Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNaaTe3s9rPkgeoukrXis525TbXXgF9w91tceEqFrgt/0/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.mft
File:                     F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.mft (raw, json)
Hash identifier:          lzyhJQtYgL/bCAFEGyazLXhf6hSSlnoL1k3HNORiOVc=
Subject key identifier:   35:CB:D5:EC:C1:04:FF:EE:06:17:46:C2:34:FB:4B:D5:CF:FE:83:20
Authority key identifier: F9:E7:F3:76:E0:D0:EA:F5:21:AC:DD:5B:3B:F0:C8:44:33:FB:3A:5D
Certificate issuer:       /CN=F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D
Certificate serial:       4F7AABF1C06EE3014125CCB7FAB1F3F4A36B64F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNaaTe3s9rPkgeoukrXis525TbXXgF9w91tceEqFrgt/0/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.mft
Manifest number:          01B4
Signing time:             Thu 09 Apr 2026 09:28:19 +0000
Manifest this update:     Thu 09 Apr 2026 09:23:19 +0000
Manifest next update:     Fri 10 Apr 2026 12:52:19 +0000
Files and hashes:         1: 323830343a393430633a3a2f33322d3438203d3e20323734383138.roa (hash: txs4qGVE6CFf1oe0D7Nr3lbJ5NrOYxnIQyBplIdS0Dk=)
                          2: F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.crl (hash: hVnViSORrpxI1G6SbR/f9mVyvhXh2TFBTojfiXPvmb0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNaaTe3s9rPkgeoukrXis525TbXXgF9w91tceEqFrgt/0/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.crl
                          rsync://rpki-repo.registro.br/repo/BhNaaTe3s9rPkgeoukrXis525TbXXgF9w91tceEqFrgt/0/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 12:52:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:7a:ab:f1:c0:6e:e3:01:41:25:cc:b7:fa:b1:f3:f4:a3:6b:64:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D
        Validity
            Not Before: Apr  9 09:23:19 2026 GMT
            Not After : Apr 10 12:52:19 2026 GMT
        Subject: CN=35CBD5ECC104FFEE061746C234FB4BD5CFFE8320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b0:d4:7e:a4:a6:2c:9e:26:a0:10:5b:ca:78:
                    71:0f:d1:98:1d:c5:16:c9:bd:c5:55:db:61:9c:9e:
                    cd:36:fe:62:a3:6a:30:da:c0:4d:9b:66:d8:17:ce:
                    b5:4e:27:56:8a:fe:92:66:3e:b0:f0:07:98:20:2b:
                    0f:18:a9:ac:2d:6c:3d:68:b3:f5:6c:92:8f:2f:99:
                    f1:da:e7:59:53:8f:80:9b:3d:d3:86:a1:a2:30:87:
                    55:79:b1:8f:64:c0:32:5c:ec:13:b5:3c:36:53:99:
                    40:d3:d6:6e:37:4e:de:6a:ab:6d:ca:ef:e8:46:cd:
                    66:76:94:8e:25:90:50:b0:54:fc:c7:84:39:8f:13:
                    68:48:cb:31:8e:25:dc:98:f1:68:84:aa:2e:88:37:
                    dc:73:12:91:34:34:ec:83:00:ec:30:38:92:dd:ae:
                    1c:65:ea:99:bf:75:d0:53:c8:6d:67:7b:3d:8c:6f:
                    ac:18:04:4f:e8:91:d9:9c:51:b0:1b:02:7d:cb:8c:
                    58:8c:49:44:78:f8:0f:7e:f9:51:4e:f1:0b:59:b0:
                    79:09:d0:fc:d6:2b:16:be:cd:0b:eb:cf:31:78:ce:
                    74:f4:ed:63:be:d7:50:2f:f9:12:0a:9f:85:47:33:
                    b7:6d:65:29:af:49:9d:5e:1c:18:8e:0f:59:b4:4f:
                    c8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CB:D5:EC:C1:04:FF:EE:06:17:46:C2:34:FB:4B:D5:CF:FE:83:20
            X509v3 Authority Key Identifier:
                keyid:F9:E7:F3:76:E0:D0:EA:F5:21:AC:DD:5B:3B:F0:C8:44:33:FB:3A:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNaaTe3s9rPkgeoukrXis525TbXXgF9w91tceEqFrgt/0/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNaaTe3s9rPkgeoukrXis525TbXXgF9w91tceEqFrgt/0/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:d3:05:1e:68:e9:34:90:b0:63:4d:38:9d:8f:8b:a2:08:94:
         a2:8e:be:55:00:48:fc:87:b9:7e:21:fd:4e:48:a3:3c:a4:25:
         11:d6:28:61:82:5f:30:b8:4a:88:b7:00:7b:23:58:9b:3c:44:
         b6:f9:8f:21:85:b7:17:3f:4f:95:6c:d4:be:03:1a:55:75:53:
         6b:a4:f8:ee:92:20:10:dd:30:cd:c7:6b:6f:6c:bd:4e:05:88:
         b8:68:ce:5b:87:ce:4b:19:72:d9:47:75:2c:9c:ed:ef:35:1c:
         e1:24:31:fa:65:44:29:ae:c7:1d:46:b4:46:2f:1f:3a:c5:73:
         e0:09:d8:aa:f6:f1:74:40:bb:a6:2f:80:e9:dd:8a:b9:1d:2c:
         e7:f0:c8:f2:c6:5f:08:be:af:a9:51:9d:66:b9:c5:c6:3b:d0:
         f5:6d:70:d3:7a:f4:34:61:95:06:8d:c9:2e:fa:7d:0c:a1:91:
         b5:bf:5a:be:62:d1:51:06:6e:17:d4:96:e2:f2:0b:40:0a:ee:
         bd:2f:a3:dc:cf:6e:26:df:11:27:5e:6e:95:09:c9:e4:ed:29:
         23:7a:76:82:5c:e0:7e:7c:80:8e:89:00:a3:f3:65:e3:6c:9d:
         43:28:70:49:85:07:ee:4b:52:9c:13:b2:15:5c:c6:87:dd:f3:
         f4:b9:b9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 13:01:38 2026 by rpki-client