Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft
File:                     45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft (raw, json)
Hash identifier:          kKtbfosvuiTCbfrROJ1eA1k81CNkQupklDtrppedpAI=
Subject key identifier:   EF:C5:B3:E3:27:C1:8C:2B:AB:AC:BE:8D:A3:E8:AA:20:8B:B5:FB:B9
Authority key identifier: 45:D0:64:44:E7:E6:E8:1B:AA:7F:EF:D4:80:0A:93:70:73:96:AC:A6
Certificate issuer:       /CN=45D06444E7E6E81BAA7FEFD4800A93707396ACA6
Certificate serial:       3D7B67DEF56BD32837842297CF7E23558C980E7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft
Manifest number:          03DD
Signing time:             Fri 17 Apr 2026 19:25:21 +0000
Manifest this update:     Fri 17 Apr 2026 19:20:21 +0000
Manifest next update:     Sat 18 Apr 2026 19:56:21 +0000
Files and hashes:         1: 34352e3137312e31362e302f32332d3233203d3e20323638313831.roa (hash: Qu7I77PqdFliCjj3OW+cWIGsfVyEjBsvnuuQWFlj7rE=)
                          2: 34352e3137312e31382e302f32342d3234203d3e20323638313831.roa (hash: ofZAm/63kBrJni85nV3EAwS8dF/47Y8JzdG2k1jrTX8=)
                          3: 34352e3137312e31362e302f32342d3234203d3e20323638313831.roa (hash: zOvLTOO6Vkcw7Ax1wO7Tx701RtFyCVCNyoFhhTy0S5I=)
                          4: 34352e3137312e31372e302f32342d3234203d3e20323638313831.roa (hash: JoBzHgvk4gU0QlDfWDCeRvYha95iC9WfxjjXOUvXdA4=)
                          5: 45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl (hash: jf9i0ieNhXUjFVIh+nGuqf3TKQzjQmJH9+TYfJwszfc=)
                          6: 323830343a353934383a3a2f33322d3332203d3e20323638313831.roa (hash: pbg51lNDCoo04my7k10Os+fjguSaYJQdh10TOGVkS7U=)
                          7: 34352e3137312e31392e302f32342d3234203d3e20323638313831.roa (hash: iL8XLYncXiYWqu+lj4V4L53veMNeIOP1d6bwvkVpJlQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl
                          rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 19:56:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:7b:67:de:f5:6b:d3:28:37:84:22:97:cf:7e:23:55:8c:98:0e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D06444E7E6E81BAA7FEFD4800A93707396ACA6
        Validity
            Not Before: Apr 17 19:20:21 2026 GMT
            Not After : Apr 18 19:56:21 2026 GMT
        Subject: CN=EFC5B3E327C18C2BABACBE8DA3E8AA208BB5FBB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2b:46:1c:77:59:20:67:3d:12:92:80:1f:de:
                    3c:30:a9:73:a3:78:96:47:69:c0:7f:fc:cd:e5:12:
                    74:2e:1b:3f:61:40:cb:94:05:37:67:83:d4:87:1b:
                    0b:2f:8a:66:b7:5b:f8:3f:a3:d9:3a:49:4a:ea:a7:
                    cb:d6:3b:fa:8b:93:c5:e5:be:7c:f8:19:fc:33:ca:
                    86:a5:2d:24:c2:f9:3c:1c:d0:09:61:e5:c4:8b:29:
                    39:f3:66:f1:d0:ed:d1:12:00:81:71:df:95:38:f0:
                    de:5c:e3:20:86:dd:01:ab:50:ec:25:86:e0:65:f6:
                    3d:6c:0d:f4:c2:90:dd:64:04:ef:5c:4a:89:e8:01:
                    5a:63:d4:b1:9d:e2:bd:90:df:0e:62:f7:e2:a5:f8:
                    b8:6a:82:55:48:ee:c0:77:24:68:39:d9:1b:2a:ef:
                    bb:c8:61:b5:18:7d:3d:67:50:ab:ab:96:db:f0:af:
                    ba:56:18:a9:d7:50:3c:9d:76:cd:cc:90:dc:5c:9b:
                    1c:5a:fe:b1:f4:48:fc:d4:ce:68:f1:8d:9f:46:c1:
                    37:79:8c:37:21:7a:88:53:9e:49:06:27:56:a8:b1:
                    26:b6:1c:da:b6:16:3b:55:f5:40:93:e9:b5:6a:34:
                    d5:5a:5b:2c:96:3d:5e:5c:a1:73:2f:6f:73:f0:32:
                    de:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C5:B3:E3:27:C1:8C:2B:AB:AC:BE:8D:A3:E8:AA:20:8B:B5:FB:B9
            X509v3 Authority Key Identifier:
                keyid:45:D0:64:44:E7:E6:E8:1B:AA:7F:EF:D4:80:0A:93:70:73:96:AC:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:1d:fa:c9:e3:93:ce:b3:61:c2:4f:08:cf:2b:2f:e0:50:62:
         5c:56:3a:ee:b9:96:8a:27:8d:bb:32:f8:51:a9:1f:c0:ab:2a:
         f2:84:80:f3:02:6f:a9:b6:9d:8d:8b:90:cf:c2:d1:3f:22:9d:
         5b:38:8e:4d:5c:5b:bb:a3:f5:78:6a:be:44:9a:83:7a:03:ee:
         66:6d:e8:f6:61:2b:3a:39:b1:83:0e:39:41:c9:46:0c:4e:e4:
         89:23:2f:fb:21:a0:76:25:da:9c:b4:9c:ea:32:ed:31:c3:39:
         dc:95:81:79:81:0b:17:cc:72:49:3b:0e:5d:3b:2a:fc:b9:37:
         a0:d4:2c:bd:95:ee:5d:b7:77:28:e8:3a:3a:5e:79:6b:1f:c0:
         14:e6:6a:ec:ac:50:bd:ee:ed:9f:92:af:2c:1e:53:eb:5d:8a:
         2e:3d:15:64:10:52:cf:41:47:ef:f6:d1:0b:41:0e:19:db:d1:
         e3:b4:90:16:82:74:65:9c:c9:4b:0e:3b:c5:6d:a6:31:8a:7d:
         dc:ea:97:e3:ae:9d:16:80:77:f0:7a:8a:9d:5c:6a:1b:96:10:
         61:20:45:6a:82:ff:2b:dd:dd:db:99:c5:f3:9c:6f:3d:7f:b1:
         bb:76:69:cd:cf:4e:8f:81:dd:bb:b1:d8:99:0d:1d:2c:b9:51:
         eb:54:4a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:31:44 2026 by rpki-client