Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.mft
File:                     8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.mft (raw, json)
Hash identifier:          Q7Bd0hT+8ozaOCuy/VbbafGKaaKg+UqgaHm4GWMnq08=
Subject key identifier:   4C:59:D1:CC:96:19:02:2C:D1:DA:74:71:FE:33:CF:12:EA:5B:3F:0E
Authority key identifier: 8B:8B:1C:29:5E:F2:38:6F:8F:2B:BD:18:93:D8:D1:64:EE:B2:41:DA
Certificate issuer:       /CN=8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA
Certificate serial:       2BFFAF3D889CA21ACC9EC78340018597FB0D4687
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.mft
Manifest number:          0140
Signing time:             Thu 09 Apr 2026 11:14:29 +0000
Manifest this update:     Thu 09 Apr 2026 11:09:29 +0000
Manifest next update:     Fri 10 Apr 2026 12:22:29 +0000
Files and hashes:         1: 8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.crl (hash: KHRUWo6aYs9x/fphUOuSn88RGq7H9kp66nuCzVOXIao=)
                          2: 323830343a383533343a3a2f33322d3333203d3e20323732353634.roa (hash: dX+fhSoTBQlVHvdP3cfBnxi2zzOk/ZLY70AWM8H+0go=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.crl
                          rsync://rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 12:22:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ff:af:3d:88:9c:a2:1a:cc:9e:c7:83:40:01:85:97:fb:0d:46:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA
        Validity
            Not Before: Apr  9 11:09:29 2026 GMT
            Not After : Apr 10 12:22:29 2026 GMT
        Subject: CN=4C59D1CC9619022CD1DA7471FE33CF12EA5B3F0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:eb:38:62:4a:77:98:4f:52:af:86:b4:5f:cb:
                    07:02:6b:37:5d:6b:ea:d4:c0:c7:ac:c8:1f:fe:eb:
                    d7:d4:ac:4e:e4:8a:8f:63:c1:9d:be:78:50:cf:5b:
                    0b:e4:82:29:6d:de:84:e2:bd:56:5b:69:7d:84:02:
                    98:57:21:c7:1f:3c:64:68:27:0c:df:ad:e3:57:74:
                    0f:43:34:a7:8c:3f:6b:64:36:3d:ec:a2:41:1a:91:
                    f9:51:96:e9:9a:32:b2:6b:1e:a8:41:80:65:4d:26:
                    18:1e:27:32:73:f1:23:e2:7a:1b:51:45:26:db:87:
                    72:2e:5c:2e:75:d7:46:68:0b:88:3a:74:53:aa:d2:
                    6e:88:f4:28:ca:06:6f:f2:7c:79:2d:4f:9b:80:7a:
                    e1:28:30:7a:7b:02:e4:8a:ec:01:c4:bc:e8:ad:54:
                    1b:9f:ba:4b:5e:16:eb:91:37:df:ef:6b:b6:e6:d7:
                    53:d7:86:20:86:46:43:0e:76:33:03:ac:11:73:00:
                    05:99:aa:31:25:2d:46:c4:25:0b:41:98:50:d2:d6:
                    d0:13:34:8d:8a:d0:e2:3f:af:a4:76:cc:28:1b:03:
                    2c:4a:66:ee:0e:80:01:8e:ed:9b:b5:e0:0a:8d:a3:
                    fd:56:47:3c:38:d7:d0:82:6a:36:19:ae:40:28:75:
                    f8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:59:D1:CC:96:19:02:2C:D1:DA:74:71:FE:33:CF:12:EA:5B:3F:0E
            X509v3 Authority Key Identifier:
                keyid:8B:8B:1C:29:5E:F2:38:6F:8F:2B:BD:18:93:D8:D1:64:EE:B2:41:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:72:96:94:06:fd:d3:52:38:eb:94:e1:2a:65:56:d5:a4:4c:
         42:19:5b:02:bd:be:4c:f5:aa:1b:b9:29:4d:50:e5:52:02:92:
         49:73:ec:e4:1f:81:cb:b5:3f:5e:90:f1:0e:2b:2d:32:d7:0f:
         b2:c5:95:fd:60:57:0d:25:46:34:c4:a2:7e:30:6e:b3:56:fd:
         6e:a3:0f:6e:d7:a6:be:14:0c:8c:89:8f:46:2b:1c:d6:56:d5:
         ff:70:06:0a:ca:d6:f0:0b:18:3d:19:94:5c:ed:2b:2d:bc:94:
         46:c1:02:d9:f3:3f:70:28:60:88:a5:c2:f7:77:31:dc:e0:2c:
         54:fe:b5:b3:20:64:45:a8:87:d2:44:66:8a:7b:58:c9:87:f5:
         5e:df:14:7a:02:2c:55:1e:69:7b:8f:98:c0:de:7b:9b:00:8b:
         c3:4c:21:54:a7:b4:17:7b:b0:06:aa:ce:31:12:6c:57:ac:d9:
         4f:94:d4:8e:54:06:c6:3c:9f:f5:c0:e5:a2:a5:4a:0a:49:23:
         e2:e3:6b:45:3d:6a:2c:21:a3:10:76:4d:84:4e:e8:8b:2a:ae:
         1b:38:28:40:50:fc:36:f9:44:d5:b7:29:f0:d1:64:03:42:0f:
         6f:d4:77:39:b3:fb:0d:a6:f6:c4:30:08:c4:b2:0d:1c:40:24:
         ba:40:84:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:45:51 2026 by rpki-client