Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft
File:                     AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft (raw, json)
Hash identifier:          HTFkC3/DvTuPR1O8zJ+Hq8+ghbgtZtkfjKMlyaOYwRQ=
Subject key identifier:   9C:18:B7:4F:8C:E1:66:83:16:B9:86:C8:5E:29:DA:F5:77:07:5A:D4
Authority key identifier: AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A
Certificate issuer:       /CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A
Certificate serial:       0A90C9103D62434D459FD703B64240379AE85302
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft
Manifest number:          0289
Signing time:             Fri 17 Apr 2026 10:33:52 +0000
Manifest this update:     Fri 17 Apr 2026 10:28:52 +0000
Manifest next update:     Sat 18 Apr 2026 11:54:52 +0000
Files and hashes:         1: 323830343a353463383a3a2f33322d3438203d3e20323133343936.roa (hash: Y2OC9JXEDt2BErpNSSdF0EqJ8OpsWaCymwx4RjkiNeY=)
                          2: 34352e3136352e38302e302f32322d3234203d3e203631353935.roa (hash: E8fPnc3D01HrHu0IERiaVvqh7l7+gzZnFGvDM9PE9ic=)
                          3: 34352e3136352e38302e302f32322d3234203d3e203533343237.roa (hash: 1xYFKSeSCizyds5gHEIPv0l3Tzgq0aCCTj2XdNILDmA=)
                          4: 34352e3136352e38302e302f32322d3234203d3e20323133343936.roa (hash: rJ7WfNa+V0U/LQj6rjhJSnmwMoA24sWqnDlfMYYaiqQ=)
                          5: 323830343a353463383a3a2f33322d3438203d3e203631353935.roa (hash: Lr4RgQ9+Kc8eB8NQKeHtU80CyD6ZWwwwrof8SW1hNR4=)
                          6: AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl (hash: GZQlcifjTfmS2Lymg3fuDSxOS/1O+0Y8XTNjtfLRV2w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl
                          rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 11:54:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:90:c9:10:3d:62:43:4d:45:9f:d7:03:b6:42:40:37:9a:e8:53:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A
        Validity
            Not Before: Apr 17 10:28:52 2026 GMT
            Not After : Apr 18 11:54:52 2026 GMT
        Subject: CN=9C18B74F8CE1668316B986C85E29DAF577075AD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:37:53:65:f5:38:30:be:32:ed:d4:0e:9a:c0:
                    c9:ca:ea:f8:d1:3c:d4:78:e8:83:55:45:3e:85:63:
                    9b:1a:7f:16:b2:96:68:b8:6f:9c:08:6c:10:3d:1b:
                    b9:80:bd:4c:1e:5e:71:0d:8b:f5:76:15:71:5d:d4:
                    0a:b4:d9:c8:4a:e1:e2:62:1a:b2:d5:fb:5e:64:a5:
                    17:c8:8b:7a:79:88:17:b7:0e:bf:e7:e4:9a:5f:2a:
                    49:ce:25:cf:28:16:1a:64:34:dd:b0:bb:e6:ca:8a:
                    9b:64:e0:45:f6:1c:35:ad:43:f9:3a:f4:9a:44:42:
                    07:ec:d1:91:2a:ea:79:bd:10:c7:fe:18:af:14:71:
                    f1:b6:3d:dd:7e:d0:69:a0:f2:78:fa:35:a5:73:57:
                    b8:5f:01:88:85:5c:c8:3c:8d:a8:8c:9c:3e:4d:67:
                    2a:d3:6d:05:f4:97:cb:16:b3:b3:4e:26:81:26:16:
                    6a:82:4e:85:82:83:b3:f0:90:f4:98:84:ab:f6:33:
                    67:4b:66:85:3f:a7:36:bc:91:de:90:fb:0b:b9:b0:
                    61:84:71:38:37:3b:8d:54:ee:10:cb:a7:8d:85:dd:
                    df:66:6c:92:04:37:55:2d:04:d8:c1:b4:19:b8:6c:
                    d7:b8:b3:6b:34:a4:f9:49:b9:5e:89:68:e0:e9:c3:
                    f7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:18:B7:4F:8C:E1:66:83:16:B9:86:C8:5E:29:DA:F5:77:07:5A:D4
            X509v3 Authority Key Identifier:
                keyid:AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:62:f8:23:fe:79:f2:02:d8:04:93:2d:36:af:a0:28:48:ff:
         85:19:37:db:07:73:d7:95:de:e1:cd:99:31:1c:78:6a:b2:8f:
         a2:a0:ab:58:59:20:46:54:72:45:88:83:37:4d:20:36:a8:08:
         80:8a:8b:fa:3f:99:1e:11:6b:31:88:bc:71:d0:b8:e9:d0:2d:
         76:ae:ce:ed:be:13:ac:0f:d8:6c:ec:f9:02:7d:c9:f2:53:16:
         bd:51:85:87:4d:04:71:b0:8c:95:3f:54:8b:ad:2f:86:a8:89:
         34:2e:e8:65:64:5c:8d:14:fa:51:99:46:b2:6d:ee:12:14:4e:
         17:e6:12:15:23:6c:d9:44:55:51:cf:39:7e:6e:84:ad:56:21:
         69:09:92:b6:d7:80:40:39:b3:81:60:0a:43:63:80:2d:0a:9d:
         37:61:75:4f:9b:5a:ce:1b:7b:a7:a3:4f:2f:69:1d:ca:f4:b0:
         98:e1:48:cb:9f:b2:79:37:c8:58:79:0c:dd:c3:c1:ab:3e:9d:
         b9:09:06:82:28:0b:e1:72:7f:ba:8f:a8:04:66:78:ee:ab:6c:
         50:af:ba:0a:5d:da:77:19:7f:79:55:8f:37:05:a7:72:87:9c:
         0c:9c:b7:98:95:b7:19:00:48:b0:7c:b8:f2:49:17:20:99:f2:
         c6:e7:7f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:24:54 2026 by rpki-client