Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft
File:                     633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft (raw, json)
Hash identifier:          kxvfW42umwdcYbttHrRIp78yrOOsMAUU3pz8iV6+gM0=
Subject key identifier:   73:A2:BF:6B:FF:4F:F2:EB:FB:60:B5:C4:A7:85:B4:71:B9:16:64:06
Authority key identifier: 63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0
Certificate issuer:       /CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0
Certificate serial:       28E8385640616A94084E04BDAAA67B0F14D1BEFB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft
Manifest number:          0358
Signing time:             Fri 17 Apr 2026 05:30:44 +0000
Manifest this update:     Fri 17 Apr 2026 05:25:44 +0000
Manifest next update:     Sat 18 Apr 2026 07:05:44 +0000
Files and hashes:         1: 34352e3137392e35322e302f32332d3233203d3e20323639303533.roa (hash: 9l/70hTQnj9cn5gJDSkLTYu0XIiUnFExA0SmD6ik6eI=)
                          2: 633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl (hash: HPI8M/KWMZe/sW2T59OUzkwcZsfXNAuQpU3WqN2EkPY=)
                          3: 323830343a356562633a3a2f33322d3332203d3e20323639303533.roa (hash: GzYX1I8QbJi7Hwby4wbyOYtpvdHoyuDJfPbvJ9HohlI=)
                          4: 323830343a356562633a383030303a3a2f33332d3333203d3e20323639303533.roa (hash: liUwlmRsLROgEFIRorcVo4wkRIukQ80gom0ndXpXupg=)
                          5: 34352e3137392e35332e302f32342d3234203d3e20323639303533.roa (hash: K9WqDVoOC9+J/ZxCcup5mVeeWECoZyoed0UuxFFCPmc=)
                          6: 323830343a356562633a3a2f33332d3333203d3e20323639303533.roa (hash: 1bUpQCBjJc58z+IfdaGqbDO6BVXJbwt9z0HYCIingm0=)
                          7: 34352e3137392e35322e302f32342d3234203d3e20323639303533.roa (hash: Akh9nscz8Ru7h4WuNxjio0jBeFurBOjjKKbR62pQnJ8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl
                          rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 07:05:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e8:38:56:40:61:6a:94:08:4e:04:bd:aa:a6:7b:0f:14:d1:be:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0
        Validity
            Not Before: Apr 17 05:25:44 2026 GMT
            Not After : Apr 18 07:05:44 2026 GMT
        Subject: CN=73A2BF6BFF4FF2EBFB60B5C4A785B471B9166406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2d:62:f3:ca:45:17:cd:8a:cf:63:20:d6:7e:
                    08:26:de:e4:8e:73:34:b4:b0:7b:a0:d0:c2:19:f9:
                    bf:40:88:ec:16:9c:e7:a5:41:33:34:1c:90:1a:34:
                    13:62:92:86:8e:5d:5b:4c:cd:92:41:c8:e7:f9:7b:
                    a4:30:fc:e7:c3:da:c4:7a:0e:6c:e4:31:d9:11:15:
                    96:9c:e8:46:52:7a:f3:82:4d:be:64:73:01:08:b4:
                    20:e0:44:0f:eb:39:56:db:31:63:a3:a4:60:5e:86:
                    7d:43:ab:c9:32:3c:90:47:5e:aa:6d:9c:b1:48:06:
                    14:42:ef:b4:fa:0f:7d:8e:6d:f1:47:63:1d:33:75:
                    af:d1:49:f1:10:63:d2:15:9d:00:64:e4:cc:4c:70:
                    fb:52:df:1f:65:2e:6e:b8:fb:de:da:97:10:16:ca:
                    73:dc:00:7a:18:a3:e4:68:c7:7f:2a:cb:bb:94:f7:
                    71:97:79:3d:29:02:ab:78:22:7b:83:96:e2:a5:81:
                    9b:21:8e:59:75:24:8c:de:1e:a5:aa:29:48:8f:89:
                    f6:2d:98:3f:22:99:17:2e:58:05:0f:b9:7f:0a:6e:
                    e9:58:6f:3b:1e:b9:98:da:72:06:12:d0:c1:25:d9:
                    39:5c:90:32:4b:66:a7:5d:41:cd:a9:c0:7c:ca:b4:
                    f5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A2:BF:6B:FF:4F:F2:EB:FB:60:B5:C4:A7:85:B4:71:B9:16:64:06
            X509v3 Authority Key Identifier:
                keyid:63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:b0:ff:93:98:00:de:1b:e5:5a:cb:a4:f0:08:c0:7b:b7:d4:
         28:62:e9:14:2e:e1:d7:7d:48:ea:56:1e:56:05:18:1a:e6:73:
         eb:83:3b:20:5b:b9:5e:46:3f:1f:52:9b:fb:ca:0f:50:ee:48:
         a0:0c:e6:ec:2d:f7:c3:46:3f:97:24:3c:0f:91:29:00:b6:05:
         5d:06:28:4d:8b:99:73:53:3f:55:37:45:0c:ad:8a:4c:80:35:
         99:2d:f9:63:bf:f0:3c:d7:20:26:b9:0f:11:02:d5:b4:91:e8:
         ac:8d:e5:7a:10:e7:c8:a3:09:ec:7b:f1:cd:c7:4c:2e:b7:80:
         12:e3:d3:73:05:57:5d:b9:40:80:d4:1f:cc:86:69:07:68:99:
         52:4e:94:37:8c:1c:99:78:5e:5d:53:74:30:c6:47:d3:54:95:
         43:02:92:66:cb:e2:3f:7b:d4:4a:b0:5d:ef:6a:c3:d0:ea:73:
         03:4b:0e:4a:1e:f5:b4:ef:a5:b9:00:f2:88:fb:1a:2c:80:36:
         38:01:6d:d3:73:97:43:33:9f:17:d3:77:52:c0:03:8e:5d:ce:
         46:d5:18:89:de:e6:5d:0d:26:c7:f5:50:cd:ef:8a:ac:6d:f6:
         c7:76:d0:56:ff:2a:e8:88:a9:9c:9d:d4:f6:de:7f:5e:8c:d2:
         81:54:b3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:05:12 2026 by rpki-client