Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.mft
File:                     F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.mft (raw, json)
Hash identifier:          tk14cZtBsB8Z0XxXeCm8vXhLL5FYCQexUlmA33CeOcE=
Subject key identifier:   3E:31:A2:4C:95:89:16:3F:B5:B1:EC:A7:15:E2:66:D2:CE:E8:C4:83
Authority key identifier: F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2
Certificate issuer:       /CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
Certificate serial:       2D9064FCCA3ADCB6631E575A316150857519D459
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.mft
Manifest number:          0408
Signing time:             Wed 25 Mar 2026 20:21:02 +0000
Manifest this update:     Wed 25 Mar 2026 20:16:02 +0000
Manifest next update:     Fri 27 Mar 2026 00:20:02 +0000
Files and hashes:         1: F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl (hash: /qTZIIh1u8+eeK/vZp1HOlwaL+y6NZFRwi5duj7eQOM=)
                          2: 3136382e39302e3131322e302f32322d3234203d3e20323635313837.roa (hash: 3nnWp4z0u0F/ZBeeps01X/Te4+igufch9fuAk1P89do=)
                          3: 323830343a326330303a3a2f33322d3432203d3e20323635313837.roa (hash: MHPkO+LE8ChgE+3BoMJufsig4O/GsIiMuVQp8skgwcY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl
                          rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 00:20:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:90:64:fc:ca:3a:dc:b6:63:1e:57:5a:31:61:50:85:75:19:d4:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
        Validity
            Not Before: Mar 25 20:16:02 2026 GMT
            Not After : Mar 27 00:20:02 2026 GMT
        Subject: CN=3E31A24C9589163FB5B1ECA715E266D2CEE8C483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1b:3c:ba:71:81:91:8b:56:e8:b1:e3:d8:8f:
                    1a:6e:30:38:f6:50:b5:aa:d5:d6:e9:23:01:f6:7a:
                    96:a9:a0:b9:27:b9:96:e3:89:c6:c3:77:ed:e6:9a:
                    87:5e:26:87:c4:75:b3:e7:7d:5e:48:fc:9d:48:57:
                    bc:7d:8c:10:38:39:46:e0:78:f6:5e:bd:51:75:6c:
                    32:ef:a4:fd:e4:ee:ca:4f:39:45:74:0f:ab:47:4f:
                    d8:ad:a7:9c:c1:c8:dd:ab:e9:8a:e0:2b:9d:62:84:
                    ab:aa:1a:c3:db:3d:56:44:92:45:79:9e:99:72:44:
                    41:56:fc:3b:81:ed:d4:07:96:0e:ae:da:a5:0d:f7:
                    5b:7b:97:31:2c:ee:4a:32:4d:08:5a:a8:b4:3f:46:
                    75:da:6b:65:99:7c:1d:31:12:58:1e:bf:66:e8:a5:
                    da:c3:5d:5e:5d:2f:ca:80:9f:c0:f3:67:07:a4:6b:
                    19:7e:07:4e:51:fe:89:28:42:72:77:59:9a:6b:7b:
                    04:09:20:e6:51:25:aa:db:03:bd:18:26:2a:52:59:
                    ce:9a:96:16:c4:4c:50:fc:0b:47:dd:5e:25:ee:6e:
                    81:c9:48:9f:1c:ab:73:5b:9b:cb:12:1c:90:aa:d8:
                    f6:d5:3a:b7:14:af:04:07:07:77:f1:4a:1f:02:b2:
                    ea:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:31:A2:4C:95:89:16:3F:B5:B1:EC:A7:15:E2:66:D2:CE:E8:C4:83
            X509v3 Authority Key Identifier:
                keyid:F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:12:5e:45:af:fd:44:fc:cf:73:2c:eb:53:38:53:0a:71:72:
         52:31:fa:99:22:96:2c:ab:31:41:bf:4c:52:b8:79:fc:c2:ce:
         b5:df:2e:55:ec:ea:d3:08:12:71:40:f3:b5:ef:3a:4f:4e:c7:
         42:f2:0d:ab:73:46:4c:1f:c4:d8:cd:dc:57:b3:84:a7:3e:b7:
         c2:91:5d:e8:e8:90:b0:30:9a:58:7a:6b:e2:c4:ec:75:d8:61:
         36:73:3b:7e:c6:4a:fa:dd:ce:ad:7c:db:6d:2e:3d:43:ee:42:
         2f:d8:06:bd:21:1f:f1:da:49:04:3d:67:fb:95:b9:9d:8e:5c:
         d6:d2:cc:57:76:51:1a:6b:48:07:c7:4c:c0:e2:3f:ee:5f:d9:
         1c:0d:ce:29:46:48:71:2e:83:45:8f:b7:97:fb:2e:aa:65:d7:
         29:4f:9b:d5:6b:00:80:69:7e:ea:d7:c2:97:72:8c:ac:ac:2f:
         bc:b1:cf:6a:23:f7:ee:c1:fb:c1:d0:5e:62:bb:ee:9c:fc:4f:
         d7:74:04:23:10:e3:52:cf:39:bc:9a:a6:48:95:d0:04:1c:12:
         10:98:b8:91:e5:51:df:31:cc:1f:b7:14:b2:63:f1:76:00:9e:
         15:5d:d0:10:c5:61:35:87:5c:53:37:38:82:23:34:36:f2:85:
         b1:50:e3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:46:16 2026 by rpki-client