Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
File:                     67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft (raw, json)
Hash identifier:          pfPkNdTo69AC2Z3vofR0JvJrV6eMtB4VP1YSC8VQ6Ic=
Subject key identifier:   E3:F6:F4:03:B7:5B:2E:E0:48:53:83:8C:16:AA:71:25:FC:DC:18:C5
Authority key identifier: 67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82
Certificate issuer:       /CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
Certificate serial:       4DADB046AA02D9CD7F7DB7D0BBBAB4394A643FED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
Manifest number:          01EA
Signing time:             Fri 17 Apr 2026 08:03:42 +0000
Manifest this update:     Fri 17 Apr 2026 07:58:42 +0000
Manifest next update:     Sat 18 Apr 2026 10:48:42 +0000
Files and hashes:         1: 67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl (hash: eMYvDxpG80wSnGMybzp0QG1oqdCUGLmWTkMGV0KKw50=)
                          2: 34352e3233342e3231332e302f32342d3234203d3e20323637333733.roa (hash: e1ofZhEjwwLqmwacLrvxcVJI9+LRP99uzz0yMnTvfTE=)
                          3: 34352e3233342e3231342e302f32332d3233203d3e20323637333733.roa (hash: l5aTxd5DKyHH2uZYB2e40xfS7eWg+0EyoE/es6SzOuA=)
                          4: 34352e3233342e3231352e302f32342d3234203d3e20323637333733.roa (hash: zSZHIHecoK4/UDBuo62YoV9QJQyUsxcVR3oif31TqEQ=)
                          5: 34352e3233342e3231342e302f32342d3234203d3e20323637333733.roa (hash: by65odK3YD4vm40sPHb+FG8M5K4D3qP1iQC9NOQMUPY=)
                          6: 323830343a346337633a383030303a3a2f33332d3333203d3e20323637333733.roa (hash: h1dDA5ZyeQXs/UC/Gdy8hngAZLXhdJ17+oiJW1xH4HU=)
                          7: 34352e3233342e3231322e302f32322d3232203d3e20323637333733.roa (hash: e/3GWT/XTaK9QTuS4B3pURPMDqeoYXrg6QcodfjD9GA=)
                          8: 34352e3233342e3231322e302f32332d3233203d3e20323637333733.roa (hash: lnXQHPKU/X7ASQFPj2LdVXj2+mFZ9dfeS5ybOkm2zfE=)
                          9: 34352e3233342e3231322e302f32342d3234203d3e20323637333733.roa (hash: 66UTDHyS+o15o1DHofusYW90OVLhm4399N8Tex9s0yQ=)
                          10: 323830343a346337633a3a2f33332d3333203d3e20323637333733.roa (hash: i+wympsFZ7DTbQCGlqvgvPRqwylAw4y3i5s6eLWj2lA=)
                          11: 323830343a346337633a3a2f33322d3332203d3e20323637333733.roa (hash: wTvI9Jk+Tyb03IMmdqeF3YHfX3R4XnfBxDHBROTaZgA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl
                          rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 10:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ad:b0:46:aa:02:d9:cd:7f:7d:b7:d0:bb:ba:b4:39:4a:64:3f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
        Validity
            Not Before: Apr 17 07:58:42 2026 GMT
            Not After : Apr 18 10:48:42 2026 GMT
        Subject: CN=E3F6F403B75B2EE04853838C16AA7125FCDC18C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0a:0d:57:b5:b8:b2:de:b2:38:41:3b:6f:12:
                    a9:a7:05:7b:82:7b:60:4d:d9:5f:df:0a:26:30:8d:
                    00:c8:ed:66:9a:ea:52:63:a4:c1:ec:2f:e7:f4:be:
                    7d:8a:ff:10:95:67:37:b8:6e:d3:2e:ab:5d:08:ea:
                    3a:17:eb:6d:8a:b5:7c:79:f4:96:2b:50:fd:ae:be:
                    cb:d7:d5:43:2a:f5:48:61:0b:86:5e:ea:2d:6d:bb:
                    bc:c6:ad:5a:6b:56:cd:68:d1:36:ae:eb:b0:93:1c:
                    f9:2f:c0:f7:c9:7c:59:8f:a4:b9:1f:2b:de:bf:e0:
                    cd:18:af:35:19:cb:ed:45:47:eb:c6:d1:43:16:93:
                    92:ac:1f:db:7a:10:1d:48:fe:08:28:9d:90:a1:a0:
                    20:37:58:8a:1f:2b:2d:1b:69:90:d4:bb:a0:a8:ec:
                    84:e5:8d:f6:f0:61:d4:38:b5:6a:18:43:e4:eb:b3:
                    36:02:6e:f2:fb:1f:b7:c9:29:34:70:38:97:fa:a4:
                    b1:27:16:c2:20:d8:a4:44:26:b9:11:11:50:1e:4e:
                    4e:3e:92:f1:d2:6b:9d:a9:62:f1:8b:14:42:95:b2:
                    66:ae:9e:03:7e:2e:71:c5:4d:f9:f5:80:50:d0:4d:
                    31:65:d8:c5:c9:a6:f4:a5:ab:df:d0:60:18:e7:4b:
                    5e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F6:F4:03:B7:5B:2E:E0:48:53:83:8C:16:AA:71:25:FC:DC:18:C5
            X509v3 Authority Key Identifier:
                keyid:67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:91:20:82:10:05:a6:af:cb:cd:09:b0:43:66:d9:68:f7:0b:
         4c:61:de:e0:73:01:77:a3:42:0f:3f:1f:7b:4c:30:f5:c6:f5:
         9c:1a:2e:91:c9:e0:00:9e:62:ba:d3:a8:0a:1f:72:05:c6:b2:
         f8:1d:21:d7:2e:bd:32:34:27:d1:77:4a:60:61:09:f5:62:d3:
         03:07:46:97:84:c2:83:06:8c:0e:2d:3a:dd:0e:06:97:68:61:
         9a:ce:59:e8:4d:83:fd:8d:0f:86:9d:19:9c:9b:79:88:03:31:
         34:af:11:6d:b3:a1:f4:03:1a:9d:5d:33:93:6d:be:6f:d8:63:
         21:17:c8:50:dd:b7:36:f5:78:d6:75:3b:d3:6a:91:9b:8a:05:
         4d:4c:ff:40:e2:c4:50:1c:5b:e2:b6:bd:98:ce:d8:cb:e3:44:
         25:84:9f:0f:61:fd:01:51:83:86:36:91:d9:3b:3d:17:ed:16:
         6d:4f:b2:93:f3:94:6d:85:6a:bf:08:0d:7f:22:27:96:35:b3:
         75:4d:a2:dc:bf:d6:25:17:be:73:f9:90:f8:91:76:17:bb:81:
         c3:b9:7a:5d:49:8d:48:73:3d:ce:31:f5:a7:82:80:f2:eb:d8:
         97:7e:d8:3f:28:cf:d2:04:96:6c:8b:e2:fa:6a:82:ed:58:40:
         5f:d3:68:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:12:42 2026 by rpki-client