Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft
File:                     A910E04F27510FFF1E8362052070412C903FFD8B.mft (raw, json)
Hash identifier:          2YkQKrVZoypvcvEDr5NZRMeBRx+GEGl54hWexcowy2U=
Subject key identifier:   93:8C:CB:45:B4:04:9B:B6:F9:25:9C:DD:AE:07:A8:7B:19:7A:E8:DA
Authority key identifier: A9:10:E0:4F:27:51:0F:FF:1E:83:62:05:20:70:41:2C:90:3F:FD:8B
Certificate issuer:       /CN=A910E04F27510FFF1E8362052070412C903FFD8B
Certificate serial:       0A44E8FA2A550394D1183B5664FA28953E59537C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft
Manifest number:          024E
Signing time:             Fri 17 Apr 2026 05:47:57 +0000
Manifest this update:     Fri 17 Apr 2026 05:42:57 +0000
Manifest next update:     Sat 18 Apr 2026 08:38:57 +0000
Files and hashes:         1: 3133322e3235352e3137362e302f32322d3234203d3e203533303438.roa (hash: kNcxoziUs2V/DZt4kc9ONX8Yibj7lteIZFVSevEydOw=)
                          2: 3230302e39342e3235322e302f32322d3234203d3e203533303438.roa (hash: il53B7Q73jNFlH7g51wKgGiNgid+xMbJfds7WZ0O2Bg=)
                          3: 3137372e3133372e34382e302f32312d3234203d3e203533303438.roa (hash: p+UFfhkBAnWncsui85kUuhM0+jqknevxzdqYB/fmK3s=)
                          4: 323830343a316230343a3a2f33322d3438203d3e203533303438.roa (hash: 6V34vYOx2MLgtwHD9a/e8nKBoFUO7kEonmSNUlw0zWM=)
                          5: A910E04F27510FFF1E8362052070412C903FFD8B.crl (hash: H/gsMvYCGTjR70JpOl9QH0bV3g3hXFUAY1cCnMNOIiU=)
                          6: 3137302e3234352e3232382e302f32322d3234203d3e203533303438.roa (hash: dFZ0LGf9VUQmelCd2T2ZnwoXRmTaX8jDdO8dHAjtnkk=)
                          7: 3138372e37332e39362e302f32302d3234203d3e203533303438.roa (hash: mUieqeJdxR4tWDtSXb9czyw88olGSwxh8CnFwdCV008=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.crl
                          rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 08:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:44:e8:fa:2a:55:03:94:d1:18:3b:56:64:fa:28:95:3e:59:53:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A910E04F27510FFF1E8362052070412C903FFD8B
        Validity
            Not Before: Apr 17 05:42:57 2026 GMT
            Not After : Apr 18 08:38:57 2026 GMT
        Subject: CN=938CCB45B4049BB6F9259CDDAE07A87B197AE8DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8c:a0:de:98:4d:66:ce:e3:b7:8c:77:aa:7b:
                    cd:c6:16:c4:c7:93:12:ff:f2:fd:50:94:b2:be:54:
                    ce:d6:5b:25:64:bb:f0:c8:c1:b5:4f:b1:89:43:1c:
                    af:9f:4b:62:7f:f6:bd:8a:80:03:fa:e4:b6:4a:c5:
                    ff:ad:6b:6e:57:e5:1f:66:ed:86:fa:cd:98:85:73:
                    77:bc:22:64:de:2c:37:45:8b:d0:9d:86:c8:08:e7:
                    f0:5d:05:7d:41:6e:b0:42:9b:3d:0d:c2:6a:72:e5:
                    b9:14:83:70:1b:11:43:53:ba:f5:7b:53:73:88:a7:
                    87:d1:1c:bb:5e:61:c0:6b:3e:b7:f2:74:ad:be:ea:
                    1b:11:e1:31:2c:57:d0:e4:81:80:ae:af:4b:28:78:
                    c3:ad:df:b4:98:da:7a:b3:33:ba:b0:e6:8e:a5:89:
                    64:70:70:9c:40:4f:b5:b9:ea:27:d5:25:ea:88:00:
                    c5:82:b6:46:ad:56:6d:88:c2:20:4a:74:79:61:91:
                    9a:2d:ef:7e:e7:8e:66:63:1c:a3:45:84:f8:f5:df:
                    97:95:5b:2a:ba:a1:3b:11:53:09:c6:79:56:f9:47:
                    18:48:88:5f:21:ce:5a:be:c1:54:09:65:b2:cc:91:
                    4e:ae:c2:c8:30:fc:92:b2:85:e6:dd:c4:ca:fb:50:
                    5d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:8C:CB:45:B4:04:9B:B6:F9:25:9C:DD:AE:07:A8:7B:19:7A:E8:DA
            X509v3 Authority Key Identifier:
                keyid:A9:10:E0:4F:27:51:0F:FF:1E:83:62:05:20:70:41:2C:90:3F:FD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:a0:24:c2:40:84:e4:cc:ac:4b:8d:aa:87:4c:a8:87:88:50:
         03:87:6c:8b:47:1c:7f:c1:92:4c:08:2e:a0:0a:f0:53:66:38:
         82:5d:93:70:fc:71:eb:c4:57:1d:fa:b0:b4:98:c4:5e:fb:bc:
         ba:89:03:c4:74:a6:a3:c1:c4:dc:71:b8:16:a9:e9:b9:ad:2f:
         28:28:fb:f4:1e:4b:f4:60:2c:61:e9:dd:2c:98:fc:24:33:2a:
         8f:7a:3a:c9:28:09:70:52:ed:96:06:ed:9e:fa:5e:d7:98:c1:
         41:4e:26:f4:d8:b1:3e:2b:6c:6b:46:3e:7e:fc:7a:51:cf:48:
         48:ff:66:ab:7a:f0:6d:e3:bb:c5:12:5d:d1:9c:f9:22:69:14:
         9e:38:10:e9:8b:78:f9:96:35:86:66:58:d4:51:07:02:3d:a8:
         f0:84:7f:03:95:1d:98:f2:b3:dd:5d:9a:d3:4a:ae:6c:be:9f:
         db:1f:bd:7a:4b:fd:98:51:53:8c:7b:d7:98:3b:11:84:99:b7:
         a5:bf:3c:95:d6:01:2e:1f:94:22:06:28:00:c5:27:11:fa:05:
         1e:80:b9:2e:4f:d8:17:e5:3d:74:d0:91:a9:a2:9c:88:db:6c:
         cf:c8:84:23:a7:7a:43:35:0e:e4:dd:c3:55:29:3b:5f:28:b6:
         c7:af:a9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:18:16 2026 by rpki-client