Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft
File:                     43897DFF118E56C31A35958D9EA818504B130E11.mft (raw, json)
Hash identifier:          niifQm6LVAJq1XHNwW/j+YIOM0oC4wnDWgB0kQ7T+X8=
Subject key identifier:   3F:A5:A1:BA:93:26:2D:AB:6F:09:2D:47:2A:3F:6C:68:3A:6C:07:25
Authority key identifier: 43:89:7D:FF:11:8E:56:C3:1A:35:95:8D:9E:A8:18:50:4B:13:0E:11
Certificate issuer:       /CN=43897DFF118E56C31A35958D9EA818504B130E11
Certificate serial:       44E8991EF9037938A96F1A79AF3B29F8E6168EB6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft
Manifest number:          03BE
Signing time:             Fri 17 Apr 2026 20:51:05 +0000
Manifest this update:     Fri 17 Apr 2026 20:46:05 +0000
Manifest next update:     Sat 18 Apr 2026 21:15:05 +0000
Files and hashes:         1: 323830343a363935633a3a2f33322d3430203d3e20323730323635.roa (hash: 3CdM6OUDEZWJ518SMSTwfbfOY5QN9myILPsVeWNTcyk=)
                          2: 3230302e3130382e3136342e302f32322d3234203d3e20323730323635.roa (hash: fd+XLqforU4yBuBhkQfIlmPGl0AMEonZfKP9r8oqZMI=)
                          3: 43897DFF118E56C31A35958D9EA818504B130E11.crl (hash: k8s4HWfEt7Va9Kjh96Yp1aDN04SrQGvH8L2ghTkMvQI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.crl
                          rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 21:15:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e8:99:1e:f9:03:79:38:a9:6f:1a:79:af:3b:29:f8:e6:16:8e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43897DFF118E56C31A35958D9EA818504B130E11
        Validity
            Not Before: Apr 17 20:46:05 2026 GMT
            Not After : Apr 18 21:15:05 2026 GMT
        Subject: CN=3FA5A1BA93262DAB6F092D472A3F6C683A6C0725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ef:ee:3b:55:05:39:2f:0f:f3:6c:5e:78:40:
                    1b:ae:29:72:7e:7e:53:30:2e:eb:91:88:3e:fc:ae:
                    e5:a4:bd:b1:cf:76:f8:c3:bd:34:97:44:fc:01:b1:
                    1b:59:3d:65:5f:94:fd:df:37:a0:37:77:b3:c4:33:
                    c5:88:98:20:bc:38:c5:b9:0f:8d:9e:88:33:97:76:
                    00:9a:98:cf:50:2c:6f:e3:ea:19:fe:ed:b5:4e:48:
                    ff:4d:00:b2:68:23:27:ad:b5:d9:65:e8:21:b2:fe:
                    d4:14:3d:fd:67:8d:ea:17:ab:0b:a0:47:ff:87:c9:
                    1d:26:f8:07:9a:12:d9:15:97:66:c3:57:35:64:48:
                    ec:3c:06:1b:d8:cb:43:f7:8f:dd:27:6d:9f:71:09:
                    62:6d:fb:03:66:85:ff:2c:e5:40:13:26:5c:8e:3d:
                    98:ca:e8:5c:51:49:71:58:9b:41:32:1a:82:72:b1:
                    9a:35:9b:95:c0:9a:f7:10:e8:58:5d:a5:3c:63:44:
                    7c:ff:e9:67:67:e4:37:9c:85:ca:11:cd:4e:7f:e6:
                    b9:2e:bd:31:0d:b5:d6:33:fe:78:0f:e5:1d:aa:3b:
                    5f:03:3c:cc:c8:d1:d7:3e:16:74:b2:c9:0e:60:58:
                    c3:df:c1:26:5b:8c:4b:0e:62:90:74:33:fe:4a:6b:
                    3c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A5:A1:BA:93:26:2D:AB:6F:09:2D:47:2A:3F:6C:68:3A:6C:07:25
            X509v3 Authority Key Identifier:
                keyid:43:89:7D:FF:11:8E:56:C3:1A:35:95:8D:9E:A8:18:50:4B:13:0E:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:86:42:e9:9b:d6:97:1d:c3:49:de:74:cc:66:24:8f:32:d1:
         20:3a:e1:4a:53:0c:db:04:4e:63:c1:8f:f7:d5:f1:41:3d:96:
         ee:83:24:91:58:88:85:78:b6:77:73:4f:35:f3:cb:4d:9c:77:
         00:f5:27:d3:2c:33:3b:f2:d8:83:9d:51:3e:b2:28:98:7e:db:
         ac:d3:9f:6c:10:2d:2d:98:ba:2b:15:a1:7d:c5:56:1c:c2:1c:
         d3:34:78:13:d0:8c:78:05:83:29:76:27:03:2f:05:3f:94:c2:
         84:72:28:e4:1e:44:99:08:89:cf:8e:e3:78:25:c1:c8:86:00:
         f0:85:6e:49:33:56:bf:ba:65:68:76:75:64:b8:04:da:fc:93:
         fd:78:35:d3:c6:8a:1f:1c:02:69:ee:53:2f:5e:3c:1a:f7:56:
         c2:1d:cb:6c:55:03:88:ca:8a:73:c2:b1:01:33:c5:d4:61:b8:
         9d:3e:4b:e9:9a:ff:05:46:65:89:d7:cd:fc:c1:f3:e1:ee:c6:
         e8:46:6e:68:ff:9b:a9:95:21:57:4a:34:63:fd:41:d5:8e:08:
         63:4f:54:c4:80:94:f8:68:06:07:d3:bc:e6:38:2b:b9:3c:ef:
         38:1a:cf:95:d6:4f:fc:a1:61:91:bb:53:45:eb:a8:19:05:81:
         a4:ac:bd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:46:46 2026 by rpki-client