Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft
File:                     B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft (raw, json)
Hash identifier:          nNGbGgKtvbLhJseUlOjF0wA7onOOz+5ZnAUn1ADVNlk=
Subject key identifier:   0D:9D:14:B6:6E:31:53:B3:03:A0:E6:BF:47:B6:30:26:F3:71:C3:3B
Authority key identifier: B8:93:6E:9B:A1:4A:90:AC:46:01:D5:CF:48:9A:1E:02:CD:FA:FA:86
Certificate issuer:       /CN=B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86
Certificate serial:       155E4176F93001D468515E99FC282B641948ABCC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft
Manifest number:          0134
Signing time:             Thu 09 Apr 2026 06:30:00 +0000
Manifest this update:     Thu 09 Apr 2026 06:25:00 +0000
Manifest next update:     Fri 10 Apr 2026 07:16:00 +0000
Files and hashes:         1: 323830343a366638383a3a2f33322d313238203d3e20323730363637.roa (hash: 3h6SfhzIPmrfXblR02cl5n5u6+4bnzhiT4vzZuMnS64=)
                          2: 3137372e31302e3133322e302f32322d3332203d3e20323730363637.roa (hash: VyE9iHz3xhEfhzvHNmYrZfWFUzLKuAQo+FzkgAdY7ME=)
                          3: B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.crl (hash: Wjg+m1cx/X8oT/gw6pxe4W9jSLnGzKtWU2X8tEoWje4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.crl
                          rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 07:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:5e:41:76:f9:30:01:d4:68:51:5e:99:fc:28:2b:64:19:48:ab:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86
        Validity
            Not Before: Apr  9 06:25:00 2026 GMT
            Not After : Apr 10 07:16:00 2026 GMT
        Subject: CN=0D9D14B66E3153B303A0E6BF47B63026F371C33B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c6:4d:2f:17:cf:1c:35:47:18:26:e3:42:09:
                    a4:ad:9c:7a:02:ba:48:e3:e1:ce:37:e0:f7:33:7b:
                    74:0e:51:19:1b:77:d0:a5:40:ac:f1:61:61:25:ad:
                    0e:37:50:07:b5:02:ce:bc:27:e7:dc:56:4c:0d:ae:
                    df:f2:b4:8c:80:a8:cd:a9:9b:b7:73:8a:72:8d:57:
                    b1:6d:02:49:7f:3f:5b:3c:e9:6b:2a:0c:cd:b6:7d:
                    b0:4b:db:ce:68:5b:d4:66:ed:02:21:62:49:e5:30:
                    c7:ef:53:a3:93:8d:bb:12:98:e2:09:29:3d:56:da:
                    2a:4c:38:7f:24:54:56:f8:44:20:27:76:45:fd:01:
                    d5:f8:02:2a:e3:89:ad:19:0b:ab:0a:c5:85:15:ea:
                    48:b8:48:78:59:a9:34:0b:ee:9c:44:3d:ca:d2:4d:
                    3f:77:74:a7:35:93:e7:0c:3d:83:42:04:6f:b6:33:
                    79:07:e2:cc:78:08:5a:0f:15:47:50:36:80:5f:1d:
                    55:b6:ca:46:3f:30:73:1a:3c:d8:c0:94:83:35:fd:
                    8d:28:6a:00:8f:cd:6e:0f:f2:75:23:68:45:cf:3d:
                    df:6d:06:1f:68:75:b2:31:4b:f9:5a:7a:51:5c:ad:
                    66:0f:d3:6f:86:7b:96:ab:e2:93:8e:f9:59:7a:af:
                    3c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9D:14:B6:6E:31:53:B3:03:A0:E6:BF:47:B6:30:26:F3:71:C3:3B
            X509v3 Authority Key Identifier:
                keyid:B8:93:6E:9B:A1:4A:90:AC:46:01:D5:CF:48:9A:1E:02:CD:FA:FA:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:3b:4c:4c:f7:23:1b:50:d7:07:f3:5c:10:af:b4:6d:d0:75:
         f3:d7:c0:44:4d:97:d8:a1:39:b8:1c:b2:1c:a4:1a:55:5a:74:
         bf:c9:08:e9:03:37:ba:02:e5:48:e1:4d:fe:c3:72:40:db:1b:
         38:cf:d3:7c:89:4c:e8:77:7c:84:01:3c:19:68:a0:5d:32:cd:
         fa:2b:6b:9d:ad:fe:83:d7:3c:31:3f:03:5b:9c:1b:b5:92:b8:
         54:53:61:29:00:11:d6:1d:32:d8:7a:b2:9d:05:e9:2c:74:0a:
         55:cf:2c:c8:eb:bd:42:22:7c:6e:92:30:4c:97:d1:d9:ca:8f:
         33:a6:40:11:2c:10:7a:34:33:cc:75:70:01:e4:94:78:1d:60:
         a1:29:cc:af:09:df:7e:22:53:0e:ec:62:09:e0:60:07:09:0b:
         cf:3d:ad:69:81:92:80:6e:b8:ce:c0:4b:85:a3:6a:22:71:dc:
         7e:e8:5d:fe:5e:21:cb:fe:25:18:ff:7e:e4:ec:e3:ec:86:39:
         6e:39:4f:84:06:94:6d:47:07:a3:58:54:e8:28:09:5f:a9:c7:
         5e:c9:1a:8a:34:2f:88:fc:13:d2:54:8a:cf:be:ce:27:e1:e9:
         00:a9:49:b8:d0:f7:8e:79:1f:4a:a0:06:00:67:85:7a:90:df:
         21:51:1b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:14:27 2026 by rpki-client