Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft
File:                     DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft (raw, json)
Hash identifier:          dEdl2kkbY/2/SQRfeHsTa9sue7wC8PpTWdD0ci2sji8=
Subject key identifier:   FB:5C:B2:FF:C7:FF:DA:E9:7C:4F:DF:04:FC:F3:B3:0F:38:74:CD:8E
Authority key identifier: DE:3B:A4:47:8F:DB:8E:4A:37:53:24:C0:44:D8:0C:56:55:04:F5:FA
Certificate issuer:       /CN=DE3BA4478FDB8E4A375324C044D80C565504F5FA
Certificate serial:       44D638266A204E483CD5E22FE2DF04598C801E21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft
Manifest number:          03DD
Signing time:             Fri 17 Apr 2026 00:50:00 +0000
Manifest this update:     Fri 17 Apr 2026 00:45:00 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:00 +0000
Files and hashes:         1: DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl (hash: J1se99b+LEjZjLX9LYEyvYSukEl7VCSbNA7to9aoonA=)
                          2: 34352e3138372e3131382e302f32342d3234203d3e20323639343731.roa (hash: twhCXNYsxKUt2FAKh+PFseqgFgC5yGLvHauq/G9V2bw=)
                          3: 323830343a363532343a3a2f33322d3332203d3e20323639343731.roa (hash: eNGRoIC1MIZHrkwbT+gRbTqM7MTnVMuBG9EvAdA4qSs=)
                          4: 323830343a363532343a343030303a3a2f33342d3334203d3e20323639343731.roa (hash: 7/GkhFPFga6eSNEGWPf48bnfOxtD+TjVD74tqu8gyfg=)
                          5: 34352e3138372e3131392e302f32342d3234203d3e20323639343731.roa (hash: 3Vpf26/INv+eWHcXQ7mfZOqQtwrLqsaYRx7Y1pWfnUE=)
                          6: 323830343a363532343a343030303a3a2f34302d3430203d3e20323639343731.roa (hash: IHCcdJHmK0uDqDY5atgymN1EVyt5Mw/EcbYmOHTF49g=)
                          7: 34352e3138372e3131382e302f32332d3233203d3e20323639343731.roa (hash: kCGFK7YtNrfd2Qdx9oln7/DxL5CprsaWV3v3x5Dimdk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl
                          rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 03:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d6:38:26:6a:20:4e:48:3c:d5:e2:2f:e2:df:04:59:8c:80:1e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE3BA4478FDB8E4A375324C044D80C565504F5FA
        Validity
            Not Before: Apr 17 00:45:00 2026 GMT
            Not After : Apr 18 03:01:00 2026 GMT
        Subject: CN=FB5CB2FFC7FFDAE97C4FDF04FCF3B30F3874CD8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f0:2e:c1:47:0d:d9:43:34:fb:b1:71:a9:76:
                    62:d1:c4:58:8a:22:0d:f4:fa:a8:13:30:fb:39:a8:
                    b1:79:7a:04:67:fb:52:3f:fe:d2:92:3a:be:b2:e6:
                    d7:19:80:56:9a:c9:9d:43:ef:d9:f5:1f:09:59:ee:
                    27:79:54:1c:6f:ec:f6:88:05:f8:36:b4:9d:78:e6:
                    16:8c:f7:1f:b8:b6:5f:b1:bf:83:a0:3d:7c:03:cf:
                    11:f5:aa:11:14:69:ac:29:cb:2e:2e:b4:46:3d:d3:
                    0b:72:5d:3a:82:9a:9e:5c:98:fa:25:1e:14:50:7b:
                    d1:02:59:a7:8d:29:9c:cb:36:a7:0b:b7:d8:dd:95:
                    84:d4:5a:b1:af:ec:f0:c5:bc:5d:25:76:3c:0a:87:
                    e6:59:9b:db:db:b1:cb:ce:d1:5b:b3:be:d7:69:43:
                    e4:fb:2c:0f:4f:7c:d2:71:42:ca:2c:fd:f5:7a:11:
                    29:1d:d0:86:4c:7b:21:b9:9b:b4:e5:7f:38:21:75:
                    a8:93:73:69:b3:a3:23:60:1d:48:82:70:b1:fd:aa:
                    83:18:a1:08:0d:f5:a5:59:ed:00:a1:25:17:47:a2:
                    d5:34:dd:35:69:5b:90:93:de:d1:78:75:38:b7:92:
                    bf:85:28:8d:bd:0e:93:89:c9:d3:a5:5f:63:94:25:
                    2a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5C:B2:FF:C7:FF:DA:E9:7C:4F:DF:04:FC:F3:B3:0F:38:74:CD:8E
            X509v3 Authority Key Identifier:
                keyid:DE:3B:A4:47:8F:DB:8E:4A:37:53:24:C0:44:D8:0C:56:55:04:F5:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:e6:fd:38:22:02:f2:86:05:09:c4:a1:29:e3:bb:d9:2e:f1:
         91:9a:65:fd:7f:c2:fb:68:fa:c2:55:71:ba:e7:09:0b:94:27:
         c4:dd:a9:bc:f7:b0:1c:a5:d5:1b:09:f1:ff:03:30:4c:7d:9f:
         bb:6f:27:00:10:82:3a:c3:16:6e:74:74:a5:0e:89:8f:15:05:
         1a:98:76:49:bb:84:81:e6:22:84:14:a1:4c:ed:d0:f6:30:9e:
         71:1a:bd:8a:0b:bf:60:5c:dd:12:b5:48:98:61:87:54:7a:c3:
         d2:82:02:19:7a:8c:91:9d:fb:4e:43:fc:cc:63:e7:3d:35:7f:
         4b:70:84:5d:8d:b3:c3:31:2f:ff:9b:e4:78:d4:4f:3d:77:5e:
         33:07:2d:ef:46:0a:40:ca:3f:a7:84:1e:27:b3:13:65:52:e6:
         1c:02:dd:bb:40:98:03:0e:02:cc:62:b4:d0:04:79:17:fc:b4:
         e2:8f:2a:c0:79:ee:91:80:0f:e3:51:d0:85:10:b8:7e:0f:b5:
         2d:7f:64:de:6b:f8:d9:28:5e:e0:cf:b1:94:d4:65:d1:11:f6:
         fa:14:4f:33:03:c6:55:5a:23:63:c2:71:5e:98:ac:94:46:97:
         01:10:03:61:79:4d:e4:a8:d2:b9:33:7a:a7:50:14:11:c0:c9:
         85:5d:cc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:37:35 2026 by rpki-client