Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/73D3EA3EA70F87B99F0840C3E968A8E593C6E479.mft
File:                     73D3EA3EA70F87B99F0840C3E968A8E593C6E479.mft (raw, json)
Hash identifier:          dt09kaHpoE4W+Vey+OO/e+gJjWgpreY6w7ztXWDYLQE=
Subject key identifier:   D8:BA:72:3A:28:C2:4D:4D:95:43:E4:BD:0D:C4:E6:01:DA:42:38:BF
Authority key identifier: 73:D3:EA:3E:A7:0F:87:B9:9F:08:40:C3:E9:68:A8:E5:93:C6:E4:79
Certificate issuer:       /CN=73D3EA3EA70F87B99F0840C3E968A8E593C6E479
Certificate serial:       341DDA339FAA3FE12EC55FB29DE25BA108D84E99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73D3EA3EA70F87B99F0840C3E968A8E593C6E479.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/73D3EA3EA70F87B99F0840C3E968A8E593C6E479.mft
Manifest number:          BF
Signing time:             Thu 26 Mar 2026 12:40:11 +0000
Manifest this update:     Thu 26 Mar 2026 12:35:11 +0000
Manifest next update:     Fri 27 Mar 2026 12:59:11 +0000
Files and hashes:         1: 3137392e34322e3131322e302f32322d3332203d3e20323731313439.roa (hash: BOv3fWqiRXefUaHz5d0RZEklRzo8yubcIwueQMcJGF0=)
                          2: 73D3EA3EA70F87B99F0840C3E968A8E593C6E479.crl (hash: Tca0e4MqNdVx8lLG5sluSDOosvytNg6KRUIxfoXr3SM=)
                          3: 323830343a373730343a3a2f33322d313238203d3e20323731313439.roa (hash: fxkWhm2BGLVfEn+B/0WyuabZuVD+wBAeq5jJCwWm4EM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/73D3EA3EA70F87B99F0840C3E968A8E593C6E479.crl
                          rsync://rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/73D3EA3EA70F87B99F0840C3E968A8E593C6E479.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73D3EA3EA70F87B99F0840C3E968A8E593C6E479.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 12:59:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:1d:da:33:9f:aa:3f:e1:2e:c5:5f:b2:9d:e2:5b:a1:08:d8:4e:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73D3EA3EA70F87B99F0840C3E968A8E593C6E479
        Validity
            Not Before: Mar 26 12:35:11 2026 GMT
            Not After : Mar 27 12:59:11 2026 GMT
        Subject: CN=D8BA723A28C24D4D9543E4BD0DC4E601DA4238BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:27:67:59:13:d0:3c:16:76:ac:c3:de:7d:4c:
                    11:22:bf:58:c9:8f:c0:3c:ae:2c:39:f2:07:9b:e2:
                    12:09:22:4e:7b:53:f7:27:ff:35:ab:58:8b:81:bc:
                    25:50:45:86:76:57:2d:d7:4b:ce:6d:3b:3b:c5:41:
                    2e:87:c6:be:f1:6f:77:16:9d:60:cf:b6:0a:57:86:
                    b1:da:55:e2:a1:c4:d0:94:c0:2e:cc:85:26:07:ce:
                    89:de:73:d5:bf:a7:c2:3d:98:88:78:01:b0:e8:1d:
                    56:ad:bd:64:6e:2c:6c:26:99:5c:33:9a:ff:b1:8c:
                    d3:8a:76:65:93:4e:b4:61:49:9a:54:cf:2a:fb:46:
                    61:05:56:3a:fc:13:e4:97:f4:17:18:8f:30:bb:b5:
                    5d:15:08:e1:5a:28:92:6f:40:3b:21:bc:3d:69:68:
                    6f:0e:92:37:95:f4:f3:a1:f9:db:52:b5:dd:90:1c:
                    6b:78:af:d1:94:be:39:ae:61:7b:8e:d2:e5:da:70:
                    ce:ae:4b:a6:dc:5d:97:2f:d0:2c:82:0f:b7:49:08:
                    0a:28:48:95:47:95:83:a4:73:c2:8a:3d:24:5d:5d:
                    e0:61:5b:40:4a:51:aa:50:38:8b:0a:86:8b:fd:1f:
                    db:f9:29:64:7a:2f:fe:d4:7b:99:80:8a:17:c3:f2:
                    24:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:BA:72:3A:28:C2:4D:4D:95:43:E4:BD:0D:C4:E6:01:DA:42:38:BF
            X509v3 Authority Key Identifier:
                keyid:73:D3:EA:3E:A7:0F:87:B9:9F:08:40:C3:E9:68:A8:E5:93:C6:E4:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/73D3EA3EA70F87B99F0840C3E968A8E593C6E479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73D3EA3EA70F87B99F0840C3E968A8E593C6E479.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/73D3EA3EA70F87B99F0840C3E968A8E593C6E479.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:42:e0:b2:1a:46:27:1b:35:61:54:d0:02:d6:bb:68:15:ea:
         26:28:1b:e2:94:24:5d:2b:60:ae:9c:53:7b:83:b9:45:a2:eb:
         0d:4b:5b:aa:93:d0:d5:39:9d:8b:90:30:b7:83:1d:b2:88:c8:
         0d:9a:be:d0:60:ba:5c:b4:c8:5d:de:e5:55:01:d1:a1:56:de:
         3d:6f:26:8c:68:a9:46:0b:69:db:d5:ee:9c:7f:19:54:3c:65:
         db:3a:c9:f8:91:b4:c9:c4:42:33:99:ca:c1:47:c3:b4:61:71:
         06:7a:76:17:a1:2e:44:ca:47:82:b7:96:b4:3a:54:9f:cd:8e:
         7c:b3:a1:bc:02:a7:cc:8a:88:fd:d6:96:87:95:59:7d:a7:57:
         08:fe:1f:dc:d8:c1:fa:f7:64:ff:9a:3b:f7:81:c7:cc:be:e8:
         e3:38:14:bf:3e:8b:47:1a:a2:03:16:1c:bd:5f:eb:7b:96:e0:
         c5:76:4b:91:a0:90:9b:2b:ef:d0:a9:07:0e:3d:91:1b:32:64:
         98:0d:2d:46:15:28:66:f6:eb:69:4b:e3:9f:18:cb:8c:f7:44:
         ac:5e:2d:1d:5e:a1:4e:a8:e3:31:07:36:64:a8:86:7b:1c:c0:
         50:b4:d5:f9:5f:fa:77:02:42:3d:10:5e:6d:c2:22:fd:63:6b:
         34:f3:4c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:18:20 2026 by rpki-client