Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6HoKDNkDjQCZENuiHMD84B7YvVmDAFHDbXgDFXWzQqmd/0/8CFAE2B880F50CAE445ED238F6DBF53FBA13F29E.mft
File:                     8CFAE2B880F50CAE445ED238F6DBF53FBA13F29E.mft (raw, json)
Hash identifier:          hBCgqJXIDlfSuHPiIOyov4t8GDJebJ3CF91JADo8RyQ=
Subject key identifier:   CE:11:45:61:25:83:3E:48:9C:2C:35:69:0F:3C:9D:BF:5A:B2:AA:A1
Authority key identifier: 8C:FA:E2:B8:80:F5:0C:AE:44:5E:D2:38:F6:DB:F5:3F:BA:13:F2:9E
Certificate issuer:       /CN=8CFAE2B880F50CAE445ED238F6DBF53FBA13F29E
Certificate serial:       44FDC333950A0F33819CB20052B90BBC29BF8D35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CFAE2B880F50CAE445ED238F6DBF53FBA13F29E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6HoKDNkDjQCZENuiHMD84B7YvVmDAFHDbXgDFXWzQqmd/0/8CFAE2B880F50CAE445ED238F6DBF53FBA13F29E.mft
Manifest number:          59
Signing time:             Thu 26 Mar 2026 14:30:38 +0000
Manifest this update:     Thu 26 Mar 2026 14:25:38 +0000
Manifest next update:     Fri 27 Mar 2026 17:19:38 +0000
Files and hashes:         1: 8CFAE2B880F50CAE445ED238F6DBF53FBA13F29E.crl (hash: yakrINHxQcqPWUboJ412ZLDKP6eSUEMUnxr8889JIN8=)
                          2: 3136382e3132312e382e302f32322d3332203d3e20323635333035.roa (hash: 1X8RdFoK5lRYZxMnHlMRUyaMfyx3BDEccbztiLtmlbk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6HoKDNkDjQCZENuiHMD84B7YvVmDAFHDbXgDFXWzQqmd/0/8CFAE2B880F50CAE445ED238F6DBF53FBA13F29E.crl
                          rsync://rpki-repo.registro.br/repo/6HoKDNkDjQCZENuiHMD84B7YvVmDAFHDbXgDFXWzQqmd/0/8CFAE2B880F50CAE445ED238F6DBF53FBA13F29E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CFAE2B880F50CAE445ED238F6DBF53FBA13F29E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:fd:c3:33:95:0a:0f:33:81:9c:b2:00:52:b9:0b:bc:29:bf:8d:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CFAE2B880F50CAE445ED238F6DBF53FBA13F29E
        Validity
            Not Before: Mar 26 14:25:38 2026 GMT
            Not After : Mar 27 17:19:38 2026 GMT
        Subject: CN=CE11456125833E489C2C35690F3C9DBF5AB2AAA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e1:9d:ff:2c:9f:43:be:3c:a8:e9:3e:3d:f4:
                    ce:c1:01:a3:ab:68:fe:04:08:c0:27:7e:57:4f:c0:
                    11:7f:3d:0e:97:4d:81:d3:bc:72:81:c0:69:36:79:
                    7d:86:20:9c:8a:c0:16:46:7c:23:77:41:aa:ac:42:
                    ed:0c:71:91:82:fa:bb:95:48:b0:58:aa:d9:ed:8b:
                    a0:68:02:c5:71:c3:f4:f7:bf:16:1a:02:b0:65:a5:
                    e0:13:de:2c:ae:fa:02:34:42:d4:54:5c:7c:bf:94:
                    48:a6:16:fb:e7:6b:2e:f4:b4:cc:fd:4b:65:40:7f:
                    cd:34:9d:2e:9e:07:29:cc:7e:21:24:56:18:f3:3e:
                    98:0d:cd:a1:b2:cf:3e:05:f7:af:40:64:27:3f:14:
                    d4:ea:8e:ec:88:76:1c:3a:de:9d:fc:88:02:6b:3c:
                    f3:d3:48:f1:6b:55:c1:20:68:50:4c:f8:64:87:f0:
                    da:44:4d:70:5c:a2:7a:84:af:fc:35:25:28:67:6a:
                    95:84:4f:95:9c:7b:35:64:85:8d:39:46:88:5d:53:
                    63:68:13:77:66:0b:c4:71:8d:64:1d:fe:99:3c:d4:
                    e3:a8:7e:da:07:ac:15:0b:82:7a:8e:ba:a5:0f:a2:
                    bb:dc:cb:55:07:62:22:a2:0b:b1:cd:9c:94:f7:45:
