Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BJZEnmQ9KKyn3LQJaULXd2kDoafc5wyMQXD7CTxMXrRv/0/8E7CA0811985CDBD24526BDC8922FC0B843BDD14.mft
File:                     8E7CA0811985CDBD24526BDC8922FC0B843BDD14.mft (raw, json)
Hash identifier:          s25keotC52PIxtNQ/EUgy12hw2DdhsfSO/O6uku9nNs=
Subject key identifier:   5A:7B:90:98:78:58:FA:18:DD:75:FE:5B:2C:B2:01:D2:49:AB:37:68
Authority key identifier: 8E:7C:A0:81:19:85:CD:BD:24:52:6B:DC:89:22:FC:0B:84:3B:DD:14
Certificate issuer:       /CN=8E7CA0811985CDBD24526BDC8922FC0B843BDD14
Certificate serial:       59226E1F9228C51E1DCB9209E8CAB28DE8A2F7F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7CA0811985CDBD24526BDC8922FC0B843BDD14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJZEnmQ9KKyn3LQJaULXd2kDoafc5wyMQXD7CTxMXrRv/0/8E7CA0811985CDBD24526BDC8922FC0B843BDD14.mft
Manifest number:          4B
Signing time:             Fri 17 Apr 2026 18:02:21 +0000
Manifest this update:     Fri 17 Apr 2026 17:57:21 +0000
Manifest next update:     Sat 18 Apr 2026 20:55:21 +0000
Files and hashes:         1: 323830343a383438343a3a2f33322d3332203d3e20323732323635.roa (hash: bEyRwsMpXTEvUAGXMSFTQv7yrt9ivZNEzgWE8VHrXbU=)
                          2: 8E7CA0811985CDBD24526BDC8922FC0B843BDD14.crl (hash: JQ3rBdlalQBuFwpQbHsAGxBv2KMeOFymY/2Zw9SPXPQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BJZEnmQ9KKyn3LQJaULXd2kDoafc5wyMQXD7CTxMXrRv/0/8E7CA0811985CDBD24526BDC8922FC0B843BDD14.crl
                          rsync://rpki-repo.registro.br/repo/BJZEnmQ9KKyn3LQJaULXd2kDoafc5wyMQXD7CTxMXrRv/0/8E7CA0811985CDBD24526BDC8922FC0B843BDD14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7CA0811985CDBD24526BDC8922FC0B843BDD14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 20:55:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:22:6e:1f:92:28:c5:1e:1d:cb:92:09:e8:ca:b2:8d:e8:a2:f7:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E7CA0811985CDBD24526BDC8922FC0B843BDD14
        Validity
            Not Before: Apr 17 17:57:21 2026 GMT
            Not After : Apr 18 20:55:21 2026 GMT
        Subject: CN=5A7B90987858FA18DD75FE5B2CB201D249AB3768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5b:b0:72:fa:d6:8b:75:0e:62:2e:70:37:33:
                    de:72:50:da:ba:f6:f4:74:bd:d1:44:f6:47:92:18:
                    20:5f:3a:11:4e:2c:b1:75:3f:f6:1a:3f:80:c7:08:
                    15:60:df:d8:f7:33:7c:07:a8:a4:14:d2:34:1b:4f:
                    bf:e0:f5:c6:a6:cb:69:02:a0:74:31:a8:88:0b:c9:
                    ad:81:c8:89:f1:3e:8e:f3:ba:00:9f:90:5b:95:1b:
                    ad:ba:c7:26:6a:5e:f9:d1:26:47:28:74:05:e1:15:
                    ea:ef:bf:30:e4:5b:a0:b4:e9:83:00:81:ee:41:7a:
                    88:31:b1:0e:b5:4c:9c:f9:0d:7e:04:11:63:c3:95:
                    aa:b9:fb:b3:78:0f:b9:c7:52:4e:51:63:a1:91:7a:
                    04:7a:04:ed:7a:37:a9:98:02:dc:3d:ea:0b:31:03:
                    cb:88:ab:1b:36:fe:ac:76:20:16:3b:ab:70:92:73:
                    e7:c1:70:c2:8c:d9:fa:16:e0:e1:64:35:4a:5d:20:
                    c4:62:69:b3:97:e9:5a:72:89:49:72:57:3f:af:b5:
                    e9:67:09:7c:dd:5d:1a:9a:b1:21:e1:73:84:7a:60:
                    46:38:65:47:fe:91:fe:a7:74:4e:65:e3:2d:9b:72:
                    bf:50:d4:f9:db:30:a7:9c:19:8a:74:d2:3b:ca:aa:
                    54:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7B:90:98:78:58:FA:18:DD:75:FE:5B:2C:B2:01:D2:49:AB:37:68
            X509v3 Authority Key Identifier:
                keyid:8E:7C:A0:81:19:85:CD:BD:24:52:6B:DC:89:22:FC:0B:84:3B:DD:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJZEnmQ9KKyn3LQJaULXd2kDoafc5wyMQXD7CTxMXrRv/0/8E7CA0811985CDBD24526BDC8922FC0B843BDD14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7CA0811985CDBD24526BDC8922FC0B843BDD14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJZEnmQ9KKyn3LQJaULXd2kDoafc5wyMQXD7CTxMXrRv/0/8E7CA0811985CDBD24526BDC8922FC0B843BDD14.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:0f:58:a5:e2:f1:85:49:4a:45:c1:73:5d:35:f1:91:a1:2f:
         17:b0:c1:3f:bb:25:ae:92:a9:33:7b:c7:ad:7c:f8:33:f4:33:
         71:42:89:07:a2:5b:b2:af:28:7c:04:a5:0f:de:c7:fc:2e:d2:
         c5:73:c0:ef:aa:e7:6e:61:ff:29:56:62:9b:da:8b:a7:30:3e:
         c3:89:09:e4:50:d3:52:c3:5f:74:28:9c:57:1d:1f:b0:01:67:
         b1:b2:8d:65:96:b6:76:c6:29:12:d9:43:8b:20:8e:6d:42:26:
         8f:84:0b:63:1c:c5:15:8d:fc:47:ac:6c:23:02:7c:5f:5c:d8:
         22:76:59:ae:53:16:5a:f0:38:71:11:ed:b7:7e:93:a6:db:92:
         d8:48:9a:29:45:30:f4:6e:91:15:69:72:11:d4:22:7f:1f:bb:
         f0:54:be:07:d2:19:25:0b:66:ee:47:7f:0e:a2:e1:fc:a0:50:
         f3:0c:7c:f6:1d:89:52:7b:ce:17:3c:09:98:9c:50:c6:24:05:
         aa:21:40:0e:b9:24:52:17:4f:98:72:3d:42:ab:4b:b1:66:10:
         3e:7e:93:6d:f7:57:7c:fa:8e:d0:e6:ef:b1:a4:8e:92:b3:65:
         43:ae:74:57:e2:34:d2:a6:8e:7c:43:72:1d:1a:e7:9e:12:50:
         2b:18:04:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:16:51 2026 by rpki-client