Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.mft
File:                     8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.mft (raw, json)
Hash identifier:          t2Drx8etr1bZa0ocLIHfAOkEYNEWx0AwB5eg36eQi4E=
Subject key identifier:   F1:8B:B0:32:8D:EB:7E:D1:9B:A5:23:55:D5:6B:06:95:76:13:C9:48
Authority key identifier: 8D:41:CA:BF:91:28:C1:CB:AC:4B:B6:41:E7:7B:86:D1:30:98:BC:6D
Certificate issuer:       /CN=8D41CABF9128C1CBAC4BB641E77B86D13098BC6D
Certificate serial:       76BE50F3AECBDD45762992925DBC1367569E75AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.mft
Manifest number:          03D2
Signing time:             Wed 08 Apr 2026 02:49:15 +0000
Manifest this update:     Wed 08 Apr 2026 02:44:15 +0000
Manifest next update:     Thu 09 Apr 2026 04:29:15 +0000
Files and hashes:         1: 3230312e37372e38302e302f32302d3230203d3e203238363436.roa (hash: hgirhowV1+HfFAjvyRtldPMD0LQCMP02GG24lT19IXo=)
                          2: 3230312e37372e38302e302f32322d3234203d3e203238363436.roa (hash: /ZKXVlxf8a02Tib3Gf3AEWW14X1sqVMtc3VayLoDaEw=)
                          3: 323830313a38303a3a2f34382d3438203d3e203238363436.roa (hash: k8vtCgADQvDKhFe7egr0fKslK7IO1jE8GZveKt9PhQc=)
                          4: 3230312e37372e38382e302f32322d3234203d3e203238363436.roa (hash: YRqaNDfwh1XkMyKX4bW3VcA5mNkJh0Qi1R305fgy7Ls=)
                          5: 323830313a38303a323030303a3a2f34302d3438203d3e203238363436.roa (hash: jOfZotG/k5qEYu5GNgpjlFDa4SUWkibH7dB0Wa2q6gI=)
                          6: 3230312e37372e38342e302f32322d3234203d3e203238363436.roa (hash: RGBxdps0Ql+B1/Bb6mwypEYCaPqClBJMZ12W4XHellc=)
                          7: 8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.crl (hash: 7GrK5z4qMG7AYOA3kbWnrHtMVojCvS7CA1udppVjWBU=)
                          8: 3230312e37372e39322e302f32322d3234203d3e203238363436.roa (hash: X4VOfxvNnEDkgfBnmX9E+zfYqqc5X8WI9KyrjqMxiYA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.crl
                          rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 04:29:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:be:50:f3:ae:cb:dd:45:76:29:92:92:5d:bc:13:67:56:9e:75:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D41CABF9128C1CBAC4BB641E77B86D13098BC6D
        Validity
            Not Before: Apr  8 02:44:15 2026 GMT
            Not After : Apr  9 04:29:15 2026 GMT
        Subject: CN=F18BB0328DEB7ED19BA52355D56B06957613C948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ec:88:03:45:80:70:88:f0:2f:3f:6d:b6:e0:
                    11:f0:d5:83:be:65:1a:d1:6d:a4:b0:95:2d:11:6e:
                    1f:47:6a:e3:d1:1e:a7:62:a0:39:c3:76:3e:76:cf:
                    bb:17:9d:2b:f4:d5:2e:e1:e3:bb:5a:af:36:90:05:
                    2c:74:e1:13:c5:1e:98:96:4a:dc:30:c2:43:a3:46:
                    4c:d1:b7:fe:4b:84:80:67:25:02:7d:c9:38:f6:bc:
                    ee:dc:29:2a:ca:5e:e9:0d:00:17:95:d4:ee:fd:56:
                    b8:ef:c5:01:45:bb:a0:fa:31:7b:17:f7:53:ba:19:
                    06:77:bf:54:18:f0:34:ea:6d:df:c8:b2:f2:79:3d:
                    20:05:57:eb:d8:4b:f1:1f:5d:5a:bb:6f:59:65:17:
                    c4:ae:2a:d2:75:b0:e0:7a:24:89:61:a2:a0:82:d1:
                    8b:79:1d:be:59:3f:db:87:f4:67:38:19:13:e9:af:
                    0d:f0:3f:e3:d7:4d:ce:40:65:e6:1b:5e:77:8d:08:
                    44:24:ba:d4:1d:16:91:e7:b6:88:56:21:06:47:e3:
                    a6:5a:47:d0:52:de:10:ed:4d:7e:13:73:be:a9:59:
                    b2:ad:5c:4b:80:56:c6:50:28:08:c6:5f:f1:1d:47:
                    3d:53:98:f4:8b:70:96:cb:c2:9b:e3:c2:71:a4:7a:
                    ae:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:8B:B0:32:8D:EB:7E:D1:9B:A5:23:55:D5:6B:06:95:76:13:C9:48
            X509v3 Authority Key Identifier:
                keyid:8D:41:CA:BF:91:28:C1:CB:AC:4B:B6:41:E7:7B:86:D1:30:98:BC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:0f:37:7a:36:bd:e4:ca:2e:86:e4:1a:88:fd:9a:e8:7d:1e:
         29:3f:7b:51:fc:8c:f2:f1:99:c0:9a:05:57:8c:a0:26:67:8a:
         9a:96:53:88:a2:2c:f2:56:70:ab:86:38:9f:4f:71:4c:3b:ad:
         17:2d:d7:99:e3:d8:83:d9:b7:16:31:b2:c7:42:a5:13:4b:e7:
         50:dd:bc:2c:b2:d3:4c:88:90:a9:a3:75:41:a4:41:2d:68:5b:
         91:31:8a:0c:d6:64:be:d4:06:64:c1:73:53:2f:4f:5e:5f:31:
         21:a3:6d:07:30:46:19:22:40:ac:2f:30:1d:96:8e:9e:04:2e:
         51:88:44:d7:1f:7c:93:1b:11:32:a7:15:34:91:7c:50:d2:98:
         7c:fe:40:a9:bb:47:c2:e6:73:e8:aa:29:f8:b0:48:51:eb:34:
         d9:cd:d5:62:ca:ba:d3:23:e3:a3:4f:fb:8c:c6:71:97:5f:e6:
         89:66:b0:27:69:59:e7:fd:c9:31:fe:08:d2:d7:92:50:6b:0b:
         9b:85:b0:c0:34:20:d9:e8:b6:88:33:f2:66:16:a3:b6:65:e7:
         bf:e4:57:ea:88:e4:45:32:2d:ac:2f:99:d9:ab:76:11:f9:90:
         f4:b8:dc:7f:7a:9f:32:69:99:06:07:da:99:15:b1:8e:78:bd:
         a1:7a:a1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 17:48:26 2026 by rpki-client