Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.mft
File:                     1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.mft (raw, json)
Hash identifier:          1dyYPeq1pwvc1z2GrW5V5zMB8+D5PbLwTsN/vcEOG2A=
Subject key identifier:   85:28:DF:40:57:13:A2:71:3A:24:35:ED:3F:93:B3:23:0F:54:CC:47
Authority key identifier: 1B:FA:70:C3:BF:99:AF:CA:8E:1C:96:99:D5:F6:48:DF:2C:B4:41:A5
Certificate issuer:       /CN=1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5
Certificate serial:       717F8185EA5ADFC3DD6A8F1F39B57BF6749756B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.mft
Manifest number:          DD
Signing time:             Fri 17 Apr 2026 15:51:23 +0000
Manifest this update:     Fri 17 Apr 2026 15:46:23 +0000
Manifest next update:     Sat 18 Apr 2026 19:25:23 +0000
Files and hashes:         1: 323830343a363738303a3a2f33322d3430203d3e20323639363332.roa (hash: SX2dU0cds+iLnyJtcs06QjqpHxXnJw1YEktYayh/TlE=)
                          2: 1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.crl (hash: KrMOrYESWbu+o00saR+XumzuihPrd1rHigJ+ol9RoNA=)
                          3: 34352e3139302e32382e302f32322d3234203d3e20323639363332.roa (hash: aQLIYYVoiILAmoQD4DtX+QNXyDT1k5rL+bEaFnakAss=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.crl
                          rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 19:25:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:7f:81:85:ea:5a:df:c3:dd:6a:8f:1f:39:b5:7b:f6:74:97:56:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5
        Validity
            Not Before: Apr 17 15:46:23 2026 GMT
            Not After : Apr 18 19:25:23 2026 GMT
        Subject: CN=8528DF405713A2713A2435ED3F93B3230F54CC47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e9:74:7d:31:a2:61:da:86:55:a7:97:7e:be:
                    8a:69:00:d6:3f:3a:08:38:9a:61:74:07:19:e3:6c:
                    19:c1:ba:00:e0:84:db:b0:0a:71:53:50:72:e7:ca:
                    5a:67:b8:42:6a:f4:a8:d3:70:cf:cc:ba:dd:44:8a:
                    24:1e:3c:b5:75:50:ed:2d:f1:43:cf:5b:39:33:2b:
                    1a:c8:63:0a:ca:ea:e7:48:c3:11:d8:ba:8f:cb:8d:
                    7b:fc:9f:a7:0b:6b:69:fe:2d:d5:b5:82:19:01:e0:
                    18:ed:29:0e:b6:ae:a0:05:cd:7b:ce:9b:8f:54:32:
                    68:87:37:53:25:c9:1a:ed:fa:bc:7c:35:a1:21:b6:
                    f1:7d:06:a6:f2:93:9b:7d:f1:60:90:6b:51:bd:93:
                    a9:30:97:31:a0:aa:75:95:1c:42:aa:7d:c3:db:e5:
                    a8:09:4c:03:82:ef:5a:e2:2e:ad:34:97:5f:68:34:
                    19:ed:e7:ae:24:58:c8:35:3d:69:a7:c9:1b:20:62:
                    f3:cc:e7:4c:34:b1:82:4b:73:18:7d:8a:aa:7e:13:
                    31:6d:d8:b3:31:d1:36:2d:d9:9c:b2:07:df:94:4e:
                    f1:0f:d8:d0:47:59:3d:7b:ec:50:26:9e:9a:87:2e:
                    a7:d0:b2:f1:92:01:45:4f:a9:90:f2:29:af:2f:f5:
                    86:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:28:DF:40:57:13:A2:71:3A:24:35:ED:3F:93:B3:23:0F:54:CC:47
            X509v3 Authority Key Identifier:
                keyid:1B:FA:70:C3:BF:99:AF:CA:8E:1C:96:99:D5:F6:48:DF:2C:B4:41:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:91:af:23:b9:91:21:41:c8:ff:a4:b7:e0:86:aa:83:a9:88:
         bc:30:39:0f:81:a6:6f:de:6b:15:85:50:30:f7:d3:6c:b7:a8:
         8a:2c:ea:b5:f3:72:fc:fb:98:aa:94:08:fb:64:cc:0b:7f:59:
         bd:17:18:12:4a:90:95:b7:07:50:14:ea:08:18:58:8a:a0:a0:
         f6:85:ed:83:58:d7:0f:87:40:bd:a2:10:e0:e8:6b:f4:e4:51:
         88:53:35:41:2a:30:ec:0b:9e:f7:bd:f4:d9:f4:1c:51:1a:82:
         11:e3:b2:df:84:ad:9f:0e:73:d7:f8:c6:03:12:57:77:3e:00:
         37:f9:60:8d:3b:23:13:3f:5c:31:15:30:e4:1e:68:95:0c:3c:
         db:66:25:65:bb:07:57:a1:71:02:1c:21:12:63:55:20:39:7b:
         f4:12:de:f6:91:0b:15:b3:5e:02:9e:e9:c8:f3:ce:5a:33:92:
         b7:13:4c:69:ad:c0:ab:b1:1f:06:6f:73:f5:1c:b5:7b:82:22:
         f7:d0:21:b7:69:eb:b7:86:53:9a:de:68:36:51:d1:06:f7:a1:
         6c:ac:a5:7d:1e:40:59:cd:75:15:5b:3e:a0:71:54:dc:e6:bd:
         64:bf:7d:aa:a3:f5:97:10:d4:84:c3:db:5e:bf:a0:05:d4:18:
         e4:1a:8b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:42:39 2026 by rpki-client