Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
File:                     8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft (raw, json)
Hash identifier:          brasJmdIz3jKqwV+08IKfTBrAIN/awTtFE9fDxDU6aI=
Subject key identifier:   DE:A0:71:08:F4:E0:B1:4B:DA:E7:07:2D:AC:69:08:DC:55:51:24:AE
Authority key identifier: 8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC
Certificate issuer:       /CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
Certificate serial:       5FB3FDDB875695236F23C85E48555F781307A9A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
Manifest number:          0334
Signing time:             Wed 08 Apr 2026 03:05:34 +0000
Manifest this update:     Wed 08 Apr 2026 03:00:34 +0000
Manifest next update:     Thu 09 Apr 2026 06:41:34 +0000
Files and hashes:         1: 3133382e3132322e3134302e302f32322d3332203d3e203631363738.roa (hash: 78++bmMlB0Bovi7AyiX7x6vYCK0aaHsx+gF5MCimEZY=)
                          2: 3136382e39302e302e302f32322d3332203d3e203631363738.roa (hash: j1nslom0e916eBzyw+5Vl34iuI8TAS5aLHgLgLAY4IU=)
                          3: 3138312e3139312e3230302e302f32322d3332203d3e203631363738.roa (hash: R+lJ3l7UdjCU7kkCR68kGkR301UIjRYBugRziVPE9yM=)
                          4: 8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl (hash: ItCDL3Fn+XNAREa1lbMmtMzByxmKjmzG4J+nnq2UC8U=)
                          5: 3137302e3234362e3233362e302f32322d3332203d3e203631363738.roa (hash: iUhuZCqf+gxZqO/cM6ScZTXsH+jrXHXlfnCWGA2Il7o=)
                          6: 3133312e3130382e3136342e302f32322d3332203d3e203631363738.roa (hash: jjkK6I+oxF27Zn+hFNgeO1Co4NAnpp1C7qu8FLGYa5c=)
                          7: 323830343a316364343a3a2f33322d313238203d3e203631363738.roa (hash: 6JWd5mE5VskzKa06dOehuRC38l54iLZvDm8ktJiyfoo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl
                          rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 06:41:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b3:fd:db:87:56:95:23:6f:23:c8:5e:48:55:5f:78:13:07:a9:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
        Validity
            Not Before: Apr  8 03:00:34 2026 GMT
            Not After : Apr  9 06:41:34 2026 GMT
        Subject: CN=DEA07108F4E0B14BDAE7072DAC6908DC555124AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:39:3c:60:a8:c0:cb:65:d3:cf:68:24:5e:e1:
                    28:fc:50:95:48:c8:6d:e5:0d:fa:c3:4c:87:7f:0c:
                    38:cc:be:1a:74:ac:41:c5:2c:84:0e:3d:6f:4c:2d:
                    0b:a1:a8:03:b6:a6:22:83:bf:00:d0:6e:7d:0c:68:
                    61:f6:73:08:8a:5d:29:25:19:99:53:f0:a8:71:a9:
                    62:5b:4c:2b:65:b3:5d:4c:3c:4b:e3:73:5f:29:17:
                    54:e5:6e:82:32:23:37:57:98:24:b3:66:da:46:d4:
                    74:dd:12:8d:1c:02:d6:82:7b:9f:7d:b6:9f:c6:17:
                    a8:17:6f:8c:5c:38:c4:67:71:ce:78:18:56:1b:bb:
                    50:64:56:63:e8:b0:b0:74:b9:99:55:39:a4:be:9b:
                    d8:b8:d4:59:cc:e5:7e:03:b3:95:a9:4c:e2:a2:25:
                    3b:c7:52:56:3b:00:10:78:9b:fa:eb:b4:44:db:ba:
                    e9:1a:8a:7e:78:2f:cb:92:1e:e0:b2:c8:51:8d:ea:
                    db:ba:a5:8d:7d:a7:96:18:1e:de:0f:a2:c7:ba:e2:
                    f4:a1:34:b2:a0:4c:a9:65:4d:8e:f9:93:42:32:80:
                    8b:af:6a:d4:d2:e7:be:68:58:d4:b4:0d:28:c2:06:
                    12:fa:cd:d3:c7:f1:6f:bf:2b:bc:31:3c:d3:04:65:
                    ac:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A0:71:08:F4:E0:B1:4B:DA:E7:07:2D:AC:69:08:DC:55:51:24:AE
            X509v3 Authority Key Identifier:
                keyid:8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:d6:0f:22:4d:85:79:f6:fd:f7:5c:27:da:e5:b3:5e:bc:18:
         d9:4d:5a:bc:2e:44:77:55:c6:ff:72:f3:69:85:70:f8:01:35:
         25:41:57:75:19:85:5f:90:0b:cb:b0:26:e6:7a:b6:34:d2:a8:
         81:79:7e:11:78:6c:4c:9e:28:3a:e8:c9:bb:6f:28:34:7a:e6:
         6b:d6:a5:33:d8:31:2b:c7:be:f1:dd:5a:32:57:f7:57:6d:85:
         12:63:88:11:54:18:78:96:df:64:a3:2d:31:00:a7:be:12:31:
         b9:d2:40:1b:3f:ec:be:ed:fa:99:0e:8c:80:0b:48:f4:0b:af:
         e0:27:86:73:c8:02:df:2d:86:d4:ef:b1:ae:98:d0:47:7a:32:
         9e:82:6b:3c:f2:48:5e:c6:ad:8b:6b:d2:84:a9:f8:60:3f:09:
         47:88:d8:01:c2:0c:64:b2:ee:7f:a4:1a:30:7c:42:95:8d:db:
         7e:32:ea:42:e5:71:2d:19:5f:03:b2:c3:8d:40:87:61:74:0b:
         42:43:b3:5b:a1:4a:02:32:45:68:37:8b:69:cc:d2:18:18:10:
         eb:b0:0a:2a:37:fc:73:c6:0e:11:ab:ca:4b:84:a1:d9:d9:73:
         c7:27:90:a0:4d:73:23:ed:8f:28:d3:a1:24:02:5e:05:2e:65:
         6c:1d:59:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 17:46:18 2026 by rpki-client