Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DN4HJE3u2zDS9K55LAXc1YbGrn66xXp8G6JDg6NHmdQa/0/F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.mft
File:                     F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.mft (raw, json)
Hash identifier:          f9qBzTZRr3sJLJRfphIV69VDSQkBHd4GQ1g5FbSv5yI=
Subject key identifier:   C2:36:18:01:60:E6:98:14:09:47:24:1E:90:44:24:E1:DD:80:22:34
Authority key identifier: F8:40:9E:FF:6F:B6:FE:F1:1C:3B:A9:A4:80:1F:61:51:3E:4F:41:A3
Certificate issuer:       /CN=F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3
Certificate serial:       12B21DB96F0FF90D2C7A16CE611D4F25F6B8747F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DN4HJE3u2zDS9K55LAXc1YbGrn66xXp8G6JDg6NHmdQa/0/F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.mft
Manifest number:          89
Signing time:             Wed 08 Apr 2026 17:20:39 +0000
Manifest this update:     Wed 08 Apr 2026 17:15:39 +0000
Manifest next update:     Thu 09 Apr 2026 20:21:39 +0000
Files and hashes:         1: 3138392e39312e3136382e302f32322d3332203d3e20323731353834.roa (hash: 7hcf6r7XVABsgk3V6zpLGmkwiyQfGLsY1cg4z0gkhhM=)
                          2: 323830343a376464303a3a2f33322d313238203d3e20323731353834.roa (hash: mlUJ+quRfskP/Sx5+VIC5IVIX52LJCcChlx6Gr6nMLo=)
                          3: F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.crl (hash: 55Hf8snE2+C/kO3MpevPPuOMlc1Ko5a3IByK+Y4J0tk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DN4HJE3u2zDS9K55LAXc1YbGrn66xXp8G6JDg6NHmdQa/0/F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.crl
                          rsync://rpki-repo.registro.br/repo/DN4HJE3u2zDS9K55LAXc1YbGrn66xXp8G6JDg6NHmdQa/0/F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 20:21:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b2:1d:b9:6f:0f:f9:0d:2c:7a:16:ce:61:1d:4f:25:f6:b8:74:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3
        Validity
            Not Before: Apr  8 17:15:39 2026 GMT
            Not After : Apr  9 20:21:39 2026 GMT
        Subject: CN=C236180160E698140947241E904424E1DD802234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:da:54:ce:73:41:73:31:f2:03:30:44:4d:4b:
                    99:5d:9b:bf:82:12:ba:b5:20:f8:6b:cf:6d:d2:15:
                    9e:99:3e:79:2c:8e:b9:f0:92:c3:69:0b:9a:04:35:
                    97:be:79:23:95:ed:9a:a3:29:6b:75:f1:45:04:fb:
                    79:77:9a:b9:a1:48:24:74:67:85:9b:98:df:f0:98:
                    6a:75:cf:82:8b:31:b4:c3:dc:52:4f:0d:8f:29:91:
                    5e:4f:99:82:b4:4a:c2:39:7b:bc:9f:a0:d5:aa:fc:
                    d9:26:49:36:15:5d:e2:2c:f3:dc:31:d3:f1:ac:2b:
                    8d:d6:3b:a6:84:40:cd:b6:33:f0:a0:f8:1e:70:f2:
                    7c:5b:10:be:b3:34:51:b0:ba:7e:d0:4e:9e:b6:a1:
                    a4:89:7a:17:d9:a7:63:e0:1c:28:b1:f0:71:5e:4f:
                    ea:91:87:69:95:3f:90:f6:8a:4c:d1:90:21:c9:7e:
                    d2:fd:08:b6:c6:09:00:04:e0:07:ab:85:da:aa:58:
                    47:e1:f4:70:32:e8:3b:63:12:2d:b7:e8:ff:04:17:
                    59:cf:55:99:2e:74:1e:59:12:ac:e9:b5:c9:bf:38:
                    75:02:80:17:6b:6d:1b:e8:20:ab:90:e3:28:4e:14:
                    99:02:e1:c6:8d:d4:8b:b9:07:51:9c:98:d6:f0:2c:
                    44:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:36:18:01:60:E6:98:14:09:47:24:1E:90:44:24:E1:DD:80:22:34
            X509v3 Authority Key Identifier:
                keyid:F8:40:9E:FF:6F:B6:FE:F1:1C:3B:A9:A4:80:1F:61:51:3E:4F:41:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DN4HJE3u2zDS9K55LAXc1YbGrn66xXp8G6JDg6NHmdQa/0/F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN4HJE3u2zDS9K55LAXc1YbGrn66xXp8G6JDg6NHmdQa/0/F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:8c:ad:e9:85:38:00:09:23:4d:b3:d2:ac:f9:5d:ba:be:1f:
         de:70:4e:5d:f5:44:cc:e2:db:d5:2d:70:8e:79:96:13:14:30:
         bd:99:ad:9a:a9:f1:4e:ac:d9:88:2e:ed:2e:87:27:fa:4a:79:
         87:f6:66:e6:70:58:50:b3:6b:c1:d0:59:01:ad:00:d6:15:3d:
         03:8c:ea:9f:0f:6f:18:1c:5a:7a:60:2c:3e:cb:cb:42:05:7d:
         67:8c:b4:53:5f:a5:a3:00:2b:08:de:b3:31:6e:52:fa:98:fa:
         ef:af:21:7e:19:d0:f5:40:6a:14:90:2f:d3:4f:56:bf:5d:40:
         2f:1e:43:a0:4b:bb:2e:6e:91:65:94:3e:cd:ab:f2:be:47:b3:
         29:69:dd:a2:a8:5a:47:ab:12:b5:01:ed:16:49:26:b0:eb:3a:
         d1:01:2c:bc:78:c7:f1:3e:c9:cf:be:df:02:6d:d0:6f:54:d4:
         13:86:b9:85:93:5c:2e:b5:a6:07:75:ba:f9:b4:0b:52:d2:c2:
         ed:e5:04:ed:dc:e6:cc:aa:99:e2:8a:c1:78:cc:63:f6:7d:25:
         ea:a3:3f:af:85:c8:6e:28:a9:da:d6:dd:3d:9c:68:68:a8:e2:
         63:de:d5:42:37:9b:2e:93:2a:e3:a3:f7:8c:0a:da:59:64:52:
         67:a1:86:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 13:01:39 2026 by rpki-client