Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.mft
File:                     859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.mft (raw, json)
Hash identifier:          rSpb7vzIHf3Q0JDxKxB+y0jGO0wSXbk7lyMSrGdy3kY=
Subject key identifier:   3F:BF:05:16:E4:97:D9:44:90:37:0B:7A:D3:C7:FF:50:A3:8C:5C:8F
Authority key identifier: 85:9D:67:46:CD:7A:AE:BE:ED:E8:FD:74:F7:99:81:0A:9D:BF:A0:8D
Certificate issuer:       /CN=859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D
Certificate serial:       4EC44DEA3818EE828CABD665C7550C2BC44F6A15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.mft
Manifest number:          2A
Signing time:             Fri 17 Apr 2026 12:38:24 +0000
Manifest this update:     Fri 17 Apr 2026 12:33:24 +0000
Manifest next update:     Sat 18 Apr 2026 13:22:24 +0000
Files and hashes:         1: 323830343a366564383a3130303a3a2f34302d3430203d3e20323730363232.roa (hash: fL35lLIJqdSlnvV5yi6iNGXtH8hEnxFtjwmuyKkeQAo=)
                          2: 3138392e35302e3231312e302f32342d3234203d3e20323730363232.roa (hash: 0hQqQbnw5D8Q38qhX4brtADh7gRLZbpMiyZ+Mmd2Ef8=)
                          3: 859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.crl (hash: za/KiapRuba8bOFjAQa20P2ba+W9+mUU/qCHVBYLTRA=)
                          4: 323830343a366564383a3a2f34302d3430203d3e20323730363232.roa (hash: 6XbwwSQ4bxfUhZ8KSrUOyq/hju9rI6Hr7G0xVI6Xf1o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.crl
                          rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 13:22:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:c4:4d:ea:38:18:ee:82:8c:ab:d6:65:c7:55:0c:2b:c4:4f:6a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D
        Validity
            Not Before: Apr 17 12:33:24 2026 GMT
            Not After : Apr 18 13:22:24 2026 GMT
        Subject: CN=3FBF0516E497D94490370B7AD3C7FF50A38C5C8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:84:72:43:20:00:32:67:20:f2:d9:b9:68:a8:
                    96:a0:8d:25:c0:57:82:ad:2f:94:fd:73:37:c5:b2:
                    25:be:76:cf:b4:c4:fa:72:07:98:a6:7c:8f:c5:84:
                    d6:5b:a8:6b:6a:46:de:38:2c:7a:71:03:67:89:30:
                    82:95:c9:12:9c:2b:26:e6:34:a3:2a:8d:e7:db:38:
                    31:9d:40:1e:73:19:2e:99:eb:15:c9:46:09:31:c8:
                    ba:3a:a4:de:70:98:f2:56:78:e4:7c:fe:d8:af:e2:
                    cc:75:40:2f:e4:ec:5a:ff:eb:d1:fa:11:d1:3b:07:
                    da:23:7b:1b:c7:cd:da:56:1f:12:b2:8d:98:77:a6:
                    e9:02:78:98:e1:ed:ec:f3:67:06:49:c8:58:7b:78:
                    9c:4a:e6:0d:58:b0:21:4b:a6:54:94:83:47:27:78:
                    c4:25:43:d2:56:db:dd:d8:45:cf:81:64:d3:3c:8d:
                    35:9f:4e:1f:b7:23:a2:25:7f:9c:a2:6f:e2:b4:90:
                    c1:56:5e:5a:34:22:3e:4e:ad:d9:5d:03:18:4f:c3:
                    cd:97:fc:a0:44:6a:c9:0f:e3:5b:00:d1:9e:4d:0e:
                    7a:fd:74:b2:c2:32:21:b9:59:d1:32:af:a8:08:9e:
                    38:79:01:c0:0c:9f:ff:56:b5:bc:d1:24:19:c8:c6:
                    06:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BF:05:16:E4:97:D9:44:90:37:0B:7A:D3:C7:FF:50:A3:8C:5C:8F
            X509v3 Authority Key Identifier:
                keyid:85:9D:67:46:CD:7A:AE:BE:ED:E8:FD:74:F7:99:81:0A:9D:BF:A0:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:f5:87:02:60:40:3c:19:04:67:fb:6d:54:c8:39:29:0a:f8:
         c5:50:9c:1a:b7:ea:6a:c9:92:44:f0:4c:80:bd:78:8d:5d:67:
         ab:05:a6:72:1a:0c:4d:e4:4e:ec:b6:f1:79:8b:70:99:f8:3d:
         10:0c:8f:b5:8b:d7:1a:f3:40:d0:08:6d:7c:7a:5b:f7:4d:a3:
         81:18:de:2e:d0:c5:1c:fb:40:01:dc:01:9d:93:95:9b:1e:13:
         6a:a4:cd:e9:a5:1e:47:50:44:bd:78:34:a2:f4:73:82:3f:39:
         d5:55:1e:ef:8b:f9:83:ad:23:a9:08:2a:a8:2a:28:ae:98:2d:
         e2:76:6f:9b:06:e0:8a:9d:0c:18:0b:6e:1d:b6:58:d8:23:93:
         89:1b:4e:87:b3:4d:1a:57:82:ef:f7:04:9c:44:d6:66:18:5b:
         f0:f8:8a:96:f5:1f:30:7c:a3:95:2b:44:e0:30:bf:d5:f3:7b:
         a3:85:30:91:0c:1e:9e:63:98:bf:65:60:de:0c:a4:5b:34:50:
         6a:75:0c:0d:20:f2:8b:8a:6d:2b:64:cf:ad:f0:f4:88:f5:22:
         a5:92:4a:d0:18:29:29:2f:d9:a8:25:59:c0:bf:62:1f:7e:c8:
         7b:cd:d0:78:ec:23:3a:92:3f:93:18:a8:f5:33:bc:a3:b2:4a:
         53:1a:2e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:17:07 2026 by rpki-client