Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft
File:                     3929491D59EC78DBDEC7423B04D06034C1A59303.mft (raw, json)
Hash identifier:          fkfHh9AAYFZcUldhqLBR/nHWFCq4YnCuAYJfqoZ65WE=
Subject key identifier:   09:DD:68:64:52:48:94:FA:24:6A:53:92:8F:28:FC:9C:47:45:12:A3
Authority key identifier: 39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03
Certificate issuer:       /CN=3929491D59EC78DBDEC7423B04D06034C1A59303
Certificate serial:       0A6CE5F04D1DC48B682DE82A669C4D138285829E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft
Manifest number:          03E2
Signing time:             Tue 07 Apr 2026 23:58:35 +0000
Manifest this update:     Tue 07 Apr 2026 23:53:35 +0000
Manifest next update:     Thu 09 Apr 2026 02:49:35 +0000
Files and hashes:         1: 3929491D59EC78DBDEC7423B04D06034C1A59303.crl (hash: OSyXhgX9Rdd6HX+2Q3ZG8XbpoihGwV5pvMBMbT94lYs=)
                          2: 3136382e3232382e39322e302f32322d3234203d3e203532373731.roa (hash: n06A7aMK9KWyvaj6TunFFzOW1nkzjRc2YjajEjkLNUQ=)
                          3: 323830343a326661343a3a2f33322d3438203d3e203532373731.roa (hash: /f3q3WJtTf8n5Tt/4ow8M9X3bI0kbUnjEWsb+N6VSQ4=)
                          4: 3133382e3138362e34342e302f32322d3234203d3e203532373731.roa (hash: SFO7lV9AhoR9qtC/YEdbEOF6wBFZayMls9S9/Rnfx24=)
                          5: 3133382e3138362e34352e302f32342d3234203d3e203532373731.roa (hash: vq6ju4UXi/ICkYUSVNcpDfbmMC+017+BLy+qBVlgIg8=)
                          6: 3137372e3135352e3230382e302f32302d3234203d3e203532373731.roa (hash: SMZwl/Dg0nUUz1k4E9yTg5t71kAxsLt8i5e23JrMT8Y=)
                          7: 3133382e3138362e34362e302f32342d3234203d3e203532373731.roa (hash: oKmqp3pUuskrpDKvIz38YvBojkJr5FQ+ucKs52P5lrQ=)
                          8: 3133382e3138362e34372e302f32342d3234203d3e203532373731.roa (hash: cwWDuYXNgtm8vhLG8Wjk2qqu6f7CrU6fdW2sXrl1onk=)
                          9: 3133382e3138362e34342e302f32342d3234203d3e203532373731.roa (hash: qx43jtOLbO3D7RWXNsLV1UgFsnXfHErpuojc0SUm4vs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl
                          rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 02:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:6c:e5:f0:4d:1d:c4:8b:68:2d:e8:2a:66:9c:4d:13:82:85:82:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3929491D59EC78DBDEC7423B04D06034C1A59303
        Validity
            Not Before: Apr  7 23:53:35 2026 GMT
            Not After : Apr  9 02:49:35 2026 GMT
        Subject: CN=09DD6864524894FA246A53928F28FC9C474512A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:02:7e:a7:e8:f2:81:8c:fe:66:4f:57:91:40:
                    dd:0c:77:b5:a0:b5:0d:c8:f1:94:b7:97:78:3b:ce:
                    06:1c:c6:f6:ff:fd:30:6f:99:10:5a:15:be:ee:26:
                    f6:42:64:93:7e:50:13:80:a7:68:3a:cc:54:88:b4:
                    22:96:fd:bd:54:d8:63:dd:cd:df:96:24:19:17:d3:
                    c0:76:a9:05:be:16:9f:94:b8:01:1d:28:83:98:61:
                    af:83:10:3c:a8:9c:25:d2:18:7d:3a:6a:08:43:48:
                    98:24:39:50:19:9a:35:c8:b3:aa:fe:22:37:ed:59:
                    77:a0:64:6e:06:37:7e:d2:f0:97:78:f5:ed:a5:06:
                    82:85:be:1f:e3:aa:45:42:01:4f:14:af:f1:c0:10:
                    ba:73:01:83:af:b3:74:7f:ec:e1:31:95:3c:40:b5:
                    ca:5d:80:4c:47:44:6b:4b:0e:f5:d9:14:29:f6:48:
                    e4:64:75:99:7c:0a:84:18:b8:19:5e:fd:8e:36:54:
                    6a:01:8b:d1:63:73:73:91:49:25:02:7a:14:2e:35:
                    0b:fd:a9:9e:fc:aa:0f:3e:24:ef:ee:68:e5:18:d2:
                    be:a4:71:44:21:b4:5a:3b:59:81:04:ca:99:c4:ba:
                    cc:89:42:65:05:7b:35:86:6e:74:61:62:84:9f:90:
                    25:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DD:68:64:52:48:94:FA:24:6A:53:92:8F:28:FC:9C:47:45:12:A3
            X509v3 Authority Key Identifier:
                keyid:39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:8a:db:ae:c2:4f:e9:79:49:a2:1a:a2:d8:16:f3:51:d3:df:
         ec:5b:5c:68:14:5f:d8:b3:6e:6d:b5:39:d9:1c:b9:57:2c:fe:
         b6:de:c6:e1:67:3d:13:91:87:da:83:4d:b6:54:90:ef:de:b1:
         5f:8d:f1:e4:2d:f6:76:67:63:67:50:16:20:44:70:fb:94:9c:
         d5:8f:5a:5f:32:a8:29:69:8c:c9:76:93:04:e4:d9:60:19:9e:
         d8:21:ce:ae:b1:b4:72:7f:27:de:7d:92:de:51:9d:55:be:a9:
         78:31:a3:60:30:10:70:2e:b6:66:24:2f:b6:50:74:ea:47:6a:
         24:db:26:91:ca:fc:ea:78:e6:2f:99:c8:86:64:5e:f9:1d:33:
         72:8d:ca:40:13:5e:2f:b2:25:ef:6b:cb:db:1c:2c:9b:b3:af:
         01:cc:c1:37:b6:66:c1:2f:43:5b:bf:5f:ac:7b:2a:d8:64:5a:
         81:38:aa:14:b4:90:13:84:94:5c:5a:c6:e5:e5:46:a2:ee:c3:
         26:71:cc:48:34:e4:09:b0:ea:b9:ba:6c:a8:e2:2f:7c:77:d9:
         5e:a0:b1:e4:d0:9e:c5:49:d8:b9:62:8f:4b:5c:d2:cd:b8:5d:
         46:c2:35:75:29:0f:1c:fd:fc:cc:c6:30:73:7b:06:dc:64:6f:
         9a:40:0f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 16:00:40 2026 by rpki-client