Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9i4NKEVji1s5E4pp6hdsjwno4Ca44HmZh5XWc1iJKsfQ/0/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.mft
File:                     BD1D92CC61E951D8FC0BC47254B3C399B04418ED.mft (raw, json)
Hash identifier:          TaG3QvT36pL57mCrtRc3lbDDM79wPlUPIWGrj6H9p6A=
Subject key identifier:   49:DF:15:32:6E:8C:93:52:01:51:37:C0:46:A9:9E:9E:F2:92:3B:C7
Authority key identifier: BD:1D:92:CC:61:E9:51:D8:FC:0B:C4:72:54:B3:C3:99:B0:44:18:ED
Certificate issuer:       /CN=BD1D92CC61E951D8FC0BC47254B3C399B04418ED
Certificate serial:       62B50B23D8B6CEE590227B883DBB3C6CD4242DBE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9i4NKEVji1s5E4pp6hdsjwno4Ca44HmZh5XWc1iJKsfQ/0/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.mft
Manifest number:          023B
Signing time:             Thu 09 Apr 2026 03:21:16 +0000
Manifest this update:     Thu 09 Apr 2026 03:16:16 +0000
Manifest next update:     Fri 10 Apr 2026 04:31:16 +0000
Files and hashes:         1: 34352e3137382e3138382e302f32322d3232203d3e20323639303931.roa (hash: JshXUNSlstQPLHmulr9V7CZfy3rvCFd3xnk6/1SDU44=)
                          2: 323830343a356635303a3a2f33322d3332203d3e20323639303931.roa (hash: JvsC3554Sqnj0vH3zqboV2PHVfwr7itF0Il4KNz/lpQ=)
                          3: 34352e3137382e3138382e302f32332d3233203d3e20323639303931.roa (hash: DAZTUyv5/sHTQeDGhY/l9s59xXa+or0iCBDHEfxlbFE=)
                          4: BD1D92CC61E951D8FC0BC47254B3C399B04418ED.crl (hash: vLd9lDPqwYgd9N5mRW5mQajDiwEN25LE5D0ixqs3u7c=)
                          5: 34352e3137382e3139302e302f32332d3233203d3e20323639303931.roa (hash: GoILk6f+TxJl1Luf8KbUDe/tVVVkmhrWxyZh3OVyHrc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9i4NKEVji1s5E4pp6hdsjwno4Ca44HmZh5XWc1iJKsfQ/0/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.crl
                          rsync://rpki-repo.registro.br/repo/9i4NKEVji1s5E4pp6hdsjwno4Ca44HmZh5XWc1iJKsfQ/0/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 04:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:b5:0b:23:d8:b6:ce:e5:90:22:7b:88:3d:bb:3c:6c:d4:24:2d:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1D92CC61E951D8FC0BC47254B3C399B04418ED
        Validity
            Not Before: Apr  9 03:16:16 2026 GMT
            Not After : Apr 10 04:31:16 2026 GMT
        Subject: CN=49DF15326E8C9352015137C046A99E9EF2923BC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1f:88:23:f6:dc:81:da:67:27:08:58:33:51:
                    d8:5a:35:f1:37:bd:8b:7d:f1:33:6b:45:9c:ba:7f:
                    6f:03:d8:1e:b6:e8:d8:24:ac:b6:a8:ea:cb:b6:7a:
                    14:bc:52:26:ff:55:50:4c:fa:e1:71:54:96:e7:ad:
                    61:a0:d8:c5:db:17:75:ef:8b:6e:02:25:cb:d5:e2:
                    1e:12:41:a5:a9:db:ea:26:3a:7d:37:67:96:77:dc:
                    22:5a:d9:b6:a9:7c:61:63:cf:04:3c:8e:86:e2:aa:
                    43:a1:d2:af:9d:87:37:2b:98:b4:1c:29:a1:78:90:
                    9a:06:14:03:b0:40:98:90:bc:36:b1:77:a2:a1:56:
                    5d:98:dc:e9:4d:9c:01:5a:70:01:98:a4:ec:bd:93:
                    db:98:c3:67:cc:be:80:69:19:46:1f:b6:87:0c:57:
                    e4:40:e8:22:01:3f:16:f4:85:2f:b6:62:ab:40:be:
                    c8:1e:3a:8d:3a:b8:61:60:bd:00:ee:1c:4d:f4:2b:
                    d3:40:de:05:44:bd:1c:d2:8b:f2:9a:f2:c0:c9:4d:
                    70:05:c1:ce:a2:39:fe:8c:87:c7:b8:f5:80:df:14:
                    8c:11:9b:4e:ed:54:e1:63:f9:88:01:c8:9d:af:0f:
                    b3:4e:cb:4e:3e:ca:c2:da:a7:71:dc:f3:39:56:52:
                    ff:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DF:15:32:6E:8C:93:52:01:51:37:C0:46:A9:9E:9E:F2:92:3B:C7
            X509v3 Authority Key Identifier:
                keyid:BD:1D:92:CC:61:E9:51:D8:FC:0B:C4:72:54:B3:C3:99:B0:44:18:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9i4NKEVji1s5E4pp6hdsjwno4Ca44HmZh5XWc1iJKsfQ/0/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9i4NKEVji1s5E4pp6hdsjwno4Ca44HmZh5XWc1iJKsfQ/0/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:7a:09:ad:73:82:ae:58:d9:6c:58:f1:af:9b:4e:ab:83:37:
         88:6e:e6:44:2e:f3:97:02:97:cb:da:e7:1e:a6:0e:8e:ea:5e:
         a5:da:e9:b7:15:af:b0:f4:e0:29:f5:dc:2f:e0:58:52:a7:3a:
         9c:72:c4:23:41:ad:79:9d:7a:b5:bf:10:d4:b1:7e:8b:91:c4:
         66:eb:01:96:1f:e9:2e:33:3d:f3:df:d8:54:03:60:9a:61:0d:
         0e:88:33:43:03:ae:1c:7c:8d:38:0d:13:fb:18:7b:f3:cb:15:
         db:f8:b4:40:70:a4:48:87:2a:e0:af:46:6a:b3:26:b8:60:a0:
         4d:b4:9a:ba:4b:e4:33:b4:0f:57:c8:ba:b8:40:83:ed:92:5f:
         d3:af:e5:c2:71:ba:27:23:3a:bc:9f:90:41:e1:1a:13:d5:b9:
         cd:01:a9:bd:51:4f:02:b6:69:b2:58:c5:58:00:33:8f:74:78:
         28:b5:e3:34:69:2d:d3:ae:16:4b:47:34:40:41:9b:e8:3b:27:
         29:0a:e3:e1:77:04:99:73:78:e6:b6:a8:81:da:47:40:9b:4a:
         9f:15:ce:71:01:b9:d4:e1:1e:32:c5:32:00:d1:63:ad:be:0f:
         17:1e:c1:cf:12:b0:0b:05:4f:2a:de:75:c9:fa:5b:db:4e:ca:
         d9:9d:e7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 15:42:11 2026 by rpki-client