Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft
File:                     B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft (raw, json)
Hash identifier:          hcU677ZpI3gl2KBOyPWSa4lHWuNYYBgr8A2wCadS5rM=
Subject key identifier:   92:1F:4D:BB:B4:B7:05:EC:81:C6:2B:72:52:2C:D5:AB:9A:D1:DD:EF
Authority key identifier: B8:93:6E:9B:A1:4A:90:AC:46:01:D5:CF:48:9A:1E:02:CD:FA:FA:86
Certificate issuer:       /CN=B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86
Certificate serial:       25DE9768B263E23BF50AA5A5A968919693FED95E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft
Manifest number:          0121
Signing time:             Thu 26 Mar 2026 00:00:00 +0000
Manifest this update:     Wed 25 Mar 2026 23:55:00 +0000
Manifest next update:     Fri 27 Mar 2026 03:59:00 +0000
Files and hashes:         1: 323830343a366638383a3a2f33322d313238203d3e20323730363637.roa (hash: 3h6SfhzIPmrfXblR02cl5n5u6+4bnzhiT4vzZuMnS64=)
                          2: 3137372e31302e3133322e302f32322d3332203d3e20323730363637.roa (hash: VyE9iHz3xhEfhzvHNmYrZfWFUzLKuAQo+FzkgAdY7ME=)
                          3: B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.crl (hash: gAOXCG8rkQm7H/TiOH9RnMbDcaSr5z/gxxaefdhdaFI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.crl
                          rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 03:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:de:97:68:b2:63:e2:3b:f5:0a:a5:a5:a9:68:91:96:93:fe:d9:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86
        Validity
            Not Before: Mar 25 23:55:00 2026 GMT
            Not After : Mar 27 03:59:00 2026 GMT
        Subject: CN=921F4DBBB4B705EC81C62B72522CD5AB9AD1DDEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9e:4b:c3:e0:72:be:42:94:92:45:84:8c:db:
                    e4:99:66:51:c3:79:fa:f7:28:4c:4b:a4:7d:a4:f0:
                    7e:61:36:34:1a:60:b1:a9:40:cb:8a:02:d0:a7:11:
                    2c:ed:a0:01:f1:7c:1a:a3:fd:7b:b7:2a:c3:f4:ae:
                    d0:45:57:06:89:66:19:b8:7d:48:e3:74:00:6c:6f:
                    85:d0:21:65:9e:19:c0:13:4b:1d:59:99:2f:d2:97:
                    5b:42:2e:d3:33:d5:2a:c7:73:74:18:ad:3e:fe:46:
                    a1:90:2e:ac:be:e8:c6:a5:9e:12:00:da:06:e4:77:
                    7c:d5:bb:f8:e6:3e:64:02:5e:ec:46:23:ea:47:ad:
                    b1:67:83:14:37:df:26:70:26:c8:d0:f6:19:f1:2a:
                    fd:25:63:e7:98:e0:72:9b:13:17:fe:2d:58:b0:ac:
                    e0:fe:d5:2e:9f:9b:3d:2d:df:6b:55:40:80:cb:af:
                    20:19:dd:98:3d:44:91:4c:89:e0:56:fb:15:06:54:
                    04:c7:ea:d1:56:38:26:a6:a8:ad:bb:7c:f9:ec:3d:
                    84:66:b8:7a:e9:2d:c0:f4:b8:8b:28:8a:b4:32:21:
                    c3:d6:02:36:41:1a:d4:36:09:40:ad:0c:8f:68:a0:
                    67:7d:fd:62:d5:c0:ca:d7:15:aa:5c:08:e1:60:d4:
                    37:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1F:4D:BB:B4:B7:05:EC:81:C6:2B:72:52:2C:D5:AB:9A:D1:DD:EF
            X509v3 Authority Key Identifier:
                keyid:B8:93:6E:9B:A1:4A:90:AC:46:01:D5:CF:48:9A:1E:02:CD:FA:FA:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:52:42:97:40:54:9a:46:20:80:3e:e8:3b:ac:88:bf:c3:64:
         67:0a:d3:23:98:35:cd:a9:cd:ca:1a:18:d3:87:44:51:14:e8:
         7c:de:64:b4:07:51:b9:85:5a:4a:44:ba:84:a3:e1:52:da:f0:
         cb:92:ce:6e:31:88:5a:a1:f6:96:8b:03:fb:93:33:70:da:d5:
         dc:b4:01:92:a2:36:0d:c1:c6:b0:50:09:df:80:fa:dc:b0:3c:
         85:ce:84:44:b4:98:e3:37:99:f3:ce:fc:ca:98:f3:5f:54:05:
         28:10:ea:f4:48:f9:79:85:98:aa:59:98:b7:1e:1e:3a:07:08:
         f1:52:81:02:18:7f:99:f3:66:61:29:a0:e3:0d:06:92:49:24:
         41:a2:d7:e5:95:f0:55:d7:e3:f9:06:06:2e:db:34:e9:b3:d0:
         d2:e3:31:69:c5:a7:70:11:51:02:4b:65:dc:71:b4:ed:2a:8d:
         d1:0a:97:20:5e:b4:c0:7c:9a:7f:50:b9:4f:f2:1c:aa:23:41:
         64:c2:d0:e3:ef:24:13:f4:fb:b6:72:4e:16:54:99:ad:de:df:
         15:c3:a1:bb:6f:bf:fd:d6:39:c0:f6:f5:b7:b3:6c:fd:6a:73:
         67:be:ad:e3:94:4d:9b:f0:41:9e:ef:3f:51:77:b3:f1:5f:21:
         34:59:39:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:17:07 2026 by rpki-client