4194AA9ED551263DE427F4F121C7979E894.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/431AB4194AA9ED551263DE427F4F121C7979E894.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GRr1jC7UaawCktMXXuGQTAD8rvRakKhtNmjEHVvr2Dcg/0/431AB4194AA9ED551263DE427F4F121C7979E894.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:61:c9:9d:7e:8a:c9:d7:f8:e3:92:fb:bf:bf:e3:6a:8f:45:
         e2:52:fe:17:d0:9d:43:b2:93:f5:56:7e:6f:c2:cd:91:50:ac:
         72:dd:29:8e:6d:b8:f7:a9:7d:29:6f:92:1c:41:ae:88:62:bf:
         a9:1a:5f:b1:3c:77:18:34:2b:08:65:57:31:74:e5:42:94:44:
         8a:ac:e4:e6:80:e4:9f:10:7a:94:32:66:69:85:08:2a:07:1b:
         72:89:6b:b1:3f:4a:47:a1:d7:38:d6:73:a2:a9:ec:3c:e0:14:
         24:52:a0:1d:1a:db:3c:19:1b:b5:f5:2c:a6:a4:36:4f:f2:95:
         9f:e0:85:17:77:2f:ec:24:63:ae:c6:09:d6:b0:c7:c8:4e:58:
         9d:4e:09:06:8f:f5:3b:a0:0b:4d:5a:50:f3:2c:aa:80:19:19:
         01:f1:ea:02:03:f0:2b:34:15:ab:a2:19:8e:ef:21:51:fa:65:
         8e:74:81:8a:27:eb:96:ac:eb:fa:6a:25:7c:d6:56:e7:a7:64:
         05:f8:c2:45:c1:d6:0c:c4:a7:cd:98:62:88:27:36:ba:37:e3:
         91:63:47:cf:a9:e9:04:8a:d5:fe:52:95:dd:4e:70:df:05:8e:
         44:9e:f0:ff:31:2b:f4:4f:86:63:89:6f:85:e7:00:23:cc:e9:
         28:30:73:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 11:13:19 2026 by rpki-client