Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CJRHHvcaK3yyAUqKFjH4eK2sYn29wd8U9N6rP6RVkvBG/0/0AEBE8CBA48D67339ED71D0C0A58C25E318009A1.mft
File:                     0AEBE8CBA48D67339ED71D0C0A58C25E318009A1.mft (raw, json)
Hash identifier:          BMKaX+WzxmxGjS8eZv0kS/RZAKKjN+iqsMdQMa4w/2I=
Subject key identifier:   A9:B5:84:B1:36:0C:3C:E6:A1:91:7F:26:E6:D5:56:47:4D:30:D5:2A
Authority key identifier: 0A:EB:E8:CB:A4:8D:67:33:9E:D7:1D:0C:0A:58:C2:5E:31:80:09:A1
Certificate issuer:       /CN=0AEBE8CBA48D67339ED71D0C0A58C25E318009A1
Certificate serial:       1D383CA977E52E55E828A00448628BA5AD29D2AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AEBE8CBA48D67339ED71D0C0A58C25E318009A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJRHHvcaK3yyAUqKFjH4eK2sYn29wd8U9N6rP6RVkvBG/0/0AEBE8CBA48D67339ED71D0C0A58C25E318009A1.mft
Manifest number:          D9
Signing time:             Thu 09 Apr 2026 08:30:47 +0000
Manifest this update:     Thu 09 Apr 2026 08:25:47 +0000
Manifest next update:     Fri 10 Apr 2026 08:30:47 +0000
Files and hashes:         1: 0AEBE8CBA48D67339ED71D0C0A58C25E318009A1.crl (hash: NNvtQRc/P2uF0a50gn9JeWsYgxlQ6Utww56y6y8K5DI=)
                          2: 323830343a343030303a3a2f33322d3438203d3e20323635393237.roa (hash: mQYKQpsYrvQGdQASVmoGOd+YUMwIgfUsy84Gg2JtzNo=)
                          3: 3133312e3139362e3231362e302f32322d3234203d3e20323635393237.roa (hash: MRBEdV7YZN6iXohdjPkhhTRIO66qu93gR6pk8Psl/uk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJRHHvcaK3yyAUqKFjH4eK2sYn29wd8U9N6rP6RVkvBG/0/0AEBE8CBA48D67339ED71D0C0A58C25E318009A1.crl
                          rsync://rpki-repo.registro.br/repo/CJRHHvcaK3yyAUqKFjH4eK2sYn29wd8U9N6rP6RVkvBG/0/0AEBE8CBA48D67339ED71D0C0A58C25E318009A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AEBE8CBA48D67339ED71D0C0A58C25E318009A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 08:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:38:3c:a9:77:e5:2e:55:e8:28:a0:04:48:62:8b:a5:ad:29:d2:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AEBE8CBA48D67339ED71D0C0A58C25E318009A1
        Validity
            Not Before: Apr  9 08:25:47 2026 GMT
            Not After : Apr 10 08:30:47 2026 GMT
        Subject: CN=A9B584B1360C3CE6A1917F26E6D556474D30D52A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0e:ac:9b:09:fa:ab:b6:12:76:42:6e:e9:6e:
                    60:61:ff:eb:c5:6a:14:cc:82:41:3b:19:78:c5:d9:
                    11:5a:e7:0a:0a:0a:d8:84:f3:ca:ac:29:10:72:a0:
                    2b:81:75:c1:ce:63:a5:bf:fa:e8:53:e5:3d:93:c4:
                    17:84:24:e3:cb:c9:46:7e:e2:af:fb:c1:c8:e6:61:
                    5e:ef:94:e9:63:80:93:3b:dd:2d:e7:68:6a:4e:ae:
                    1d:66:ce:ee:cc:66:2a:ef:2d:62:61:e8:9a:44:5e:
                    89:a8:66:79:f6:77:be:09:b0:cc:87:45:c9:e8:13:
                    53:0d:55:08:9d:8c:d2:47:b0:e4:a4:db:30:ae:1b:
                    28:82:f3:5a:fd:eb:63:b5:00:fc:70:13:20:04:4b:
                    ab:83:f6:b7:30:e2:dc:2a:22:9a:6d:40:0d:74:c9:
                    e9:12:ed:32:91:a8:62:23:70:b3:34:29:a0:98:c9:
                    14:5e:d9:ba:10:00:2b:b6:17:6a:91:f0:b3:de:c5:
                    8f:19:fc:7b:93:19:67:06:b6:60:88:98:1b:b2:22:
                    65:4e:b3:4a:c7:93:aa:54:1a:69:75:b4:a3:c6:c3:
                    c2:18:77:db:5f:17:f9:90:fb:d1:1c:a7:b5:ce:9a:
                    3a:29:ba:2f:0f:ff:f8:d5:19:08:af:59:8d:9b:e3:
                    d4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B5:84:B1:36:0C:3C:E6:A1:91:7F:26:E6:D5:56:47:4D:30:D5:2A
            X509v3 Authority Key Identifier:
                keyid:0A:EB:E8:CB:A4:8D:67:33:9E:D7:1D:0C:0A:58:C2:5E:31:80:09:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJRHHvcaK3yyAUqKFjH4eK2sYn29wd8U9N6rP6RVkvBG/0/0AEBE8CBA48D67339ED71D0C0A58C25E318009A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AEBE8CBA48D67339ED71D0C0A58C25E318009A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJRHHvcaK3yyAUqKFjH4eK2sYn29wd8U9N6rP6RVkvBG/0/0AEBE8CBA48D67339ED71D0C0A58C25E318009A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:07:bc:de:d8:45:24:86:38:d1:7c:78:cb:7d:58:ba:8a:d2:
         29:4e:64:2c:20:43:a0:31:3f:b4:05:4f:45:9d:e1:97:e9:48:
         fa:de:03:38:78:85:d3:ad:12:4d:70:68:af:58:f9:d5:42:d1:
         1a:4f:aa:75:8a:8c:c2:2b:6c:b8:47:85:7f:9a:32:0f:b6:5f:
         46:52:b4:72:e8:6c:79:d7:2e:96:b8:14:d8:eb:8f:6f:37:d0:
         25:73:61:99:07:a2:06:02:6f:88:20:75:ad:22:c7:fb:3c:24:
         bc:80:9a:46:7a:33:0e:86:8c:ba:b2:99:5c:c0:95:8d:70:8e:
         b2:92:6a:93:ea:3e:ac:15:74:0f:c6:70:60:1a:51:64:46:9b:
         c4:ab:76:9b:2d:ff:67:03:fc:a2:c3:b2:bd:b1:f7:93:26:28:
         99:d4:a9:2d:d8:a5:af:09:67:e6:45:53:d6:b5:a7:5b:ec:db:
         c1:b3:52:75:23:e2:f2:17:3e:d3:18:d2:0a:71:92:c9:3d:2e:
         57:6f:25:0d:06:97:e9:68:1a:7c:a1:f7:2d:46:aa:fc:1a:7b:
         98:84:49:3f:71:34:8a:86:52:aa:a7:ab:06:5b:62:c3:27:2e:
         24:63:ea:a5:77:36:bc:9c:71:c1:50:1f:63:bf:45:96:cb:c2:
         68:48:be:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:46:24 2026 by rpki-client