Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7KPKDUZJrVkM5K5UDmHqaoDSmuaU1RQEbCdBY94VL67Z/0/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.mft
File:                     4AB5A3BD9FDB751A3D822719D5839CAA994EA948.mft (raw, json)
Hash identifier:          eIp1oixmz2BUnwOYxVQH9Y1WW4nTK8gcLaYkhyrV0Uc=
Subject key identifier:   A2:E4:4D:F4:A7:1B:CD:B5:D1:F3:D5:2D:8D:49:07:38:D8:AF:92:87
Authority key identifier: 4A:B5:A3:BD:9F:DB:75:1A:3D:82:27:19:D5:83:9C:AA:99:4E:A9:48
Certificate issuer:       /CN=4AB5A3BD9FDB751A3D822719D5839CAA994EA948
Certificate serial:       4AB8C2270BDFE603BEB501B0B2880CB560B19143
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KPKDUZJrVkM5K5UDmHqaoDSmuaU1RQEbCdBY94VL67Z/0/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.mft
Manifest number:          DA
Signing time:             Fri 17 Apr 2026 09:30:41 +0000
Manifest this update:     Fri 17 Apr 2026 09:25:41 +0000
Manifest next update:     Sat 18 Apr 2026 13:29:41 +0000
Files and hashes:         1: 4AB5A3BD9FDB751A3D822719D5839CAA994EA948.crl (hash: mqDtM5Jv7WF6ILxLvdRtTAtAnDuRHhhDjtbOPk7FhvU=)
                          2: 323830313a38313a3135303a3a2f34382d3438203d3e20323734353234.roa (hash: Hm8EMh3DzK2NLsiIRm/hU3HlDg4zv4H+2EaEfFd2hfo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KPKDUZJrVkM5K5UDmHqaoDSmuaU1RQEbCdBY94VL67Z/0/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.crl
                          rsync://rpki-repo.registro.br/repo/7KPKDUZJrVkM5K5UDmHqaoDSmuaU1RQEbCdBY94VL67Z/0/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 13:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b8:c2:27:0b:df:e6:03:be:b5:01:b0:b2:88:0c:b5:60:b1:91:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AB5A3BD9FDB751A3D822719D5839CAA994EA948
        Validity
            Not Before: Apr 17 09:25:41 2026 GMT
            Not After : Apr 18 13:29:41 2026 GMT
        Subject: CN=A2E44DF4A71BCDB5D1F3D52D8D490738D8AF9287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:31:dd:9b:82:c2:aa:ef:49:aa:e4:02:3e:74:
                    9d:3a:a1:a3:7a:2c:8e:c6:94:e4:18:ff:5a:57:a7:
                    d1:67:a6:5b:42:ff:eb:a6:24:65:2f:c1:92:5d:29:
                    ec:71:35:bc:c2:ee:23:67:72:24:50:08:b4:d4:2f:
                    c7:10:68:ba:95:1c:44:23:a8:c0:3f:48:ad:05:a8:
                    9b:ed:72:43:45:d1:17:77:29:69:cb:c5:af:bf:86:
                    44:f3:3c:11:36:3f:42:54:e3:c4:7b:6e:db:db:13:
                    6d:77:c3:99:e7:4f:9a:57:e0:fd:59:6c:2f:9e:fd:
                    c9:e1:fe:92:51:64:01:03:ae:c7:25:3b:01:4d:6e:
                    10:c6:e2:59:49:9e:0c:46:cd:c7:a8:f6:c0:0f:a9:
                    05:13:58:fa:1b:70:64:30:4d:75:ac:ce:f2:2c:16:
                    37:c1:4e:a1:28:f7:f5:b9:dc:72:e7:56:ad:9b:da:
                    60:23:b3:02:4b:b7:b2:5d:4c:30:25:7f:6e:79:d5:
                    b3:0c:20:0c:00:81:e2:e7:24:5f:0f:50:ad:1b:59:
                    64:95:ca:42:84:f4:0c:2d:a3:73:d8:1a:f3:3b:e6:
                    a4:b3:f8:00:5b:21:79:fe:c7:68:d3:c6:d4:2c:35:
                    1c:c1:c3:0b:bb:14:12:79:42:09:2a:97:d3:65:22:
                    ca:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E4:4D:F4:A7:1B:CD:B5:D1:F3:D5:2D:8D:49:07:38:D8:AF:92:87
            X509v3 Authority Key Identifier:
                keyid:4A:B5:A3:BD:9F:DB:75:1A:3D:82:27:19:D5:83:9C:AA:99:4E:A9:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KPKDUZJrVkM5K5UDmHqaoDSmuaU1RQEbCdBY94VL67Z/0/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KPKDUZJrVkM5K5UDmHqaoDSmuaU1RQEbCdBY94VL67Z/0/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:f5:30:d6:d8:a1:80:7d:0e:c9:65:32:47:46:cf:6f:96:3e:
         3d:a3:e1:5f:93:c4:04:92:48:9e:92:c2:0e:a8:1b:7b:8b:8b:
         95:03:de:26:5f:7a:2b:c5:1f:31:f9:4e:f7:a0:d9:b4:82:e7:
         dc:ee:c1:aa:dc:73:3d:9d:36:59:cc:d6:11:9b:d6:94:cf:f1:
         fb:87:30:24:92:ba:90:07:72:a8:ba:be:62:02:e8:6c:c4:32:
         2f:8c:db:3d:3d:32:3f:a1:e7:3f:f7:e4:f6:02:fc:5b:55:7c:
         65:32:56:3a:71:0e:1a:9d:b2:dd:0e:fd:8d:4d:68:12:60:ef:
         cc:1d:73:7a:55:a0:86:d0:ad:06:3e:4b:1a:d3:04:76:65:6e:
         27:10:86:80:43:56:d0:96:fc:2b:c7:7e:6e:fd:c9:2f:e4:6c:
         b8:68:33:3c:50:b6:14:d9:97:84:28:ee:50:5e:4f:eb:8b:59:
         67:11:f7:cf:01:c6:5e:da:19:82:cc:e8:aa:35:25:ef:15:5c:
         cb:71:44:cc:5d:df:f0:8b:13:2f:49:5c:16:3e:98:70:42:6d:
         ee:25:7e:12:07:e6:55:46:99:32:4a:92:e2:f1:56:69:38:4e:
         0e:ca:6c:db:bf:9d:1b:dd:43:26:a3:56:e8:2c:bb:ee:06:8c:
         84:db:46:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:26:10 2026 by rpki-client