                    4a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:11:45:61:25:83:3E:48:9C:2C:35:69:0F:3C:9D:BF:5A:B2:AA:A1
            X509v3 Authority Key Identifier:
                keyid:8C:FA:E2:B8:80:F5:0C:AE:44:5E:D2:38:F6:DB:F5:3F:BA:13:F2:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6HoKDNkDjQCZENuiHMD84B7YvVmDAFHDbXgDFXWzQqmd/0/8CFAE2B880F50CAE445ED238F6DBF53FBA13F29E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CFAE2B880F50CAE445ED238F6DBF53FBA13F29E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HoKDNkDjQCZENuiHMD84B7YvVmDAFHDbXgDFXWzQqmd/0/8CFAE2B880F50CAE445ED238F6DBF53FBA13F29E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:83:43:9e:87:f4:9f:bb:88:59:7e:f6:d9:43:52:0f:e2:f1:
         a7:0d:a2:a9:ef:3f:49:ab:b8:33:48:87:e9:bc:24:6e:79:45:
         1d:56:13:e6:d1:16:ac:ce:a0:b5:02:25:5d:4b:6e:a9:76:e4:
         d3:fd:77:df:81:74:5a:bc:7e:8d:91:82:26:cc:5a:b2:1a:e3:
         7a:19:63:0e:aa:07:df:8e:66:a6:5c:7a:95:66:15:fa:22:4c:
         0c:19:cc:fe:c5:b8:7e:7f:b6:1c:fc:5d:bb:3e:6f:d2:7c:ca:
         6e:e3:fe:bd:0f:03:a7:33:c4:37:19:e4:06:4b:81:61:02:7a:
         47:b4:19:77:f9:82:73:00:73:fa:cc:62:97:36:23:fe:d3:b2:
         56:5a:f8:e6:ba:e9:a5:41:d8:12:22:73:7b:d7:47:7c:47:e3:
         c7:c4:93:24:b9:ad:47:5d:28:5f:03:4a:b2:b4:17:6c:20:d6:
         78:9c:e0:a8:90:cf:19:6f:b3:0c:bd:bb:f4:0a:8c:d1:32:87:
         d7:3a:a4:03:a8:39:e7:61:fa:b0:fa:a2:cc:33:88:ae:45:86:
         86:fc:d8:b1:4e:39:77:56:07:c8:11:e4:71:21:16:12:9c:17:
         c3:89:cd:0c:c7:c6:94:4e:fc:d5:dd:0b:d8:f3:2f:f9:c3:21:
         0a:16:5b:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURP3DM5UKDzOBnLIAUrkLvCm/jTUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENGQUUyQjg4MEY1MENBRTQ0NUVEMjM4RjZEQkY1M0ZC
QTEzRjI5RTAeFw0yNjAzMjYxNDI1MzhaFw0yNjAzMjcxNzE5MzhaMDMxMTAvBgNV
BAMTKENFMTE0NTYxMjU4MzNFNDg5QzJDMzU2OTBGM0M5REJGNUFCMkFBQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC34Z3/LJ9Dvjyo6T499M7BAaOr
aP4ECMAnfldPwBF/PQ6XTYHTvHKBwGk2eX2GIJyKwBZGfCN3QaqsQu0McZGC+ruV
SLBYqtnti6BoAsVxw/T3vxYaArBlpeAT3iyu+gI0QtRUXHy/lEimFvvnay70tMz9
S2VAf800nS6eBynMfiEkVhjzPpgNzaGyzz4F969AZCc/FNTqjuyIdhw63p38iAJr
PPPTSPFrVcEgaFBM+GSH8NpETXBconqEr/w1JShnapWET5WcezVkhY05RohdU2No
E3dmC8RxjWQd/pk81OOoftoHrBULgnqOuqUPorvcy1UHYiKiC7HNnJT3RUr/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUzhFFYSWDPkicLDVpDzydv1qyqqEwHwYDVR0j
BBgwFoAUjPriuID1DK5EXtI49tv1P7oT8p4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkhvS0ROa0RqUUNaRU51aUhNRDg0QjdZdlZtREFGSERiWGdERlhXelFx
bWQvMC84Q0ZBRTJCODgwRjUwQ0FFNDQ1RUQyMzhGNkRCRjUzRkJBMTNGMjlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDRkFFMkI4ODBGNTBDQUU0
NDVFRDIzOEY2REJGNTNGQkExM0YyOUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NkhvS0ROa0RqUUNaRU51aUhNRDg0QjdZdlZtREFGSERiWGdERlhXelFxbWQvMC84
Q0ZBRTJCODgwRjUwQ0FFNDQ1RUQyMzhGNkRCRjUzRkJBMTNGMjlFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE4NDnof0n7uIWX722UNSD+Lxpw2iqe8/Sau4M0iH6bwkbnlFHVYT5tEWrM6g
tQIlXUtuqXbk0/1334F0Wrx+jZGCJsxashrjehljDqoH345mplx6lWYV+iJMDBnM
/sW4fn+2HPxduz5v0nzKbuP+vQ8DpzPENxnkBkuBYQJ6R7QZd/mCcwBz+sxilzYj
/tOyVlr45rrppUHYEiJze9dHfEfjx8STJLmtR10oXwNKsrQXbCDWeJzgqJDPGW+z
DL279AqM0TKH1zqkA6g552H6sPqizDOIrkWGhvzYsU45d1YHyBHkcSEWEpwXw4nN
DMfGlE781d0L2PMv+cMhChZbkQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:58:55 2026 by rpki-client