Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H5kVn2mnGdMKQ6nnXzhzMD1XQrtYQpSp6icQKRMddxvQ/2/8CC7AC6162CA342188456AA07255F16F88EFB455.mft
File:                     8CC7AC6162CA342188456AA07255F16F88EFB455.mft (raw, json)
Hash identifier:          w2I5//XaFQiLiz23f02KBtin0xpYvHj8uajMUkJLlAc=
Subject key identifier:   B7:4D:4E:80:AA:DD:18:F5:E3:3E:67:EF:13:99:7D:0C:92:AD:2C:37
Authority key identifier: 8C:C7:AC:61:62:CA:34:21:88:45:6A:A0:72:55:F1:6F:88:EF:B4:55
Certificate issuer:       /CN=8CC7AC6162CA342188456AA07255F16F88EFB455
Certificate serial:       41252F472BECE7F23E68FB6867874DBF96817BD0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CC7AC6162CA342188456AA07255F16F88EFB455.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5kVn2mnGdMKQ6nnXzhzMD1XQrtYQpSp6icQKRMddxvQ/2/8CC7AC6162CA342188456AA07255F16F88EFB455.mft
Manifest number:          044F
Signing time:             Wed 08 Apr 2026 17:20:00 +0000
Manifest this update:     Wed 08 Apr 2026 17:15:00 +0000
Manifest next update:     Thu 09 Apr 2026 17:20:00 +0000
Files and hashes:         1: 8CC7AC6162CA342188456AA07255F16F88EFB455.crl (hash: ywyF9MaSrxy6lu5plFmQmAJq1HZCWnDpJbee/3KI9kE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H5kVn2mnGdMKQ6nnXzhzMD1XQrtYQpSp6icQKRMddxvQ/2/8CC7AC6162CA342188456AA07255F16F88EFB455.crl
                          rsync://rpki-repo.registro.br/repo/H5kVn2mnGdMKQ6nnXzhzMD1XQrtYQpSp6icQKRMddxvQ/2/8CC7AC6162CA342188456AA07255F16F88EFB455.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CC7AC6162CA342188456AA07255F16F88EFB455.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 17:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:25:2f:47:2b:ec:e7:f2:3e:68:fb:68:67:87:4d:bf:96:81:7b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CC7AC6162CA342188456AA07255F16F88EFB455
        Validity
            Not Before: Apr  8 17:15:00 2026 GMT
            Not After : Apr 15 17:20:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:0d:bf:f4:89:f6:d3:05:61:ee:6f:eb:02:a1:
                    ca:4d:46:77:b9:7d:74:8a:00:24:de:16:ae:00:f1:
                    20:02:46:f8:c4:df:a6:04:55:f9:1e:94:84:f5:73:
                    4e:e4:91:68:80:ec:d5:fe:08:15:a2:e1:da:fd:41:
                    19:a7:b1:41:aa:da:d0:f1:64:3c:80:94:47:38:c2:
                    b7:04:64:be:ae:d5:d2:51:b4:14:af:a5:69:86:f6:
                    54:3d:17:d6:68:b5:77:51:31:6d:71:7e:8d:be:f3:
                    84:91:e3:17:98:52:59:12:98:56:98:d8:59:1c:27:
                    d7:c7:24:7e:c6:45:e4:61:62:7d:81:f3:cc:6e:1f:
                    29:b9:63:3f:de:91:24:87:2b:e8:b0:55:4f:6c:08:
                    51:5a:ed:bc:5a:83:11:3f:b0:0c:6d:01:44:85:a3:
                    7f:57:99:3c:0c:f5:7b:1b:03:67:07:fc:5b:0c:1e:
                    8d:b5:ff:fc:f0:e1:03:f2:9e:a1:09:82:17:95:a6:
                    a4:0f:fc:ea:4c:83:3a:61:fb:82:b6:87:c3:ab:0c:
                    30:b4:79:78:7d:db:89:fc:5c:bb:64:92:0f:92:b6:
                    4b:dd:0c:ba:e2:81:2a:0e:f9:20:81:70:0b:0a:7a:
                    31:82:d2:b9:92:c0:90:c9:17:83:68:67:62:50:48:
                    9c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:4D:4E:80:AA:DD:18:F5:E3:3E:67:EF:13:99:7D:0C:92:AD:2C:37
            X509v3 Authority Key Identifier:
                keyid:8C:C7:AC:61:62:CA:34:21:88:45:6A:A0:72:55:F1:6F:88:EF:B4:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5kVn2mnGdMKQ6nnXzhzMD1XQrtYQpSp6icQKRMddxvQ/2/8CC7AC6162CA342188456AA07255F16F88EFB455.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CC7AC6162CA342188456AA07255F16F88EFB455.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5kVn2mnGdMKQ6nnXzhzMD1XQrtYQpSp6icQKRMddxvQ/2/8CC7AC6162CA342188456AA07255F16F88EFB455.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:48:84:5a:90:ce:5d:25:56:cf:28:5a:d8:e7:af:47:09:04:
