Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8HsEkxr5Dbpt6GAr54g3fEtEMrWoyw6DS4qJo8EMM6RM/0/12A5304B07DEEAAD4ECE8D992175A8A7CC38DF65.mft
File:                     12A5304B07DEEAAD4ECE8D992175A8A7CC38DF65.mft (raw, json)
Hash identifier:          PNAu21quoD2jusUH+pVKiVRRQDhUiDyAkNPgGLKkStU=
Subject key identifier:   96:99:90:A8:84:21:34:27:0E:DA:8C:AD:C9:EC:A8:FD:F4:B2:6D:34
Authority key identifier: 12:A5:30:4B:07:DE:EA:AD:4E:CE:8D:99:21:75:A8:A7:CC:38:DF:65
Certificate issuer:       /CN=12A5304B07DEEAAD4ECE8D992175A8A7CC38DF65
Certificate serial:       2BA04B527E70D26C9439C7C5B8A8D014E09417D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12A5304B07DEEAAD4ECE8D992175A8A7CC38DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8HsEkxr5Dbpt6GAr54g3fEtEMrWoyw6DS4qJo8EMM6RM/0/12A5304B07DEEAAD4ECE8D992175A8A7CC38DF65.mft
Manifest number:          3E
Signing time:             Fri 17 Apr 2026 12:07:16 +0000
Manifest this update:     Fri 17 Apr 2026 12:02:16 +0000
Manifest next update:     Sat 18 Apr 2026 12:30:16 +0000
Files and hashes:         1: 12A5304B07DEEAAD4ECE8D992175A8A7CC38DF65.crl (hash: Shz/tV/AKUmo7FhG1e7FST5d6MbVV1qItpZRGY+B3u8=)
                          2: 323830343a393830383a3a2f33322d3332203d3e20323735363631.roa (hash: trOZGzfmU2kHgQCaSNEvR8cYSWT8b07SrUwN6ECyhk4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8HsEkxr5Dbpt6GAr54g3fEtEMrWoyw6DS4qJo8EMM6RM/0/12A5304B07DEEAAD4ECE8D992175A8A7CC38DF65.crl
                          rsync://rpki-repo.registro.br/repo/8HsEkxr5Dbpt6GAr54g3fEtEMrWoyw6DS4qJo8EMM6RM/0/12A5304B07DEEAAD4ECE8D992175A8A7CC38DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12A5304B07DEEAAD4ECE8D992175A8A7CC38DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 12:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a0:4b:52:7e:70:d2:6c:94:39:c7:c5:b8:a8:d0:14:e0:94:17:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12A5304B07DEEAAD4ECE8D992175A8A7CC38DF65
        Validity
            Not Before: Apr 17 12:02:16 2026 GMT
            Not After : Apr 18 12:30:16 2026 GMT
        Subject: CN=969990A8842134270EDA8CADC9ECA8FDF4B26D34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:53:d5:ff:b8:61:38:70:11:39:ab:d3:b4:97:
                    18:45:b9:65:ed:d1:41:b2:ad:e0:64:f0:f4:34:98:
                    6a:b8:71:e2:50:e9:a0:d5:5d:f0:a6:e8:21:10:b4:
                    69:88:97:8a:9b:9f:27:35:60:8c:0c:29:63:d2:67:
                    47:b5:05:be:ce:8d:55:1b:e7:95:e5:de:2f:17:97:
                    e0:b7:c4:08:41:ab:4c:07:5d:48:36:ec:87:e2:aa:
                    2b:90:2d:7c:f9:ca:68:f6:b2:dd:ab:00:48:b9:22:
                    44:bb:5d:f5:60:b2:0a:90:12:0a:7c:fc:bd:fe:77:
                    09:2c:d6:ea:e0:dd:81:e9:77:8e:ca:15:53:12:18:
                    6c:83:6b:d4:b6:2c:4b:fc:b1:9b:4a:0c:f6:91:42:
                    54:ea:21:f2:d4:78:5d:6b:f3:04:7a:e1:a1:da:a5:
                    ca:bb:d0:de:2e:fc:6e:24:3a:69:be:cd:9a:70:b1:
                    bc:6d:11:61:4e:21:96:06:07:5a:bf:3f:71:fa:46:
                    7d:27:4d:9b:d2:31:82:45:1a:8e:98:72:d3:76:87:
                    7b:41:d4:c3:d5:f0:05:9c:53:d2:09:79:25:3c:e5:
                    b5:78:87:ff:d4:9f:3f:04:44:26:01:da:9e:46:64:
                    e6:0d:e9:7b:a1:c2:f3:ac:ec:c2:04:33:f7:c8:9a:
                    2b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:99:90:A8:84:21:34:27:0E:DA:8C:AD:C9:EC:A8:FD:F4:B2:6D:34
            X509v3 Authority Key Identifier:
                keyid:12:A5:30:4B:07:DE:EA:AD:4E:CE:8D:99:21:75:A8:A7:CC:38:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8HsEkxr5Dbpt6GAr54g3fEtEMrWoyw6DS4qJo8EMM6RM/0/12A5304B07DEEAAD4ECE8D992175A8A7CC38DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12A5304B07DEEAAD4ECE8D992175A8A7CC38DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8HsEkxr5Dbpt6GAr54g3fEtEMrWoyw6DS4qJo8EMM6RM/0/12A5304B07DEEAAD4ECE8D992175A8A7CC38DF65.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:f4:0e:df:4b:97:ff:5c:f8:81:e5:9d:59:e1:cd:a9:7b:ea:
         56:cd:f3:3f:5e:18:a2:37:0f:13:f9:37:01:4a:13:4b:79:8d:
         ef:b3:d0:e9:13:5a:7b:b5:64:0d:7d:8c:2e:d1:6e:98:a7:a5:
         f5:b6:e5:f8:93:8f:c4:79:30:be:2a:a3:c7:bd:ca:ed:eb:c9:
         e6:92:0f:7f:18:00:e8:39:a6:95:9e:61:18:f2:80:a0:77:6e:
         fe:a8:ce:f2:eb:9a:9e:a3:22:2d:3f:80:56:49:d7:94:5e:4c:
         d6:a1:e1:09:20:c1:cb:4c:87:46:6d:51:09:70:b9:cf:41:ad:
         4d:13:57:e6:9b:29:9b:d4:43:8d:bc:36:ee:ed:b5:8a:b8:56:
         3d:8e:c3:83:1c:75:96:48:23:af:8c:06:56:75:0e:51:2c:74:
         f7:03:26:32:fa:3a:47:e3:98:d5:a1:ec:c0:a9:29:66:95:02:
         54:e8:79:c6:1a:1a:2b:ce:4b:88:b7:ea:2c:75:17:ff:ed:b8:
         c0:a4:65:4f:4a:5a:27:b7:fe:21:0e:aa:e4:7c:b2:c9:0e:58:
         a3:c3:93:0a:3b:75:43:94:16:3f:dd:c5:c4:1c:3f:9b:25:6e:
         53:d7:ef:2d:c5:d8:26:83:79:bc:62:65:61:a3:4d:f8:c5:78:
         0e:ac:2a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:42:15 2026 by rpki-client