Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft
File:                     3895E2089A93A58E1062DE9612B321CA505C51FA.mft (raw, json)
Hash identifier:          CAYLiHAWu6qxtn5rrndSFKX77JbxWr0i5GrjPukAaQM=
Subject key identifier:   33:30:1E:D1:D0:0A:C1:F6:C1:46:4D:3A:C2:CA:6C:6E:D2:50:BB:97
Authority key identifier: 38:95:E2:08:9A:93:A5:8E:10:62:DE:96:12:B3:21:CA:50:5C:51:FA
Certificate issuer:       /CN=3895E2089A93A58E1062DE9612B321CA505C51FA
Certificate serial:       52E4E29D2F9A6DEEF235B691222D7AFA761C545F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3895E2089A93A58E1062DE9612B321CA505C51FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft
Manifest number:          043A
Signing time:             Thu 26 Mar 2026 12:16:00 +0000
Manifest this update:     Thu 26 Mar 2026 12:11:00 +0000
Manifest next update:     Fri 27 Mar 2026 12:16:00 +0000
Files and hashes:         1: 3895E2089A93A58E1062DE9612B321CA505C51FA.crl (hash: Yf/7euuOTe7LC/thu1XZRbzXDm55k3B8q55EzawjQ4g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.crl
                          rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3895E2089A93A58E1062DE9612B321CA505C51FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 12:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e4:e2:9d:2f:9a:6d:ee:f2:35:b6:91:22:2d:7a:fa:76:1c:54:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3895E2089A93A58E1062DE9612B321CA505C51FA
        Validity
            Not Before: Mar 26 12:11:00 2026 GMT
            Not After : Apr  2 12:16:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:37:1c:df:dc:bc:c1:98:58:e4:3b:d8:ed:50:
                    08:84:22:70:db:6e:67:b9:22:0a:15:8b:6d:3f:5e:
                    76:49:78:96:46:7e:d6:57:15:9f:b9:f3:17:59:6b:
                    97:9e:ec:78:51:9c:91:97:10:6b:1d:f1:bd:4c:d6:
                    3d:41:36:1a:8f:4e:c0:e7:ff:f6:c0:8e:31:ff:0e:
                    4b:83:f7:5d:4d:5c:cf:a8:ab:11:f2:dd:24:d7:0c:
                    1d:e7:f7:ce:6a:09:b5:82:07:4c:25:5e:9d:00:94:
                    b2:74:df:4d:7b:7d:29:53:f7:c4:6d:44:4b:4d:2f:
                    26:64:e5:1d:9c:6b:f6:de:51:79:04:1c:f7:31:c3:
                    84:ee:b0:9d:44:54:66:6d:11:0c:33:9b:91:7d:52:
                    bd:b6:a2:cb:32:13:fa:e2:c7:c9:70:a5:eb:0c:4a:
                    b2:4f:00:0c:56:54:ed:d0:eb:19:d5:f7:44:b5:da:
                    22:20:37:74:80:75:0b:86:08:c5:c3:a7:83:65:89:
                    50:a1:8b:c3:98:6b:0e:d8:22:f1:37:7a:a2:3d:94:
                    55:32:58:82:2c:56:e1:38:67:c4:4a:c7:5e:b0:3c:
                    de:af:72:19:ec:56:03:70:96:80:80:5d:48:d4:42:
                    70:30:22:d5:19:b4:b2:49:07:3d:02:63:b6:9b:09:
                    4d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:30:1E:D1:D0:0A:C1:F6:C1:46:4D:3A:C2:CA:6C:6E:D2:50:BB:97
            X509v3 Authority Key Identifier:
                keyid:38:95:E2:08:9A:93:A5:8E:10:62:DE:96:12:B3:21:CA:50:5C:51:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3895E2089A93A58E1062DE9612B321CA505C51FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:fe:d4:05:17:f7:c1:7a:54:64:6a:c0:18:6e:8a:7d:6a:20:
         c4:69:eb:48:1e:70:03:98:87:e5:a0:c8:9a:3d:4d:f2:8a:c0:
         61:84:e5:ef:d8:69:56:14:1a:d0:c3:5a:34:6e:e9:3c:92:64:
         74:30:d3:47:65:51:f3:51:2b:6a:07:f4:89:4f:a8:51:dd:e2:
         55:0e:90:25:33:76:d3:9d:c5:5e:5b:56:0c:db:c3:cc:2d:b3:
         52:ab:66:bb:66:79:11:7c:f9:89:7f:9b:9b:b8:38:42:50:74:
         1d:9e:e0:3f:f2:79:eb:f6:3d:92:83:f3:90:38:6c:f2:b0:e0:
         cb:1e:0e:ec:19:48:7f:2f:27:d9:28:33:0e:c0:48:24:8f:02:
         f4:4a:b7:ea:08:82:f0:8d:51:e0:87:e8:b2:91:b7:58:ce:d8:
         8a:f6:2a:e8:af:4a:8b:b7:18:82:8e:c4:05:0c:f5:1f:09:fd:
         03:55:36:02:bd:32:b1:62:3e:5f:98:0b:27:9f:b6:3d:37:18:
         c0:dc:d6:f9:3b:14:59:06:cd:54:27:b1:66:c6:e2:e0:53:e2:
         f7:24:d4:b0:d7:f5:57:e2:f1:9a:a0:f3:ee:72:d9:0c:66:eb:
         a8:7c:9e:d0:e4:74:39:26:70:9f:91:02:35:70:7d:ef:9b:4f:
         8d:0e:5e:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:51:41 2026 by rpki-client