Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/589266404FC4F49C44EDD95659918140330CBF03.mft
File:                     589266404FC4F49C44EDD95659918140330CBF03.mft (raw, json)
Hash identifier:          Ovk5CD1s8v4ABB+SY5zUq+XFBx+IfTU5aAvPtC3X8VU=
Subject key identifier:   5A:B8:54:A6:76:B2:0B:21:3F:58:96:EC:F4:A4:F4:2A:0A:27:6D:A7
Authority key identifier: 58:92:66:40:4F:C4:F4:9C:44:ED:D9:56:59:91:81:40:33:0C:BF:03
Certificate issuer:       /CN=589266404FC4F49C44EDD95659918140330CBF03
Certificate serial:       56CDEA94E1291DF85A67E9F83E27BAE9FC4E4315
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/589266404FC4F49C44EDD95659918140330CBF03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/589266404FC4F49C44EDD95659918140330CBF03.mft
Manifest number:          0233
Signing time:             Fri 17 Apr 2026 07:13:39 +0000
Manifest this update:     Fri 17 Apr 2026 07:08:39 +0000
Manifest next update:     Sat 18 Apr 2026 10:00:39 +0000
Files and hashes:         1: 589266404FC4F49C44EDD95659918140330CBF03.crl (hash: XqmdferzgM8toC85SPrKTL1xDyi+Jle1qJJL/eMRvuQ=)
                          2: 323830343a383261633a3a2f33322d3333203d3e20323732353333.roa (hash: 7AAXzHy5OzAAUVFEDUOj7t4Wwxs8/i0q7wVzLnRflek=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/589266404FC4F49C44EDD95659918140330CBF03.crl
                          rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/589266404FC4F49C44EDD95659918140330CBF03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/589266404FC4F49C44EDD95659918140330CBF03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 10:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:cd:ea:94:e1:29:1d:f8:5a:67:e9:f8:3e:27:ba:e9:fc:4e:43:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=589266404FC4F49C44EDD95659918140330CBF03
        Validity
            Not Before: Apr 17 07:08:39 2026 GMT
            Not After : Apr 18 10:00:39 2026 GMT
        Subject: CN=5AB854A676B20B213F5896ECF4A4F42A0A276DA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:22:10:1b:7e:c6:79:50:cf:4b:00:a9:8b:7d:
                    13:f8:a1:76:5b:83:c2:48:b9:4b:2c:db:73:7f:2f:
                    0b:d1:d3:52:41:05:2b:c9:2b:45:ec:40:51:f8:1a:
                    f9:08:1b:4c:96:5e:26:d8:e9:ac:62:fc:91:50:61:
                    eb:59:78:b8:bb:06:08:d7:af:cb:f3:c0:58:0d:57:
                    10:e0:fe:eb:d4:7b:dd:01:9c:25:e4:d9:ba:d2:49:
                    fe:8b:c8:40:10:0c:be:82:12:f1:6a:e6:19:46:6e:
                    0e:be:cb:aa:19:01:07:00:eb:8a:bc:17:2b:aa:53:
                    c6:e0:f9:d8:36:4d:65:a2:b8:24:89:8d:99:75:af:
                    00:52:e8:bb:23:9f:5b:aa:ae:05:9e:f6:2f:6b:72:
                    72:d7:f0:04:b1:ab:67:ec:a2:72:5e:61:a6:73:2f:
                    6c:1d:fa:ec:80:9c:cf:80:16:da:64:40:2e:f5:8c:
                    bd:5c:71:73:03:ad:bd:a8:8a:b9:fd:40:27:34:82:
                    8e:7d:dc:96:23:e8:0e:22:6d:27:b2:85:bf:4a:6f:
                    05:e1:06:38:1b:cd:d4:17:b5:d7:d2:e8:cb:4f:d0:
                    af:79:47:32:9b:2c:24:fb:ca:d2:e4:9e:36:5b:61:
                    3c:b1:aa:4b:a6:37:9a:ce:94:82:ce:c0:73:2a:e9:
                    b3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B8:54:A6:76:B2:0B:21:3F:58:96:EC:F4:A4:F4:2A:0A:27:6D:A7
            X509v3 Authority Key Identifier:
                keyid:58:92:66:40:4F:C4:F4:9C:44:ED:D9:56:59:91:81:40:33:0C:BF:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/589266404FC4F49C44EDD95659918140330CBF03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/589266404FC4F49C44EDD95659918140330CBF03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/589266404FC4F49C44EDD95659918140330CBF03.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:36:12:0d:cc:3f:09:10:db:6b:65:d5:df:4a:e9:b0:53:3c:
         10:af:9f:ee:2e:0f:ad:94:18:85:05:5f:af:c4:8c:12:42:25:
         5d:a8:5a:6b:2a:45:d5:6d:44:d0:ef:14:cf:08:d3:2b:ce:17:
         63:c6:de:a7:2f:1f:81:3b:a1:b6:bd:fb:16:bf:5b:01:43:4c:
         cd:52:c2:51:b6:5b:72:9c:57:48:2e:59:35:d2:1e:8f:e1:08:
         ec:91:06:0d:91:17:fe:36:da:34:80:78:69:a9:ff:42:65:85:
         de:ab:53:46:04:07:ec:72:e6:e6:19:06:89:79:f1:89:25:8f:
         84:ba:d3:c4:dc:22:fa:04:8e:8e:5b:3b:13:9f:c9:38:6f:5f:
         b3:3b:29:83:ee:8a:4b:97:b2:5b:76:9e:92:98:83:db:25:28:
         b6:9d:47:00:b3:f2:40:2d:5d:0e:86:bb:ac:ea:25:76:26:8a:
         cc:79:36:2b:d5:4c:e9:c3:7d:bf:22:ac:9e:cd:a0:c7:9a:8b:
         b3:c1:34:fa:f8:22:2c:62:67:f1:c9:9a:e3:fd:09:fe:0a:50:
         fa:55:5b:56:20:2c:d4:a6:86:72:60:9e:97:8f:fa:90:ce:15:
         96:95:5e:cc:3d:77:a7:ee:a3:41:6c:2f:eb:16:81:46:de:d4:
         b7:52:c8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:38:59 2026 by rpki-client