Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft
File:                     D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft (raw, json)
Hash identifier:          FZ4Pz33Ii05+O8dp3+qRuVW4ed0zE7YhuN83C92Hcjo=
Subject key identifier:   4B:74:EB:8A:BA:90:E6:42:80:CC:14:46:28:77:C5:41:59:A3:06:11
Authority key identifier: D9:C9:4E:0B:7C:90:50:30:F4:DB:01:C3:3B:F8:C1:68:2B:2E:04:2F
Certificate issuer:       /CN=D9C94E0B7C905030F4DB01C33BF8C1682B2E042F
Certificate serial:       44317627BA2166517C74D3469B8DF33BF5F34DD4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft
Manifest number:          03DF
Signing time:             Fri 17 Apr 2026 20:20:33 +0000
Manifest this update:     Fri 17 Apr 2026 20:15:33 +0000
Manifest next update:     Sat 18 Apr 2026 23:28:33 +0000
Files and hashes:         1: 323830343a316338343a3a2f33322d3438203d3e203631363539.roa (hash: nLLmZ8EQUhz7OXKMVJeC2fRgvtjpcy8YTaA23mxddjY=)
                          2: 3133312e3130382e32382e302f32322d3234203d3e203631363539.roa (hash: pMXB6vS47T1+SOT7YWNtoBplp/WaMdztCL3dC4Ku6OA=)
                          3: D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.crl (hash: 0+IQ/D6gexlmtos1X51BuNxzlyWqvdAW29IloxWr0h8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.crl
                          rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 23:28:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:31:76:27:ba:21:66:51:7c:74:d3:46:9b:8d:f3:3b:f5:f3:4d:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9C94E0B7C905030F4DB01C33BF8C1682B2E042F
        Validity
            Not Before: Apr 17 20:15:33 2026 GMT
            Not After : Apr 18 23:28:33 2026 GMT
        Subject: CN=4B74EB8ABA90E64280CC14462877C54159A30611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9f:6f:0f:aa:70:bc:a4:80:73:2f:f7:ec:d7:
                    b8:d0:4b:c4:00:fc:4c:78:55:5f:8f:8f:9e:62:fa:
                    3f:d4:a8:8a:39:cc:4f:3b:11:5b:83:2e:99:95:e7:
                    fd:c1:3a:6e:5a:a3:49:c3:e5:d1:bc:b8:1b:d3:48:
                    9f:79:08:00:68:55:2f:09:48:22:c2:93:59:b0:d3:
                    f1:68:ec:08:df:9e:92:89:e9:a1:32:dc:3b:9b:d0:
                    89:64:74:ff:aa:6c:73:ec:d3:78:f6:ab:8f:43:26:
                    fa:3d:58:bd:df:8f:79:af:2e:e5:1f:b7:02:b0:12:
                    3e:76:d0:db:25:b3:c0:67:b6:93:46:7e:97:29:70:
                    b6:3d:ab:9b:cc:60:2d:e1:ec:df:46:63:ef:7a:b4:
                    24:fc:33:5f:93:f0:ee:70:af:de:75:8c:06:21:99:
                    15:fd:0b:3d:b3:b0:62:a4:8a:85:ed:44:22:4b:68:
                    3e:7e:d3:30:4b:77:42:e9:93:23:dd:da:8b:b5:70:
                    1f:f2:53:c2:e0:e2:c6:5b:7e:94:37:17:49:3b:09:
                    bc:3e:1a:5a:f0:eb:73:49:f0:20:36:e9:87:f9:33:
                    06:46:9f:fe:24:24:1a:0e:f6:4f:74:6d:25:2c:8e:
                    c8:f1:13:34:cb:24:bf:59:2f:92:f1:76:ed:ae:32:
                    12:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:74:EB:8A:BA:90:E6:42:80:CC:14:46:28:77:C5:41:59:A3:06:11
            X509v3 Authority Key Identifier:
                keyid:D9:C9:4E:0B:7C:90:50:30:F4:DB:01:C3:3B:F8:C1:68:2B:2E:04:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:16:a2:6e:d9:de:00:dd:52:1e:ef:40:1b:67:a1:c9:5a:dc:
         08:2d:5e:6c:43:3a:e1:83:cf:1f:f7:44:9d:fe:a6:28:72:58:
         ec:44:73:98:4e:96:a2:48:5b:4d:09:4c:9a:de:75:ed:0d:56:
         14:7c:51:7f:13:84:4b:9c:79:75:e6:4f:3c:26:d1:19:e8:e4:
         c4:af:4e:56:b0:c8:7c:a6:f9:38:6a:82:53:ec:1e:f8:e7:ab:
         d9:76:8f:cf:c8:e7:a4:0b:de:78:3d:ff:40:f6:fb:c0:2c:e3:
         04:4e:e6:71:cd:4a:c5:ea:fa:91:1c:db:aa:11:e2:99:38:bb:
         21:a1:bd:08:18:15:18:cd:00:46:83:88:d0:1c:5b:f0:33:1d:
         73:0e:04:3a:03:8d:38:96:25:a8:8d:df:e0:31:24:47:f7:c9:
         1e:90:39:44:d7:04:21:b3:cc:92:39:3f:c7:e6:fd:d6:5e:1b:
         fa:c1:4b:59:0d:74:8b:3c:1e:7d:6c:5e:90:53:c2:14:16:a5:
         29:fa:75:c5:0c:96:fe:8f:f1:8f:68:0e:76:d4:b5:ac:f0:75:
         21:2c:b5:2d:c5:af:ba:c9:c7:99:99:a1:8e:52:a6:02:e7:ed:
         ec:51:94:61:3c:b5:d7:26:62:89:e8:5c:19:9c:2f:f1:cc:88:
         c2:2c:90:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:13:45 2026 by rpki-client