Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft
File:                     1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft (raw, json)
Hash identifier:          pMVCxuP7qOBZX5f8NG4KNjkeGIWK46n29UozAsTm8x0=
Subject key identifier:   9D:BC:8C:A7:23:04:66:65:B7:88:08:9E:01:FB:23:57:10:38:FD:C4
Authority key identifier: 10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE
Certificate issuer:       /CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE
Certificate serial:       68039F40C83CEF654DC619B3529175400936011A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft
Manifest number:          01DA
Signing time:             Fri 17 Apr 2026 15:20:19 +0000
Manifest this update:     Fri 17 Apr 2026 15:15:19 +0000
Manifest next update:     Sat 18 Apr 2026 16:03:19 +0000
Files and hashes:         1: 323830343a326231303a3a2f33372d3337203d3e203532393136.roa (hash: xBW2n7MA5JJaKIHDgj7ib2yYgr1MKAn+k/9Vj9ASNcs=)
                          2: 323830343a326231303a3a2f33392d3339203d3e203532393136.roa (hash: 8b/hCraUx/MusoZST5SuEyQ1+MU1+TV1clEr5j5vdog=)
                          3: 323830343a326231303a3a2f33382d3338203d3e203532393136.roa (hash: 9Yw+mX6QhIFgXtbfJbDMoqmS8YuJDWR6CgINnqw8648=)
                          4: 3137372e31302e32302e302f32322d3232203d3e203532393136.roa (hash: Ml3I4qzKe6T8WDZeJmLBKCwdzvrj84LixQTRc8VaVQw=)
                          5: 323830343a326231303a3230303a3a2f33392d3339203d3e203532393136.roa (hash: jfYpBujcF9BZTeO1XIZOkZ7yJ+tTjTNSqLYCao2XPI0=)
                          6: 3134332e3235352e31362e302f32322d3232203d3e203532393136.roa (hash: kWYkqeJL8ZF4RYR3DzlyfYsKf6cO0kjoeXavqNftg4k=)
                          7: 1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl (hash: VCZt7ion1tuW9iCHYsR8rXQm+/aRr7Vc4J5VZK6Qz2Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl
                          rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 16:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:03:9f:40:c8:3c:ef:65:4d:c6:19:b3:52:91:75:40:09:36:01:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE
        Validity
            Not Before: Apr 17 15:15:19 2026 GMT
            Not After : Apr 18 16:03:19 2026 GMT
        Subject: CN=9DBC8CA723046665B788089E01FB23571038FDC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8c:7a:6d:17:d5:98:c8:7d:c4:92:31:90:80:
                    a9:c4:be:53:8a:d4:63:3c:ce:3f:a0:c2:cb:f1:57:
                    69:ad:4e:48:82:26:0e:16:3c:bd:07:6e:c5:34:e7:
                    d8:71:01:6d:67:c0:e1:9a:74:35:af:27:71:1c:9f:
                    3d:78:d6:6b:41:9a:72:97:db:73:2c:0e:2b:e0:2a:
                    8d:95:08:b7:ce:70:d2:d4:4d:be:0c:f9:0a:91:ea:
                    33:06:66:8f:c0:0b:43:26:c1:c0:1f:76:d2:7e:bc:
                    26:fc:28:40:2e:90:61:e7:9c:1a:8c:36:11:2c:bb:
                    78:cf:f8:6a:7e:0f:af:71:ce:51:32:41:96:e4:21:
                    0a:38:63:29:ac:72:e3:56:d8:01:a8:e3:af:38:7e:
                    b6:3b:4c:06:ff:98:a9:0e:f6:30:8d:e7:f2:01:f1:
                    ea:99:f0:17:23:3c:53:30:41:1c:39:9c:a8:4e:ee:
                    ee:9c:5f:eb:a1:21:a9:51:82:f7:df:a7:09:60:0f:
                    73:ca:80:f3:e0:32:4b:1b:8c:6a:9b:2a:45:1d:f2:
                    3d:97:48:d0:4b:fa:c0:b4:ce:81:ad:76:de:75:ca:
                    56:ef:a3:ed:66:b9:78:08:a1:f2:b9:e4:0a:43:dd:
                    da:2a:d3:eb:29:63:f7:e9:24:45:05:86:0d:81:56:
                    b6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BC:8C:A7:23:04:66:65:B7:88:08:9E:01:FB:23:57:10:38:FD:C4
            X509v3 Authority Key Identifier:
                keyid:10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:a8:3e:0d:fb:b5:10:5a:fe:4d:e7:ff:b6:6b:fc:f6:14:5f:
         6a:99:c3:96:df:cb:11:58:dd:af:76:85:a7:ef:cf:be:bb:e6:
         90:2b:18:f3:d0:9e:c7:d5:25:ca:00:0d:ef:6e:aa:1b:d6:d7:
         ad:5d:7a:c5:56:46:03:58:80:9a:23:16:97:60:8e:54:5a:41:
         78:26:a3:56:31:5c:20:20:90:e1:88:c2:80:df:51:03:86:7a:
         9f:9f:d0:50:63:32:46:c4:f1:01:43:ad:cc:87:62:d3:aa:8b:
         b5:10:d0:58:a1:31:05:6b:10:0b:6f:ad:16:27:e5:7e:c3:bd:
         0a:d9:bc:dc:51:9b:4c:4e:00:c4:00:bb:2c:e5:a1:28:25:ec:
         1d:ee:93:46:3d:05:99:9d:e1:96:ae:26:d3:b7:be:20:9d:e8:
         8f:0c:09:94:23:bd:56:a7:05:d3:33:9a:92:15:01:05:58:c0:
         60:1c:d9:bd:6e:ed:cb:b2:39:fa:c9:26:af:69:87:eb:04:ab:
         1d:06:d0:1c:66:68:8e:4f:c8:7f:d4:5c:96:c9:77:1f:f2:6e:
         cf:c3:63:70:5b:4b:b3:34:c7:a4:42:c9:a3:91:29:b1:d0:16:
         01:34:4e:ad:8f:b7:d2:91:22:28:8a:43:30:bc:c6:df:31:cd:
         bb:77:f9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:58:34 2026 by rpki-client