Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/589266404FC4F49C44EDD95659918140330CBF03.mft
File:                     589266404FC4F49C44EDD95659918140330CBF03.mft (raw, json)
Hash identifier:          LWs3/hXec8EndUH0p8zX54OFm1rFSI5M2lDC+Dmuwd8=
Subject key identifier:   4E:A3:D7:8A:B1:87:64:9A:6F:B7:18:41:7C:11:74:9B:77:81:6C:FD
Authority key identifier: 58:92:66:40:4F:C4:F4:9C:44:ED:D9:56:59:91:81:40:33:0C:BF:03
Certificate issuer:       /CN=589266404FC4F49C44EDD95659918140330CBF03
Certificate serial:       1BC4AD35E4DC0987B6C2EBA3B7E34D998375B1B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/589266404FC4F49C44EDD95659918140330CBF03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/589266404FC4F49C44EDD95659918140330CBF03.mft
Manifest number:          0227
Signing time:             Wed 08 Apr 2026 05:47:43 +0000
Manifest this update:     Wed 08 Apr 2026 05:42:43 +0000
Manifest next update:     Thu 09 Apr 2026 06:15:43 +0000
Files and hashes:         1: 589266404FC4F49C44EDD95659918140330CBF03.crl (hash: JkfBKrz9JaZNFy7zYRKbWIyq97v2LYVBtnD4IM8MzJ0=)
                          2: 323830343a383261633a3a2f33322d3333203d3e20323732353333.roa (hash: 7AAXzHy5OzAAUVFEDUOj7t4Wwxs8/i0q7wVzLnRflek=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/589266404FC4F49C44EDD95659918140330CBF03.crl
                          rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/589266404FC4F49C44EDD95659918140330CBF03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/589266404FC4F49C44EDD95659918140330CBF03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 06:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c4:ad:35:e4:dc:09:87:b6:c2:eb:a3:b7:e3:4d:99:83:75:b1:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=589266404FC4F49C44EDD95659918140330CBF03
        Validity
            Not Before: Apr  8 05:42:43 2026 GMT
            Not After : Apr  9 06:15:43 2026 GMT
        Subject: CN=4EA3D78AB187649A6FB718417C11749B77816CFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:96:9b:01:02:00:b6:1a:3c:b8:1c:3d:dd:c7:
                    aa:53:72:e6:b1:28:94:5a:e6:6c:90:a8:44:09:1f:
                    85:93:09:f8:af:c3:a3:bb:9e:6e:06:a6:22:8b:65:
                    d9:45:93:59:4a:ef:2b:f7:2c:4c:86:c3:8a:bc:a3:
                    d0:8c:65:74:a8:fa:8c:28:e0:60:35:99:29:50:df:
                    94:71:0e:75:b9:24:22:55:7b:bd:3a:69:a2:d8:1e:
                    94:69:6f:f6:62:26:7f:61:84:9b:30:1a:f4:b5:b1:
                    c5:4f:43:1c:54:64:d9:e5:91:6c:f9:c4:b4:61:b1:
                    a4:bd:c2:a0:ef:53:9d:19:a9:f3:42:0f:e1:2a:fc:
                    a5:f1:46:b2:37:fb:d4:98:ff:2b:0d:ed:ee:e9:c1:
                    23:35:0e:8b:0e:19:58:98:ac:13:70:d3:e0:01:8a:
                    79:7b:25:cb:02:54:f6:ce:6b:11:28:94:6b:ca:aa:
                    44:8f:9c:87:ad:88:5c:f3:b2:c3:a5:74:3c:ac:f1:
                    b6:62:97:b0:e9:32:c2:75:c7:c1:93:fc:9a:64:25:
                    50:8e:45:78:ca:c6:42:cb:11:38:ea:e8:fa:f8:27:
                    16:33:3c:c3:f2:be:6d:64:d6:22:09:da:51:08:b4:
                    20:8a:6f:5d:5b:97:1e:bc:73:7b:da:87:5b:ef:61:
                    5d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A3:D7:8A:B1:87:64:9A:6F:B7:18:41:7C:11:74:9B:77:81:6C:FD
            X509v3 Authority Key Identifier:
                keyid:58:92:66:40:4F:C4:F4:9C:44:ED:D9:56:59:91:81:40:33:0C:BF:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/589266404FC4F49C44EDD95659918140330CBF03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/589266404FC4F49C44EDD95659918140330CBF03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/589266404FC4F49C44EDD95659918140330CBF03.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:8e:27:3f:f4:4f:98:98:4d:a7:5d:03:45:28:3a:dd:27:bf:
         d0:93:35:6f:85:9d:e2:e9:fd:23:3b:62:6b:99:ad:c1:d0:cc:
         f2:0b:fa:4e:e5:10:32:04:9d:ca:2b:b5:76:b8:fc:7d:56:10:
         f7:3f:e5:99:4d:6b:81:a6:d8:fa:ec:df:c5:df:80:23:43:9d:
         da:56:83:09:aa:d8:7b:20:ba:64:2f:d7:f0:c3:39:54:aa:0f:
         8a:f0:8e:20:22:5c:61:79:b8:80:df:43:0f:8d:f5:b1:91:6e:
         e8:98:ae:17:0e:d6:04:07:1f:6e:f1:88:bc:47:7e:6b:47:bc:
         d0:29:15:ea:1b:f6:8c:9c:af:fd:b5:30:07:4f:67:36:66:9b:
         4f:98:0f:11:46:fe:34:78:a7:df:f2:ba:d7:3c:2c:91:89:89:
         51:55:67:9a:a5:14:52:88:68:9c:1a:ca:a3:b5:56:de:eb:b9:
         b2:65:2f:a0:8b:59:44:e2:91:a8:88:10:24:59:b6:88:50:e9:
         c0:2a:e2:d5:b1:94:08:18:ea:8e:f2:0e:8c:38:60:25:88:82:
         83:e0:3a:e7:f5:89:0c:17:2a:c9:e1:25:dd:08:0b:33:90:27:
         1d:ba:df:36:24:06:7d:f9:60:84:d7:de:27:61:7a:de:18:a2:
         77:c7:e2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 19:37:40 2026 by rpki-client