Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2.mft
File:                     DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2.mft (raw, json)
Hash identifier:          GRD1uJ1m2xuxiN939pteerWWb13pI/VYYrGwVwRZ6d8=
Subject key identifier:   FC:8D:77:5E:CE:81:15:CC:16:7A:E9:01:FA:CC:12:F0:D4:E5:CD:5C
Authority key identifier: DF:83:23:2F:CD:7F:AE:C8:A4:B1:93:B1:0B:AC:48:F6:CE:63:12:B2
Certificate issuer:       /CN=DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2
Certificate serial:       53CB48C42FD979A4888A1D1BFF9BADBD16D4F362
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2.mft
Manifest number:          6D
Signing time:             Fri 17 Apr 2026 16:06:54 +0000
Manifest this update:     Fri 17 Apr 2026 16:01:54 +0000
Manifest next update:     Sat 18 Apr 2026 19:28:54 +0000
Files and hashes:         1: DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2.crl (hash: +eYrjYtyfLgMS+kfz4uUwAFYvCg5hHx/7dPG/hjJH0Y=)
                          2: 3134332e3230382e3233322e302f32322d3234203d3e203532353434.roa (hash: femmjrxINKICKTll6FMqC12Rauoo6AiE33D5WwEPQAw=)
                          3: 3230312e3135302e3130382e302f32322d3234203d3e203532353434.roa (hash: YM81l7qXRR+sWhy8RwSOafUuaDfbK4TCUaiXw/uHV0g=)
                          4: 3134332e3230322e3232302e302f32322d3234203d3e203532353434.roa (hash: 71GXOovkfD4/F5vE5KwShK2i0t+eVqNHb8PxIbRjF8I=)
                          5: 3137372e3135322e3135322e302f32312d3234203d3e203532353434.roa (hash: INJ+4mZg7DrSnmIM4YQkU6mGvs7SoWAIm+bGEb4boYY=)
                          6: 3137302e3234372e37322e302f32322d3234203d3e203532353434.roa (hash: Qrn68hWMekgsRVA0koOp4nSV7xI7AKjZ4sp7QGhptbQ=)
                          7: 323830343a6531383a3a2f33322d3438203d3e203532353434.roa (hash: U2kLN/W4F7tie2B7Td4HKkqC2GUTLt/fW2QqfIEdZKA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2.crl
                          rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 19:28:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:cb:48:c4:2f:d9:79:a4:88:8a:1d:1b:ff:9b:ad:bd:16:d4:f3:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2
        Validity
            Not Before: Apr 17 16:01:54 2026 GMT
            Not After : Apr 18 19:28:54 2026 GMT
        Subject: CN=FC8D775ECE8115CC167AE901FACC12F0D4E5CD5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:84:3d:fc:50:53:13:02:66:a5:d4:84:62:71:
                    3d:23:4c:e5:d6:7d:b5:6c:87:1b:e5:5d:7e:1f:55:
                    a3:85:4b:08:98:2a:23:f9:71:72:ed:87:2e:59:ba:
                    da:11:74:b6:b2:54:e3:13:f9:35:86:a7:ae:05:64:
                    1f:40:b3:ca:77:fe:5e:3f:e7:08:58:89:e0:34:c3:
                    1d:28:4b:6c:d9:4f:79:4e:6f:78:38:12:1f:13:28:
                    43:e3:84:54:9c:76:83:7e:c3:fd:d7:d5:23:da:2d:
                    45:92:af:d1:4e:33:fc:2b:c3:b0:da:2f:96:64:08:
                    e6:39:2b:d3:6f:66:d8:14:cb:ee:50:72:4f:3d:15:
                    5e:f0:1f:4b:76:d6:1f:36:db:3f:e1:bf:8a:3b:ee:
                    62:53:76:e8:72:07:3a:32:0a:87:19:64:63:37:f9:
                    40:0a:b0:03:58:12:10:b0:88:ef:dd:27:b2:7d:f0:
                    3b:72:c4:9d:87:e1:62:26:7a:6b:05:a8:34:0f:d1:
                    bd:22:3f:71:d9:4f:9d:e3:1d:3c:e6:05:65:67:c3:
                    a2:fa:6e:91:5e:fc:ec:72:c4:34:96:54:5a:5f:88:
                    87:c9:0f:7b:fe:7b:54:df:80:71:f1:56:4f:ee:98:
                    56:ec:51:31:b9:9e:70:fb:e6:50:87:8b:77:9f:c0:
                    62:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8D:77:5E:CE:81:15:CC:16:7A:E9:01:FA:CC:12:F0:D4:E5:CD:5C
            X509v3 Authority Key Identifier:
                keyid:DF:83:23:2F:CD:7F:AE:C8:A4:B1:93:B1:0B:AC:48:F6:CE:63:12:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:35:11:6f:1c:f9:56:61:17:6b:5c:9e:8a:b1:50:45:9b:c3:
         26:a1:03:ae:5f:08:fe:33:da:4e:7f:cb:78:2c:93:87:75:d5:
         25:5a:b3:ed:1f:77:1a:e0:e8:14:94:da:b3:a0:2f:9b:ca:2c:
         66:b3:31:30:1b:e8:36:e8:68:5a:34:f2:46:47:f7:7c:bd:fe:
         38:c2:d6:90:e0:25:5e:41:76:b6:94:43:cf:26:2c:b7:52:a4:
         92:95:d5:86:9b:ea:46:61:eb:14:4c:a3:76:8d:fa:79:6d:05:
         d4:60:17:3e:9a:27:0f:40:ed:68:15:48:34:2c:d8:2f:07:9b:
         7d:94:bc:a8:5f:bb:c1:7d:f0:16:6a:13:a9:4c:5b:69:93:22:
         50:df:4d:ae:41:2a:f4:0b:c7:89:69:99:8f:22:db:37:15:f1:
         9a:dd:b5:89:e1:5c:90:46:98:a7:ac:2b:49:30:7f:79:42:83:
         60:ad:8f:f9:74:b3:ae:fd:e2:0a:13:16:a2:da:e2:cd:ab:f6:
         39:a0:18:ca:ea:f3:9a:0f:70:b2:ac:f2:35:8c:88:3a:26:ed:
         09:c1:3c:f7:7d:26:1f:22:36:92:da:e8:46:99:9c:0d:7f:cb:
         fa:1c:4d:75:b8:2b:35:bf:0c:36:99:5a:bf:8f:c3:6d:c7:0a:
         f6:7f:da:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:09:24 2026 by rpki-client