Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.mft
File:                     CD8F95B9B42EF35274A249E09F9AF98392325D71.mft (raw, json)
Hash identifier:          unrGTwgKGWfflBkKvmGFk+FcmJRem83lHfrnDGRDvso=
Subject key identifier:   E2:56:B2:70:D1:98:60:C0:6B:0E:83:DB:9F:A7:BE:52:BB:B2:89:4C
Authority key identifier: CD:8F:95:B9:B4:2E:F3:52:74:A2:49:E0:9F:9A:F9:83:92:32:5D:71
Certificate issuer:       /CN=CD8F95B9B42EF35274A249E09F9AF98392325D71
Certificate serial:       4A7EED55F6A59BF01047950FFA27A88C03A39F41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.mft
Manifest number:          18
Signing time:             Thu 09 Apr 2026 11:08:40 +0000
Manifest this update:     Thu 09 Apr 2026 11:03:40 +0000
Manifest next update:     Fri 10 Apr 2026 11:25:40 +0000
Files and hashes:         1: 34352e3138302e31362e302f32322d3234203d3e20323731323533.roa (hash: ujyP0moqUra4aVrtKSfAlOGowjxMmq4WHPb4+w0MRTQ=)
                          2: 34352e3137322e39362e302f32322d3234203d3e20323731323533.roa (hash: I50X/zLGkJLkzuSgX6eJpN5NGfI1gSF38IUcZwTFzdM=)
                          3: 3133312e3235352e35362e302f32322d3234203d3e20323731323533.roa (hash: 1weBOdYkhgzDw1GIiz5Vl2j8m+5M//y2aWFdVhElqRM=)
                          4: 3136342e3136332e3139322e302f32322d3234203d3e20323731323533.roa (hash: Dr/1zgY/1fBbN5qhqCE3cEauv89JjhU46Wq49sh/TLo=)
                          5: 323830343a373839383a3a2f33322d3438203d3e20323731323533.roa (hash: ssQNzfXpE6FWZxC3J95N44RPmu8OxtSBTsiurISurMs=)
                          6: CD8F95B9B42EF35274A249E09F9AF98392325D71.crl (hash: uuODpdP++z+JV16KC4FRElZZu0lBbE5QiBw70uhi7P0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.crl
                          rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 11:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:7e:ed:55:f6:a5:9b:f0:10:47:95:0f:fa:27:a8:8c:03:a3:9f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD8F95B9B42EF35274A249E09F9AF98392325D71
        Validity
            Not Before: Apr  9 11:03:40 2026 GMT
            Not After : Apr 10 11:25:40 2026 GMT
        Subject: CN=E256B270D19860C06B0E83DB9FA7BE52BBB2894C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:55:05:76:f6:a4:aa:88:bd:94:6f:28:be:1f:
                    7e:b0:c2:a6:6d:10:63:92:b0:93:24:5b:41:ed:af:
                    5e:8c:75:4b:0a:28:e6:ba:66:4a:02:fc:a4:80:ca:
                    6c:8d:88:f4:f2:06:e9:b8:cb:f7:23:2f:b9:8e:74:
                    8c:1c:fd:9e:e6:50:8f:78:63:53:3c:02:03:e1:69:
                    3b:11:ba:59:7b:a1:7c:d3:da:c6:16:f6:12:bf:be:
                    ca:b1:bd:37:36:a7:8a:77:f8:99:d9:db:0a:f8:06:
                    d4:bb:28:94:1e:c3:30:30:bd:25:b6:7e:8f:30:83:
                    69:44:b3:0a:2b:85:ff:f0:9e:97:a0:28:2e:f8:19:
                    9f:06:fa:7d:b3:31:53:f3:c2:87:e7:e5:63:17:cb:
                    a9:ad:ca:f5:02:55:42:77:85:40:a4:44:36:22:0d:
                    ec:f3:5b:36:d6:48:7c:72:94:b6:2c:64:62:d2:db:
                    13:0f:ae:b7:c3:17:ed:cf:0e:03:c1:03:46:75:d1:
                    0e:8c:65:2d:24:c0:21:88:24:7c:c6:cd:12:ba:53:
                    58:03:d9:15:75:d4:d1:ce:2f:3a:ab:cf:bd:54:75:
                    0f:7f:77:3f:40:83:c5:e6:cf:86:0b:7b:01:80:cc:
                    74:8b:7f:cf:3e:7b:98:56:98:37:56:6f:c4:08:32:
                    e5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:56:B2:70:D1:98:60:C0:6B:0E:83:DB:9F:A7:BE:52:BB:B2:89:4C
            X509v3 Authority Key Identifier:
                keyid:CD:8F:95:B9:B4:2E:F3:52:74:A2:49:E0:9F:9A:F9:83:92:32:5D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:af:43:6c:55:aa:2f:8f:7a:7d:d0:43:c4:43:66:96:30:ac:
         f6:fe:57:87:89:49:68:2b:51:0c:44:9f:b4:61:11:9a:05:17:
         82:bb:7b:51:19:3c:48:e8:39:71:fd:8c:f3:08:c6:60:14:d0:
         9a:0f:4c:27:11:5c:cb:6b:e0:ad:31:fb:e6:61:81:d9:fa:bb:
         2a:35:ed:cd:a4:2f:d4:1b:c7:cf:64:6f:0b:eb:52:0e:f2:b2:
         33:c3:56:32:4d:c9:d1:2c:a8:56:b2:a2:d6:d7:28:96:8f:c4:
         17:8a:38:60:1b:af:39:ef:e6:ba:dc:9f:e2:4c:f3:82:86:45:
         a6:6c:f2:a8:b8:f8:94:70:d8:f9:c1:0e:de:17:4b:f5:02:f1:
         ee:9b:e1:4c:6c:7a:70:b3:c5:16:bf:b8:32:77:82:ac:3c:d8:
         8c:6d:a3:d4:3f:3f:37:67:d6:6f:d0:86:b2:13:46:40:49:90:
         e2:c8:a6:c7:3a:44:af:a2:a3:db:b8:a6:9a:5a:70:03:b1:3a:
         6f:dd:1d:24:08:b0:72:af:63:3d:17:c4:ab:4b:8f:77:dd:39:
         62:a0:cc:0e:af:9b:74:c2:c2:39:f7:7a:c1:24:68:90:ae:9f:
         58:91:f0:95:33:ec:5c:2f:8d:a9:3f:74:fb:49:c9:2e:d5:da:
         b5:05:5b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 15:31:31 2026 by rpki-client