Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.mft
File:                     20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.mft (raw, json)
Hash identifier:          tm+zX1HBBv3LHwiOYQbTFTVwA5G/FsbLJk+p5aFrJTM=
Subject key identifier:   7C:04:26:99:CD:F1:12:E4:7A:9A:6C:79:9A:1A:AA:23:F4:E5:A1:66
Authority key identifier: 20:45:3D:F9:CB:CD:59:10:7B:DF:91:EC:0F:DE:EE:8A:86:7A:03:1B
Certificate issuer:       /CN=20453DF9CBCD59107BDF91EC0FDEEE8A867A031B
Certificate serial:       7A90A15B5B37C20746037EECFBF6DB81514DBA27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.mft
Manifest number:          03E3
Signing time:             Fri 17 Apr 2026 09:28:13 +0000
Manifest this update:     Fri 17 Apr 2026 09:23:13 +0000
Manifest next update:     Sat 18 Apr 2026 11:41:13 +0000
Files and hashes:         1: 3138372e38352e34382e302f32312d3234203d3e20323632373237.roa (hash: YiNsxP9IN3H87tvCZFPos7cw7GCMCrgggRRlG4jZUjQ=)
                          2: 20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.crl (hash: FptjdeyNA4JfW+yMAodOjNZSVJcHpqbG1jP4aaKMRuQ=)
                          3: 323830343a6131633a3a2f33322d3438203d3e20323632373237.roa (hash: KDu17gWwCeBCejzlqaBrQ20NT3Lrxw/9kloAal1Vod4=)
                          4: 3138392e3131332e35362e302f32312d3234203d3e20323632373237.roa (hash: F8VYA1Z18R/woa9bZoNYb8qcsOWF4ZlAfpWbymjmr8U=)
                          5: 3138362e3139322e36342e302f32302d3234203d3e20323632373237.roa (hash: rtOdkJeUfwUrcki9Jj7NHvJR6HcRI3lYPyvIot9myWE=)
                          6: 3138362e3139322e37342e302f32342d3234203d3e20323734383139.roa (hash: TZvYIPP5sEIeDU4fAGsU+TwTjCbmHCQnZ9ytbDMH12o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.crl
                          rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 11:41:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:90:a1:5b:5b:37:c2:07:46:03:7e:ec:fb:f6:db:81:51:4d:ba:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20453DF9CBCD59107BDF91EC0FDEEE8A867A031B
        Validity
            Not Before: Apr 17 09:23:13 2026 GMT
            Not After : Apr 18 11:41:13 2026 GMT
        Subject: CN=7C042699CDF112E47A9A6C799A1AAA23F4E5A166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3d:e9:92:0a:7f:82:b5:37:8f:02:a3:ac:1c:
                    ba:75:93:0d:cc:a7:dd:63:1d:e3:71:83:36:e2:d3:
                    0c:69:0e:27:d3:ef:43:7f:d0:5f:2f:b6:26:1c:14:
                    d3:43:3f:ea:31:cd:3a:83:4d:a3:ea:e5:f0:5c:6f:
                    fa:94:43:39:9f:6d:ab:38:df:a8:51:54:db:63:60:
                    51:47:5b:bb:17:45:06:d5:9a:5c:90:e7:4e:97:ac:
                    2d:4f:69:cd:aa:ff:bd:04:d9:a7:c9:1d:7e:ea:94:
                    c4:4b:ce:9b:7c:31:98:d1:c5:95:3f:3e:6b:5c:3a:
                    f5:db:fe:8d:4e:52:9c:28:51:ef:8b:b3:47:47:67:
                    20:6c:c9:17:1e:e0:75:ae:6e:76:23:b5:fa:0b:72:
                    0a:28:ec:84:b1:cc:9c:69:ac:77:81:e2:8f:3d:dd:
                    b5:4b:95:a3:da:e6:d6:1c:ee:98:7a:0f:c8:3b:a3:
                    ed:4d:fa:18:0b:ea:1f:cb:8d:ba:ea:09:c8:5e:e2:
                    e5:68:66:eb:e6:0f:69:aa:73:9f:3c:b1:cc:ad:10:
                    7a:76:9b:bf:af:11:27:10:f9:5e:87:ec:e2:de:37:
                    11:bb:93:39:2c:71:ca:cf:38:b7:db:c8:84:47:4b:
                    6a:35:5a:ee:f9:35:12:1c:69:e0:93:16:53:69:71:
                    ef:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:04:26:99:CD:F1:12:E4:7A:9A:6C:79:9A:1A:AA:23:F4:E5:A1:66
            X509v3 Authority Key Identifier:
                keyid:20:45:3D:F9:CB:CD:59:10:7B:DF:91:EC:0F:DE:EE:8A:86:7A:03:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:51:e6:0e:24:65:68:c9:6c:ee:76:48:fa:67:33:b0:db:f6:
         dc:40:6f:db:b2:68:6a:ca:be:73:f4:de:41:09:e0:08:23:25:
         c2:21:7e:ff:8f:ad:e3:7c:8a:97:06:71:fe:d2:82:e2:9e:35:
         42:a7:b6:fd:47:c0:a5:b0:16:c8:d9:6d:79:ce:d0:31:c1:03:
         e1:d7:75:5b:d5:1a:02:b4:21:f3:54:53:d0:56:e8:85:17:3c:
         3e:b3:e0:05:db:bb:7f:75:11:6a:0b:72:dd:45:bf:90:93:3f:
         b4:ed:56:0c:b1:9c:a6:43:80:82:31:12:f3:9b:20:00:18:0a:
         ce:2c:40:56:c0:02:96:b1:bd:31:3d:6a:b5:62:2a:8b:71:51:
         0b:33:77:5d:6d:72:7d:f2:1b:4d:69:ea:aa:5b:f3:b0:d5:19:
         e0:30:7d:be:03:bc:9a:9e:3c:22:72:03:49:de:37:89:d0:3c:
         8f:f5:67:a8:ac:b0:78:dd:09:78:84:74:bc:da:aa:0a:67:8d:
         99:1a:55:ba:27:b6:49:fe:7c:45:fc:40:6e:49:54:68:7f:78:
         80:48:26:59:c5:2f:e1:9c:f2:23:93:34:0e:dc:32:e0:10:ad:
         4a:8c:04:f6:fa:41:dc:ea:24:8e:c3:75:79:0c:e7:51:87:30:
         bf:4c:7e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:37:14 2026 by rpki-client