Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft
File:                     8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft (raw, json)
Hash identifier:          WG6zusEfMQLjHdEM6PVLgdB4aS+EtjIpiUF5/grETPA=
Subject key identifier:   29:13:78:4F:1A:AF:AA:2B:B5:99:A4:FE:C3:05:A7:90:99:CE:39:F4
Authority key identifier: 8A:9C:87:7C:E4:96:B4:F3:FA:BB:A1:D4:99:6C:34:FC:8B:BF:99:BB
Certificate issuer:       /CN=8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB
Certificate serial:       66B604CA060ABB533EC273517F6F76803971CF20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft
Manifest number:          02E5
Signing time:             Thu 09 Apr 2026 09:31:29 +0000
Manifest this update:     Thu 09 Apr 2026 09:26:29 +0000
Manifest next update:     Fri 10 Apr 2026 13:10:29 +0000
Files and hashes:         1: 3133312e3139362e3232342e302f32322d3332203d3e20323636303036.roa (hash: 67sP77oehV8OsJ5C0Di39/vL9cRCepWrYKC3lCcA8nA=)
                          2: 323830343a343132343a3a2f33322d313238203d3e20323636303036.roa (hash: sXEB3N632CJdoLkCeni+7IpZM2jJ3mGY/w149wdeu3w=)
                          3: 8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl (hash: MqQXEVkCW9ihuw5YfkhEP6+esl13yLeZhyoXYqL8y4I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl
                          rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 13:10:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b6:04:ca:06:0a:bb:53:3e:c2:73:51:7f:6f:76:80:39:71:cf:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB
        Validity
            Not Before: Apr  9 09:26:29 2026 GMT
            Not After : Apr 10 13:10:29 2026 GMT
        Subject: CN=2913784F1AAFAA2BB599A4FEC305A79099CE39F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:58:b0:11:03:e8:5d:3d:79:c1:37:a1:28:e8:
                    23:31:79:f5:d6:f1:cb:f1:e9:5c:67:d2:39:61:58:
                    e1:44:88:fb:33:83:81:b0:2b:5d:20:d2:be:85:05:
                    96:05:50:1a:af:b0:39:b2:6d:9b:ca:8e:3d:6e:33:
                    4e:98:18:82:b6:2e:94:05:94:3d:de:73:1f:72:cd:
                    60:a6:81:dd:8c:17:45:a8:1b:a6:e7:c1:a9:8b:51:
                    3e:89:9f:54:d6:0b:5b:bf:b8:f1:91:04:e0:85:a5:
                    d9:a2:ab:96:66:4c:74:d7:c0:76:ef:2c:98:e6:5f:
                    68:b7:fe:ef:96:69:07:86:f8:6f:d2:18:f9:02:e7:
                    2d:66:bb:18:fa:9f:b7:f1:b4:89:67:c7:14:32:fb:
                    24:f7:31:71:0c:c1:39:16:8a:cc:13:13:ca:e7:2b:
                    6c:64:04:aa:1e:3f:b2:70:ff:c2:54:e5:22:2b:45:
                    b0:f3:86:8c:fe:f5:cd:73:92:7d:7b:96:5d:28:f5:
                    a4:8c:52:76:ab:96:bb:39:6d:4a:a3:c0:c6:89:d0:
                    64:c4:d3:1d:c5:fa:80:e3:ea:93:24:50:79:32:62:
                    92:ce:25:87:ca:cc:95:ad:53:4c:dc:f9:58:14:93:
                    79:e1:de:cd:a1:f7:ae:5c:ef:a0:a5:e9:48:34:85:
