Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
File:                     3D4867F11A1D652682FA95ED911B20D81139853D.mft (raw, json)
Hash identifier:          WkLwudxkr36PdpI5T+85dx0SXWm/kUWFOEqVQ8d33QM=
Subject key identifier:   D2:1B:C3:55:02:52:02:67:9B:8A:48:6D:1F:38:B5:AC:0C:22:8D:FD
Authority key identifier: 3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D
Certificate issuer:       /CN=3D4867F11A1D652682FA95ED911B20D81139853D
Certificate serial:       69A4371C9002C052FE5103781073D8370DC65F29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
Manifest number:          0301
Signing time:             Thu 26 Mar 2026 10:56:38 +0000
Manifest this update:     Thu 26 Mar 2026 10:51:38 +0000
Manifest next update:     Fri 27 Mar 2026 13:12:38 +0000
Files and hashes:         1: 34352e3138322e35322e302f32322d3232203d3e20323639323835.roa (hash: baYSgeyu1Fh792QHXa/jVzjbIEks13VYEFPNKOFhRUw=)
                          2: 3D4867F11A1D652682FA95ED911B20D81139853D.crl (hash: V9c7HhyHg9td2TkyvMQj2zFV8b7wXxJkc2icfTrtIkg=)
                          3: 34352e3138322e35342e302f32342d3234203d3e20323639323835.roa (hash: gSG2IH0mhehp6KRqkDAwBhoDX02TBWqyKucR8jhGqhM=)
                          4: 34352e3138322e35332e302f32342d3234203d3e20323639323835.roa (hash: 095KOiCgelfFAJaEWZp4FBq2DB3dXDZ9yQVjrdfn984=)
                          5: 34352e3138322e35352e302f32342d3234203d3e20323639323835.roa (hash: WIZeG9VXENqyRBdnsn2Zw89aWs+DTTdhSsrCc+RAnv4=)
                          6: 34352e3138322e35322e302f32342d3234203d3e20323639323835.roa (hash: s7QXeX2vq8O5spZaWQpOWd0FB4fwiDOt/mIE//O0u84=)
                          7: 34352e3138322e35322e302f32332d3233203d3e20323639323835.roa (hash: ZxtUGA5deC/zbWluiWJ77qtyRWRAt7GQgEShJ9N2Y9Y=)
                          8: 323830343a363233633a3a2f33322d313238203d3e20323639323835.roa (hash: 14FHE6zmhSnBphK8r9h/sTCvAXLmSQ2AOYVJqOdtMCU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl
                          rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 13:12:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:a4:37:1c:90:02:c0:52:fe:51:03:78:10:73:d8:37:0d:c6:5f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4867F11A1D652682FA95ED911B20D81139853D
        Validity
            Not Before: Mar 26 10:51:38 2026 GMT
            Not After : Mar 27 13:12:38 2026 GMT
        Subject: CN=D21BC355025202679B8A486D1F38B5AC0C228DFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:27:b0:68:28:6c:d9:36:96:ca:12:be:b4:ec:
                    5b:c3:b5:5a:a1:61:cb:68:cb:ac:5d:6f:1f:72:86:
                    9f:ff:0b:77:a2:94:65:1c:12:cc:00:6e:f4:0b:e2:
                    53:5e:fc:86:9b:35:86:b1:66:a4:1f:c1:b2:be:58:
                    bb:b9:5a:33:3c:61:50:87:54:ff:7c:95:6b:b9:c2:
                    43:49:49:71:4a:ac:d5:bf:7c:56:b2:7d:d2:b1:c2:
                    89:33:ba:22:9a:93:c0:fb:26:f5:90:c3:a5:ce:24:
                    83:69:6b:32:e1:ac:4e:00:97:0e:8d:20:8e:a7:18:
                    c4:3e:ed:ac:93:a8:12:8d:ed:3d:db:9a:5a:95:43:
                    2e:06:11:0f:b8:33:4f:55:ba:6f:be:21:bf:84:b8:
                    f4:49:ed:3a:7d:50:11:33:59:fc:50:ef:50:bf:de:
                    59:66:0b:5d:75:9c:6f:06:b3:38:44:5a:c5:a8:11:
                    a9:07:60:d4:6e:da:bd:5c:6e:4d:77:59:4d:52:28:
                    4f:ae:1d:91:8a:ac:f2:0e:72:e3:00:bb:40:a8:b3:
                    dc:41:1c:63:16:e3:33:c9:ec:bd:46:e5:41:b6:0b:
                    10:a7:a9:8b:34:97:9b:46:1e:6f:49:b7:72:fa:01:
                    50:c0:e3:49:10:c5:5f:ac:24:d9:0e:95:c0:b0:45:
                    16:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1B:C3:55:02:52:02:67:9B:8A:48:6D:1F:38:B5:AC:0C:22:8D:FD
            X509v3 Authority Key Identifier:
                keyid:3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:03:8b:1c:47:8b:19:55:cd:d8:2b:d9:2e:26:6f:b8:28:3c:
         82:44:d2:36:3e:0b:e3:fe:32:d5:ce:63:64:f5:ec:26:22:b7:
         a8:30:55:c2:0d:08:35:fc:30:20:20:17:ab:86:9b:b2:87:81:
         a9:43:12:80:e3:a1:b7:4f:b2:c2:25:2c:0c:37:84:4b:7c:89:
         1c:e9:3c:39:05:06:43:1f:88:a8:f4:9c:25:c2:cc:19:2e:5d:
         1f:ae:10:4e:a9:74:88:66:78:36:a1:f7:0f:a7:f3:85:f8:bc:
         bd:f1:fb:37:4e:a5:21:95:0e:ee:bd:26:69:18:1b:35:df:c5:
         b3:dc:ff:b2:5e:da:5d:39:8c:cf:36:1e:ff:4f:10:37:38:50:
         93:fd:b0:1a:bd:59:f2:b9:dc:a0:33:4e:a9:1e:5c:e1:ef:6f:
         5e:6b:c6:55:07:96:79:3b:ca:8f:34:34:44:48:40:9e:44:9f:
         a3:48:2b:0a:40:54:da:f6:b9:1f:f6:22:1f:84:23:39:43:6f:
         b6:ff:9b:2f:10:8a:23:de:9a:1e:1e:32:7b:e8:f5:f9:75:2d:
         22:fc:ac:37:a0:03:e4:a1:b9:b3:c8:b5:c0:7a:db:9e:73:9d:
         e7:85:ce:87:69:d3:aa:08:bd:30:ad:d7:cb:ef:44:0b:14:56:
         94:1f:62:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:43:51 2026 by rpki-client