Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft
File:                     7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft (raw, json)
Hash identifier:          FAk0+TjEpm8BjCmqfvVGiGKsNjUp4Rgo/monlAo46AI=
Subject key identifier:   24:B8:09:02:31:31:C9:1A:C1:67:AC:A5:EB:0E:BF:D4:F8:08:CD:79
Authority key identifier: 74:47:20:7E:A4:3E:9C:EF:DB:A7:4A:D2:CD:66:F8:9C:E6:AF:98:17
Certificate issuer:       /CN=7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817
Certificate serial:       1468552E90A960E9A39C425BFE295CA892155F9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft
Manifest number:          0128
Signing time:             Fri 17 Apr 2026 11:49:13 +0000
Manifest this update:     Fri 17 Apr 2026 11:44:13 +0000
Manifest next update:     Sat 18 Apr 2026 14:05:13 +0000
Files and hashes:         1: 7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.crl (hash: ggX/HatstnJ55bwtYTaZrX33AAdVBMJEmt4JFoTqO+8=)
                          2: 34352e3233342e34382e302f32322d3232203d3e20323637333533.roa (hash: efCaDnSNHaCNsUZJZ2BRsQIelnrquDotvL3pslOlzNQ=)
                          3: 34352e3233342e35302e302f32342d3234203d3e20323637333533.roa (hash: N+XUMWcII3BAqNP4TTCzSCeQwh2jC9OmWVd+xl4z8DY=)
                          4: 34352e3233342e34392e302f32342d3234203d3e20323637333533.roa (hash: dZH8ZxBMw0oZDUrL/jw2vuUaVyuoflPFTd7ol71clGw=)
                          5: 323830343a346332383a3a2f33322d3332203d3e20323637333533.roa (hash: Kmsr+UXvwv+S9FvagZVWzDR/evsnsCJePVvlO07EQgE=)
                          6: 34352e3233342e34382e302f32342d3234203d3e20323637333533.roa (hash: LyeM55h+f+yfzNTGWUrTsVrUxrvRTN+/Fl74HTUvAlM=)
                          7: 34352e3233342e35312e302f32342d3234203d3e20323637333533.roa (hash: vUJF9gs5xQMqDUw81LvKpvr9X6AUaWZsW9NYWQWl1Go=)
                          8: 34352e3233342e35302e302f32332d3233203d3e20323637333533.roa (hash: /vSap4te8guh+qAqqLmYZImHb8QA8jgej13kbYH5e3Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.crl
                          rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 14:05:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:68:55:2e:90:a9:60:e9:a3:9c:42:5b:fe:29:5c:a8:92:15:5f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817
        Validity
            Not Before: Apr 17 11:44:13 2026 GMT
            Not After : Apr 18 14:05:13 2026 GMT
        Subject: CN=24B809023131C91AC167ACA5EB0EBFD4F808CD79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:55:fe:78:07:12:b3:d6:04:9f:9a:34:27:6a:
                    7c:0a:fe:7d:24:a7:46:2a:b3:d6:06:69:3e:8d:48:
                    42:52:7e:26:3d:d8:a9:ce:9d:2c:8b:37:15:59:2d:
                    08:35:3c:f1:9e:ee:4c:9f:1b:3c:a8:65:33:6c:70:
                    10:c1:2a:2e:36:db:97:9b:85:14:88:50:4d:80:9c:
                    43:9d:78:15:93:78:f9:a0:84:3f:97:93:1c:c7:3d:
                    3b:fa:97:44:87:1d:a2:f4:01:1d:c3:ee:8b:45:20:
                    11:af:ee:dc:c5:31:ed:68:2b:d7:c8:72:e2:29:78:
                    24:fb:c4:06:ee:dd:ab:40:de:c4:25:97:1b:dd:4a:
                    5d:de:28:0a:4d:a8:05:84:a8:c5:6a:c3:cf:1a:03:
                    23:37:f6:d2:bb:6a:0b:c6:e7:26:80:08:0b:6a:0e:
                    a0:52:5c:54:52:0d:a6:d6:31:63:4e:a7:25:22:ac:
                    71:b4:89:89:02:a4:62:99:6a:d3:35:0c:18:8c:bc:
                    ae:8f:2c:cd:57:35:58:ce:e9:bd:b4:1a:3c:e6:8a:
                    f1:14:58:0d:0d:d0:a8:d5:a6:ad:d3:9d:70:1f:8c:
                    2c:1f:58:c6:a2:97:53:6d:ca:86:a3:d7:02:e7:69:
                    92:0d:24:1b:ac:37:6a:41:73:bc:73:6d:db:2b:bc:
                    3c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B8:09:02:31:31:C9:1A:C1:67:AC:A5:EB:0E:BF:D4:F8:08:CD:79
            X509v3 Authority Key Identifier:
                keyid:74:47:20:7E:A4:3E:9C:EF:DB:A7:4A:D2:CD:66:F8:9C:E6:AF:98:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:5e:3d:54:3d:4d:c2:79:99:9f:4a:3a:9f:b5:ad:31:ea:a8:
         ce:05:e7:6c:2a:9d:52:a1:44:3f:2a:ce:5e:88:f4:49:83:e6:
         e2:24:9d:83:da:ac:20:3f:8c:7f:6e:98:13:39:69:f8:5d:d9:
         3e:d6:98:45:f4:2b:49:d6:51:20:f2:8b:7e:74:ec:10:30:1c:
         5c:92:38:4d:dc:c2:11:b3:72:d8:0c:3b:73:a5:69:3b:24:f9:
         a5:1e:fc:88:8a:56:11:4e:f6:eb:f9:ad:ff:2b:89:70:e8:b3:
         ca:b7:e1:a6:7f:24:95:c0:f6:2f:63:7f:db:ef:cf:bc:e8:bd:
         f4:3e:a9:6d:ae:59:ed:d3:b9:08:48:0c:0d:97:5c:7c:eb:3e:
         c1:fb:58:8e:55:2e:c2:df:4c:a2:ce:13:37:e7:f8:a0:37:25:
         fe:ad:96:0c:23:1e:3d:fa:d0:43:b8:4b:fa:b9:43:0f:d8:46:
         31:68:f3:09:70:61:60:00:5a:90:8f:ed:aa:80:4f:a3:b5:db:
         3c:d5:62:ac:95:49:d0:3c:98:72:fc:58:cc:5e:66:81:2b:36:
         db:b7:b3:af:d8:3b:b5:53:c9:64:f5:ba:2d:6d:2b:69:b8:23:
         ec:87:e5:88:ed:b1:7a:fe:6d:44:16:e9:08:a9:a3:c7:c0:b3:
         e4:24:db:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:26:42 2026 by rpki-client