                    e4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:13:78:4F:1A:AF:AA:2B:B5:99:A4:FE:C3:05:A7:90:99:CE:39:F4
            X509v3 Authority Key Identifier:
                keyid:8A:9C:87:7C:E4:96:B4:F3:FA:BB:A1:D4:99:6C:34:FC:8B:BF:99:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:17:c1:75:f0:d5:2e:57:1f:06:86:da:32:6a:10:5d:d1:b0:
         6f:c2:49:c5:04:1d:2b:70:06:74:dd:77:29:a1:dd:be:6d:2d:
         bd:c9:9a:aa:52:06:9b:a4:58:cf:bb:92:bc:96:b6:73:01:8f:
         03:69:86:10:73:50:bb:b0:08:f0:ed:6b:69:af:a8:59:db:b2:
         ea:2c:6f:63:7f:8e:11:8b:dc:ff:5b:ce:af:ec:c8:9e:8b:c6:
         2c:a7:6c:f1:4e:e2:0e:78:3b:98:f5:c8:48:05:0c:5d:77:c9:
         fd:10:58:51:5b:74:79:26:26:fe:3a:7d:76:1f:e7:ac:86:1c:
         55:1b:60:74:6d:cb:07:10:e3:05:8e:c7:a1:d9:67:ce:35:25:
         1d:6f:01:6c:4f:bf:05:65:1e:26:b7:38:1c:7e:c2:bc:27:1f:
         82:18:c2:91:e7:ad:22:a2:de:d1:b2:dd:8d:f8:96:66:11:7f:
         82:64:a8:28:45:57:fd:a6:20:02:64:55:01:b2:24:db:97:7e:
         6d:79:c8:c9:14:f2:39:26:08:5e:06:e7:32:84:ab:91:36:dc:
         5c:6f:da:e8:a6:da:e6:0d:68:d7:fa:0a:47:2c:85:c6:8c:e7:
         ac:ec:0e:86:2e:2f:52:b9:7d:85:7b:f0:b8:7b:3a:cc:b0:d8:
         7b:53:29:18
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZrYEygYKu1M+wnNRf292gDlxzyAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEE5Qzg3N0NFNDk2QjRGM0ZBQkJBMUQ0OTk2QzM0RkM4
QkJGOTlCQjAeFw0yNjA0MDkwOTI2MjlaFw0yNjA0MTAxMzEwMjlaMDMxMTAvBgNV
BAMTKDI5MTM3ODRGMUFBRkFBMkJCNTk5QTRGRUMzMDVBNzkwOTlDRTM5RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnWLARA+hdPXnBN6Eo6CMxefXW
8cvx6Vxn0jlhWOFEiPszg4GwK10g0r6FBZYFUBqvsDmybZvKjj1uM06YGIK2LpQF
lD3ecx9yzWCmgd2MF0WoG6bnwamLUT6Jn1TWC1u/uPGRBOCFpdmiq5ZmTHTXwHbv
LJjmX2i3/u+WaQeG+G/SGPkC5y1muxj6n7fxtIlnxxQy+yT3MXEMwTkWiswTE8rn
K2xkBKoeP7Jw/8JU5SIrRbDzhoz+9c1zkn17ll0o9aSMUnarlrs5bUqjwMaJ0GTE
0x3F+oDj6pMkUHkyYpLOJYfKzJWtU0zc+VgUk3nh3s2h965c76Cl6Ug0heRRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUKRN4Txqvqiu1maT+wwWnkJnOOfQwHwYDVR0j
BBgwFoAUipyHfOSWtPP6u6HUmWw0/Iu/mbswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0V6cG5YVjNnMWhjekJIV3FhRzZMNmczcDZwRnZuTVN0M1RGRHhNeEVT
NkovMC84QTlDODc3Q0U0OTZCNEYzRkFCQkExRDQ5OTZDMzRGQzhCQkY5OUJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBOUM4NzdDRTQ5NkI0RjNG
QUJCQTFENDk5NkMzNEZDOEJCRjk5QkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q0V6cG5YVjNnMWhjekJIV3FhRzZMNmczcDZwRnZuTVN0M1RGRHhNeEVTNkovMC84
QTlDODc3Q0U0OTZCNEYzRkFCQkExRDQ5OTZDMzRGQzhCQkY5OUJCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAixfBdfDVLlcfBobaMmoQXdGwb8JJxQQdK3AGdN13KaHdvm0tvcmaqlIGm6RY
z7uSvJa2cwGPA2mGEHNQu7AI8O1raa+oWduy6ixvY3+OEYvc/1vOr+zInovGLKds
8U7iDng7mPXISAUMXXfJ/RBYUVt0eSYm/jp9dh/nrIYcVRtgdG3LBxDjBY7Hodln
zjUlHW8BbE+/BWUeJrc4HH7CvCcfghjCkeetIqLe0bLdjfiWZhF/gmSoKEVX/aYg
AmRVAbIk25d+bXnIyRTyOSYIXgbnMoSrkTbcXG/a6Kba5g1o1/oKRyyFxoznrOwO
hi4vUrl9hXvwuHs6zLDYe1MpGA==
-----END CERTIFICATE-----
Generated at Thu Apr 9 15:42:27 2026 by rpki-client