Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.mft
File:                     090356FA0F721D9A2449A75F672A23DBF91DA79D.mft (raw, json)
Hash identifier:          G8+dRWnobaMLkJbG14uDJK0mWdkRe8gRyHHVt1ajaB8=
Subject key identifier:   88:8B:2E:8F:6F:52:AA:FE:0A:FA:25:E6:7F:0D:69:9B:61:9E:7D:ED
Authority key identifier: 09:03:56:FA:0F:72:1D:9A:24:49:A7:5F:67:2A:23:DB:F9:1D:A7:9D
Certificate issuer:       /CN=090356FA0F721D9A2449A75F672A23DBF91DA79D
Certificate serial:       1AA707EDD0B56B4D0C5BB92F8E8232E8C0F5E68F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090356FA0F721D9A2449A75F672A23DBF91DA79D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.mft
Manifest number:          AB
Signing time:             Wed 13 May 2026 07:40:02 +0000
Manifest this update:     Wed 13 May 2026 07:35:02 +0000
Manifest next update:     Thu 14 May 2026 10:13:02 +0000
Files and hashes:         1: 090356FA0F721D9A2449A75F672A23DBF91DA79D.crl (hash: zvWrRV8zc6cSRxB0oVST0BTYPfD6x2QJ0PVocuJ7xTQ=)
                          2: 3230312e3232322e32342e302f32322d3232203d3e203631383233.roa (hash: 98gQk7tfGUs9pRvDwbcZtGSi6xreh7ZTsgIuv3pcGUk=)
                          3: 3230312e3232322e32342e302f32342d3234203d3e203631383233.roa (hash: MFj2Y8vN35UbFz/c4cSx/WpIcJn650ZPq1l2J6Fv7LU=)
                          4: 323830343a313964633a3a2f33322d3332203d3e203631383233.roa (hash: cyI9TnrAXG4EH1ifG0QJQ9pHFHDG0QDBoC7kzrFfLWo=)
                          5: 3230312e3232322e32352e302f32342d3234203d3e203631383233.roa (hash: UH+oFoq2yann0hghXVWtajLFKBb7Ef5WZDDqQ2Pw1dY=)
                          6: 3230312e3232322e32362e302f32342d3234203d3e203631383233.roa (hash: IuE9qEXXl1d2+xJJVVo1437qrmnar46Ql035+T2MD9w=)
                          7: 3230312e3232322e32372e302f32342d3234203d3e203631383233.roa (hash: 8yd6vMry85HJiPM7/L+kf1JkW05+VgR6cDI6fBW4j5Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.crl
                          rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090356FA0F721D9A2449A75F672A23DBF91DA79D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 10:13:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a7:07:ed:d0:b5:6b:4d:0c:5b:b9:2f:8e:82:32:e8:c0:f5:e6:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090356FA0F721D9A2449A75F672A23DBF91DA79D
        Validity
            Not Before: May 13 07:35:02 2026 GMT
            Not After : May 14 10:13:02 2026 GMT
        Subject: CN=888B2E8F6F52AAFE0AFA25E67F0D699B619E7DED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:24:f1:67:12:ba:72:c8:ab:45:39:ad:8e:43:
                    84:df:6b:a2:a6:db:a1:57:6f:d3:51:2e:96:6f:ae:
                    d3:c3:51:43:08:fa:7d:1a:4c:74:ba:82:c5:f7:18:
                    d6:63:de:f3:00:af:be:84:67:57:45:eb:44:45:4a:
                    c1:a4:74:f0:bb:40:e0:72:2a:42:54:26:a0:29:15:
                    af:7d:b1:b0:52:c8:9a:eb:92:35:e8:3b:b4:84:01:
                    3c:83:b9:80:16:d0:c9:0e:29:7a:a6:09:a1:be:59:
                    95:98:61:cc:ba:c7:d8:78:1e:c7:aa:bb:c7:58:24:
                    0f:b0:26:90:29:b1:9c:7b:09:8e:c7:98:a9:8f:eb:
                    37:02:72:a4:cc:a5:e6:04:a0:fd:a4:10:21:dc:14:
                    69:73:52:e2:3c:b3:9f:fe:82:0a:55:a1:5b:cf:63:
                    ef:75:14:61:66:08:fb:45:f6:f3:0f:ff:cd:64:7f:
                    7b:9f:22:c0:5a:3e:44:15:28:5e:f8:78:06:1a:02:
                    9e:3e:80:ca:d4:0c:11:77:24:12:6a:d8:28:27:73:
                    0a:61:02:d5:90:6e:f1:ff:50:09:ce:69:02:55:ae:
                    a0:1b:30:6d:3b:3a:e8:81:08:57:07:f4:7e:62:aa:
                    02:6b:c1:7c:b2:d9:5f:43:4a:4e:51:40:eb:8f:7f:
                    4f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:8B:2E:8F:6F:52:AA:FE:0A:FA:25:E6:7F:0D:69:9B:61:9E:7D:ED
            X509v3 Authority Key Identifier:
                keyid:09:03:56:FA:0F:72:1D:9A:24:49:A7:5F:67:2A:23:DB:F9:1D:A7:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090356FA0F721D9A2449A75F672A23DBF91DA79D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:39:7b:aa:55:cc:42:af:d8:5e:5d:28:32:c9:0f:09:ed:f5:
         e6:8a:4b:78:44:4f:c9:47:4f:56:9f:af:20:d5:2b:a8:a9:22:
         6d:92:74:dc:92:a3:34:b4:8c:dc:56:9a:72:69:0e:ef:b6:bd:
         4b:bb:f8:2b:d5:3a:cf:5b:ca:72:c8:96:4c:97:6c:d5:05:86:
         e5:50:67:21:b6:ac:6d:09:7b:a7:63:eb:b3:0a:e3:7a:87:f6:
         f6:56:fa:8d:30:93:c8:de:c4:a9:d8:4b:9e:1e:3d:f5:fb:fd:
         74:c3:56:05:d6:30:a6:0a:90:91:cd:da:55:7d:a7:5d:0a:82:
         dc:99:a2:fb:cc:5a:47:83:f9:af:d1:ed:11:48:60:b5:06:53:
         40:28:58:48:82:d0:44:07:90:f2:24:13:1e:7f:7d:f7:32:d6:
         c3:a3:1e:e0:47:25:50:54:c2:2c:fa:f3:c2:d5:30:5f:b6:a4:
         09:89:26:f5:70:65:0b:76:11:80:bb:f1:c3:6d:86:e3:af:86:
         d3:44:28:c6:fe:2a:0c:06:b4:7e:45:d1:71:1e:5d:c5:d5:5b:
         bc:c5:89:55:2f:e7:a2:d0:2f:9e:0c:ae:1c:f0:da:35:75:ce:
         12:1d:89:75:b6:62:44:52:bf:8e:26:03:07:af:fd:17:ad:90:
         31:af:d6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:42:28 2026 by rpki-client