Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft
File:                     9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft (raw, json)
Hash identifier:          HaRtx8FGbAado08/rZ/Pqv6SHUijVhugPSoTkW+taWg=
Subject key identifier:   68:55:C8:4E:E5:8F:13:C6:27:30:72:9A:6D:00:5D:00:EB:2B:6E:29
Authority key identifier: 9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D
Certificate issuer:       /CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D
Certificate serial:       17B8BFE2ED98BFA8C148C130E78DC120F06F60A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft
Manifest number:          0288
Signing time:             Fri 17 Apr 2026 17:47:17 +0000
Manifest this update:     Fri 17 Apr 2026 17:42:17 +0000
Manifest next update:     Sat 18 Apr 2026 19:29:17 +0000
Files and hashes:         1: 9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl (hash: p3YGnOkUMJ0l/rXJM7Dhpi1aUTdktQX5lOyHIy0nWlk=)
                          2: 34352e3139312e3136302e302f32322d3332203d3e20323639373037.roa (hash: SxT4+8bwDyslr/ELPBveI7psEIHeQZ+ahxmv2aAsD38=)
                          3: 323830343a363861383a3a2f33322d313238203d3e20323639373037.roa (hash: rBkVsA9Vp1/erFkNnm/hXpS9EC37BBs3SUgY7oXf1XU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl
                          rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 19:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:b8:bf:e2:ed:98:bf:a8:c1:48:c1:30:e7:8d:c1:20:f0:6f:60:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D
        Validity
            Not Before: Apr 17 17:42:17 2026 GMT
            Not After : Apr 18 19:29:17 2026 GMT
        Subject: CN=6855C84EE58F13C62730729A6D005D00EB2B6E29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:da:5d:69:84:c4:4f:2e:a4:dd:98:1e:88:31:
                    e8:00:a5:9c:1b:4f:a3:a3:21:cb:60:39:ad:58:54:
                    39:64:da:c9:43:4e:9d:48:a9:c6:2c:20:2c:84:a1:
                    50:b0:cb:07:2c:e2:66:11:14:fd:ff:af:0e:82:98:
                    0a:a5:b6:8c:91:4f:c5:1d:2c:dc:e0:53:11:70:a3:
                    c9:c2:36:08:0b:01:20:27:ef:cb:41:6b:54:0a:b5:
                    f1:2e:bd:92:9d:7d:3f:56:8f:0e:e4:9c:2f:be:2d:
                    57:10:92:7f:24:d7:10:c4:5c:23:74:8b:45:9c:6f:
                    1c:ee:a0:fd:27:7d:a6:e6:0c:af:e5:35:9f:04:c8:
                    4c:f4:40:e9:8d:3f:d3:99:6f:46:57:d5:61:7f:ff:
                    75:d9:6a:d8:8d:e4:a9:70:b0:d0:2c:c7:e4:73:88:
                    fb:5a:9a:b6:f7:2a:38:5d:25:4c:1d:fc:3a:d7:17:
                    cb:2a:91:a1:59:99:f7:74:a8:ee:28:5b:72:13:df:
                    3a:e0:85:08:54:c8:42:bb:fe:3d:22:08:f8:56:ad:
                    4d:54:4d:59:24:57:04:1c:25:3d:15:e5:23:97:f7:
                    f1:f6:ed:61:3f:e4:76:9f:2c:6b:34:e6:18:e2:4c:
                    78:cd:36:23:2b:51:b7:16:33:3b:d8:fa:6e:4f:9e:
                    29:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:55:C8:4E:E5:8F:13:C6:27:30:72:9A:6D:00:5D:00:EB:2B:6E:29
            X509v3 Authority Key Identifier:
                keyid:9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:30:8c:ab:68:e5:9e:c1:93:a3:6c:9b:06:86:74:0a:4e:73:
         f9:99:d0:49:ce:af:dd:79:4c:cd:2c:d9:42:ab:aa:cf:b4:83:
         b8:c9:f5:4f:5f:64:b5:e9:48:e9:95:65:ff:f7:62:00:28:58:
         ee:70:d6:b6:31:dd:72:7a:bc:de:10:11:93:54:09:6b:97:de:
         95:47:dc:ba:57:a3:21:cf:68:4a:4f:92:e0:0d:d0:a0:60:a6:
         5a:a1:91:fb:cb:f2:5f:ff:ba:92:df:5a:42:b9:83:ae:2a:32:
         98:16:69:bc:94:78:db:e7:9f:43:ce:d4:ce:cd:de:00:ba:49:
         69:b0:11:91:29:78:0a:a8:80:5d:27:d1:24:1b:03:87:2e:83:
         7a:3a:1c:1f:72:b1:be:d4:29:e0:92:42:5b:6a:fb:03:f8:62:
         2a:f0:89:ee:d3:b9:0f:23:94:a7:7f:8b:8d:39:9a:c4:28:6a:
         50:0f:c3:82:cf:6b:d1:fe:1f:ae:44:44:62:18:77:1b:be:77:
         9d:b9:6e:66:06:1d:59:c0:29:8c:94:b6:2f:fb:f6:5f:87:0b:
         99:28:ae:73:7c:2b:d9:56:7d:58:d2:5f:52:e9:ae:1d:49:05:
         c9:be:d6:68:ff:20:7f:2e:29:47:e2:52:b7:6e:1a:82:e9:26:
         09:30:d1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:41:07 2026 by rpki-client