Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/2D1EF950AB5C855E2D7C436153A72A554B109A82.mft
File:                     2D1EF950AB5C855E2D7C436153A72A554B109A82.mft (raw, json)
Hash identifier:          DXgh9PMJVGF4EJzgEtUjfB68SuE+RdAeHDG1tDQbk3c=
Subject key identifier:   CA:26:44:C0:9D:F9:1A:BF:0A:DC:09:ED:DD:CA:0C:DC:7C:0B:AF:4B
Authority key identifier: 2D:1E:F9:50:AB:5C:85:5E:2D:7C:43:61:53:A7:2A:55:4B:10:9A:82
Certificate issuer:       /CN=2D1EF950AB5C855E2D7C436153A72A554B109A82
Certificate serial:       47FEF198C8837775B9E7766DDD0E3636D193BE72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1EF950AB5C855E2D7C436153A72A554B109A82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/2D1EF950AB5C855E2D7C436153A72A554B109A82.mft
Manifest number:          BD
Signing time:             Wed 08 Apr 2026 16:57:28 +0000
Manifest this update:     Wed 08 Apr 2026 16:52:28 +0000
Manifest next update:     Thu 09 Apr 2026 19:19:28 +0000
Files and hashes:         1: 34352e3138302e3231362e302f32322d3234203d3e20323639313934.roa (hash: EleUzIZ2L1WjQrMkkSahgzdoaMB+XmS+wYmMHH4Uznk=)
                          2: 34352e3137392e3233362e302f32322d3234203d3e20323639313934.roa (hash: 9XKlOaXo1boKhZ8u6jhTAvFM1SYhtP3pxuiTKXEUgyc=)
                          3: 2D1EF950AB5C855E2D7C436153A72A554B109A82.crl (hash: WDXLaGqJQlA4tDIQFFvH0PDDwBsWcWyR78SHhGsUDJo=)
                          4: 323830343a363064343a3a2f33322d3634203d3e20323639313934.roa (hash: C5FDVefJNQXuIZxOWfS/a5JxiA1PkR9WZm1zM84u5So=)
                          5: 3136382e3138312e3235322e302f32322d3234203d3e20323639313934.roa (hash: ilDFulKS4bBuP1yxoPhNPLm+sEHq1vZt/8rx4r/eGJo=)
                          6: 3137302e3234372e32382e302f32322d3234203d3e20323639313934.roa (hash: DNsUeQBfgZ7LTHPxZgl1A65EbLDyfgKC9LJuWXuZ344=)
                          7: 34352e3233382e3233362e302f32322d3234203d3e20323639313934.roa (hash: fIEnniI3ew2/ggMja7nrt2Lc8QnalEG6BVIWI89EiZQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/2D1EF950AB5C855E2D7C436153A72A554B109A82.crl
                          rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/2D1EF950AB5C855E2D7C436153A72A554B109A82.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1EF950AB5C855E2D7C436153A72A554B109A82.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 19:19:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:fe:f1:98:c8:83:77:75:b9:e7:76:6d:dd:0e:36:36:d1:93:be:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D1EF950AB5C855E2D7C436153A72A554B109A82
        Validity
            Not Before: Apr  8 16:52:28 2026 GMT
            Not After : Apr  9 19:19:28 2026 GMT
        Subject: CN=CA2644C09DF91ABF0ADC09EDDDCA0CDC7C0BAF4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7e:06:44:da:8a:4e:39:7c:0f:28:fb:04:67:
                    23:dc:9f:20:b9:a3:01:26:4f:1b:3c:66:72:a9:6b:
                    99:f1:dd:9e:07:21:b1:03:a9:dd:18:76:f1:b3:64:
                    f5:89:09:3f:b8:3c:f3:ab:df:a8:a0:47:77:51:12:
                    14:e2:69:e5:27:8e:04:25:be:73:43:c1:49:32:0b:
                    77:fa:27:e3:29:b8:3b:08:19:b4:61:78:1d:25:8d:
                    b7:9a:1a:d4:85:5a:dc:35:9d:a4:ae:b4:7b:5f:a2:
                    26:bb:c4:40:70:05:51:b3:da:5f:fc:af:2f:7f:15:
                    e3:4c:22:57:7e:5b:ba:a1:f0:7b:85:20:e3:b8:90:
                    84:a9:4a:95:3a:fa:8d:ba:76:25:74:0e:4f:61:6b:
                    d2:1b:db:0e:c0:07:06:f4:2c:c3:6e:27:9a:e1:20:
                    b2:75:19:e4:4d:44:16:b9:d6:ba:f9:e9:11:ea:fd:
                    2f:8a:fd:d8:b1:45:60:ce:0a:9f:51:cf:ab:08:89:
                    15:33:3d:e1:ca:60:89:44:75:5d:cb:d8:71:1e:a2:
                    f3:8d:c6:28:8f:97:f6:f0:c0:7e:45:07:7b:89:19:
                    c5:66:e6:66:a8:e7:80:54:f9:ad:fe:07:83:65:cf:
                    3b:d8:b5:32:d7:86:23:89:b1:74:4c:49:8c:7c:7d:
                    3c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:26:44:C0:9D:F9:1A:BF:0A:DC:09:ED:DD:CA:0C:DC:7C:0B:AF:4B
            X509v3 Authority Key Identifier:
                keyid:2D:1E:F9:50:AB:5C:85:5E:2D:7C:43:61:53:A7:2A:55:4B:10:9A:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/2D1EF950AB5C855E2D7C436153A72A554B109A82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1EF950AB5C855E2D7C436153A72A554B109A82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/2D1EF950AB5C855E2D7C436153A72A554B109A82.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:bf:55:48:79:f4:db:03:80:fb:dc:c4:de:af:cb:93:39:53:
         1c:30:06:1d:e8:1b:aa:3f:65:b0:32:a7:71:ec:c6:3e:22:4a:
         c0:f3:57:60:72:1a:ee:b3:ea:cd:71:be:fb:27:27:44:2b:3d:
         92:a1:f8:09:97:0c:b7:e0:01:e4:d5:2b:39:99:54:05:5a:04:
         f2:19:5c:a3:5e:35:82:da:c2:c5:5a:ae:8b:4b:47:0c:1d:c6:
         16:f3:5e:4d:76:20:92:53:93:b0:15:08:06:01:bf:fc:ac:20:
         9c:d6:8f:93:56:4f:a7:2e:a1:82:3a:4f:3b:5c:9f:6f:d7:5c:
         d0:81:8e:58:ee:e8:f5:7f:33:6b:2a:23:22:94:51:67:e1:4b:
         8e:b1:01:84:0a:88:d6:05:1d:bf:22:96:89:df:b0:c9:95:8e:
         a0:82:fc:a5:49:c4:37:fb:13:88:2d:51:22:5b:53:59:2c:eb:
         4d:8e:2b:02:d8:88:52:27:da:87:c1:15:cb:a8:83:d2:b3:35:
         ac:14:6d:b9:b1:20:75:36:c8:b4:1a:4e:39:54:33:b0:27:8b:
         eb:7a:98:dd:58:a9:e4:b3:ed:09:30:c6:f1:84:87:88:d3:b3:
         d1:5a:0a:8a:e6:40:ee:66:e1:87:af:98:30:9c:4b:d0:49:7a:
         36:96:c8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 12:51:36 2026 by rpki-client