Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.mft
File:                     28C4721E667593A43DA7832F588E6B6B8F57311C.mft (raw, json)
Hash identifier:          JTHzc7Dszh7ebDVzvTJPEo5Ml10UbzQuQi42cy493J0=
Subject key identifier:   D0:3C:3F:70:53:F8:5F:29:9E:CC:51:1D:D6:36:7C:60:82:2C:75:5E
Authority key identifier: 28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C
Certificate issuer:       /CN=28C4721E667593A43DA7832F588E6B6B8F57311C
Certificate serial:       42E8AD56598A89F2DD37C28CDF6FC492A285B9F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.mft
Manifest number:          03E5
Signing time:             Fri 17 Apr 2026 22:06:35 +0000
Manifest this update:     Fri 17 Apr 2026 22:01:35 +0000
Manifest next update:     Sat 18 Apr 2026 23:23:35 +0000
Files and hashes:         1: 323830343a356266343a383030303a3a2f33342d3334203d3e20323638383739.roa (hash: pCul15Ayhk39LPdTB+kLgETeZ6J6TdBciZqOZ2uU50Q=)
                          2: 323830343a356266343a633030303a3a2f33342d3334203d3e20323638383739.roa (hash: d+JQTPEt4TO+DRTncsMHe5uG67QPYvMPjFe/JifAybc=)
                          3: 323830343a356266343a3a2f33322d3332203d3e20323638383739.roa (hash: DX4a3QeHpvusyAv3p4gVFkKzBPKXG65o+cqdt/m4Wz8=)
                          4: 323830343a356266343a383030303a3a2f33332d3333203d3e20323638383739.roa (hash: 3RWJHTSdTyskwfaY3z6q0kBm4cVeJ8+3lGMN78ZNBpQ=)
                          5: 34352e3137352e32342e302f32322d3232203d3e20323638383739.roa (hash: xJBKlq1B+Ioeekkm4B9JokNWu3IeDeRlRmPiY/3MctQ=)
                          6: 34352e3137352e32362e302f32332d3234203d3e20323638383739.roa (hash: 86w+2vPkHcWkRc4CoAngs0QGX+xHPOR0UMvV9HmXFzQ=)
                          7: 323830343a356266343a3a2f33342d3334203d3e20323638383739.roa (hash: Y6rlKxBDtWb84GisPEaRjiB0Bc4OuqD/OCvX0p3HRg4=)
                          8: 34352e3137352e32342e302f32332d3234203d3e20323638383739.roa (hash: NwcGSrpPTlgvRBomA7U3G9uqF5/dhmtT3nLHS4inwYs=)
                          9: 323830343a356266343a3a2f33332d3333203d3e20323638383739.roa (hash: sjwsC3xR5g/qcdeZEh3i0oTqLGv4roYa5hNYxJqAv8I=)
                          10: 28C4721E667593A43DA7832F588E6B6B8F57311C.crl (hash: eQ3dokxF6Yjy38SqlrOfBWRCLJ7FN+W2U4vuMm6UqlA=)
                          11: 323830343a356266343a343030303a3a2f33342d3334203d3e20323638383739.roa (hash: /RvlzgCeqM0xjMXwRwahy9/BFGsCoXlhY62jh2OAI3s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl
                          rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 23:23:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e8:ad:56:59:8a:89:f2:dd:37:c2:8c:df:6f:c4:92:a2:85:b9:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C4721E667593A43DA7832F588E6B6B8F57311C
        Validity
            Not Before: Apr 17 22:01:35 2026 GMT
            Not After : Apr 18 23:23:35 2026 GMT
        Subject: CN=D03C3F7053F85F299ECC511DD6367C60822C755E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4c:db:a0:8c:54:a9:4e:0f:0d:09:18:a9:9d:
                    43:50:1a:48:02:6f:6d:4e:7f:7e:0d:e2:2c:46:b0:
                    90:f9:21:40:22:e8:f6:51:ba:cd:f3:a6:83:4a:b8:
                    33:24:05:54:aa:8f:1d:1b:db:f1:63:3e:4b:51:39:
                    fc:1a:7a:09:a6:3e:7c:cf:48:48:6e:07:3e:c6:af:
                    ac:28:07:94:27:9e:f3:6d:09:47:18:d3:96:b9:12:
                    00:94:2c:12:5f:e7:aa:5d:bc:49:4f:d6:60:2a:b4:
                    c4:e9:21:fc:c7:3b:2d:6b:ed:35:0c:81:22:db:fb:
                    21:6d:c2:f1:34:e8:35:b6:1c:76:27:86:b4:ab:dd:
                    ad:73:3b:d1:4f:69:68:44:27:9b:3d:9d:f4:3d:9c:
                    99:1f:7e:1a:31:01:ec:21:31:4c:ea:ee:62:d6:bf:
                    bf:0b:13:5c:57:7c:43:c1:db:b2:8e:05:83:9d:36:
                    b8:c2:d8:b3:6a:bd:87:71:44:e6:33:ba:70:7b:50:
                    f9:1e:43:41:24:94:69:18:86:59:69:07:ae:8d:0e:
                    7d:12:e9:ca:5a:fd:4b:c2:97:55:b6:54:4b:fc:69:
                    91:05:93:a5:67:31:57:3a:7b:70:22:8c:24:29:9e:
                    77:36:54:bc:b3:ad:41:e6:0d:64:28:dd:70:29:8d:
                    b3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3C:3F:70:53:F8:5F:29:9E:CC:51:1D:D6:36:7C:60:82:2C:75:5E
            X509v3 Authority Key Identifier:
                keyid:28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:76:28:6b:22:42:33:94:d3:60:2e:26:d0:a7:09:f9:ee:8b:
         05:73:b8:12:49:9a:bb:47:35:d9:84:4e:7f:4e:6e:58:b2:cb:
         0c:b8:40:05:0a:88:b7:63:43:79:b1:47:fb:8d:5b:76:b3:c8:
         52:de:09:47:e8:8c:ca:f7:99:be:1e:9e:4d:d5:fd:9d:55:bd:
         b1:73:5a:c9:d1:fd:b8:fd:a7:0c:21:9f:9f:2d:6c:cc:dc:e5:
         34:b6:c1:ce:c6:f1:6a:e6:f1:4b:6f:79:46:34:3c:db:62:53:
         5a:67:91:7f:b2:95:8f:77:b4:75:5e:51:cc:63:1b:fd:20:9e:
         9e:44:c9:14:f4:f7:2c:5d:65:3f:5c:a4:c7:d7:75:36:04:41:
         fe:09:65:69:cc:f0:97:5b:f9:f3:03:4e:e1:9f:e4:80:d9:08:
         ef:74:05:65:1e:71:eb:00:26:2c:e7:b1:99:5e:29:f9:19:c2:
         fd:55:5c:b6:3b:53:d2:5d:d6:7d:fb:92:04:1f:d9:9b:bf:0e:
         0d:9f:42:12:bd:94:2b:91:d6:2b:fb:ac:af:73:d2:ee:1b:2e:
         b6:e2:f4:51:9f:e7:b6:8d:c0:b4:b4:a1:6c:b7:f7:65:41:3b:
         60:30:cb:fc:2d:8d:6e:1b:10:f8:37:3f:a6:8a:81:44:e9:ea:
         d0:e5:39:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:01:25 2026 by rpki-client