Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft
File:                     CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft (raw, json)
Hash identifier:          3tNFZOXqQNz2ZC988efndc/10mqejSTxG8zRV74Vfms=
Subject key identifier:   76:1C:40:D8:7B:0E:9E:ED:06:5D:40:21:F7:4F:94:DD:B9:F4:01:52
Authority key identifier: CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38
Certificate issuer:       /CN=CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38
Certificate serial:       724D8734446FAA836A71AF8743A2B5764D0536C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft
Manifest number:          01D7
Signing time:             Wed 25 Mar 2026 14:51:04 +0000
Manifest this update:     Wed 25 Mar 2026 14:46:04 +0000
Manifest next update:     Thu 26 Mar 2026 15:12:04 +0000
Files and hashes:         1: CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl (hash: RAPspllVymZnEa9TluMd+uyPp/KnH13TkQZVq6fR4jY=)
                          2: 323830343a353666303a3a2f33322d313238203d3e20323638303333.roa (hash: crA8QF6SL3DxsHKwch4/HWDtNk4isPssfccRPXZ4lNE=)
                          3: 34352e3136362e3230302e302f32322d3332203d3e20323638303333.roa (hash: ktGx59JETujExjo30VVMt5PUSTyoY0psMj+P78eLE/Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl
                          rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 15:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:4d:87:34:44:6f:aa:83:6a:71:af:87:43:a2:b5:76:4d:05:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38
        Validity
            Not Before: Mar 25 14:46:04 2026 GMT
            Not After : Mar 26 15:12:04 2026 GMT
        Subject: CN=761C40D87B0E9EED065D4021F74F94DDB9F40152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:66:96:3b:8a:7b:a9:fb:3b:1c:48:2b:3e:4f:
                    64:f4:2e:7a:6c:8d:bf:cd:28:5c:04:e9:d9:84:0a:
                    1c:dc:79:5d:33:cb:ae:b5:ad:c6:36:b1:f7:03:de:
                    15:1a:16:87:a3:84:bc:04:66:80:7d:7c:94:52:18:
                    b8:8c:7c:8a:4f:c9:24:e0:f8:cc:f3:d5:8b:c1:ee:
                    f5:8e:45:25:bd:df:b6:94:67:47:e0:a0:eb:91:2f:
                    64:99:17:ef:ca:35:77:e5:31:13:6f:91:5f:ec:cf:
                    2f:24:d3:c3:16:7c:67:24:c9:91:90:23:a1:b6:2c:
                    be:76:c6:38:cf:0e:76:ef:89:90:cd:91:f6:0b:b2:
                    9d:87:71:3c:cb:5f:c1:31:e5:eb:6b:04:07:46:71:
                    8a:59:2c:cb:5f:e6:b1:25:39:4c:17:c1:f1:5e:57:
                    4a:11:21:47:a8:80:a8:f2:ea:49:4e:10:dd:37:73:
                    1e:06:ce:dd:dd:01:f4:99:f5:7d:30:ac:0f:20:7a:
                    c5:06:70:6a:37:1a:10:10:fd:82:74:92:fa:1f:76:
                    1e:ab:5e:15:97:71:f4:34:7b:a0:68:6e:1a:6f:f9:
                    3e:65:60:c8:7a:1e:21:16:df:45:71:ef:6b:db:74:
                    bc:87:19:85:d0:43:ea:bb:d1:fd:30:f5:ac:e7:98:
                    28:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1C:40:D8:7B:0E:9E:ED:06:5D:40:21:F7:4F:94:DD:B9:F4:01:52
            X509v3 Authority Key Identifier:
                keyid:CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:d2:58:3d:ce:72:ef:84:bc:ca:18:5d:aa:72:ae:6e:5e:e7:
         d9:53:85:99:1e:aa:0e:0b:57:67:d5:53:eb:c6:f4:a1:0c:b9:
         5a:3b:bd:49:b4:ce:46:f9:a9:00:1d:6e:79:fe:b5:be:b2:aa:
         04:82:fe:ef:43:49:f7:e1:d7:9d:22:ad:71:8b:77:30:8c:c6:
         c1:c3:f1:8c:93:76:b2:56:10:b7:71:61:e9:cf:a9:17:41:1b:
         20:9c:07:09:ba:e4:a1:9a:21:3e:b3:a6:87:4a:1b:61:b9:b6:
         b8:71:b9:0d:77:94:88:38:eb:63:b6:ef:b1:8e:d0:e1:2d:ec:
         8f:9c:0c:c6:aa:c4:6e:c2:cb:d0:a9:da:8a:82:04:fe:7b:85:
         b1:30:d9:a6:cb:d0:a7:85:47:54:8f:f3:16:b6:2e:35:86:91:
         67:aa:7f:f2:31:40:c2:4f:b3:ca:6c:60:bc:43:54:9e:a3:29:
         45:24:89:a4:ef:78:44:4d:cf:2f:aa:d3:30:97:a5:e5:de:aa:
         dc:9d:de:18:60:c9:6b:72:92:3d:ab:7e:ba:b8:c8:7a:3e:96:
         00:78:72:4b:64:23:81:2a:f4:28:c6:1d:d5:01:ce:e8:df:a8:
         8b:68:66:66:91:e9:a1:6b:61:fc:2b:50:90:75:1f:db:44:e2:
         a5:c9:e9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:59:44 2026 by rpki-client