Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/0/2656834461C6B8CB2FF0DDFE70EBF6A45786D5E5.mft
File:                     2656834461C6B8CB2FF0DDFE70EBF6A45786D5E5.mft (raw, json)
Hash identifier:          Y814aRdtdbbQS2+7t7tuCcb0genD6G1MIm6eiuIp6CM=
Subject key identifier:   3C:DD:2A:62:92:24:03:CE:C7:0D:B0:D9:8D:AC:10:48:5B:81:95:74
Authority key identifier: 26:56:83:44:61:C6:B8:CB:2F:F0:DD:FE:70:EB:F6:A4:57:86:D5:E5
Certificate issuer:       /CN=2656834461C6B8CB2FF0DDFE70EBF6A45786D5E5
Certificate serial:       5441FCE204E73F48917351DA324E264E1FD64A0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2656834461C6B8CB2FF0DDFE70EBF6A45786D5E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/0/2656834461C6B8CB2FF0DDFE70EBF6A45786D5E5.mft
Manifest number:          1C
Signing time:             Sun 12 Apr 2026 09:02:33 +0000
Manifest this update:     Sun 12 Apr 2026 08:57:33 +0000
Manifest next update:     Mon 13 Apr 2026 09:10:33 +0000
Files and hashes:         1: 2656834461C6B8CB2FF0DDFE70EBF6A45786D5E5.crl (hash: MKZ5VVghrwdUol6gDgGOAKq85fWORWv5XaqnqHq+GP8=)
                          2: 3137372e38342e32302e302f32322d3234203d3e203532373135.roa (hash: zp7cKiy3HRZRVeV7W8pmipRYA6kUebVl8Qv61zRTrMk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/0/2656834461C6B8CB2FF0DDFE70EBF6A45786D5E5.crl
                          rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/0/2656834461C6B8CB2FF0DDFE70EBF6A45786D5E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2656834461C6B8CB2FF0DDFE70EBF6A45786D5E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 Apr 2026 09:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:41:fc:e2:04:e7:3f:48:91:73:51:da:32:4e:26:4e:1f:d6:4a:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2656834461C6B8CB2FF0DDFE70EBF6A45786D5E5
        Validity
            Not Before: Apr 12 08:57:33 2026 GMT
            Not After : Apr 13 09:10:33 2026 GMT
        Subject: CN=3CDD2A62922403CEC70DB0D98DAC10485B819574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:68:84:2b:e1:e8:01:22:71:4d:be:fb:cc:ea:
                    1f:48:68:a9:41:f1:37:cc:c7:be:d1:9c:b1:76:c7:
                    c1:35:c2:8e:4c:17:cb:d9:f3:b3:40:5e:3e:d3:f1:
                    44:56:e7:07:36:db:49:f4:a2:79:f4:69:dc:66:b3:
                    95:fe:2f:b4:5b:64:91:97:02:16:e4:42:21:38:cf:
                    bf:93:f6:3e:3c:51:45:ca:9e:2b:ea:16:7f:35:d8:
                    81:0d:22:a6:60:48:3e:f0:e8:33:96:ef:ca:14:8d:
                    e1:1a:08:20:90:fe:ea:3d:b2:73:f1:a1:a3:b6:41:
                    1b:0d:55:8c:14:0f:c9:75:df:13:82:ff:b0:f3:b5:
                    d7:6c:35:fe:c7:7f:f4:45:53:6f:81:1f:65:74:48:
                    00:9e:0a:4d:a9:d8:24:6b:9a:5f:22:3e:a8:7d:c4:
                    e9:6e:6b:02:3e:03:49:1c:24:3b:f6:e2:b3:57:a7:
                    6c:99:0c:d2:f9:64:41:0a:8f:d0:c4:a0:54:18:24:
                    a2:aa:de:94:16:bf:28:65:3d:e9:37:38:18:d0:aa:
                    2f:4c:11:3c:43:34:af:42:c3:72:94:06:f0:4f:da:
                    aa:66:d2:92:e1:86:8e:49:12:75:4c:43:1e:9e:c2:
                    70:5a:87:45:de:80:ee:22:53:a7:c9:c5:0d:f4:26:
                    64:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:DD:2A:62:92:24:03:CE:C7:0D:B0:D9:8D:AC:10:48:5B:81:95:74
            X509v3 Authority Key Identifier:
                keyid:26:56:83:44:61:C6:B8:CB:2F:F0:DD:FE:70:EB:F6:A4:57:86:D5:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/0/2656834461C6B8CB2FF0DDFE70EBF6A45786D5E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2656834461C6B8CB2FF0DDFE70EBF6A45786D5E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/0/2656834461C6B8CB2FF0DDFE70EBF6A45786D5E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:2f:18:02:68:a4:47:62:43:5b:6c:fe:f2:78:81:7f:86:79:
         c4:ee:e9:37:50:f5:24:27:8b:be:43:17:d4:80:7e:02:ed:d7:
         12:8b:09:f9:35:74:50:72:6e:eb:c7:7a:d1:1c:ff:da:45:28:
         e4:6e:7c:01:35:a8:26:40:e6:fc:5f:47:65:6f:31:af:48:92:
         7d:ba:10:67:5f:c6:93:21:58:82:3a:3a:df:16:1d:70:53:f9:
         57:63:53:c4:7d:9e:66:2d:ad:cf:62:c4:4a:33:52:86:ea:0a:
         59:cd:ea:f5:ce:2d:04:c6:c3:3b:82:e0:60:9c:11:21:6e:98:
         07:61:b7:91:57:dd:b5:43:65:ef:71:37:13:c0:dd:16:e9:1b:
         f6:be:6e:c5:3d:34:94:00:86:3f:15:47:55:05:94:23:26:4d:
         9f:7d:8e:08:83:06:66:6e:b3:6c:13:34:48:b6:91:5b:6b:5f:
         6c:dc:be:f4:3f:d3:b2:24:d0:3a:ea:4a:9d:b2:09:53:36:e8:
         ef:01:d9:f8:f1:7c:dc:4f:2f:87:06:ac:3d:4a:1f:06:32:de:
         5f:6b:81:27:f7:d1:c4:53:95:f3:35:1a:40:15:7f:91:15:f8:
         73:dc:17:eb:7d:07:75:e9:b7:5f:39:fc:bd:00:f7:05:50:3e:
         46:e3:d1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 00:39:24 2026 by rpki-client