Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/BF8ED8F6E25060930593D3682BBEAA1A08356BAC.mft
File:                     BF8ED8F6E25060930593D3682BBEAA1A08356BAC.mft (raw, json)
Hash identifier:          jiYIGwRj+6geCkr8nT2zkr6i1rvwizdBvW5ZHbWZo0o=
Subject key identifier:   DA:B4:01:45:97:9E:78:7F:91:8E:AC:63:B7:1A:8F:3E:48:BF:E9:36
Authority key identifier: BF:8E:D8:F6:E2:50:60:93:05:93:D3:68:2B:BE:AA:1A:08:35:6B:AC
Certificate issuer:       /CN=BF8ED8F6E25060930593D3682BBEAA1A08356BAC
Certificate serial:       5432150E5E34C99FCE1AF9E810DEE8F1075F53BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF8ED8F6E25060930593D3682BBEAA1A08356BAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/BF8ED8F6E25060930593D3682BBEAA1A08356BAC.mft
Manifest number:          4E
Signing time:             Mon 02 Mar 2026 15:56:27 +0000
Manifest this update:     Mon 02 Mar 2026 15:51:27 +0000
Manifest next update:     Tue 03 Mar 2026 19:29:27 +0000
Files and hashes:         1: 323830343a363566633a3a2f33322d3634203d3e20323639353236.roa (hash: 9yJTB1aQNRZQ7VBDWfm0bQSwLjvSqD2OSGJcvOqnuOc=)
                          2: 34352e3138362e3234362e302f32342d3234203d3e20323639353236.roa (hash: 2WtqhDgxnU79dUxBdOr4EHJxmz7kfC7rZsFBNF7EcoU=)
                          3: BF8ED8F6E25060930593D3682BBEAA1A08356BAC.crl (hash: oMCPRbwliXgpncXU74r8cIUO6NPqD5l4x6rYfst/Xos=)
                          4: 34352e3138362e3234342e302f32342d3234203d3e20323639353236.roa (hash: DzypTh+jo6sLVBRs0PRqqjYTpTb8AT6HVpQ/8GSck4I=)
                          5: 34352e3138362e3234372e302f32342d3234203d3e20323639353236.roa (hash: oaYSySIKAHhHUr8gXwJO3nzY7Om/yKSmmP0fndw2ryU=)
                          6: 34352e3138362e3234352e302f32342d3234203d3e20323639353236.roa (hash: 74PswJQxEh2stbG7ROd8HSj9ZWTQZwv1p1WqgA4+TnU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/BF8ED8F6E25060930593D3682BBEAA1A08356BAC.crl
                          rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/BF8ED8F6E25060930593D3682BBEAA1A08356BAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF8ED8F6E25060930593D3682BBEAA1A08356BAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 19:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:32:15:0e:5e:34:c9:9f:ce:1a:f9:e8:10:de:e8:f1:07:5f:53:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF8ED8F6E25060930593D3682BBEAA1A08356BAC
        Validity
            Not Before: Mar  2 15:51:27 2026 GMT
            Not After : Mar  3 19:29:27 2026 GMT
        Subject: CN=DAB40145979E787F918EAC63B71A8F3E48BFE936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ae:c6:72:ae:0e:6c:d4:12:fe:cd:0b:2f:f2:
                    36:4d:93:92:00:ae:b4:3a:92:10:35:0c:ee:36:79:
                    32:ac:62:b4:ad:b8:b8:03:93:22:25:a9:1a:3a:df:
                    24:e4:89:38:66:f0:d4:81:c6:1f:c8:b7:73:78:5b:
                    51:a4:2e:4e:dd:f1:81:95:6b:28:aa:79:7e:e4:93:
                    2d:96:53:a7:33:9e:b6:f9:62:4a:8c:6b:ba:1d:29:
                    7c:93:d9:6e:45:cb:2c:e8:69:92:e9:ce:11:19:f3:
                    91:67:94:70:17:e6:ef:ba:23:21:d3:b6:e0:3d:14:
                    6e:a6:68:17:01:f2:28:f3:f2:04:a0:ab:99:fa:5e:
                    f5:cb:6e:d5:b5:85:60:56:50:6a:1e:b6:f1:2b:f9:
                    3f:ed:66:f8:56:0e:da:e6:c7:46:67:7c:8d:d2:2e:
                    db:08:18:18:28:19:b0:f4:d7:21:9d:ce:de:0e:44:
                    99:d5:28:89:c4:1f:88:ca:cb:63:8b:ee:f2:72:ef:
                    43:70:f6:55:f2:da:d1:92:cb:bd:6c:19:35:04:d5:
                    12:13:c2:34:ba:50:bb:7f:df:95:82:ba:2f:7f:de:
                    fa:36:30:df:56:b0:07:51:c6:73:d1:1f:df:bc:d6:
                    47:53:5d:46:e0:e3:40:1f:23:89:e0:de:02:72:3f:
                    9f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B4:01:45:97:9E:78:7F:91:8E:AC:63:B7:1A:8F:3E:48:BF:E9:36
            X509v3 Authority Key Identifier:
                keyid:BF:8E:D8:F6:E2:50:60:93:05:93:D3:68:2B:BE:AA:1A:08:35:6B:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/BF8ED8F6E25060930593D3682BBEAA1A08356BAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF8ED8F6E25060930593D3682BBEAA1A08356BAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/BF8ED8F6E25060930593D3682BBEAA1A08356BAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:18:5a:d1:73:e2:14:a2:d8:6e:8a:55:c7:ce:39:94:2e:9c:
         d1:37:ff:7f:f1:a8:6e:b1:26:3e:26:b7:24:a0:35:94:cb:c1:
         e7:f2:13:06:b7:fe:36:3c:05:43:82:d7:b5:49:b4:62:8a:ef:
         eb:31:bb:5c:df:9f:f8:3a:3f:2b:ce:0c:ba:34:3a:72:d8:8b:
         58:4b:ac:92:46:bf:b1:b1:ef:89:0c:f8:4b:d7:79:4c:b5:79:
         00:ed:77:12:64:92:bf:74:49:99:52:ca:2d:10:18:5d:38:98:
         03:9b:36:11:e4:1d:89:9d:d4:b5:34:a3:7a:1a:8b:b1:52:5a:
         d2:41:06:bb:8e:fc:e5:f2:c2:9b:22:a6:7d:07:e3:03:93:30:
         54:0c:f8:26:11:cb:62:4a:09:9d:8f:fd:b2:06:9f:70:ab:43:
         be:9d:a9:0c:08:3f:f8:33:66:48:62:dc:d4:04:40:73:8a:65:
         89:d0:09:3d:ec:19:65:6e:71:10:58:d4:e0:96:f8:ce:b7:35:
         45:6d:58:6a:11:cf:c3:2f:33:a4:41:7c:90:1e:28:b2:e4:e2:
         44:51:dc:63:16:67:93:3d:a7:70:de:ea:65:5e:a7:b3:20:26:
         00:39:65:1c:30:67:8f:37:a3:99:e3:ea:e2:34:fa:bb:1d:be:
         d1:b0:5e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:08:35 2026 by rpki-client