Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.mft
File:                     BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.mft (raw, json)
Hash identifier:          sEQ8SXoCPYutDfhR313EMXdYaOZih2HVUvren+ORmdw=
Subject key identifier:   CF:4C:C1:92:85:83:9B:79:E9:C9:14:44:25:60:58:CF:8D:06:76:D2
Authority key identifier: BA:D4:DC:02:B3:E6:1B:B7:35:8C:5D:0C:DD:45:3B:E3:B4:0C:B8:49
Certificate issuer:       /CN=BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849
Certificate serial:       436B0868E07AAD1985AE987110328588DC01514A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.mft
Manifest number:          39
Signing time:             Thu 09 Apr 2026 07:09:39 +0000
Manifest this update:     Thu 09 Apr 2026 07:04:39 +0000
Manifest next update:     Fri 10 Apr 2026 08:06:39 +0000
Files and hashes:         1: 323830343a326263303a3a2f33352d3335203d3e20323635313733.roa (hash: nwGjS9/B5qEoHLXErGUrcv/IFcutfvHnP6bx4qn7DJo=)
                          2: 3136372e3234392e3234342e302f32332d3233203d3e20323635313733.roa (hash: 8a9jBsTXNdA+SDrz+TnIOLbY6+NfBu8aR7zHnFK8wlA=)
                          3: BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.crl (hash: wghkSn1WupTaZ7smO0ihRnBGgzDOlYIHWmwR0rn+C2w=)
                          4: 3136372e3234392e3234372e302f32342d3234203d3e20323635313733.roa (hash: APQeuGOYT6pmdzs0b1zaFGujlKWI5aTsqYse+R+K6Yc=)
                          5: 3136372e3234392e3234342e302f32342d3234203d3e20323635313733.roa (hash: RnnqFnuRTJSTCS6yQgDAL5p9xs898xsCSxUZMmK53N8=)
                          6: 323830343a326263303a3a2f33322d3332203d3e20323635313733.roa (hash: b8Wq1i8o4CPeAF9m65Zly/n5KxESsVSQEUNDFkSN5W0=)
                          7: 3136372e3234392e3234352e302f32342d3234203d3e20323635313733.roa (hash: PnXpoQlILp8ZlGXHCrTJh5VRZ4dRdsX3+HByUad9ME8=)
                          8: 3136372e3234392e3234362e302f32342d3234203d3e20323635313733.roa (hash: j9i7ueyvXacjavPPn9Wc1Dq/7mV86dMVB4jymotr/kk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.crl
                          rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 08:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:6b:08:68:e0:7a:ad:19:85:ae:98:71:10:32:85:88:dc:01:51:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849
        Validity
            Not Before: Apr  9 07:04:39 2026 GMT
            Not After : Apr 10 08:06:39 2026 GMT
        Subject: CN=CF4CC19285839B79E9C91444256058CF8D0676D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0c:cf:8d:9e:49:b9:ab:14:84:9e:00:28:80:
                    28:d8:b7:5e:29:b3:5f:56:0b:01:34:89:3c:9c:81:
                    45:0f:e3:14:63:e1:7a:c4:2d:2f:fd:4c:e9:15:dc:
                    53:af:80:be:37:7c:5b:a2:21:87:d5:49:c8:38:db:
                    e9:99:7d:04:dd:b0:54:15:a3:11:1b:de:5d:b9:20:
                    fb:2d:62:23:ad:e6:fd:17:85:eb:33:8b:9f:ab:a8:
                    b4:2f:fe:7e:20:41:cf:8d:5b:46:15:c6:0e:10:01:
                    93:1d:c0:de:08:c4:a0:23:85:2f:5f:27:dd:fe:36:
                    be:df:18:d7:8b:06:ef:a0:b1:40:de:50:a0:05:6b:
                    df:1a:e8:9b:30:af:ac:95:ff:ae:a4:21:86:fa:06:
                    08:3a:15:08:d0:66:df:5f:69:99:dc:d0:4a:ab:4e:
                    75:87:9e:5b:02:ca:29:93:85:27:64:39:f3:80:82:
                    7b:35:6b:7e:55:cf:e9:72:75:aa:99:09:0f:59:6a:
                    c2:61:ba:cb:a0:1f:8f:80:26:76:e2:4e:6c:ed:e6:
                    e2:06:ab:56:6d:31:f4:13:18:75:68:c4:f8:2d:a0:
                    c1:23:b7:4e:4e:43:54:9f:dc:64:f3:20:4c:b8:fb:
                    2d:d1:8a:72:30:89:ed:b3:14:5f:62:2a:cd:82:82:
                    8b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:4C:C1:92:85:83:9B:79:E9:C9:14:44:25:60:58:CF:8D:06:76:D2
            X509v3 Authority Key Identifier:
                keyid:BA:D4:DC:02:B3:E6:1B:B7:35:8C:5D:0C:DD:45:3B:E3:B4:0C:B8:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ab:5f:28:88:1c:73:2d:69:22:6a:a0:9f:5a:6d:eb:d8:1a:
         a9:78:ee:5f:2b:14:dc:34:53:c9:8b:3e:86:7b:33:82:79:f8:
         6c:e4:1d:37:0f:12:8b:ef:8b:6a:a0:4b:89:d6:c5:7a:96:66:
         3b:94:0e:1a:6e:ed:08:df:a9:83:d4:67:eb:ee:07:59:69:83:
         8f:47:4a:7e:05:f4:16:9f:22:9f:77:de:14:b2:c5:1c:00:39:
         6f:f9:8b:cf:c1:5a:9e:6f:66:70:b2:60:59:b1:ed:9a:9c:0d:
         1a:57:97:3c:98:ea:d7:76:47:e2:c9:8f:9e:a3:37:76:7c:44:
         ed:db:1c:07:6c:7a:df:9d:d4:7a:2f:96:41:08:a2:d9:66:ea:
         fc:db:51:69:24:3d:a5:58:e9:08:c1:e4:7a:a5:d4:ba:47:a8:
         f4:2e:93:e2:57:13:27:cf:c9:f1:23:cb:a6:97:89:02:73:67:
         05:c2:dd:24:3f:ed:6c:4a:2f:59:6d:c1:ae:c4:d1:91:10:08:
         f1:fc:30:b6:75:2b:27:01:94:05:f2:be:90:5a:cc:41:76:db:
         d3:4d:fb:7c:b1:98:93:4f:90:ae:58:f1:a5:17:82:e5:32:e3:
         f6:7b:d3:8c:eb:1f:e6:ef:c9:57:45:fc:6f:f0:30:fc:26:5b:
         8f:f0:33:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 15:38:56 2026 by rpki-client