Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/3921558C04D37C64DA2CBC9D86CFF035672C152F.mft
File:                     3921558C04D37C64DA2CBC9D86CFF035672C152F.mft (raw, json)
Hash identifier:          4wcc6I433MFb7YqW4i/lqlec0IX+hd+oPaNdn7suefE=
Subject key identifier:   2A:57:13:2C:60:8B:C3:64:97:0E:72:CE:CD:39:DD:49:12:FE:94:6C
Authority key identifier: 39:21:55:8C:04:D3:7C:64:DA:2C:BC:9D:86:CF:F0:35:67:2C:15:2F
Certificate issuer:       /CN=3921558C04D37C64DA2CBC9D86CFF035672C152F
Certificate serial:       64021C452AFE4FEAD09C5EA2DB74973E66ECFA76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3921558C04D37C64DA2CBC9D86CFF035672C152F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/3921558C04D37C64DA2CBC9D86CFF035672C152F.mft
Manifest number:          0120
Signing time:             Thu 26 Mar 2026 01:00:53 +0000
Manifest this update:     Thu 26 Mar 2026 00:55:53 +0000
Manifest next update:     Fri 27 Mar 2026 04:46:53 +0000
Files and hashes:         1: 3921558C04D37C64DA2CBC9D86CFF035672C152F.crl (hash: yWww1mywWcjqH5FvK1Sn3J6EVO4Yp6NT9T7GGHsCdiA=)
                          2: 323830343a333434343a3a2f33322d313238203d3e20323635343436.roa (hash: dUDlHgNCuZ93aicUk/mH3Si/Q6dP4PtlITKr+tKS6Wc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/3921558C04D37C64DA2CBC9D86CFF035672C152F.crl
                          rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/3921558C04D37C64DA2CBC9D86CFF035672C152F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3921558C04D37C64DA2CBC9D86CFF035672C152F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 04:46:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:02:1c:45:2a:fe:4f:ea:d0:9c:5e:a2:db:74:97:3e:66:ec:fa:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3921558C04D37C64DA2CBC9D86CFF035672C152F
        Validity
            Not Before: Mar 26 00:55:53 2026 GMT
            Not After : Mar 27 04:46:53 2026 GMT
        Subject: CN=2A57132C608BC364970E72CECD39DD4912FE946C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:11:ad:87:a6:0f:47:bb:dc:ff:58:b8:8d:df:
                    e2:17:20:95:a7:c6:05:18:10:1e:82:f8:2b:36:b7:
                    66:48:71:51:74:da:cd:fb:c0:e8:7c:36:e5:cf:f5:
                    55:fb:73:33:8b:32:3a:de:d2:19:42:c1:09:52:27:
                    df:34:8a:3a:37:a9:c4:e2:10:fd:f9:2e:20:6a:89:
                    39:b5:84:00:29:99:0a:b6:cf:73:e5:b4:0d:f9:3f:
                    e2:f5:21:59:f5:8e:d7:91:7b:eb:44:29:95:0c:82:
                    8a:b5:f3:92:17:ed:2a:0b:86:dc:20:d4:6f:9f:8f:
                    bd:64:5f:5f:71:dc:f6:59:4d:8e:c6:ab:20:89:f7:
                    67:20:09:da:6c:8e:a2:14:65:cf:65:0c:6d:51:8b:
                    ad:d1:bb:af:eb:30:2a:ca:e8:60:df:53:d0:59:23:
                    93:69:c0:9f:e0:9b:1d:f1:29:30:2b:c6:4a:ba:00:
                    6c:ca:3b:b8:6a:93:4c:7d:00:23:06:2e:b6:44:79:
                    a8:0f:8c:49:81:7e:fa:e6:d1:06:ff:de:df:8f:7b:
                    b2:eb:8c:cf:0e:7d:e2:e3:9e:0b:4b:00:ff:34:2c:
                    ab:b9:f0:a5:d4:e2:84:bd:d3:54:41:d0:2f:f5:aa:
                    65:54:b1:6d:54:ba:c7:5a:91:2f:fe:10:f6:09:b5:
                    be:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:57:13:2C:60:8B:C3:64:97:0E:72:CE:CD:39:DD:49:12:FE:94:6C
            X509v3 Authority Key Identifier:
                keyid:39:21:55:8C:04:D3:7C:64:DA:2C:BC:9D:86:CF:F0:35:67:2C:15:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/3921558C04D37C64DA2CBC9D86CFF035672C152F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3921558C04D37C64DA2CBC9D86CFF035672C152F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/3921558C04D37C64DA2CBC9D86CFF035672C152F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:c0:4e:4c:08:f7:ec:4f:14:85:8a:72:8b:65:c0:72:04:48:
         f9:d4:da:4f:66:00:3c:d7:dc:61:06:a7:0d:94:d0:4f:59:06:
         4e:08:78:a2:87:1a:eb:bd:5c:54:c0:d5:4f:5d:04:4e:b2:08:
         b5:0a:73:8c:ef:5d:89:7a:91:23:a0:46:23:8a:b5:7a:c5:d1:
         b2:8e:96:54:51:97:a3:2b:d1:58:46:61:8b:73:0e:fe:c1:1d:
         94:80:04:e9:fa:bc:00:a4:d1:7d:ec:80:24:89:6f:74:99:ab:
         dc:7f:f2:e2:93:84:86:ab:73:1e:c0:a8:22:d4:2b:7b:7d:b9:
         48:5b:14:55:73:75:15:91:48:44:59:68:e7:56:52:8d:09:82:
         08:1a:f3:a3:d2:4f:75:3e:29:f5:c2:c9:f9:9e:34:ee:1f:02:
         c6:b5:0c:a1:41:e9:7d:1d:7c:2b:2e:1a:0b:a9:c6:6c:62:d1:
         3c:d8:2e:b7:2d:48:6f:ce:05:f5:c8:8a:07:e2:74:0f:13:7d:
         35:d5:36:1f:a7:91:33:2f:55:aa:c2:f5:b9:53:73:6c:f3:74:
         7b:06:81:9f:d6:c3:30:eb:7e:03:ba:5b:d8:b0:a8:06:30:16:
         4f:71:df:5c:f0:46:d8:82:ba:4d:07:8c:bd:63:73:4a:f6:55:
         60:68:f8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:44:54 2026 by rpki-client