Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/D95EAB9296B47F53E06E1370749CCDB5566F072F.mft
File:                     D95EAB9296B47F53E06E1370749CCDB5566F072F.mft (raw, json)
Hash identifier:          s9u3IKfFD44lnDuYe8xmHgr7v4/fiSfzE28WPf+PtU4=
Subject key identifier:   28:90:2A:63:99:0B:BE:C3:24:9D:EE:33:B3:37:04:90:B2:ED:F7:44
Authority key identifier: D9:5E:AB:92:96:B4:7F:53:E0:6E:13:70:74:9C:CD:B5:56:6F:07:2F
Certificate issuer:       /CN=D95EAB9296B47F53E06E1370749CCDB5566F072F
Certificate serial:       0FA50F984E06EFDE5541BE016CD8CFD7E5DA1DF4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95EAB9296B47F53E06E1370749CCDB5566F072F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/D95EAB9296B47F53E06E1370749CCDB5566F072F.mft
Manifest number:          01F9
Signing time:             Thu 09 Apr 2026 08:33:07 +0000
Manifest this update:     Thu 09 Apr 2026 08:28:07 +0000
Manifest next update:     Fri 10 Apr 2026 09:15:07 +0000
Files and hashes:         1: 3136382e3139372e3137362e302f32322d3234203d3e20323635343838.roa (hash: CXd1o7mhapKzS3/kufqApABlJcEynXV+O6whBUELAGU=)
                          2: D95EAB9296B47F53E06E1370749CCDB5566F072F.crl (hash: VSdESRAdXg+4Dqk7u+EvzqbVqNlykRLGj5pRs3diaBU=)
                          3: 323830343a333465633a3a2f33322d3336203d3e20323635343838.roa (hash: Jq2RSor6JMiuvs6RQbUWKzlo/9/BPlMSl61Euv+65ik=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/D95EAB9296B47F53E06E1370749CCDB5566F072F.crl
                          rsync://rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/D95EAB9296B47F53E06E1370749CCDB5566F072F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95EAB9296B47F53E06E1370749CCDB5566F072F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 09:15:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a5:0f:98:4e:06:ef:de:55:41:be:01:6c:d8:cf:d7:e5:da:1d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95EAB9296B47F53E06E1370749CCDB5566F072F
        Validity
            Not Before: Apr  9 08:28:07 2026 GMT
            Not After : Apr 10 09:15:07 2026 GMT
        Subject: CN=28902A63990BBEC3249DEE33B3370490B2EDF744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4c:84:d8:f6:86:d3:33:2f:e1:3d:fd:7b:88:
                    6e:41:e5:7c:ae:d9:3b:b8:f7:f3:ae:d2:61:bd:68:
                    ec:7a:ed:e7:e7:d8:6b:2c:bd:13:0c:3d:97:64:34:
                    84:b8:40:1a:1c:0a:14:96:43:cd:ae:9d:1e:db:ea:
                    98:04:d6:ba:a1:52:e4:f6:71:0a:8c:dd:01:fb:dd:
                    07:bf:d8:fe:50:1f:b0:c0:2f:41:95:0a:24:c8:68:
                    27:2e:d1:85:84:b5:0d:1d:c1:42:64:40:44:e0:bb:
                    7a:1c:72:72:7a:df:1d:eb:59:e7:e0:d5:2f:87:8f:
                    81:94:8c:0a:8b:a5:57:0a:ad:7e:e5:d4:bb:f3:a2:
                    5a:cd:af:17:a0:f8:17:e5:fe:80:ac:d7:d1:46:ee:
                    41:c9:c0:cd:16:15:3e:81:f5:0d:f8:e7:00:42:18:
                    1d:87:23:f3:a5:af:ab:ed:40:53:e6:d4:e7:aa:99:
                    4a:52:21:ab:c6:ea:61:97:38:84:ef:b1:5d:13:65:
                    e0:20:10:b0:bd:25:2c:44:e3:3f:55:4d:fb:32:c2:
                    af:5e:74:dd:cf:4b:70:0f:b8:1f:60:cc:95:04:ef:
                    4b:27:c3:fd:94:d9:08:65:68:26:98:ac:06:70:6f:
                    73:da:b7:37:b8:95:db:30:94:71:54:84:84:f6:6b:
                    bd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:90:2A:63:99:0B:BE:C3:24:9D:EE:33:B3:37:04:90:B2:ED:F7:44
            X509v3 Authority Key Identifier:
                keyid:D9:5E:AB:92:96:B4:7F:53:E0:6E:13:70:74:9C:CD:B5:56:6F:07:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/D95EAB9296B47F53E06E1370749CCDB5566F072F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95EAB9296B47F53E06E1370749CCDB5566F072F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/D95EAB9296B47F53E06E1370749CCDB5566F072F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:5c:0b:3e:ad:75:36:d7:27:66:59:e1:ad:c0:6e:d5:24:d3:
         e3:a0:e2:db:f7:22:41:76:7e:f3:fa:0f:83:e6:57:4e:25:e9:
         7a:f7:63:00:1d:42:4f:f2:7e:3e:76:2e:6d:5f:98:5c:c0:ff:
         67:1c:b1:58:1e:aa:52:00:ee:50:4b:42:f0:b5:fc:05:32:23:
         3e:e9:0a:2e:3e:b6:15:58:f5:b6:8d:46:ff:fa:d0:cf:6a:2a:
         81:3f:cc:e7:c2:60:82:94:4e:72:06:7f:d1:f7:54:28:cf:d6:
         f1:3e:e7:09:52:f6:e3:c6:85:4e:43:d9:52:a5:62:d9:82:3f:
         79:cf:4b:8c:a3:2c:c7:93:1b:02:34:69:67:90:66:e0:4d:d8:
         27:b2:28:3d:10:db:88:06:66:ba:90:94:83:8d:70:62:70:02:
         5d:26:56:f8:c6:02:99:fb:7d:0d:08:97:6d:f2:3f:b1:69:c6:
         4c:07:86:e3:0e:ae:63:b9:bb:3b:9f:56:dc:b9:36:7b:55:dd:
         a8:a7:97:dd:02:77:2f:1e:10:b5:56:52:b4:2d:b4:9e:9d:80:
         44:9b:6b:d2:de:23:bd:da:7b:0f:86:11:4a:f9:76:e5:9a:34:
         81:70:bb:d2:1e:e0:6b:84:64:87:f1:8f:70:90:14:b5:0d:0a:
         92:fe:2c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 21:57:37 2026 by rpki-client