Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft
File:                     890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft (raw, json)
Hash identifier:          UO2SaZ446L0EXvWRIUh3X5jugAtVJSss60GWkxIfGHA=
Subject key identifier:   70:FD:1D:8E:CA:FC:BC:F7:74:E5:E2:27:D7:CF:6D:53:25:35:73:4E
Authority key identifier: 89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29
Certificate issuer:       /CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629
Certificate serial:       50861990A90ECDC96EF76273F74CCA183F2CD8CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft
Manifest number:          03DF
Signing time:             Fri 17 Apr 2026 10:10:13 +0000
Manifest this update:     Fri 17 Apr 2026 10:05:13 +0000
Manifest next update:     Sat 18 Apr 2026 10:27:13 +0000
Files and hashes:         1: 34352e352e38382e302f32322d3232203d3e20323636303834.roa (hash: wlYX9LT4oAF2XaLjWHRwh1BF2XSf3RHpXlcHZvG8Qf8=)
                          2: 890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl (hash: wU8oxNVloLRnxN/wnsqBJMoym1jmfSTJsmaYJzYXU1Y=)
                          3: 323830343a336135383a3a2f33322d3332203d3e20323636303834.roa (hash: 6gpCSdjLQ7wjZtRORlH6qNiQgozBKjMkRDB69zKGyws=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl
                          rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 10:27:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:86:19:90:a9:0e:cd:c9:6e:f7:62:73:f7:4c:ca:18:3f:2c:d8:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629
        Validity
            Not Before: Apr 17 10:05:13 2026 GMT
            Not After : Apr 18 10:27:13 2026 GMT
        Subject: CN=70FD1D8ECAFCBCF774E5E227D7CF6D532535734E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:61:f6:f2:7e:8a:9b:ca:64:59:9c:05:61:9f:
                    90:67:00:d5:89:d6:a5:62:cb:29:78:e3:26:2d:f5:
                    2a:e4:6a:d1:a8:18:53:1a:9a:57:05:df:2e:78:bc:
                    5f:83:06:af:99:9b:4a:7a:31:cf:11:a9:42:05:b1:
                    9e:35:9e:9c:a8:fd:b7:6b:0a:2a:b2:80:b7:c0:87:
                    d6:91:60:f8:e4:d4:a3:88:0e:92:62:bc:3d:8b:71:
                    4a:53:ab:e8:4c:aa:20:46:35:f9:b2:7b:2f:e4:46:
                    b6:f8:b1:ff:c1:dd:46:e3:80:c9:d8:13:94:05:ab:
                    2b:14:48:bf:56:46:f6:16:db:1b:a4:73:c8:6a:c7:
                    f6:c9:d0:f1:f6:4b:17:a9:77:16:87:5c:74:eb:17:
                    5d:5a:45:e3:98:8c:6c:eb:a9:16:75:6a:be:68:e2:
                    bc:49:9d:44:78:3f:74:d7:8a:9d:e8:af:60:5e:24:
                    e4:23:ff:6b:0f:92:b7:1c:d5:12:a2:d2:6c:dc:25:
                    ee:f2:03:52:63:f2:f9:66:ec:0b:f0:b1:b4:7a:8d:
                    43:a6:dd:29:02:05:24:75:08:3f:74:e6:8e:eb:c0:
                    54:2c:6f:8d:c5:e7:b1:78:3d:58:40:d1:9f:13:9f:
                    b6:f2:7e:4c:7f:27:d2:cc:31:fc:a7:71:44:c4:81:
                    4d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FD:1D:8E:CA:FC:BC:F7:74:E5:E2:27:D7:CF:6D:53:25:35:73:4E
            X509v3 Authority Key Identifier:
                keyid:89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:9a:76:52:f6:d8:22:3f:61:4e:3d:e2:e8:92:e7:91:65:0e:
         1b:04:c3:71:2d:0d:f4:72:c4:e5:19:5e:1d:4a:67:55:c7:50:
         55:cc:61:70:73:0b:d8:c3:42:e2:ce:01:5e:e1:f8:a4:d9:ed:
         ac:ca:70:c9:0d:a0:14:16:21:8e:62:57:ac:18:f6:df:f4:4d:
         8d:c7:67:52:22:68:e5:29:f4:6e:77:1c:d4:88:7d:01:e2:cb:
         83:66:46:74:5d:ac:da:46:4f:6f:8a:e5:13:cf:77:61:51:8b:
         f6:be:48:b4:b6:35:8b:c5:e8:63:e8:0f:dc:e0:8f:da:f5:34:
         a9:31:21:f0:e7:0e:51:cf:13:4d:f4:34:3c:70:59:6e:93:89:
         b0:e5:bb:19:97:f7:99:a8:2c:05:0c:8d:2b:43:f9:43:a7:71:
         c9:1f:28:4d:98:e5:a0:1d:3a:47:4b:60:60:99:07:3a:3e:2f:
         2a:59:44:94:e3:52:91:72:0a:30:4a:17:12:9b:85:43:88:07:
         3e:ba:cb:fb:0a:cd:41:0e:66:f9:75:3a:f0:4c:10:65:94:94:
         ad:7b:11:e7:e8:73:d6:20:51:2f:ca:32:91:4f:90:60:fb:e5:
         13:6b:f6:e1:d0:bf:57:f2:7b:61:09:b6:1c:51:54:7e:5a:d4:
         36:e7:1f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:09:35 2026 by rpki-client