Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.mft
File:                     8DC5D5EDAAF33C7066244D28E534CFD5D6691353.mft (raw, json)
Hash identifier:          CjJE0v7ZY9mbl4LXbaM/UY1coQxVQKabSfdeDzdx9Qc=
Subject key identifier:   D9:FA:8C:9C:E7:75:45:8E:A1:E5:9A:E4:76:AD:0D:D8:3F:AE:67:1F
Authority key identifier: 8D:C5:D5:ED:AA:F3:3C:70:66:24:4D:28:E5:34:CF:D5:D6:69:13:53
Certificate issuer:       /CN=8DC5D5EDAAF33C7066244D28E534CFD5D6691353
Certificate serial:       5E22F05B10CC3C66D2B0D78D618444794C359767
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.mft
Manifest number:          02B1
Signing time:             Wed 08 Apr 2026 07:02:53 +0000
Manifest this update:     Wed 08 Apr 2026 06:57:53 +0000
Manifest next update:     Thu 09 Apr 2026 10:23:53 +0000
Files and hashes:         1: 34352e3136352e31322e302f32322d3234203d3e20323638363633.roa (hash: jDkzEu3dfEoW/TK85s2VDg93/wRMdxQYYXsBqd5++Ao=)
                          2: 8DC5D5EDAAF33C7066244D28E534CFD5D6691353.crl (hash: zOa7bMfDPEl1Zr5UwC2k5Gh1kveDXxoRctylCnbLB2E=)
                          3: 323830343a353461383a3a2f33322d3438203d3e20323638363633.roa (hash: m7+hgmJslk8ghgjHVc6HPco/IHPiW92CG2MNjN+UFQs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.crl
                          rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 10:23:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:22:f0:5b:10:cc:3c:66:d2:b0:d7:8d:61:84:44:79:4c:35:97:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DC5D5EDAAF33C7066244D28E534CFD5D6691353
        Validity
            Not Before: Apr  8 06:57:53 2026 GMT
            Not After : Apr  9 10:23:53 2026 GMT
        Subject: CN=D9FA8C9CE775458EA1E59AE476AD0DD83FAE671F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:10:20:d5:3d:76:b3:be:6e:d4:98:52:16:7a:
                    2e:63:8d:31:f3:f6:4f:53:9c:69:29:be:32:2f:bc:
                    20:24:b9:6c:1b:b5:47:23:fa:4c:97:4e:f3:b8:ec:
                    25:9a:23:69:3d:90:df:13:ce:ff:46:ee:f3:73:1e:
                    b2:c3:37:7f:de:14:2e:2e:3d:7c:d5:14:36:96:18:
                    21:f4:ea:b0:46:c6:86:dd:3a:b1:de:a9:b2:e1:fd:
                    c4:a7:ca:52:62:45:de:9c:77:56:b1:0b:46:13:a3:
                    33:95:54:9d:3d:77:a4:4e:c9:78:84:e3:83:c2:99:
                    e2:b8:96:52:30:40:97:18:71:4f:c6:3f:c2:e5:4a:
                    23:f3:a4:54:57:8b:ec:ab:db:df:ee:3a:15:fe:94:
                    1b:0f:48:59:59:9d:af:2a:b4:85:b3:71:8d:03:d7:
                    2e:57:df:f7:c9:61:35:41:34:5b:f5:fc:ce:b3:14:
                    22:95:66:25:82:b0:29:cf:f7:a2:35:80:06:46:b6:
                    da:21:33:9f:51:89:1e:97:3f:93:28:e5:4d:38:79:
                    f7:09:1c:ca:2d:40:86:0c:0f:da:54:46:69:b9:b8:
                    ae:c3:69:1d:00:58:d3:f5:1c:42:bf:05:16:4d:b3:
                    54:5d:e2:38:50:fe:86:7c:45:5a:4b:f4:b6:30:cd:
                    f1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FA:8C:9C:E7:75:45:8E:A1:E5:9A:E4:76:AD:0D:D8:3F:AE:67:1F
            X509v3 Authority Key Identifier:
                keyid:8D:C5:D5:ED:AA:F3:3C:70:66:24:4D:28:E5:34:CF:D5:D6:69:13:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:21:ef:ec:a9:1a:f7:01:f7:9c:ee:ae:9d:b6:1f:0b:1f:64:
         48:d6:19:48:18:eb:8f:b6:26:5c:e5:62:2c:f8:40:ae:9f:36:
         8d:52:d6:89:bd:99:ff:9a:3c:b8:8d:5a:34:af:83:bc:ff:30:
         98:33:22:8f:b3:4f:67:7d:e5:e4:dd:f3:5e:b0:e0:6a:27:cb:
         5f:a2:08:7b:3b:c1:8a:fc:f0:b1:a7:c8:02:2b:fe:90:5b:48:
         d6:02:b0:b4:cf:41:89:20:70:9d:1b:3f:1b:8c:13:ef:cc:49:
         5a:17:ac:67:f3:9c:00:04:12:cc:7d:14:2b:88:03:d6:3d:dd:
         93:b7:f7:35:99:53:7f:70:6c:c4:5f:7c:af:8c:8c:01:d1:db:
         e5:70:af:e4:28:cf:90:8b:af:b6:9e:dd:ac:72:1f:03:51:0c:
         e0:7e:49:f7:12:a0:55:46:17:41:bd:fd:f6:1a:c2:ba:95:45:
         a7:41:f5:6f:9a:04:e8:55:3b:7c:95:35:c1:73:f6:98:d0:d0:
         bd:2b:1c:ab:cd:a9:40:e9:70:88:d0:f7:63:c8:74:eb:cb:e1:
         6d:a2:eb:2e:31:9f:1d:f4:47:25:87:8a:44:cd:d3:88:56:85:
         99:d2:d6:49:fb:dd:d6:a8:79:98:15:e7:01:68:fc:6f:bb:6a:
         7f:49:16:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 16:40:28 2026 by rpki-client