         57:1c:64:4f:49:fb:07:49:77:43:d4:1b:7d:e6:2e:d9:d3:4b:
         a1:1b:3e:c5:b1:1c:bd:b0:2b:07:29:cf:c0:5a:81:2f:b0:f4:
         49:fc:ca:ae:d5:24:0b:9b:67:59:32:2e:2f:3d:14:69:03:06:
         61:3b:2a:1c:b6:cb:d7:76:a8:69:c1:f5:e4:bc:f0:d1:68:72:
         d2:e0:f1:4c:45:f9:9c:af:1f:f2:ef:d7:0d:98:d5:09:cd:db:
         b2:bc:86:2f:98:3b:14:51:c8:05:f3:1a:fa:8f:22:cc:fc:1e:
         6b:62:35:cb:30:04:80:0e:04:f2:69:83:ad:95:34:55:45:1e:
         ee:64:40:05:90:92:97:a4:62:66:a4:34:a4:da:1b:dd:c1:d6:
         3a:6f:7b:46:ba:81:a6:84:44:62:7d:ef:49:84:5d:cc:39:1b:
         66:fc:49:df:5e:60:d4:ce:65:48:15:e5:c7:06:39:3a:fd:41:
         a7:95:29:cf:fe:fb:f3:74:84:da:48:5c:b5:ee:84:f0:b1:af:
         a8:14:bf:a7:3c:21:42:45:21:cd:10:aa:ad:3c:3c:70:42:e3:
         ad:23:33:8a:20:58:20:47:d4:13:5b:a8:0f:3d:a3:b8:83:18:
         fa:3c:d9:2a
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUQSUvRyvs5/I+aPtoZ4dNv5aBe9AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENDN0FDNjE2MkNBMzQyMTg4NDU2QUEwNzI1NUYxNkY4
OEVGQjQ1NTAeFw0yNjA0MDgxNzE1MDBaFw0yNjA0MTUxNzIwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRUYwREJGRjQ4OUY2RDMwNTYx
RUU2RkVCMDJBMUNBNEQ0Njc3Qjk3RDc0OEEwMDI0REUxNkFFMDBGMTIwMDI0NkY4
QzRERkE2MDQ1NUY5MUU5NDg0RjU3MzRFRTQ5MTY4ODBFQ0Q1RkUwODE1QTJFMURB
RkQ0MTE5QTdCMTQxQUFEQUQwRjE2NDNDODA5NDQ3MzhDMkI3MDQ2NEJFQUVENUQy
NTFCNDE0QUZBNTY5ODZGNjU0M0QxN0Q2NjhCNTc3NTEzMTZENzE3RThEQkVGMzg0
OTFFMzE3OTg1MjU5MTI5ODU2OThEODU5MUMyN0Q3QzcyNDdFQzY0NUU0NjE2MjdE
ODFGM0NDNkUxRjI5Qjk2MzNGREU5MTI0ODcyQkU4QjA1NTRGNkMwODUxNUFFREJD
NUE4MzExM0ZCMDBDNkQwMTQ0ODVBMzdGNTc5OTNDMENGNTdCMUIwMzY3MDdGQzVC
MEMxRThEQjVGRkZDRjBFMTAzRjI5RUExMDk4MjE3OTVBNkE0MEZGQ0VBNEM4MzNB
NjFGQjgyQjY4N0MzQUIwQzMwQjQ3OTc4N0REQjg5RkM1Q0JCNjQ5MjBGOTJCNjRC
REQwQ0JBRTI4MTJBMEVGOTIwODE3MDBCMEE3QTMxODJEMkI5OTJDMDkwQzkxNzgz
Njg2NzYyNTA0ODlDNDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA7w2/9In20wVh7m/rAqHKTUZ3uX10igAk3hauAPEgAkb4xN+mBFX5
HpSE9XNO5JFogOzV/ggVouHa/UEZp7FBqtrQ8WQ8gJRHOMK3BGS+rtXSUbQUr6Vp
hvZUPRfWaLV3UTFtcX6NvvOEkeMXmFJZEphWmNhZHCfXxyR+xkXkYWJ9gfPMbh8p
uWM/3pEkhyvosFVPbAhRWu28WoMRP7AMbQFEhaN/V5k8DPV7GwNnB/xbDB6Ntf/8
8OED8p6hCYIXlaakD/zqTIM6YfuCtofDqwwwtHl4fduJ/Fy7ZJIPkrZL3Qy64oEq
DvkggXALCnoxgtK5ksCQyReDaGdiUEicSQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FLdNToCq3Rj14z5n7xOZfQySrSw3MB8GA1UdIwQYMBaAFIzHrGFiyjQhiEVqoHJV
8W+I77RVMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0g1a1ZuMm1uR2RNS1E2
bm5Yemh6TUQxWFFydFlRcFNwNmljUUtSTWRkeHZRLzIvOENDN0FDNjE2MkNBMzQy
MTg4NDU2QUEwNzI1NUYxNkY4OEVGQjQ1NS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS84Q0M3QUM2MTYyQ0EzNDIxODg0NTZBQTA3MjU1RjE2Rjg4RUZC
NDU1LmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0g1a1ZuMm1uR2RNS1E2bm5Yemh6
TUQxWFFydFlRcFNwNmljUUtSTWRkeHZRLzIvOENDN0FDNjE2MkNBMzQyMTg4NDU2
QUEwNzI1NUYxNkY4OEVGQjQ1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKxIhFqQzl0lVs8oWtjnr0cJ
BFccZE9J+wdJd0PUG33mLtnTS6EbPsWxHL2wKwcpz8BagS+w9En8yq7VJAubZ1ky
Li89FGkDBmE7Khy2y9d2qGnB9eS88NFoctLg8UxF+ZyvH/Lv1w2Y1QnN27K8hi+Y
OxRRyAXzGvqPIsz8HmtiNcswBIAOBPJpg62VNFVFHu5kQAWQkpekYmakNKTaG93B
1jpve0a6gaaERGJ970mEXcw5G2b8Sd9eYNTOZUgV5ccGOTr9QaeVKc/++/N0hNpI
XLXuhPCxr6gUv6c8IUJFIc0Qqq08PHBC460jM4ogWCBH1BNbqA89o7iDGPo82So=
-----END CERTIFICATE-----
Generated at Thu Apr 9 11:11:41 2026 by rpki-client