Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.mft
File:                     632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.mft (raw, json)
Hash identifier:          Cr1qvWhQ9LKYxl46ShLg05qDmzPSavr4iAJv+7xwm9Y=
Subject key identifier:   0E:CE:E4:C0:12:14:AC:34:FB:18:93:58:DE:A4:C0:04:5F:41:5D:77
Authority key identifier: 63:21:95:B6:7D:F3:AC:7E:3E:0C:CC:2B:F8:3A:FA:55:DB:42:D4:08
Certificate issuer:       /CN=632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408
Certificate serial:       5F4B2D4CEFCA694A83B6E3DD714DC7985C0DAFDA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.mft
Manifest number:          2D
Signing time:             Thu 09 Apr 2026 06:30:23 +0000
Manifest this update:     Thu 09 Apr 2026 06:25:23 +0000
Manifest next update:     Fri 10 Apr 2026 09:12:23 +0000
Files and hashes:         1: 632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.crl (hash: u9y0j/a1iPVoH3zsyDk0z3Z7AUsFmTC19HcxV/+wk5c=)
                          2: 323830343a383433303a343030303a3a2f33342d3334203d3e20323732323435.roa (hash: RUk5/WPYiHJlLoRehPkwo+2ak6qdzM2DZqYWI3WU6+M=)
                          3: 323830343a383433303a633030303a3a2f33342d3334203d3e20323732323435.roa (hash: Gei1DA7/7nENIjNvHyzkMODvFsSBBjdlpD9hv3F1unw=)
                          4: 323830343a383433303a383030303a3a2f33342d3334203d3e20323732323435.roa (hash: 4YRxIw1lpdNUIlpzLzHg/tvL92QbTHviOT6IPCFGjLA=)
                          5: 323830343a383433303a3a2f33322d3332203d3e20323732323435.roa (hash: wI2lNXyeByTqmLKMwpuBJoCZPtbEbdQChyaVV7GQAPg=)
                          6: 323830343a383433303a3a2f33342d3334203d3e20323732323435.roa (hash: j1/+6Yk0br7IvjjZUrPe4aTYPrZLk3gxWmBInpWLJdQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.crl
                          rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 09:12:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:4b:2d:4c:ef:ca:69:4a:83:b6:e3:dd:71:4d:c7:98:5c:0d:af:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408
        Validity
            Not Before: Apr  9 06:25:23 2026 GMT
            Not After : Apr 10 09:12:23 2026 GMT
        Subject: CN=0ECEE4C01214AC34FB189358DEA4C0045F415D77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f9:9c:9b:99:6e:0d:e8:5b:f8:25:73:a1:5d:
                    06:8f:91:43:34:af:bb:18:bf:b4:8c:af:6c:f2:d0:
                    a5:e1:bb:59:8b:7a:01:4a:c5:82:9b:8b:51:40:80:
                    3d:e6:40:85:7a:d1:7f:d3:f7:e1:a4:f3:36:db:41:
                    87:5c:20:d3:26:ef:c5:dd:c7:9f:aa:e1:41:50:65:
                    78:34:5f:65:c9:a4:76:01:94:ac:03:9c:ea:45:56:
                    2f:7d:1b:9f:42:85:33:1a:ac:8c:04:10:2f:6b:3e:
                    02:11:6b:03:39:2a:2f:55:99:18:3a:87:ce:ab:5e:
                    55:b0:aa:bc:63:8d:ae:1b:eb:85:0f:dd:6b:cb:58:
                    80:84:24:63:d6:f5:f2:af:29:53:63:ed:65:0a:cf:
                    69:2c:8e:d6:eb:83:f9:e1:65:45:6f:14:9d:a2:2e:
                    89:e6:0e:e4:cf:68:98:be:da:ba:41:29:78:61:01:
                    d8:33:1e:a1:8d:fa:37:75:73:94:9f:a7:ca:b3:b1:
                    8e:6d:b3:93:24:7a:9d:29:6a:02:5b:ba:95:70:62:
                    c7:e2:fb:76:b3:b2:f8:3c:f3:2b:2f:39:3e:ff:fe:
                    3f:51:34:00:3a:63:37:6c:29:42:87:64:22:61:ec:
                    e1:4d:ba:37:b3:2b:80:6c:9e:9d:58:2c:4f:0b:56:
                    6c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CE:E4:C0:12:14:AC:34:FB:18:93:58:DE:A4:C0:04:5F:41:5D:77
            X509v3 Authority Key Identifier:
                keyid:63:21:95:B6:7D:F3:AC:7E:3E:0C:CC:2B:F8:3A:FA:55:DB:42:D4:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:28:a6:5c:38:2b:3d:ce:26:58:fe:b8:23:2a:bb:28:c6:5c:
         93:ab:b4:fc:d8:b8:76:aa:a2:ae:06:fb:14:ac:6f:55:0f:88:
         5e:46:bb:9d:56:90:a2:0a:66:6f:1c:87:d8:a7:cc:53:e2:ef:
         a9:d8:e5:1f:d7:15:39:6f:1a:91:b2:2b:a1:68:9c:de:97:10:
         94:e1:30:75:1a:8a:2f:24:ef:77:b6:48:24:e5:1f:9a:44:35:
         ee:e2:e0:74:ff:a1:ea:b3:a1:67:5c:47:4b:5c:ee:18:bd:82:
         59:c5:9b:61:18:d8:70:f9:77:5a:9f:ae:fb:38:f6:70:c0:1a:
         84:45:f7:0d:9e:e9:5b:8a:90:f4:0e:ee:d4:e9:a0:dc:71:bc:
         c4:7f:d3:2c:6f:55:4d:35:bc:69:59:4e:f2:a1:62:1d:24:2d:
         3f:67:60:de:4f:30:d5:63:e9:fd:21:2d:14:d9:7f:b9:35:4d:
         08:d4:58:eb:40:36:ec:83:09:bb:1d:de:97:ff:0a:19:99:c9:
         d0:88:03:38:ce:8f:c3:36:31:dd:84:6b:ea:81:d8:12:d3:be:
         88:36:20:34:0f:9e:2a:51:01:7c:0c:8e:32:b9:69:a8:9a:10:
         44:01:d1:a1:76:b9:60:a1:0f:6d:62:6e:75:64:10:8c:e4:99:
         22:33:1c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 15:34:47 2026 by rpki-client