Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft
File:                     B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft (raw, json)
Hash identifier:          EZcB95iHm+r1Stq2HTch4PBO6p91piwSB9k82/SMkLo=
Subject key identifier:   DA:7E:2F:92:02:C4:3A:B0:84:17:74:1C:09:08:91:5F:02:D9:FA:C3
Authority key identifier: B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66
Certificate issuer:       /CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
Certificate serial:       2A957672DC52695980DFC8F23213CB865B82E962
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft
Manifest number:          03C8
Signing time:             Wed 08 Apr 2026 01:28:02 +0000
Manifest this update:     Wed 08 Apr 2026 01:23:02 +0000
Manifest next update:     Thu 09 Apr 2026 04:26:02 +0000
Files and hashes:         1: 3137372e38352e3136372e302f32342d3234203d3e203532373433.roa (hash: FBVHOxBlIERsIkT3RQX3Wn9gA45AfnlFxJolVZZShi4=)
                          2: 3137372e38352e3136362e302f32342d3234203d3e203532373433.roa (hash: CfJSl6S562vYm2soh9kV2iDSBZh+vpMuccN6zqF1Sck=)
                          3: 3137372e38352e3136342e302f32322d3232203d3e203532373433.roa (hash: mcWZkfXu9xnFjE1ymSk14x6r8LbE5gP7O/pxaEjtpfA=)
                          4: 3137372e38352e3136352e302f32342d3234203d3e203532373433.roa (hash: rEinrI28PQUJHeEYRJSRy3A+v9MBQS2xjtXZlxP0Xos=)
                          5: 3137372e38352e3136362e302f32332d3233203d3e203532373433.roa (hash: X/zABilIWPFGHFUELdfKj7pP5WyD7RKlaeOSbH1fboA=)
                          6: B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl (hash: /k1uN4Kk9gatAz7l/hVjUvhBFqoeTfnFN8rjqyvHLb8=)
                          7: 323830343a363566343a3a2f33322d3332203d3e203532373433.roa (hash: yFUriMA3jSl36ZtAYliucTBcvzxvvBGUu31glU6JDdI=)
                          8: 3137372e38352e3136342e302f32332d3233203d3e203532373433.roa (hash: jwG40e5Av7OuCkdinNTmVHyBUwQ7kPPrIHh5hN0dhrQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl
                          rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 04:26:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:95:76:72:dc:52:69:59:80:df:c8:f2:32:13:cb:86:5b:82:e9:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
        Validity
            Not Before: Apr  8 01:23:02 2026 GMT
            Not After : Apr  9 04:26:02 2026 GMT
        Subject: CN=DA7E2F9202C43AB08417741C0908915F02D9FAC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:86:b0:4d:41:2a:1b:8b:51:34:7f:38:bb:53:
                    a2:ca:85:94:59:3b:84:37:ec:46:20:26:97:7f:03:
                    0d:1e:8f:08:62:f7:1f:8d:a9:8d:d9:1d:7d:22:ac:
                    8a:7c:cf:67:a9:5a:3e:7d:69:7c:a1:93:56:45:09:
                    aa:5d:1c:03:61:2e:e6:ac:37:5d:ba:b0:f0:28:76:
                    d2:f9:c7:9b:fc:90:12:d4:17:2f:ea:2f:13:bf:18:
                    ff:03:b4:a2:4f:cb:2d:4c:4c:a4:fb:95:aa:7a:df:
                    a1:bc:8b:05:9f:27:29:cf:52:c8:e2:1c:ca:f2:6e:
                    3c:48:b4:a2:c2:28:d3:aa:5e:5e:e6:c4:be:2b:a2:
                    3b:09:23:2f:80:38:74:49:26:69:55:95:2c:8b:a7:
                    9b:70:bf:9e:d3:c5:39:4c:f5:4c:d4:f8:ce:bf:08:
                    61:a2:62:42:50:0f:b1:7c:14:7b:ca:1e:0a:74:78:
                    56:85:62:20:cc:a9:87:33:b2:8a:10:9f:c7:3f:bc:
                    ba:00:ee:6b:4c:79:89:b9:0f:d6:fc:03:a0:f7:c0:
                    f3:bc:82:9f:c3:40:68:18:67:56:12:44:92:b4:62:
                    55:6a:f3:d5:34:3e:51:14:db:b9:52:26:e3:2e:e0:
                    2a:68:d6:f0:d6:8c:e5:97:33:cb:7d:8e:f0:54:ff:
                    ac:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7E:2F:92:02:C4:3A:B0:84:17:74:1C:09:08:91:5F:02:D9:FA:C3
            X509v3 Authority Key Identifier:
                keyid:B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:b2:b0:8a:96:a7:6a:01:62:3f:b5:a8:d5:4e:f3:a5:ec:98:
         e3:ea:82:36:ce:12:6f:48:9e:a7:c6:88:f2:75:90:15:3f:4b:
         13:df:50:9f:ac:b3:d1:12:de:16:c5:1d:cc:7f:37:21:81:1d:
         9d:f7:0c:71:af:6a:c2:87:ea:f8:2d:40:a5:33:20:62:c1:22:
         94:a9:da:5d:fa:a4:df:c3:41:77:d7:96:90:6f:f5:93:92:5b:
         a4:87:71:0d:07:42:ba:21:f0:8f:f1:19:7f:73:55:40:68:1b:
         8a:8c:3d:b1:61:85:5e:e7:2a:7f:ed:87:a1:2f:a3:07:6e:74:
         29:a5:5f:ac:e4:e0:0b:97:2f:5d:96:22:10:f9:5c:df:61:b3:
         56:76:5e:e2:72:91:8f:44:67:03:bb:d3:13:1c:6e:ee:7e:ca:
         72:84:74:8b:95:45:43:df:a1:56:6b:38:6c:6f:9d:a3:22:6f:
         01:b8:23:e4:08:85:8b:dc:cd:b5:2b:8b:20:34:15:c4:90:a2:
         16:50:2f:50:24:88:33:0d:08:1a:17:d3:18:ae:c8:9a:7e:a8:
         b8:17:9b:d7:4d:86:08:0b:a0:89:e9:ec:6b:62:25:d9:18:6d:
         ae:c3:83:3e:37:3c:21:e3:d9:84:b6:84:b7:4d:ad:fc:e7:7e:
         d6:c1:55:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 16:39:03 2026 by rpki-client