Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.mft
File:                     41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.mft (raw, json)
Hash identifier:          X2ZTO5TQfD4WxB5P1j/Dl3C16ECxg0dA6muM6hNAJ0I=
Subject key identifier:   D8:00:DC:75:35:42:71:0F:1A:34:46:E9:A6:09:C9:94:1F:3F:B5:A6
Authority key identifier: 41:FD:33:29:BA:EE:7F:DE:9F:A6:AE:86:AE:40:25:B1:BF:AE:0A:68
Certificate issuer:       /CN=41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68
Certificate serial:       26624344C6760D74802734AD7519A764DCC4ED60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.mft
Manifest number:          0109
Signing time:             Wed 13 May 2026 11:09:22 +0000
Manifest this update:     Wed 13 May 2026 11:04:22 +0000
Manifest next update:     Thu 14 May 2026 14:53:22 +0000
Files and hashes:         1: 41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.crl (hash: 7G7ptnyVRM6UL+yzatFJmgAQVkGmgBD8WjadvB78KeM=)
                          2: 3138362e3234392e3230382e302f32312d3234203d3e20323633303236.roa (hash: I91E2F3jw4jRdSPxaOhLIhvmTJSuU7fGzMz9ajPNwbU=)
                          3: 3137302e38332e38302e302f32322d3234203d3e20323633303236.roa (hash: yxbRoHfWtwh6xMmlphpwB2OBsNVcchipPcjKM9kVzCI=)
                          4: 323830343a6132383a3a2f33322d3438203d3e20323633303236.roa (hash: 6nFTNuG5EFWl6bFOpqqneFS6n/37QZ9k+qctY+fvJsM=)
                          5: 3133382e33362e32302e302f32322d3234203d3e20323633303236.roa (hash: BUK0GzbNyD/abJDFa7an7fqiO0Un2af6pmFESK0VwW8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.crl
                          rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 14:53:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:62:43:44:c6:76:0d:74:80:27:34:ad:75:19:a7:64:dc:c4:ed:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68
        Validity
            Not Before: May 13 11:04:22 2026 GMT
            Not After : May 14 14:53:22 2026 GMT
        Subject: CN=D800DC753542710F1A3446E9A609C9941F3FB5A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8f:e4:af:0e:d7:ee:54:d9:43:c5:d2:a6:2c:
                    32:3e:e2:84:bd:31:3a:56:81:41:68:d7:87:e8:07:
                    75:69:c8:52:e4:5e:dc:42:16:a1:61:d1:be:e0:9f:
                    7b:3a:ee:52:62:37:be:65:d7:37:ac:89:0f:c6:a7:
                    08:d7:c1:1d:88:3d:e8:53:f1:3d:89:4f:de:81:d7:
                    a5:89:f4:ed:a5:c0:91:3c:3c:04:4f:b0:a5:87:dd:
                    6f:11:02:a5:11:c9:10:09:1d:bc:ef:b6:6e:45:91:
                    c1:29:13:78:0c:22:a0:17:38:e8:22:d5:01:e8:a3:
                    73:2e:c7:be:10:94:f0:7e:93:85:ec:48:48:f2:66:
                    99:f1:15:99:92:44:07:ca:00:31:b8:fa:07:a7:53:
                    2f:b6:7a:0c:2e:1c:6a:22:8c:83:7f:aa:34:6b:70:
                    23:07:6c:ce:94:c1:3d:6a:e6:7b:ee:64:bd:e5:c1:
                    9e:67:77:4c:00:14:9e:67:f2:cf:08:2d:5c:29:62:
                    26:4e:69:8d:f8:ff:05:97:82:62:3d:fd:35:02:84:
                    ec:b8:b5:71:31:73:58:10:dd:46:31:ac:2e:3b:16:
                    0a:79:e1:0a:58:07:2d:ec:a7:9f:be:1c:74:10:d3:
                    64:1a:2c:3c:93:60:39:76:1c:3f:42:46:51:d7:a6:
                    9c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:00:DC:75:35:42:71:0F:1A:34:46:E9:A6:09:C9:94:1F:3F:B5:A6
            X509v3 Authority Key Identifier:
                keyid:41:FD:33:29:BA:EE:7F:DE:9F:A6:AE:86:AE:40:25:B1:BF:AE:0A:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:5d:39:76:9f:db:55:3c:ae:58:37:e5:37:d5:31:5a:4a:0a:
         10:7e:91:cf:33:49:7c:08:85:1c:ba:ad:da:9d:ab:b3:08:5c:
         35:0c:86:08:5b:31:64:0b:a9:1a:ae:19:51:db:4a:e0:28:f3:
         e2:95:f2:d7:bd:93:3b:52:96:d7:b8:69:b1:90:33:fb:89:3d:
         3b:d5:6b:54:8a:e0:92:d4:22:69:2d:93:38:f2:87:b7:88:6a:
         2f:8e:cf:57:3f:32:03:ad:a3:fd:15:c0:55:59:b0:4c:57:1a:
         dd:af:b6:5b:c5:e1:f6:b0:ce:7a:2d:5d:1a:af:4c:6f:47:35:
         cf:24:ce:02:05:74:5b:7b:88:9a:e0:4e:03:8d:20:df:f1:dd:
         0f:84:b9:69:1b:6c:f5:7a:9b:92:b6:1d:e8:18:10:91:0f:f0:
         cd:98:4b:ba:11:4a:7d:c4:50:b4:38:e3:e1:be:88:42:f4:63:
         64:27:aa:92:cd:14:78:88:dd:37:b8:28:01:e6:91:13:97:e5:
         a3:3a:c9:99:31:15:3a:0a:f8:de:34:4e:9c:f6:84:79:c4:34:
         75:ec:4c:3d:d3:cc:24:99:51:18:62:17:f9:1f:96:78:21:9f:
         75:6a:eb:8c:01:24:ae:43:df:80:8e:67:f9:71:30:9f:59:21:
         e8:ab:07:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:59:32 2026 by rpki-client