Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.mft
File:                     8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.mft (raw, json)
Hash identifier:          y15vcXOgkhmeQ57hO3AS93uiBuPQCFV5lvzt+y3Enyg=
Subject key identifier:   23:36:12:25:8F:5A:68:2D:D2:6D:A6:F2:CC:B0:25:40:6C:D6:34:F7
Authority key identifier: 86:20:EF:4A:C5:9B:5A:86:57:92:F0:E6:76:52:FA:1A:7C:5A:A4:3A
Certificate issuer:       /CN=8620EF4AC59B5A865792F0E67652FA1A7C5AA43A
Certificate serial:       289122C637BE81417144BF31B07415081015FDB6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.mft
Manifest number:          09
Signing time:             Wed 25 Mar 2026 10:53:17 +0000
Manifest this update:     Wed 25 Mar 2026 10:48:17 +0000
Manifest next update:     Thu 26 Mar 2026 14:44:17 +0000
Files and hashes:         1: 8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.crl (hash: WokvgvMtRg/75XUcc03Ef793E1LshhvJQEF5dA5WPrs=)
                          2: 3230302e37352e3137362e302f32312d3332203d3e203631393339.roa (hash: zO4x1TXCAHr1YUywwb/WdCGyvwPecOUmoq9Q9dERssA=)
                          3: 323830343a313838633a3a2f33322d313238203d3e203631393339.roa (hash: r0sAOrwALk90vhCFY+SkiJV3smIjQ3FbEG1QzGe8ygA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.crl
                          rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 14:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:91:22:c6:37:be:81:41:71:44:bf:31:b0:74:15:08:10:15:fd:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8620EF4AC59B5A865792F0E67652FA1A7C5AA43A
        Validity
            Not Before: Mar 25 10:48:17 2026 GMT
            Not After : Mar 26 14:44:17 2026 GMT
        Subject: CN=233612258F5A682DD26DA6F2CCB025406CD634F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:43:04:fd:0d:a2:11:e9:07:d2:ab:9d:69:12:
                    2a:e5:09:9a:ba:82:66:27:8e:7b:c5:fa:f2:18:db:
                    da:7e:a5:79:62:64:ff:8a:6f:ad:7c:f1:78:0a:f5:
                    18:8c:17:14:3a:03:4f:af:ff:8a:d6:d6:e0:ba:9c:
                    20:f2:dd:08:ca:e7:3a:84:93:fa:33:42:30:ad:f5:
                    69:a4:85:40:88:16:85:e7:cc:71:38:0b:1d:cc:15:
                    d9:a7:e0:ea:52:55:8f:bd:3d:9b:1f:18:76:b6:fb:
                    ef:c4:45:e5:18:ef:e2:1f:f0:0f:95:9b:e4:f6:7b:
                    27:fa:ee:40:db:78:51:b4:e7:37:65:1e:3a:6e:bf:
                    6d:5f:22:63:75:eb:0d:f1:f5:52:dc:6e:da:58:d1:
                    f9:23:b0:fe:1a:61:ac:b1:94:11:68:8f:c8:e9:52:
                    62:8a:c9:f8:83:2a:05:8a:f5:9d:8f:8c:45:c8:4a:
                    45:6a:00:34:ab:ae:8d:f9:d0:b4:d8:e9:f0:f6:4b:
                    50:b1:3a:02:ef:a3:e5:87:a7:78:14:5d:f6:50:ec:
                    db:90:7b:ed:c8:d5:a9:88:86:d2:6b:c3:5d:94:6c:
                    d9:e6:98:9c:63:e8:07:10:ab:e8:3a:80:a7:3d:66:
                    0c:cd:44:da:07:e4:8a:72:b9:4e:47:d2:9f:10:18:
                    50:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:36:12:25:8F:5A:68:2D:D2:6D:A6:F2:CC:B0:25:40:6C:D6:34:F7
            X509v3 Authority Key Identifier:
                keyid:86:20:EF:4A:C5:9B:5A:86:57:92:F0:E6:76:52:FA:1A:7C:5A:A4:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:6b:c6:01:50:2f:a7:60:9b:61:27:3f:ed:3a:65:ae:20:aa:
         4d:22:ad:b3:93:c6:9a:b9:78:2b:0f:15:21:73:2c:b5:71:08:
         7a:15:18:13:24:88:16:f8:35:2e:03:15:68:9d:6d:9d:00:f7:
         7b:e0:65:40:2b:27:51:2a:fc:50:2b:f2:bd:cb:1c:ea:9b:c0:
         94:ed:95:22:3e:42:4f:9d:ee:bb:70:b7:be:d8:7c:83:de:23:
         22:04:50:62:c5:c2:e0:b4:e7:20:8a:2a:1e:de:bc:cc:f5:c2:
         68:f2:dc:ec:58:8d:6d:fb:92:28:fc:15:aa:62:2f:02:fd:1c:
         aa:0d:ec:0d:be:ed:0b:08:4e:06:aa:ed:4e:84:32:9f:40:4d:
         e6:40:13:07:f9:80:53:74:c1:82:30:4b:2c:27:d3:1c:08:fe:
         76:97:f0:3a:b0:e3:8f:34:1f:cc:ec:cd:59:0d:f5:b8:fb:93:
         0e:41:a9:c8:ec:53:72:fe:39:fb:f2:cf:74:8f:f2:5e:c5:9c:
         4f:77:f9:3f:7d:af:3e:55:eb:0c:3a:0e:7f:bd:c7:51:2d:b8:
         75:83:54:28:22:23:0a:6f:3e:98:10:78:ee:b7:03:66:da:a4:
         d1:b7:a6:9e:46:f2:3c:77:d8:22:c8:49:c7:31:1a:10:48:49:
         44:ad:c8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:15:12 2026 by rpki-client