Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft
File:                     43230BA37049255C04E85C87D9F4BDD3B9313605.mft (raw, json)
Hash identifier:          3ZyLkYublOSihZ0ykI9GosRB+TfTYEhQ1hzUqpnMWIQ=
Subject key identifier:   B8:9F:3C:C1:8E:51:B1:7D:03:EC:E0:78:27:87:20:60:7A:38:D5:6C
Authority key identifier: 43:23:0B:A3:70:49:25:5C:04:E8:5C:87:D9:F4:BD:D3:B9:31:36:05
Certificate issuer:       /CN=43230BA37049255C04E85C87D9F4BDD3B9313605
Certificate serial:       3CB8ED0207BD241FE65F0A3396A744BC3AB70F71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft
Manifest number:          03DF
Signing time:             Sat 18 Apr 2026 05:17:59 +0000
Manifest this update:     Sat 18 Apr 2026 05:12:59 +0000
Manifest next update:     Sun 19 Apr 2026 08:33:59 +0000
Files and hashes:         1: 3137372e31302e3232342e302f32312d3234203d3e20323632383631.roa (hash: 02Ifct7s18goEyBDeWIdKu9ey75R5DkhKyls76plavU=)
                          2: 323830343a313435303a3a2f33322d3438203d3e20323632383631.roa (hash: Pc0GYVoJPbFj/fEq02BoaRQfPi2MbpirquiRIrEikGI=)
                          3: 43230BA37049255C04E85C87D9F4BDD3B9313605.crl (hash: 1ZIYDp7ZeCpATgl+oTLBYnC9b1J4VHy1uwGxvI/gv74=)
                          4: 3139312e372e3136382e302f32312d3234203d3e20323632383631.roa (hash: 1IHIztD+R8B7aYdP7wuNoDyk63HEbzqm4EctFN0Xl8o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.crl
                          rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 08:33:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:b8:ed:02:07:bd:24:1f:e6:5f:0a:33:96:a7:44:bc:3a:b7:0f:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43230BA37049255C04E85C87D9F4BDD3B9313605
        Validity
            Not Before: Apr 18 05:12:59 2026 GMT
            Not After : Apr 19 08:33:59 2026 GMT
        Subject: CN=B89F3CC18E51B17D03ECE078278720607A38D56C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:16:03:f8:93:23:cc:88:9c:76:69:5d:94:27:
                    e8:1d:98:30:89:48:86:d8:a6:3a:53:bc:bb:c1:78:
                    b0:0c:a4:b4:a6:0c:38:4c:c7:47:95:17:b3:13:9f:
                    34:b5:03:8d:55:be:60:0b:15:fd:cb:2c:67:d7:e1:
                    31:6d:1c:c0:23:df:6c:79:0d:49:ae:55:77:af:81:
                    ba:d7:92:6d:94:19:a0:a0:e1:d6:6e:23:c6:40:05:
                    aa:0a:a8:b3:be:2b:a6:71:fd:d7:ab:41:3a:c8:a8:
                    dc:aa:d7:da:61:ab:1b:57:d3:ba:3b:f0:fc:3f:9f:
                    24:27:fa:87:6a:c9:28:4e:8a:6b:c9:03:62:eb:79:
                    3a:f0:59:22:2e:09:8e:cc:b8:f8:7c:c6:9a:0c:fd:
                    12:23:e7:17:1b:93:ab:7a:26:96:53:e7:64:ce:55:
                    c2:76:d6:15:b5:98:04:62:c9:e1:48:ff:1a:e6:3d:
                    2c:c8:db:c6:06:71:d4:0d:cf:dd:b2:07:37:eb:67:
                    c9:4a:4d:3e:3c:cb:1d:a2:2e:49:5a:92:f1:4e:8e:
                    59:53:b0:83:f6:6e:29:65:b7:58:ba:b0:8b:8e:d6:
                    89:1d:04:eb:fd:8d:d9:55:d3:99:ea:e0:e4:4b:2d:
                    38:80:ee:78:92:11:53:b6:9e:58:88:6c:d7:ce:08:
                    99:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9F:3C:C1:8E:51:B1:7D:03:EC:E0:78:27:87:20:60:7A:38:D5:6C
            X509v3 Authority Key Identifier:
                keyid:43:23:0B:A3:70:49:25:5C:04:E8:5C:87:D9:F4:BD:D3:B9:31:36:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c3:f0:88:00:1b:e1:42:0b:e1:70:83:cb:0a:ca:7f:b8:41:
         fd:b2:ca:cf:70:72:a1:35:2c:66:3e:5b:d6:47:ef:65:74:65:
         84:cd:6f:f8:1b:f7:0b:7d:7e:46:63:18:f7:74:d6:9d:aa:0b:
         6c:43:2b:7a:b3:91:e8:1e:00:7f:97:97:80:05:10:96:5b:02:
         ed:28:7c:f0:bf:db:1c:b0:c1:aa:ca:d5:e3:5e:69:ea:77:88:
         6c:ca:0d:01:de:78:21:a6:a5:43:7c:e5:89:50:6f:a1:cb:a4:
         55:72:39:bd:ce:8d:db:57:43:69:21:99:0e:14:c9:ee:8c:e4:
         bd:bf:5d:b5:2a:37:4e:e4:e7:b9:5e:c9:e6:ec:2c:73:3b:77:
         b1:f9:fb:08:75:23:9e:fb:a0:33:01:54:3d:6f:ea:8c:bd:65:
         14:5f:fa:fa:22:d6:b1:fc:b0:d9:7e:13:5e:46:b6:be:8c:db:
         8e:6b:a1:06:ea:4b:a0:6a:04:24:a3:80:e5:f3:52:6f:4c:cd:
         d1:16:3a:30:f0:04:09:32:0b:68:05:7f:75:f9:48:b9:df:00:
         3e:74:21:f8:17:5e:3e:c0:a5:bc:55:4e:dc:b3:0a:90:8e:d1:
         f8:a2:42:c2:ff:e6:9f:95:18:ec:dd:64:4e:50:b8:d6:91:de:
         63:0e:ea:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 09:03:01 2026 by rpki-client