Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft
File:                     AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft (raw, json)
Hash identifier:          lxz9gOyW66OFlFtIFbSTH9o7ueyeDUfmQn6+H+/KeDA=
Subject key identifier:   F8:E8:8B:D2:4B:3D:C9:FE:01:57:5D:FD:4A:40:50:B2:8A:00:B5:75
Authority key identifier: AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A
Certificate issuer:       /CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A
Certificate serial:       0527BB4C90E4BE135F2A95320C2D7D8574AEC21B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft
Manifest number:          027D
Signing time:             Wed 08 Apr 2026 03:01:58 +0000
Manifest this update:     Wed 08 Apr 2026 02:56:58 +0000
Manifest next update:     Thu 09 Apr 2026 03:43:58 +0000
Files and hashes:         1: 323830343a353463383a3a2f33322d3438203d3e203631353935.roa (hash: Lr4RgQ9+Kc8eB8NQKeHtU80CyD6ZWwwwrof8SW1hNR4=)
                          2: AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl (hash: djLVsYyu8gqv94IW/F7kN3Ewobkujn+nJWm9dTNzVX4=)
                          3: 34352e3136352e38302e302f32322d3234203d3e20323133343936.roa (hash: rJ7WfNa+V0U/LQj6rjhJSnmwMoA24sWqnDlfMYYaiqQ=)
                          4: 34352e3136352e38302e302f32322d3234203d3e203631353935.roa (hash: E8fPnc3D01HrHu0IERiaVvqh7l7+gzZnFGvDM9PE9ic=)
                          5: 323830343a353463383a3a2f33322d3438203d3e20323133343936.roa (hash: Y2OC9JXEDt2BErpNSSdF0EqJ8OpsWaCymwx4RjkiNeY=)
                          6: 34352e3136352e38302e302f32322d3234203d3e203533343237.roa (hash: 1xYFKSeSCizyds5gHEIPv0l3Tzgq0aCCTj2XdNILDmA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl
                          rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 03:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:27:bb:4c:90:e4:be:13:5f:2a:95:32:0c:2d:7d:85:74:ae:c2:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A
        Validity
            Not Before: Apr  8 02:56:58 2026 GMT
            Not After : Apr  9 03:43:58 2026 GMT
        Subject: CN=F8E88BD24B3DC9FE01575DFD4A4050B28A00B575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0a:d2:94:9b:99:e4:ae:ef:f4:b0:92:ec:60:
                    fd:0c:6d:ac:a9:6b:f9:be:47:60:5c:36:62:10:af:
                    9c:c8:e8:b9:7d:1d:46:ac:49:cc:b6:f3:79:ad:75:
                    db:14:17:f4:42:3b:ec:0f:39:ca:89:e1:df:8d:25:
                    fa:fc:7f:e2:e0:70:93:75:24:2a:02:a5:e0:ae:6f:
                    8e:bd:97:b3:cc:73:04:84:96:a3:6a:c3:c2:2c:00:
                    79:71:17:bb:ce:2a:d7:f1:29:79:6b:48:87:e6:66:
                    bc:02:11:67:b2:87:a7:16:1e:3d:6e:e0:b6:54:10:
                    43:e8:37:1c:f7:09:3f:01:43:ce:ed:8b:c6:36:fa:
                    c7:0d:44:85:4b:ec:cf:27:de:80:65:79:3f:a5:cf:
                    09:16:ed:c6:b5:5e:e7:86:8a:c5:d1:f3:ce:6c:eb:
                    a1:c1:c9:a0:57:9d:a5:ab:bb:7b:a6:ce:c3:7f:dd:
                    32:b7:d1:81:b4:0a:74:58:5a:ae:b1:12:95:8e:9e:
                    72:b9:19:3c:9a:dd:dd:96:f7:06:40:60:ab:8e:ed:
                    66:08:4c:05:98:0b:63:31:83:29:bf:4a:a9:10:86:
                    e5:40:da:b0:81:b3:25:ad:c3:61:0c:22:e5:d9:c1:
                    cb:37:19:2e:7d:03:4b:4b:fa:1c:0d:18:46:72:c1:
                    87:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E8:8B:D2:4B:3D:C9:FE:01:57:5D:FD:4A:40:50:B2:8A:00:B5:75
            X509v3 Authority Key Identifier:
                keyid:AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:ec:be:bb:24:f4:b8:60:e5:e8:50:a9:62:92:39:80:ae:81:
         b0:4b:56:0d:b9:73:38:ae:55:2e:4a:ec:03:b3:06:b6:0b:9b:
         59:79:f0:29:c1:ee:08:41:18:74:04:b7:86:eb:3a:bb:99:51:
         c2:8c:84:2e:b5:c4:a2:91:83:08:cb:50:6e:29:70:fd:24:c7:
         83:5c:94:b6:ba:62:3e:b5:e8:f3:52:18:3d:35:21:53:f6:1d:
         9c:a5:ce:51:f7:5d:b8:8a:53:9a:4c:db:cf:5a:f1:db:5c:e9:
         12:49:7e:82:c3:a2:a4:7b:e4:d6:13:70:67:a0:ef:00:4a:02:
         70:8a:3b:a5:38:b0:8e:39:55:6c:cc:2a:7d:1e:ef:d2:82:fe:
         5e:1b:b4:b2:9c:ee:f2:28:29:7c:bb:ca:27:13:36:ac:73:dc:
         1e:96:cd:70:51:4f:ef:4f:ae:81:92:e1:b3:ea:71:f1:fd:dc:
         d9:f3:60:99:54:fd:17:df:78:0a:c2:ed:75:7f:d9:2d:36:b3:
         70:22:e8:ec:5b:34:82:b6:13:a8:75:94:74:20:17:a5:db:02:
         9d:1b:6b:58:a8:3f:cd:4d:7b:3f:48:b0:fe:17:db:5b:33:74:
         62:1a:89:42:ed:e0:3c:53:18:4f:ba:e0:54:fd:d1:19:b6:ef:
         dc:9b:cc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:36:12 2026 by rpki-client